Automated Hardening for Cyber Secure Operating Systems

Navy platforms have computing devices that drive their operational capabilities, especially autonomous or unmanned systems. Many platforms such as autonomous vehicles have some version and distribution of Linux as their operating system (OS) as well as an application running on it. Providing cybersecurity to these platforms is not only challenging due to their complexities but also very time consuming from a manpower perspective. This workload includes analyzing all levels of software (to include the OS) and configuring them to make them more secure as well as other cyber hardening operations such as software debloating to remove unnecessary functionality. The Navy has many platforms so each would require its own analysis and hardening. There are various means for improving the cybersecurity posture of the platform, each either manual or with its own tool, which creates undue burden on the developer of the platform for hardening without missing certain security features. The focus of this SBIR effort is strictly on the OS, in this case Linux. The tool should determine the Linux OS functionality actually required by a specific platform instantiation, remove unnecessary OS components and functionality, and configure the remaining Linux OS to improve cybersecurity posture while preserving required system functionality. The goal is to create an automated tool that analyzes the various specifications, configurations, applications, etc. to harden the cybersecurity posture of the underlying Linux OS. The performer should propose their own platform, preferably either a commercial off-the-shelf (COTS) or open source platform that has a Linux OS and use this for design and experimentation on how to automate the cyber hardening of just the OS. It is preferred that the device be some type of autonomous vehicle. The performer will produce an overall software architecture for the automated OS hardening tool as well as a demonstration of the conceptual capability in Phase I while Phase II will involve development of a prototype in cooperation/guidance with Navy personnel. Metrics to demonstrate the improvements from the automated tool should be provided in the proposal.