Phase II year
2023
(last award dollars: 1724064141)
Phase II Amount
$1,499,832
For Phase 2 of this effort, Tulip Tree Technology, LLC proposes to create the CVE identification tool, Warren. Warren will take in a set of firmwares and script that can throw a payload to exercise a given CVE. It will run those firmwares in our proprietary analytical emulation environment Emerson. Once each target is running, Warren will throw the proof-of-concept exploit at each running instance. Emerson will then detect any vulnerable actions taken by the firmware and report them back to the Warren framework. Finally, Warren will collect all the results and prepare a report for the end user. All of this will take place in a cloud environment to enable users to scale their efforts.
