RTX BBN Technologies to support DARPA INGOTS programme
RTX’s BBN Technologies has secured a contract from the Defense Advanced Research Projects Agency (DARPA) to contribute to the Intelligent Generation of Tools for Security (INGOTS) programme.
The programme, launched in 2023, is focused on bolstering cybersecurity measures by creating advanced methodologies for detecting and neutralising complex exploit chains.
Exploit chains are sequences of vulnerabilities that, when linked together, can lead to significant security breaches, according to RTX.
The urgency of addressing these threats is underscored by the growth of the US Cybersecurity and Infrastructure Security Agency’s catalogue of known exploited vulnerabilities, which now includes over 1,300 entries.
The INGOTS programme acknowledges the limitations of current exploit assessment methods, which are predominantly manual and require extensive expertise and time.
The goal is to automate processes related to the generation, alteration, modelling, and analysis of exploit chains to facilitate quicker and more effective security measures.
BBN principal investigator Jack Dietz said: “Effectively countering exploit chains requires more than just identifying individual vulnerabilities. It demands a system that can replicate real-world attack scenarios and anticipate potential risks before they are exploited.”
BBN’s contribution will involve the creation of the System Test of Android at Large-scale Accelerating Generation and Modelling for INGOTS Test and Evaluation (STALAGMITE).
The platform will offer high-fidelity simulations that blend virtual and physical realms for accurate Android vulnerability assessments.
STALAGMITE will also provide integration capabilities for security teams to proactively combat threats, and it fosters an environment that supports efficient and reproducible security research with focus on automated testing of software vulnerabilities.
“We aim to alleviate this burden from security professionals by accelerating the automatic identification of security risks across various devices and configurations using precise testing and measurement to strengthen overall cybersecurity defences,” Dietz added.
While INGOTS is initially targeting the Android ecosystem, the methodologies and technologies developed through this programme have potential implications across personal computing, business networks, government systems, and military communications.
The collaborative effort on this programme includes Assured Information Security as part of the BBN-led team.
Project work will take place in Cambridge, Massachusetts; Columbia, Maryland; and Rome, New York.
