Automated Hardening for Cyber Secure Operating Systems

SBIR topic DON27BZ02-NV010 (U.S. Department of Defense – Navy), Phase I and II. Open to U.S. small businesses. Opens: December 2, 2026. Closes: January 6, 2027. Navy platforms have computing devices that drive their operational capabilities, especially autonomous or unmanned systems. Many platforms such as autonomous vehicles have some version and distribution of Linux as their operating system (OS) as well as an application running on it. Providing cybersecurity to these platforms is not only challenging due to their complexities but also very time consuming from a manpower perspective. This workload includes analyzing all levels of software (to include the OS) and configuring them to make them more secure as well as other cyber hardening operations such as software debloating to remove unnecessary functionality. The Navy has many platforms so each would require its own analysis and hardening. There are various means for improving the cybersecurity posture of the platform, each either manual or with its own tool, which creates undue burden on the developer of the platform for hardening without missing certain security features. The focus of this SBIR effort is strictly on the OS, in this case Linux. The tool should determine the Linux OS functionality actually required by a specific platform instantiation, remove unnecessary OS components and functionality, and configure the remaining Linux OS to improve cybersecurity posture while preserving required system functionality. The goal is to create an automated tool that analyzes the various specifications, configurations, applications, etc. to harden the cybersecurity posture of the underlying Linux OS. The performer should propose their own platform, preferably either a commercial off-the-shelf (COTS) or open source platform that has a Linux OS and use this for design and experimentation on how to automate the cyber hardening of just the OS. It is preferred that the device be some type of autonomous vehicle.…