RTX BBN Technologies Enhances Cyber Resilience with DARPA
RTX BBN Technologies to develop tool that compartmentalizes software systems to prevent escalation of cyberattacks
RTX's BBN Technologies has been awarded a crucial contract to bolster cyber resilience through the DARPA Compartmentalization and Privilege Management (CPM) program. This initiative aims to automatically partition software systems into smaller, secure compartments to prevent minor breaches from escalating into more significant cyberattacks, all while retaining system efficiency. The ability to compartmentalize software will serve as a foundational strategy in enhancing security measures against today's sophisticated cyber threats.
The U.S. Department of Defense has faced over 12,000 cyber incidents since recent years, underscoring the pressing need for improved cybersecurity measures. Many of these incidents compromise personal privacy and national security, as hackers often exploit coding errors to escalate their access within systems, thereby gaining entry into sensitive information or control over the systems themselves.
In line with the CPM objectives, BBN is working on the Analysis and Restructuring for Containment (ARC) tool, designed to prevent unauthorized privilege escalations and mitigate lateral movements within software environments. ARC will be capable of analyzing extensive codebases and fabricating secured compartments, thereby applying the principle of least privilege systematically. This ensures that code execution is only granted with the minimal access necessary, which significantly limits any potential damage from successful intrusions into the software.
According to Aaron Paulos, the principal investigator at BBN, "In the context of today’s intricate attack surfaces, a solitary vulnerability can jeopardize the entire system. Our innovative approach is set to elevate the security standards for critical software applications while simultaneously preserving performance— a necessity for operational effectiveness. We strive to create secure compartments that will isolate risks effectively against potential cyber threats."
One of the fundamental goals of this program is to minimize the impact of compartmentalization on system performance while creating secure and tightly-controlled environments. The ARC tool aims to strike a balance between achieving robust security and ensuring operational performance. Different sections of software applications will receive varied treatment—some will require high performance, while others may be more susceptible to risks, allowing security measures to be selectively implemented in the most crucial areas.
Drawing from BBN's extensive history in cybersecurity and software analysis, the ARC tool will leverage several unique capabilities. The intended integration includes:
- Automated program analysis to identify potential software threats effectively, ensuring comprehensive evaluations and strict adherence to security protocols.
- Verifiable program restructuring, which enhances security controls, addressing aspects like memory and function utilization.
- Automated reasoning techniques to devise effective security solutions, evaluating multiple options while balancing security needs against performance demands.
The team at BBN is collaborating with esteemed institutions like Northwestern University, George Washington University, and Kestrel Institute. The project will unfold across several critical locations.
This initiative is supported by the United States Air Force and DARPA under a dedicated contract. The opinions expressed here are solely those of the authors and do not reflect the positions of the United States Air Force or DARPA.
About RTX BBN Technologies
Founded in 1948, RTX BBN Technologies specializes in advanced technological research and development, focusing on crucial national security priorities. This organization has played an instrumental role in major technological accomplishments, from developing the ARPANET to pioneering quantum cryptography for network security. BBN continues to innovate by challenging conventional practices to enhance solutions in analytics, machine intelligence, network management, intelligent systems, and scientific research.
About RTX
With a workforce exceeding 185,000 globally, RTX is a forward-thinking company dedicated to pushing the boundaries of technology and science. Through its diverse business segments, including Collins Aerospace, Pratt & Whitney, and Raytheon, RTX offers advanced aviation technologies, integrated defense systems, and next-generation solutions that address the pressing challenges faced by clients worldwide. Headquartered in Arlington, Virginia, RTX reported sales of $69 billion in 2023.
Frequently Asked Questions
What is the primary goal of RTX's collaboration with DARPA?
The primary goal is to enhance cyber resilience by developing innovative tools that compartmentalize software systems to prevent the escalation of cyberattacks.
What does the ARC tool do?
The ARC tool automatically analyzes large codebases and creates smaller, secure software compartments to limit the impact of any potential security breaches.
Why is compartmentalization important in cybersecurity?
Compartmentalization minimizes the damage from security incidents by ensuring that even if one part of the system is compromised, the rest remains protected.
What are some unique capabilities of the ARC tool?
It incorporates automated program analysis, verifiable restructuring, and automated reasoning to enhance software security and performance.
Who are the partners involved in this initiative?
RTX BBN Technologies is collaborating with Northwestern University, George Washington University, and Kestrel Institute on this significant project.
