We think you have liked this presentation. If you wish to download it, please recommend it to your friends in any social system. Share buttons are a little bit lower. Thank you!
Presentation is loading. Please wait.
Published byCorbin Agar
Modified about 1 year ago
© 2009 Pikewerks Corporation UNCLASSIFIED Pikewerks Overview for CDCA April 24 th, 2009 Irby Thompson, Vice President
© 2009 Pikewerks Corporation UNCLASSIFIED The Company Mission: Encourage a creative research and development environment that fosters the production of innovative software security technologies Technology Focus: Become a demonstrated leader in the security industry by providing state-of-the-art cyber security, information operations, software anti-tamper, anti-piracy, forensics, and information assurance solutions
© 2009 Pikewerks Corporation UNCLASSIFIED Corporate Woman-owned small business located in Huntsville, AL Self-funded, no outside investment or venture capital 30 employees, 27 of which are engineers/developers –Roots in intelligence community, significant operational experience –Skilled in the architecture, design, and development of software security, anti- tamper technologies, forensics, information assurance, and information operations –Projecting 50+ in months Creative and innovative team –100% Track record with Phase I to Phase II technology transfer & development –All Phase II efforts beyond 1 st year of development have been commercialized Currently operating at the Secret in Huntsville, AL and Washington, DC
© 2009 Pikewerks Corporation UNCLASSIFIED Technology Advanced Research & Development 1)Electronic Armor®: Kernel-based Software Protection Cryptographic Coprocessor Software Partitioning Real Time EA (RedHawk and VxWorks) 2)Binary Fortress™: Hypervisor-based Software Protection 3)Second Look™ Live Memory Forensics Red-team Instrumentation & Counterintelligence (CI) Scan Agent 4)Akita™: Software Situational Awareness 5)Self-healing and Active Defense Research & Development 6)Anti-forensic Research & Development 7)Cross-platform Digital Rights Management 8)Network Watermarking Information Operations Tools & Techniques Early Stage Research & Development 1)Secure and Covert Loading Phase I 2)IPV4 to IPV6 Phase I 3)Missile Defense Agency Anti-Tamper Phase I
© 2009 Pikewerks Corporation UNCLASSIFIED Products Electronic Armor 1)EA for Unix/Linux Individual Executable up to Full System Cryptographic Coprocessor Software Partitioning Real Time EA (RedHawk and VxWorks) 2)EA for Windows Binary Fortress 3)EA : Aware Situational Awareness - Environmental Based Key Generation 4)TBD Self-healing and Active Defense Cross-platform Digital Rights Management Network Watermarking Second Look 1)Live Memory Analysis 2)Red Team Instrumentation 3)Counter Intelligence (CI) Scan Agent 4)Persistent Forensics Tool 5)Windows Live Memory Analysis
© 2009 Pikewerks Corporation UNCLASSIFIED Specialized R&D Efforts Information Operations –Classified Mobile devices –Windows Mobile 5/6 –Linux/Symbian/Palm –Data collection, protection, and situational awareness Miscellaneous –Reverse engineering and red teaming –Anti-tamper –Active defense
© 2009 Pikewerks Corporation UNCLASSIFIED Opportunities Technology Licensing: Adoption of Pikewerks R&D as a layer into your programs and initiatives –Electronic Armor® –Second Look™ –Other Products/Tools/Capabilities Future R&D: Team with Pikewerks to create the next generation of information assurance, anti-tamper, information operations, and forensics solutions –SBIRs –BAAs –Other Sponsored R&D –IR&D efforts
© 2008 Pikewerks Corporation QUESTIONS? Thank You!
