Software Pedigree Analyzer

Software protection methods are needed in order to prevent the unauthorized distribution and exploitation of critical national security software. This proposal addresses software protection during the software development process, and in particular, the collection, analysis, and response mechanisms associated with auditing how software is built. Such information for a code module is called its software pedigree. Pedigree information includes system information, software protection tool use, development history, and user authentication information. ATC-NY proposes to build SPAN, a pedigree analyzer that will build and support the analysis of software pedigrees. Such a tool can help to identify inappropriate actions such as failing to apply the appropriate level of software protection to some component. It will also act as a deterrent to malicious users by facilitating the identification of a user responsible for an inappropriate action.