Microelectronics Inoculation

OUSD (R&E) CRITICAL TECHNOLOGY AREA(S): Microelectronics; Space Technology; Integrated Sensing and Cyber OBJECTIVE: The end-state would be a full demonstration of the technology for military use cases. In addition, any tools and process utilized for microelectronics inoculation are fully documented. Develop a plan for scaling the delivery of the solution to military and commercial systems. DESCRIPTION: Demonstrate capability to detect, protect and defend against hardware insertion against malware and cyber-attack. This should include in an embedded network and as a means of securing the supply chain (should they be different). Develop and demonstrate the tools and process steps used to inoculate the microelectronics. Ensure that this is documented in a user's manual. Provide a plan for deploying the solution to military and civilian systems. PHASE I: As this is a Direct-to-Phase-II (D2P2) topic, no Phase I awards will be made as a result of this topic. To qualify for this D2P2 topic, the Government expects the Offeror to demonstrate feasibility by means of a prior Phase I-type effort that does not constitute work undertaken as part of a prior SBIR/STTR funding agreement. The potential Offeror should have a minimum viable product (MVP) available. The Offeror should articulate the military use case that it intends to support. Evidence of commercialization is required, to include dual-use solutions. . This can include but not limited to company funding that has been received for the MVP or further development of the MVP. PHASE II: TASK 1: Develop plan to demonstrate the capability to detect, protect and defend against hardware insertion (Trojan), network malware and cyber-attacks (including root kits, DOS, ransomware and device destruction) during all lifecycle phases. Expected Delivery: Award + 1 month Deliverable: Provide plan + MVP, TPOC will review and accept plan. TASK 2: Execute plan and demonstrate a capability to detect, protect and defend against both hardware insertion (Trojan) and network malware, and cyber-attacks (including root kits, DOS, ransomware, and device destruction). Expected Delivery: Award + 6 month Deliverable: Document outcomes (video, test report, etc) of the demonstration to include recommendations for findings and future research that may be needed. Acceptance Criteria: The TPOC will witness and accept successful demonstration and report. TASK 3: Develop a methodology that is practical and can scale the delivery of the solution to DoD and commercial systems. Expected Delivery: Award + 9 months. Deliverable: Documented methodology. Acceptance Criteria: The TPOC will review and accept report. TASK 4: Fully document tools and processes used to detect, protect, defend microelectronics in DoD systems. Expected Delivery: Award + 12 months. Deliverable: Provide the tools and instructions for use. Provide recommendations for tool improvement. Acceptance Criteria: The TPOC will review and accept tools, documentation, and instructions. PHASE III DUAL USE APPLICATIONS: TRL6 would be expected at the end of the Phase II. Further, if the Phase II project is successful, there is interest from the Weapons PEO. The TPOC is a SME from the Weapons PEO and will be in the best position to determine if additional work is needed and the appropriate weapons program office that could transition the work. In addition, there is interest in assured and trusted microelectronics as documented in the recent AF/ST study requested by Congress. With a successful demonstration of technology additional agencies can be contacted for interest and possible adoption of the technology. REFERENCES: 15 U.S.C. 638; Small Business Innovation Research (SBIR) and Small Business Technology Transfer (STTR) Program Policy Directive (Oct 2020); 5 C.F.R. 2635.702(c), Exception (1); KEYWORDS: Microelectronics Inoculation