Vulnerability Discovery

Developing advanced techniques to precisely and accurately discover vulnerabilities at scale

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto

Projects: AMdP, Dark Corners, DroidSafe, ClearScope, Arya (TA2), Sansa, Aria

Solutions: DIODE, CodeHawk

Software Correctness

Provably guarantee that your systems do precisely what they should, and nothing more.

PIs: Michael Gordon, Jeff Perkins, Ben Karel

Projects: Dark Corners, Arya (TA3), Compiler 2.0, Tenjin, MRAM, Hawkeye

Solutions: CodeHawk

Vulnerability Remediation

High-assurance and scalable solutions for automatically fixing vulnerabilities, with a focus on legacy software

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto, Ben Karel

Projects: AMdP, DRIFT, Arya (TA3), Sansa, Tenjin, MRAM, Hawkeye, Aria

Solutions: CodeHawk

AI / ML

Complementing emerging machine intelligence with formal methods for trustworthy security solutions

PIs: Michael Gordon

Projects: Arya (TA3), Hawkeye

Runtime Protection

Continuously monitor, detect, and block malicious activities in real-time with low overhead and full compatibility

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto

Projects: ClearScope, Arya (TA3), Saran, Aria

Solutions: Lucien

Vulnerability Reachability

Is your program exploitable via a known vulnerability? If so, what is the complexity, and if not, what are the mitigating factors?

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto

Projects: DroidSafe, DRIFT, Sansa, Aria

Solutions: DIODE, CodeHawk

Supply Chain Security

Understand and mitigate risk in 3rd-party libraries and software

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto

Projects: DRIFT, ClearScope, Arya (TA2), Sansa, Hawkeye, Aria

Binary Patching

Dramatically lowering the costs and increasing assurance for patching production binaries and firmware

PIs: Michael Gordon, Ricardo Baratto

Projects: AMdP, DRIFT, MRAM, Hawkeye

Solutions: CodeHawk

Static Analysis

Scalable and precise source code analysis to discover facts about a program.

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto, Ben Karel

Projects: AMdP, Dark Corners, DroidSafe, DRIFT, Aikido, Sansa, Compiler 2.0, Tenjin, MRAM, Hawkeye, Saran

Solutions: CodeHawk

Dynamic Analysis

Extract facts about a possibly augmented running program to improve security, understanding and testing

PIs: Michael Gordon, Jeff Perkins, Ricardo Baratto, Ben Karel

Projects: DRIFT, ClearScope, Aikido, Arya (TA2), Tenjin, Saran

Solutions: Lucien, DIODE