© 2009 Pikewerks Corporation UNCLASSIFIED Electronic Armor ® “Designed to protect software applications from reverse engineering, tamper, theft, and unauthorized execution” Features –Application source code is NOT needed, protects standard executables, shared libraries, and full systems –Operates at the kernel-level; preventing attacks from even privileged insiders –Little to no impact of application performance Benefits –Protected applications are encrypted on disk and while in system memory –Copying, debugging, tracing, tampering and dumping of protected application prevented –Applications are cryptographically ‘tied’ to the specific deployment machine
© 2009 Pikewerks Corporation UNCLASSIFIED EA Components Packaging Utility: Encrypts and transforms binaries, shared libraries, scripts, data, or entire Operating Systems (OS) distributions Execution Enabler: Processes and executes the protected applications during system operation Kernel Sealer Verifies and maintains the integrity of the OS kernel from malicious attack
© 2009 Pikewerks Corporation UNCLASSIFIED Binary Fortress Custom Hypervisor-based Software Protection –Extends kernel protection approach to a privilege level below the Operating System –Operates on hardware platforms that support Intel VT-x –Provides secure data and key storage, decryption, and partial out-out-of-band execution –Secure against kernel attacks –Twelve months of R&D –Final release 4Q 2009 –Early adopters received an advanced release 1Q 2009
© 2009 Pikewerks Corporation UNCLASSIFIED Situational Awareness Establishes a digital fingerprint of live system Monitors and analyzes system /environmental conditions –Advanced Configuration and Power Interface (ACPI) –Hard disk SMART statistics –User and system information –Network topology –Geographic location (GPS) Detect changes in the operating environment –Take appropriate defensive/offensive actions to protect sensitive applications on the system Forces the attacker to the field to find key material Final release 4Q 2009 Early adopters will receive an advanced release 2Q 2009 Specific user Specific host Network location Geographic location
© 2009 Pikewerks Corporation UNCLASSIFIED Second Look™ Forensics Wide range of target sources –Live systems (/dev/mem, firewire, etc) –Snapshots raw physical memory dumps hibernated system images Kernel memory analysis –Detects hidden modules –Detects hidden processes –Verifies integrity of the kernel and modules –Discovers discrepancies in resources –Identifies potential rootkit patch points Support for interactive debugging and reverse engineering Soon to be expanded to incorporate the Pikewerks custom hypervisor 16 Months of R&D (TRL 5) Related enhancement and Phase III activities –Counterintelligence Scan Agent –BIOS integrity verification –Red Team Instrumentation –Persistent memory forensics
© 2009 Pikewerks Corporation UNCLASSIFIED CI Scan Agent Extension of Second Look™ forensics R&D Agent for counter-intelligence investigations and espionage discovery Stealthy, software-based memory collection and analysis Automated detection and alerting of advanced computer espionage techniques Centralized data collection & storage Cross-host comparison and analysis Reporting & alert generation ***System*** PIKEWERK Windows XP Professional, X86 Service Pack 2 (build 2600) Number of processors 2 Page size 4096 ***End System*** ***Process*** Base Size Module Name 804D \WINDOWS\system32\ntkrnlpa.exe 806E \WINDOWS\system32\hal.dll ***End Process*** ***Network*** Active Connections TCP :epmap :26743 LISTENING TCP :microsoft-ds :24804 LISTENING TCP : :39070 LISTENING IPv4 Statistics Packets Received = ***End Network*** ***User*** Administrator Administrator, password does not expire billy Administrator, password does not expire ***End User*** ***IDT*** IDT INT gate (32bit) 0x (module \WINDOWS\system32\ntkrnlpa.exe) IDT INT gate (32bit) 0x c (module \WINDOWS\system32\ntkrnlpa.exe) ***End IDT*** ***Hypervisor*** OS Running within Virtual PC: no ***End Hypervisor***
© 2009 Pikewerks Corporation UNCLASSIFIED Red Team Instrumentation Extension of the Second Look™ forensics R&D Record and analyze actions taken by a Red Team in near real time Collection of assessment data to evaluate protection and attack tools Eight months of R&D Host running a debugger Virtual machine running protected software Gumstix American Arium debugger Debugging station Remote attacker
© 2009 Pikewerks Corporation UNCLASSIFIED Autonomic Healing Distributed Host Healing and Active Defense –System discovery, monitoring, healing and defense –Forces attackers to reach all machines at once –Networks work together to defeat exploitation attempts including reverse engineering attacks, viruses, and rootkits Application Self-healing and Active Defense –Extends software protection –Performs checksums of the protected applications –Replaces modified application segments with clean copies –Can dynamically change the behavior of a tampered application to perform penalties or adapt decoys for specific attack scenarios System Management Mode (SMM) monitor –Custom AMI/Award/Phoenix BIOS enhancement Small form factor FPGA uses Direct Memory Access (DMA) –Continual off-host monitoring and repair of memory –Can be used to remove/inject key material Six months of R&D
© 2009 Pikewerks Corporation UNCLASSIFIED Anti-Forensic Technologies
© 2009 Pikewerks Corporation UNCLASSIFIED Network Watermarking Transparent authentication of network traffic integrity for the Global Information Grid (GIG) Invisible watermarking of digital data for dissemination and authentication Host-based network driver and Single Board Computer (SBC) bump-in-wire bridge to apply and authenticate machine-specific watermarks to incoming and outgoing network traffic streams Final release 1Q 2010 Seeking deployment scenarios Physical AT wrap enclosure
© 2009 Pikewerks Corporation UNCLASSIFIED Data Rights Enforcement “Cross-Platform Digital Rights Management” Encrypts and Protects Data Files –Disposable Public-Key Cryptography provides forward-security of documents –Ideal for multi-level security of data –Ongoing integration with existing / adopted pedigree system Controls Operating System Capabilities –Data Rights Enforcement Module restricts the unauthorized ability to copy, print, redistribute protected data Provides Key Escrow –Rights Management Server allows for ongoing control and auditing of data access
Joey Snow Technical Evangelist Microsoft Corporation Session Code: WSV207.
