Automated Hardening for Cyber Secure Operating Systems

SBIR · Phase: BOTH · Topic DON27BZ02-NV010 · Solicitation 27.BZ

Navy platforms have computing devices that drive their operational capabilities, especially autonomous or unmanned systems. Many platforms such as autonomous vehicles have some version and distribution of Linux as their operating system (OS) as well as an application running on it. Providing cybersecurity to these platforms is not only challenging due to their complexities but also very time consuming from a manpower perspective. This workload includes analyzing all levels of software (to include the OS) and configuring them to make them more secure as well as other cyber hardening operations such as software debloating to remove unnecessary functionality. The Navy has many platforms so each would require its own analysis and hardening. There are various means for improving the cybersecurity posture of the platform, each either manual or with its own tool, which creates undue burden on the developer of the platform for hardening without missing certain security features. The focus of this SBIR effort is strictly on the OS, in this case Linux. The tool should determine the Linux OS functionality actually required by a specific platform instantiation, remove unnecessary OS components and functionality, and configure the remaining Linux OS to improve cybersecurity posture while preserving required system functionality. The goal is to create an automated tool that analyzes the various specifications, configurations, applications, etc. to harden the cybersecurity posture of the underlying Linux OS. The performer should propose their own platform, preferably either a commercial off-the-shelf (COTS) or open source platform that has a Linux OS and use this for design and experimentation on how to automate the cyber hardening of just the OS. It is preferred that the device be some type of autonomous vehicle. The performer will produce an overall software architecture for the automated OS hardening tool as well as a demonstration of the conceptual capability in Phase I while Phase II will involve development of a prototype in cooperation/guidance with Navy personnel. Metrics to demonstrate the improvements from the automated tool should be provided in the proposal.

SBIR/STTR 은 미국 중소기업만 지원할 수 있습니다(Small Business Act 법정 요건). • 계열사를 포함해 상시 종업원 500명 이하 • 미국 시민 또는 영주권자 1인 이상이 50%를 초과해 직접 소유·지배 • 미국 내 사업장을 두고 주로 미국 내에서 사업을 영위할 것 • 수행책임자(PI)의 주된 근무처가 신청 기업일 것 출처: https://www.sbir.gov/faq/eligibility-requirements

Primary country

🇺🇸 United States

Also eligible

None

Foreign companies

No

Local entity

Required

Location condition

미국 내 사업장을 두고 미국 시민·영주권자가 50%를 초과해 소유한 중소기업만 신청할 수 있습니다(법정 요건).

Document requirements were not captured (needs verification). Check the official announcement.

Application process not captured.

Evaluation process not captured.

Process steps were not captured.

No risk assessment yet. Re-analyse from Admin.

No IP assessment yet.

Official URL

https://www.dodsbirsttr.mil/topics-app/

Application URL

https://www.dodsbirsttr.mil/topics-app/

Last fetched

2026.11.06

Human review

Not reviewed — check the official announcement

First seen

2026.11.06

Data status

Auto-collected, not reviewed

AI enrichment

Needs verification