AMBER (Autonomic Monitoring and Mitigation with Blockchain-Enabled Reporting) is a solution to harden Internet of Things (IoT) devices against cyber attacks. AMBER provides end-to-end protections, relying on:
AMBER works by identifying expected (correct) device-specific behavior and reporting deviations. Unlike many state-of-the-art techniques that only attempt to identify previously-seen attacks, AMBER's approach allows protecting against both known and unknown attacks. AMBER provides comprehensive and persistent cyber protection for devices and software, without interfering with the ability to carry out mission-essential functions.
The video below is a presentation of Tiffin and mgen, core technologies underlying AMBER and other GrammaTech autonomic projects. The presentation was originally given at the HCSS 2022 conference.
This material is based upon work supported by DLA and the Air Force under Contract(s) No. SP4701-21-P-0010, FA9453-16-M-0464 and FA9453-17-C-0489. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of DLA or the Air Force.