Intelligent Generation of Tools for Security (INGOTS)

Background
The INGOTS program aims to advance the state of the art in vulnerability research for modern complex systems by developing novel techniques and technologies related to the creation, modification, modeling, and analysis of exploit chains, and on the use of exploit chains as tools for establishing system-centric assessments of security posture.

Work Details
The program is organized into three 12-month phases, with an optional 12-month Transition Phase. Phase I focuses on establishing the foundational theory for exploit chains, manual synthesis of exploit chains, and extending the existing state of the art in automatic exploit generation. Phase II involves exploring the mutability of exploit chains, scaling analysis, and developing system-centric models of exploit chains. Phase III focuses on fully automating the synthesis of exploit chains, developing exploit chain forecasting, and conducting final program hackathons. TA1 performers will focus on Exploit Chain Synthesis and Automation, TA2 performers will focus on Compositional Analysis, Functional Analysis, Analysis at Scale, System-Centric Exploit Chain Analysis, and Exploit Chain Forecasting. TA3 performers will focus on Test, Evaluation, and Testbed Development.

Period of Performance
The program is a 36-month effort organized into three 12-month phases with an optional 12-month Transition Phase to be funded by government partners. The primary objectives for each phase will increase in complexity as the program progresses.