DARPA wants more secure hardware

The Defense Advanced Research Projects Agency wants to test the proposition that more secure software starts with more secure hardware.

DARPA's new System Security Integrated Through Hardware and Firmware, or SSITH, program aims to tackle software security at the hardware level, according to a DARPA news release.

"Security for electronic systems has been left up to software until now, but the overall confidence in this approach is summed up in the sardonic description of this standard practice as 'patch and pray,' " said SSITH program manager Linton Salmon of the agency's Microsystems Technology Office.

SSITH focuses on seven classes of hardware vulnerabilities listed in the Common Weakness Enumeration, a crowd-sourced compendium of security issues. These classes are: permissions and privileges, buffer errors, resource management, information leakage, numeric errors, crypto errors, and code injection.

Removing these hardware weaknesses "would effectively close down more than 40 percent of the software doors intruders now have available to them," Salmon said.

More In IT and Networks

York to expand services from space to ground via ATLAS acquisition

The acquisition of ATLAS by York’s holding company gives York access to the company’s global antenna network.

Pentagon officials tout rapid experimentation at courtyard showcase

Officials said Wednesday that rapid experimentation is now "institutionalized" after cutting a program created to find and quickly demo high-need tech.

Pentagon taps four commercial tech firms to expand military use of AI

The four firms — Google, Anthropic, OpenAI and Elon Musk's xAI — will help the DOD develop AI workflows for key national security missions.

Jammed and confused: Alaska trial shows pitfalls of fielding US drones

One drone failed repeatedly to find its target when jammed and ultimately crashed into a hill. Another flew past its target and went up in flames.

Space Force building out more realistic digital training environment

STARCOM plans to transition Swarm to a cloud-based environment in the next year or two if it has the funding to support the effort.