You are here
EPP: Empirical Privilege Profiling for Black-box Software
Award Information
Agency: Department of Defense
Branch: Defense Advanced Research Projects Agency
Contract: W31P4Q-04-C-R260
Agency Tracking Number: 04SB1-0276
Amount:
$98,999.00
Phase:
Phase I
Program:
SBIR
Solicitation Topic Code:
SB041-016
Solicitation Number:
2004.1
Timeline
Solicitation Year:
2004
Award Year:
2004
Award Start Date (Proposal Award Date):
2004-07-28
Award End Date (Contract End Date):
2005-03-31
Small Business Information
33 Thornwood Drive, Suite 500
Ithaca, NY
14850
United States
DUNS:
101321479
HUBZone Owned:
No
Woman Owned:
No
Socially and Economically Disadvantaged:
No
Principal Investigator
Name: Carla Marceau
Title: Senior Principal Scientis
Phone: (607) 257-1975
Email: carla@atc-nycorp.com
Title: Senior Principal Scientis
Phone: (607) 257-1975
Email: carla@atc-nycorp.com
Business Contact
Name: Richard Smith
Title: Controller
Phone: (607) 257-1975
Email: rick@atc-nycorp.com
Title: Controller
Phone: (607) 257-1975
Email: rick@atc-nycorp.com
Research Institution
N/A
Abstract
The Principle of Least Privilege says that programs should operate with sufficient privilege to get the job done, but no more, in order to minimize the harm that can be done in case of error. The Empirical Privilege Profiling system (EPP) will collect data about privileges actually exercised by running programs and use them to create a composite abstract privilege profile for the program, which can be used to guide system administrators in granting program privileges. To create EPP, ATC-NY will develop novel technologies for finding the privileges exercised by programs and for building composite abstract profiles.
* Information listed above is at the time of submission. *