CyberTrust is establishing a phenomenally effective cybersecurity system called the Software Inspection System. It protects networks from rapidly propagating offensive cyber weapons. Rather than just defending against identified viruses and worms, CyberTrust also scans software on each computer to find flaws and vulnerabilities in software binaries. CyberTrust is automatically discovering zero-day vulnerabilities.

CyberTrust’s cyber tool then repairs vulnerable binaries and replaces binaries with improved versions, and shares that improved code with other computers in the network. It will create a moving target that will continually simplify and harden the software on each computer. The rate at which software is hardened will increase with the size of the network.

Traditional cybersecurity tools try to find vulnerabilities based on signature detection and anomaly detection. Polymorphic and metamorphic malware constantly change their signatures to thwart signature detection. Anomaly detection tries to classify data and events as being associated with a malicious software tool, but anomalies can be easy to mask. Both methods fail to find vulnerabilities by root cause analysis. The Software Inspection System automatically detects zero-day vulnerabilities by reconstructing executable code before it is run on the host machine, and then runs scans of the reconstructed code to easily identify vulnerabilities that give rise to potential or actual exploits. The Software Inspection System can detect vulnerabilities on substantially all software run on a machine, including the machine’s firmware. If a vulnerability is detected, the vulnerable software is prevented from running, and secure messages can be sent throughout a vast global computer network to prevent that process from running on any other computer either. The system can also automatically repair some defects and vulnerabilities. Contractors and vendors will be shown a trace of their software so that they can fix the code so that their software can be run safely on customer computers.