Open Source Code Indexing and Search for Malware Analysis

Trade Agreement: WTO-AGP/NAFTA/AIT/Canada FTAs with
Peru/Colombia/Panama
Tendering Procedures: Suppliers on permanent list or able to
meet qualification requirements
Attachment: None
Competitive Procurement Strategy: Lowest/Lower Bid
Comprehensive Land Claim Agreement: No
Nature of Requirements: 
Task-Based Informatics Professional Services (TBIPS) Requirement


This requirement is for Defence Research and Development Canada
at Valcartier (DRDC Valcartier).

This requirement is open only to those Supply Arrangement
Holders  who qualified under Tier  1 for the Stream 1
Application Services.

This requirement is open only to those invited TBIPS Supply
Arrangement Holders who qualified under the categories for A.7
Programmer / Analyst, level 1.

The following SA Holders have been invited to submit a proposal.
     1. A. Net Solutions Inc. 
     2. CGI Information Systems and Management Consultants Inc. 
     3. Empowered Networks Inc. 
     4. Fujitsu Consulting (CANADA) Inc./Fujitsu Conseil
(Canada) Inc. 
     5. Holonics Inc. 
     6. IAN MARTIN LIMITED 
     7. LNW Consulting Inc 
     8. Louis Tanguay Informatique Inc. (LTI) 
     9. Mindwire Systems Ltd. 
     10. PRECISIONERP INCORPORATED 
     11. Proex Inc. 
     12. QMR Staffing Solutions Incorporated 
     13. Solutions Moerae Inc 
     14. Valcom Consulting group Inc. 
     15. Veritaaq Technology House Inc.
     16. Thales Canada Inc.	
     17. Leo-Pisces Services Group Inc.

Description of the requirement:

Background: The reverse engineering of malware is a manually
intensive and time-consuming process, whose objective is to
determine its behavior. It consists in taking a malware's
executable binary, translating it into assembly code, and then
manually analyzing the resulting assembly code. Most of the
steps involve translating assembly code into a series of
abstractions that represent the overall flow of a program to
determine its functionality. The learning curve to master
reverse engineering is quite steep and once mastered, the
process is hindered when a program is obfuscated by
anti-reversing techniques or actively tries to avoid detection,
as most malware do. 

Scope: The present work consists of indexing open source code
publicly available. The objective is to use the index to
partially automate the reverse engineering process, by querying
it to identify the open source code reused in the production of
malware. 

The Contract aims to obtain the services of a resource qualified
as « A.7 Programmer / Analyst, level 1 ».

Proposed period of contract:

The proposed period of contract shall be one year, plus a
one-year irrevocable options allowing Canada to extend the term
of the contract.

File Number:  		W7701-156016
Contracting Authority:Gabriel Piras
Phone Number:	418-649-2870
Fax Number: 		418-648-2209
E-Mail:		Gabriel.Piras@tpsgc-pwgsc.gc.ca


NOTE: Task-Based Informatics Professional Services (TBIPS)
Method of Supply is refreshed on an annual basis.  If you wish
to find out how you can be a "Qualified SA Holder", please
contact RCNMDAI.-NCRIMOS@pwgsc.gc.ca
Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any
procurement.

Documents may be submitted in either official language of Canada.