The Defense Advanced Research Projects Agency (DARPA) has issued a Request for Information (RFI) designated DARPA-SN-25-34, seeking feedback on the draft "FMDRS Guide" aimed at enhancing the resilience of systems through formal methods. The RFI invites responses from various stakeholders, including companies, academic institutions, and research organizations, by February 25, 2025. The guide integrates formal mathematical techniques to improve software security, which is vital for safeguarding Department of Defense (DoD) capabilities. DARPA intends to incorporate input from this RFI to refine the guide for use in future solicitations and expects proposers to create a detailed implementation plan for resilient systems based on the guide.
Key points include the RFI’s focus on system resilience across hardware, cyber-physical systems, and software, along with structured feedback on elements such as the comprehensiveness of the FMDRS Guide. DARPA emphasizes constructing a formal methods ecosystem and encourages participation in related initiatives. Responses should be submitted in specific formats, avoiding classified information. The RFI serves as an important step in fostering collaboration and improving the resilience of critical government systems while ensuring that formal methods are effectively integrated into future projects.
The DARPA Guide for Formal Methods to Deliver Resilient Systems (FMDRS) provides guidance for proposals addressing resilience through formal methods in response to DARPA Broad Agency Announcements (BAAs) and other RFPs. It emphasizes the Department of Defense's focus on developing high-quality, secure systems capable of withstanding and recovering from attacks. The document outlines the importance of formal methods, which are mathematically rigorous techniques supporting software reliability and security. Proposals must delineate clear resilience goals, detailing the types of threats the system will counter and how those objectives will be achieved. Key areas of focus include system architecture, file formats, data formats, network protocols, type and memory safety, and isolation measures. An example project, the Resilient Octopus Controlled Spacecraft (ROCS), illustrates resilience plans encompassing environmental factors and adversarial threats, while employing robust software development practices in alignment with DARPA's standards for security and system integrity. The guide reinforces the necessity of specific resilience strategies while conforming to broader quality objectives without serving as a formal solicitation.