© 2011 Verdasys, Inc. All Rights Reserved. CONFIDENTIAL AND PROPRIETARY - DO NOT REPRODUCE. Enterprise Information Protection When DLP is Not Enough? Graham.
Field TDM Deck Optimize and Secure Your Core Infrastructure for Midsize Businesses.
CONFIDENTIAL DIGITAL WATERMARKING ALLIANCE. CONFIDENTIAL DIGITAL WATERMARKING ALLIANCE 2 Digital Watermarking Alliance Charter The Digital Watermarking.
Logical IT Security By Prashant Mali.
ViPNt ViPNet Product Presentation Infotecs GmbH 2008.
Computer Forensics. Introduction Topics to be covered –Defining Computer Forensics –Reasons for gathering evidence –Who uses Computer Forensics –Steps.
Notes accompany this presentation. Please select Notes Page view. These materials can be reproduced only with written approval from Gartner. Such approvals.
Distributed Computing Dr. Eng. Ahmed Moustafa Elmahalawy Computer Science and Engineering Department.
Common types of online attacks Dr.Talal Alkharobi.
Overview Business Risk Secure MFP Program Device Security Access Security Document Security End of Life Security.
Network Security Workshop BUSAN 2003 Saravanan Kulanthaivelu
Page 1 LAITS Laboratory for Advanced Information Technology and Standards Duh 7/10/03 The GMU Geospatial Grid Technology Development and Application Project.
Federal Aviation Administration NAS Enterprise Information System Security (NEISS) Vic Patel, FAA ICAP, ACP WG-I May 28 th – 30 th 1.
Copyright 2002, Computer Associates International, Inc CA Products for z/VM – Old Dogs with New Tricks Yvonne DeMeritt Sr. Sustaining Engineer CA.
Wednesday, January 12th, 2011 Automating Inventory, Deployment and Configuration of Your Windows Infrastructure Dan Stolts, Microsoft Like most IT professionals,
Securing a Virtualized Environment Stefano Alei Senior Systems Engineer.
Windows Server 2012: New Features. Administering Servers with Server Manager Using Server Manager, you can: Manage multiple servers from one instance.
SMS 2003 R2 and System Center Configuration Manager 2007 Technical Drilldown Martin Dey Director, Product Marketing Windows and Enterprise Management Division.
What is an Operating System? A program that acts as an intermediary between a user of a computer and the computer hardware. Operating system goals: Execute.
UNIT I FUNDAMENTAL OF E-COMMERCE 1.1INTRODUCTION TO E-COMMERCE 1.2 DRIVING FORCES OF E-COMMERCE 1.3 BENEFITS AND LIMITATIONS OF E-COMMERCE 1.4 DATA MINING.
Who We Are Integral Systems builds satellite ground systems for command and control, integration and test, data processing, and simulation. We’ve provided.
Defence Research and Development Canada Recherche et développement pour la défense Canada Canada RFID Security and Privacy Issues and Countermeasures.
About the Presentations The presentations cover the objectives found in the opening of each chapter. All chapter objectives are listed in the beginning.
Chapter 11 E-Commerce Security. Electronic CommercePrentice Hall © Learning Objectives 1.Document the trends in computer and network security attacks.
© 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Ceedo Client Workspace Concept and Technology Overview Ceedo Client Workspace.
UNIT 2: Firewalls Content : Firewalls in general basic operation and architecture Main border firewalls using stateful inspection Screening firewalls.
How to secure an information security environment January 15, 2014 Lance P. Hawk CFE, CGEIT, CISA, CISM, CRISC
© 2016 SlidePlayer.com Inc. All rights reserved.