Now on Demand Ransomware Resilience & Recovery Summit - All Sessions Available
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

M&A Tracker

DARPA Seeks Software Obfuscation Proposals for SafeWare Project

Secure Code

In a broad agency announcement published last week, the Defense Advanced Research Projects Agency (DARPA) informed researchers that it is looking for innovative proposals in the area of software obfuscation.

Secure Code

In a broad agency announcement published last week, the Defense Advanced Research Projects Agency (DARPA) informed researchers that it is looking for innovative proposals in the area of software obfuscation.

Obfuscation is highly important in software development because it allows developers to distribute their programs while making sure that the source code can’t be viewed.

For the project dubbed “SafeWare” DARPA is seeking innovative approaches in the development of new mathematical foundations and implementation paths for provably-secure software obfuscation. The agency has highlighted that research primarily resulting in “evolutionary improvements” to existing methods will not be taken into consideration.

“The goal of the SafeWare research effort is to drive fundamental advances in the theory of program obfuscation and to develop highly efficient and widely applicable program obfuscation methods with mathematically proven security properties,” DARPA said.

SafeWare focuses on a total of four distinct technical areas (TAs): Mathematical Foundations of Program Obfuscation (TA1), Implementation of Program Obfuscation (TA2), Proof-of-Principle Demonstrations (TA3), and Testing, Evaluation and Research Integration (TA4). DARPA anticipates awarding one or more grants for the TAs 1-3, and one for T4.

The agency has pointed out that each proposal must target only one TA. Those interested in more than one area must submit multiple proposals, one for each TA.  

The proposed method must meet certain conditions, including the requirement that a successful de-obfuscation attack can only be carried out by solving a computationally hard mathematical problem, not losing its effectiveness if it’s fully understood by an adversary, general purpose applicability to standard program types, and it must not be dependent of special hardware or other physical resources.

Selected researchers will be required to deliver technical papers and reports, computer code and pseudocode (only for TA2 and TA3), summaries of relevant program obfuscation research (only for TA4), slide presentations, quarterly progress reports, and a final report that summarizes the overall project.

Advertisement. Scroll to continue reading.

The closing date for applications is November 18. Additional information on SafeWare is available in the broad agency announcement published on the Federal Business Opportunities (FBO) website.

Written By

Eduard Kovacs (@EduardKovacs) is a managing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

MSSP Dataprise has appointed Nima Khamooshi as Vice President of Cybersecurity.

Backup and recovery firm Keepit has hired Kim Larsen as CISO.

Professional services company Slalom has appointed Christopher Burger as its first CISO.

More People On The Move

Expert Insights

Related Content

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

IoT Security

A group of seven security researchers have discovered numerous vulnerabilities in vehicles from 16 car makers, including bugs that allowed them to control car...

Vulnerabilities

A researcher at IOActive discovered that home security systems from SimpliSafe are plagued by a vulnerability that allows tech savvy burglars to remotely disable...

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Cybercrime

Patch Tuesday: Microsoft calls attention to a series of zero-day remote code execution attacks hitting its Office productivity suite.

Vulnerabilities

Patch Tuesday: Microsoft warns vulnerability (CVE-2023-23397) could lead to exploitation before an email is viewed in the Preview Pane.

IoT Security

A vulnerability affecting Dahua cameras and video recorders can be exploited by threat actors to modify a device’s system time.