Aarno Labs Logo

We solve hard problems in computer security.

An elite team of experts in formal methods, program analysis, and dynamic instrumentation.

Retrofitting security on legacy systems and devices.

Aarno Labs Overview

Founded in 2015 by MIT researchers, we are small team of experts with a rare combination of deep research knowledge and the ability to deliver production-ready code. We have distinguished ourselves in 12 DoD and DARPA research grants, with combined funding of over $30M. We have had technology transitions to Raytheon, STR, DoD, and 3 letter agencies.

Team

Aarno labs is staffed by researchers with significant academic and industry experience in computer security and program analysis research.

  • PhDs from MIT, Stanford, Columbia, and UPenn
  • Combined our team has published over 75 research papers
  • Deep links to researchers at MIT

Expertise

Aarno labs has extensive expertise across a diverse portfolio of projects and solutions. Examples include: vulnerability discovery, automatic exploitation, high assurance binary patching, and runtime protections.

Solutions

Products, platforms and tools developed by Aarno Labs and ready for deployment. Please email us if you are interested.

CodeHawk CodeHawk

CodeHawk: Analysis and Patching Platform

Advanced binary and source code analysis platform. Support for low-cost and high-assurance binary patching. Effective workflows for malware analysis, binary understanding, C code quality, and vulnerability detection. Demonstrated best-in-class over many DARPA and IARPA projects.

Lucien Lucien

Lucien: Supply Chain Telemetry, Assessment, and Protection

Next-generation runtime supply chain understanding, alerting, and zero-trust protection. Close entire classes of vulnerabilities automatically without patching. Rapidly understand your deployed suppy chain risk. Almost zero overhead and complete compatibility.

See all of our solutions.

Research Projects

A selection of our current and past research projects. Click on a project for more information.

DRIFT

Enhancing SBOMs to solve vulnerability discovery, reachability and remediation.

PI: Michael Gordon

Technical Areas: Static Analysis, Dynamic Analysis, Binary Patching, Supply Chain Security, Vulnerability Remediation, Vulnerability Reachability

AMdP

Vulnerability remediation capabilities for EoL medical devices with firmware change understanding.

PI: Ricardo Baratto

Technical Areas: Static Analysis, Binary Patching, Vulnerability Discovery, Vulnerability Remediation

Aria

Transforming AppSec with in-application, zero-trust privileges and secure computation offloading.

PI: Ricardo Baratto

Technical Areas: Runtime Protection, Supply Chain Security, Vulnerability Discovery, Vulnerability Remediation, Vulnerability Reachability

MRAM

Low-cost and high-assurance binary patching for the masses

PI: Michael Gordon

Technical Areas: Static Analysis, Binary Patching, Software Correctness, Vulnerability Remediation

Arya (TA2)

Automated exploitation and vulnerability validation across diverse systems

PI: Jeff Perkins

Technical Areas: Dynamic Analysis, Supply Chain Security, Vulnerability Discovery

DroidSafe

Best-in-class static analysis to vet untrusted Android mobile applications.

PI: Michael Gordon

Technical Areas: Static Analysis, Vulnerability Discovery, Vulnerability Reachability

See all of our research projects.

Team Members

Principal Investigators

Senior Research Developers

Advisors

Interns and Alumni

Careers

Aarno Labs is seeking talented and motivated individuals to improve software security and reliability. Applicants with experience in program analysis and software security are strongly encouraged to apply. To start the conversation, please email us at [email protected].

Contact

To learn more or if you have any questions, please email or call us.

Headquarters:
330 Washington Street, 4th Floor
Boston, MA 02109
Mailing Address:
55 Antrim St,
Cambridge, MA 02139
Phone: +1 (681) 222-7664
Email: [email protected]