Automated platform to assess software assurance

A computer program product for verifying software, the computer program product comprising:

• a computer-readable storage medium having program instructions embodied thereon to perform the steps of:
• creating a number of virtual machines that simulate a number of computing environments;
• running a number of software programs on the virtual machines, wherein the software programs have full access to the simulated computing environments, and wherein source code of the software programs is unavailable;
• performing virtual machine introspection using a hypervisor as the software programs run on the virtual machines, wherein the virtual machines and software programs are unaware the virtual machine introspection is being performed;
• collecting telemetry data about the software programs including any identified threats posed by the software programs to the simulated computing environments;
• and
• presenting the telemetry data to a user via an interface.

A system for verifying software, the system comprising:

• a bus system;
• a storage device connected to the bus system, wherein the storage device stores program instructions;
• and
• a number of processors connected to the bus system, wherein the number of processors execute the program instructions to:
• create a number of virtual machines that simulate a number of computing environments;
• run a number of software programs on the virtual machines, wherein the software programs have full access to the simulated computing environments, and wherein source code of the software programs is unavailable;
• perform virtual machine introspection using a hypervisor as the software programs run on the virtual machines, wherein the virtual machines and software programs are unaware the virtual machine introspection is being performed;
• collect telemetry data about the software programs including any identified threats posed by the software program to the simulated computing environments;
• and
• present the telemetry data to a user via an interface.