SBIR-STTR Award

RFP BESPIN Secure Mobile Apps Seq
Award last edited on: 2/16/2021

Sponsored Program
SBIR
Awarding Agency
DOD : AF
Total Award Amount
$1,754,995
Award Phase
2
Solicitation Topic Code
AF192-001
Principal Investigator
Kevin Fox

Company Information

Blue Cedar Networks Inc

325 Pacific Avenue
San Francisco, CA 94111
   (617) 875-7398
   N/A
   www.bluecedar.com
Location: Single
Congr. District: 12
County: San Francisco

Phase I

Contract Number: FA8649-19-P-A269
Start Date: 8/2/2019    Completed: 8/2/2020
Phase I year
2019
Phase I Amount
$50,000
The Blue Cedar mobile app security integration platform offers an innovative and cost effective approach to solving the USAF's challenges associated with cost-efficiently ensuring that all mobile apps that manifest Air Force-sensitive data are continuously secured, over time, as operating systems, mobile app frameworks and the security control technologies all evolve. Blue Cedar utilizes cutting edge technology to integrate security controls into mobile apps through a true "push button"? no code process that eliminates the need for security developers to perform the critical but mundane tasks of integrating the necessary security controls into all apps.

Phase II

Contract Number: FA8771-22-C-0009
Start Date: 6/22/2022    Completed: 12/21/2023
Phase II year
2022
Phase II Amount
$1,704,995
The Blue Cedar platform provides a solution to rapidly incorporate those SDKs into the Air Force applications including GOTS and COTS apps for which the Air Force does not own the source code. We use advanced techniques to make the complex and error-prone process of integrating BlackBerry security controls into mobile apps appear to be trivial. It completely analyzes mobile apps, including 3rd-party libraries, and discerns API calls all the way from the app level (Layer 7) to the network level (Layer 3). The process of unpacking apps, scanning them to find integration points, intercepting the appropriate function calls that can run into the tens of thousands, overriding classes and methods, making static changes in app binaries, enabling runtime trapping, and more is completely invisible and is performed automatically. Only a solution that has this level of visibility can reliably perform no-code integration of BlackBerry security controls into apps. These capabilities are delivered as a SaaS cloud solution and follow a self service usage model which allows users to simply upload a compiled app binary to the platform which will subsequently inject the SDK libraries and the Blue Cedar tech into the binary. After this injection is completed, the platform automates the process of signing the app after which the integrated app binaries can be downloaded and distributed through normal app distribution methods.