Intelligent Generation of Tools for Security (INGOTS)

The INtelligent Generation Of Tools for Security (INGOTS) program seeks to semi-autonomously reverse engineer and reconstruct recently patched software vulnerabilities in a software supply chain in order to develop tools and techniques to generate exploit chains for cyber hardened enterprise software. INGOTS will also use data from this process to develop a new metrology for assessing the exploitability of chained vulnerabilities, enabling defenders to quantify the risk posed by vulnerabilities in blue networks and to prioritize rapidly fixing the most exploitable issues before an attacker can leverage them.