RADSS: Robust, Assured Diversity for Software Systems
The Galois “Robust, Assured Diversity for Software Systems” (RADSS) Project, funded by the DARPA Cyber Fault-tolerant Attack Recovery (CFAR) program, aims to automatically provide hardened software defenses and detect intrusions as they happen in both current and legacy systems, without requiring vendor cooperation.
RADSS aims to automate the creation of such software variants and prove their correctness and security. The project is based on years of research into software diversity and multi-variant execution, and aims to advance the state of the art by addressing five key research challenges. These challenges are: (i) establishing trust in the system and the diversified variants, (ii) defending against new kinds of attacks, (iii) enabling smooth recovery in case of attack, (iv) extending diversity-based defenses to programs available only in binary form, and (v) extending multi-variant defenses to multi-threaded and self-modifying (e.g., just-in-time compiled) programs.