[dwheeler@IDA.ORG: DARPA BAA #01-24 - funding security research for open source OS's.]

From: Marco Molteni (molter@tin.it)
Date: 02/28/01 

Date: Wed, 28 Feb 2001 12:35:00 +0100
From: Marco Molteni <molter@tin.it>
To: freebsd-security@freebsd.org

FYI
Marco

----- Forwarded message from David Wheeler <dwheeler@IDA.ORG> -----

From: David Wheeler <dwheeler@IDA.ORG>
Reply-To: David Wheeler <dwheeler@IDA.ORG>
To: SECPROG@SECURITYFOCUS.COM
Date: Tue, 27 Feb 2001 10:26:22 -0500
Subject: DARPA BAA #01-24 - funding security research for open source OS's.

FYI:

If you're interested in doing security research for open source
operating systems, the U.S. DARPA has released a "Broad Area Announcement"
(BAA) requesting proposals for this kind of work. DARPA will select the
"best" proposals and fund them. The solicitation is DARPA BAA #01-24, part
of the "Composable High Assurance Trusted Systems" (CHATS) program.

Proposals for this BAA should be for 12 to 24 months of base funding
with the possibility of additional options. Multiple awards worth
approximately $10 million over two years are expected to be made from this BAA.

The full proposal (original and designated number of hard
and electronic copies) must be submitted in time to reach
DARPA by 4:00 PM (U.S. Eastern Time) Monday, March 5, 2001,
in order to be considered; it CANNOT be sent by email or fax
(they REQUIRE PHYSICAL COPIES). Proposals have a prescribed format,
so if you want to submit a proposal, you must hurry to submit one in time.

I don't have any particular relationship with this program
(other than thinking it's a great idea), so please don't ask me about it.
It appears that non-U.S.-citizens can apply, since DARPA normally permits
this unless otherwise forbidden & I see no such prohibition in this case.

You can get more information from:
Commerce Business Daily (CBD) Reference:
  http://www.darpa.mil/ito/Solicitations/CBD_01-24.html

Proposer Information Pamphlet (it's hard to find on the web site):
  http://www.darpa.mil/ito/Solicitations/PIP_01-24.html

General Information on DARPA ITO Solicitations (especially their FAQ):
  http://www.darpa.mil/ito/solicitations.html

Here's a brief summary (excerpted from the BAA):

"DARPA is seeking to develop new security functionality for existing
open source operating systems, leveraging the many years of operating
systems development, and to demonstrate the value of useful security
tools to the open source community. ...

This BAA solicits proposals in the following technical topic areas of
the Composable High Assurance Trusted Systems (CHATS) program:
(1) Enhanced security and compatibility across open source operating systems;
(2) System configuration and administration tools and methods;
(3) Security audit/analysis/testing/documentation of open source systems;
(4) Security policy, security services, critical applications,
    and hardware support;
(5) Assurance methods and tools; and
(6) Other innovative topics related to composable high assurance trusted
    open-source operating systems. ...
Proposed research should investigate innovative approaches and
techniques that lead to or enable revolutionary advances in the
state-of-the-art. Proposals are not limited to the specific strategies
listed above, and alternative visions will be considered. However,
proposals should be for research that substantially contributes towards
the goals stated, i.e. improving the security functionality of existing
open source operating systems."

----- End forwarded message -----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

Relevant Pages

  • RE: protect MS Windows 95/98/Me
    ... tech savvy individuals, bypassing those policies ... Microsoft products) does not exist on Windows 9x ... > There is no security features in win9x OS. ... > operating systems. ...
    (Security-Basics)
  • Re: Controversial paper - Good response article on ZDNet
    ... you removed my arguement on operating systems. ... following best practices for firewall or network security at the head ... cost more, but you forget is that cost is a huge factor in security ... Your comparison to encryption algorithms is not applicable here. ...
    (sci.crypt)
  • Re: [Full-Disclosure] Support the Sasser-author fund started
    ... >>Why should Microsoft have more blame? ... > was put together without security in mind. ... > and cases where worms and viruses have been created for them (cf. the ... MS operating systems weren't really designed with security in mind ...
    (Full-Disclosure)
  • Re: How NSA access was built into Windows
    ... By arguing that secure operating systems are indispensable to system ... security, the authors hope to spawn a renewed interest in operating ... is important that mechanisms exist to report violations of that security ...
    (Fedora)
  • Re: sco.com and caldera.com are down
    ... hilarious attempts to steal Linux from the open source comunity, ... Open-source Samba, you know, covered by the GPL. ... operating systems - let's look at the facts: ... To anyone still running SCO software, ...
    (comp.unix.sco.misc)