U.S. to Fund Hacking Projects That Thwart Cyber-Threats
Under the Cyber-Fast Track initiative, DARPA will fund between 20 to 100 projects annually. Open to anybody, researchers can pitch DARPA with ideas and have a project approved and funded within 14 days of the application, Zatko said. Developers will retain intellectual property rights while DARPA will operate under government use rights, Zatko said.
"It's time to start funding hacker spaces, labs and boutique security companies to make it easier to compete with large government contractors," Zatko said.
The way the government is currently set up, these independent researchers and small businesses can't get money for research without giving up intellectual property or having their company bought out and "gutted," according to Zatko. "We need new ideas and we need new performers," Zatko said.
Despite increased security spending, the number of malware attacks on government agencies has skyrocketed in recent years, according to Zatko. There were about 1,400 "incidents of malicious cyber activity" in 2000, which jumped to more than 71,000 by 2009, he said.
Funding independent security researchers, who currently do most of their work on their own time for free, would encourage them to divert their energies in ways that would make the Internet safer, he said.
Anything that could help the military will be considered, including bug-hunting exercises, commodity high-end computing and open software tools. Projects such as cheap unmanned aerial vehicles and an automated war dialer that could repeatedly ring phones in a given area would qualify, Zatko said. The projects should be small and quick to execute, ideally within 12 months, according to Zatko. Projects with the potential to "reduce attack surface areas, reverse current asymmetries" are of "particular interest. DARPA is encouraging efforts in a more strategic, rather than tactical, direction.
Current computer systems are needlessly complicated and are more vulnerable to malicious hacking as a result, according to Zatko. An example of a project that would reduce the attack surface would be one that simplified Microsoft Word, which has a number of sophisticated features that are also the source of numerous exploits, he said.
"Proposed technologies may be hardware, software or any combination thereof. Efforts developing proofs of concept or finished products are also of particular interest," Zatko said.
While Zatko did not say how much funding the program overall has received, he said that if there is a lot of activity and tools are being developed, then increased funding will be likely.
DARPA wasn't the only branch of the federal government visible at Black Hat. The Federal Bureau of Investigation, Federal Reserve and the Internal Revenue Service had booths set up on the expo floor.
http://www.eweek.com/c/a/Security/US-to-Fund-Hacking-Projects-That-Thwart-Cyber-Threats-464070/
Posted:
Related Articles
Comments
Latest Downloads
- 01. Supermarket Simulator SaveGame (Quick start, 172 day, 65lvl)(0)
- 02. Caribbean Legend: SaveGame (before the start of the Dutch Gambit)(0)
- 03. Caribbean Legend: SaveGame (Passed the Secret Organization Gambit) [v1.0.0](0)
- 04. Jalopy: SaveGame (Pumped up LaikaGT)(0)
- 05. Assassin's Creed 3: Save Game (Game completed 8%, until Chapter 4)(3)
- 06. Supermarket Simulator: SaveGame (Quick start, 172 day, 65lvl)(0)
- 07. GoreBox: SaveGame (Ancient village of the Paleozoic era)(0)
- 08. Need for Speed: Most Wanted (2005) - SaveGame (0% career, 2 BMWs in the garage)(0)
- 09. [EU] CARX DRIFT RACING ONLINE - PROGRESS SAVE 6 SP DUO (CUSA15633)(6)
- 10. Fallout Shelter Modded Save PC(3)
- 11. Remember Me: SaveGame (The Game done 100%)(0)
- 12. The Long Drive: SaveGame (American pickup)(0)
- 13. Goemon's Great Adventure (US / NTSC) - Nintendo 64 Game Save(2)
- 14. The Long Drive: SaveGame (blue VW Beetle)(0)
- 15. Deadly Creatures | Complete Savegame(1)
Latest Tutorials
- 01. The Redress Of Mira 100% Walkthrough | Trophy & Achievement(534)
- 02. Russian Pinocchio Quick Trophy Guide(640)
- 03. Venatrix Quick Trophy & Achievement Guide(641)
- 04. Call of the Sea 100% Platinum Walkthrough(735)
- 05. Wire Lips 100% Platinum Walkthrough(734)
- 06. The Expanse 100% Platinum Walkthrough | Trophy & Achievement(691)
- 07. Doctor Who: The Edge of Reality - PS4 Platinum P/Thru(615)
- 08. Doctor Who:The Lonely Assassins - 100% Guide(554)
- 09. DAYMARE 1998 PS4 - Full game 100% TROPHY WALKTHROUGH(524)
- 10. Stray Platinum Walkthrough | Trophy & Achievement Guide(531)
- 11. Raji: An Ancient Epic | Complete Gameplay Walkthrough(688)
- 12. Corpse Killer: 25th Anniversary Edition - Longplay(703)
- 13. Song of Horror: Complete Edition Gameplay Walkthrough(450)
- 14. Remoteness 100% All Trophies Walkthrough(704)
- 15. Detective Inspector Mysterious Clues Platinum Walkthrough(593)
"U.S. to Fund Hacking Projects That Thwart Cyber-Threats" :: Login/Create an Account :: 3 comments