 |
August 2, 2005 Arxan wins defense SBIR grant for innovative protection automationWEST LAFAYETTE, Ind. and SAN FRANCISCO, Calif. — West Lafayette-based Arxan Research Inc. was awarded a Small Business Innovation Research grant to develop automated tools that reduce the time, cost and effort incurred by software developers when designing anti-tamper protection schemes for their applications. The $98,082 Small Business Innovation Research Phase I SBIR grant from the Office of the Secretary of Defense will allow Arxan Research Inc., along with San Francisco-based affiliate company Arxan Technologies Inc., to establish project feasibility and may lead to a Phase II SBIR project to fully implement the proposed tools. "This grant again underscores the strength and credibility of the Arxan team and our unique anti-tamper technology, as well as the importance of our work to the U.S. Department of Defense and national security," said Richard Earley, Arxan’s CEO. "The most effective way to protect the nation’s most critical software assets against tampering is by a combination of technologies that protect, detect and react to such exploitation." Arxan's technology, EnforcIT™, protects software by injecting a complex web of small security units, called Guards™, into a binary executable to protect the code and each other. The first step to protecting software from tampering and reverse-engineering is for software developers to design a Guard network based on the software's structure and protection needs. The level of achieved protection relies heavily on the quality of the designed network. Designing quality protection requires expertise in the latest attack, defense-in-depth and adversarial mindset techniques, making it difficult for mainstream software developers to design strong network protection schemes without expert assistance. With this grant, Arxan will build on its existing technology to automate the design of protection networks. The company also has existing projects to develop an automated penetration testing platform and metrics for automated assessment of protection strength. "Arxan’s goal is to automate the entire protection process from design to testing, fully empowering all software developers to effectively protect their software and verify its security," said J. Eric Davis, senior vice president of solutions for Arxan. "We already have technology that fully automates protection insertion with no impact on the source code. This SBIR grant supports our efforts to automate the protection design process as well." Prior to this receiving the SBIR grant, Arxan was awarded several Small Business Innovation Research and Broad Agency Announcement (BAA) grants, as well as an Indiana 21st Century Research and Technology Fund grant. Arxan’s Red Teams and Software Protection Teams are led by three industry experts with more than 100 years of computer science experience and 500 published scientific papers among them. Arxan’s project leaders and contributing staff have expertise in computer security; reverse engineering; network security; real-time systems; cryptography; verification tools and techniques; secure protocols; and critical experience in building software protection and/or in discovering systems, software and application vulnerabilities. Team members frequently conduct Red Team and Software Protection training and workshops and provide protection and penetration testing services. About Arxan The Arxan companies were founded in 2001 using advanced technology developed by a top academic research institute — Purdue University’s Center for Education and Research in Information Assurance and Security — and the National Security Agency’s Center of Excellence in Information Assurance. Arxan offers anti-tamper software protection mechanisms that effectively safeguard software operating in untrusted environments, generating software that is secure in deployment. Arxan sells its products through direct and indirect channels. Arxan Defense Systems is located in Reston, Va.; Arxan Technologies Inc. is headquartered in San Francisco, Calif.; and Arxan Research Inc. is located at the Purdue Research Park in West Lafayette, Ind. CONTACT: Avni Rambhia, (765) 775-1004, ext. 116, avnir@arxan.com |
