Saturday · December 1, 2007

DHS awards HBGary, Inc. $975,000 SBIR Phase II contract — maturation funding that ran concurrently with Team Themis planning

confirmed Importance 7/10 ~2 min read 2 sources 3 actors

Opening

On December 1, 2007, DHS Science & Technology Directorate awarded HBGary, Inc. a Phase II SBIR contract of $975,000 (contract number NBCHC080048) for “Enterprise Botnet Detection and Mitigation System,” under the same topic (BOTNET DETECTION AND MITIGATION). Period of performance: December 2007 through March 30, 2011. Combined with the Phase I award, total DHS SBIR investment in HBGary reached $1,075,000.

What Happened / Key Facts

The Phase II award, at the standard DHS Phase II cap of approximately $750,000–$1M, funded a 40-month maturation of the botnet detection prototype into a demonstrable enterprise system. The abstract describes the core technical challenge the system addressed: network management systems have no visibility into hosts; host detection systems have no network visibility; signature-based approaches miss stealthy behavioral botnets. The Phase II system integrated both layers.

Timeline intersection: The Phase II period of performance ran from December 2007 through March 2011 — expiring the same month Aaron Barr resigned from HBGary Federal following the Anonymous hack. This means DHS was still funding HBGary’s botnet detection R&D during the entire period in which HBGary Federal was developing offensive tools (Magenta rootkit), assembling Team Themis, and pitching coordinated information-operations against WikiLeaks and Glenn Greenwald to Bank of America.

The active DHS contract did not constrain HBGary Federal’s separate offensive work, illustrating the decoupling mechanism: government R&D funding of defensive capability is structurally separate from — and does not govern — the downstream commercial uses of the matured technical base.

Why This Event Matters

The $975,000 Phase II award is the capstone of HBGary’s government R&D investment. It demonstrates the standard DHS pipeline operating as designed: Phase I prototype → Phase II maturation → commercial product (HBGary Responder, Digital DNA) → government-sector sales (HBGary Federal’s DOD/IC contracts). The concurrent timeline with Team Themis planning makes this the most precisely documented case of the pipeline’s downstream civil-society-targeting potential.

Sources & Citations

[1] HBGary Inc SBIR award data (local DHS R&D pipeline dataset) — DHS Office of Industry Partnership leak (DDoSecrets, March 2023) · Mar 1, 2023 Tier 1
[2] HBGary Inc SBIR award history — inknowvation.com · Jan 1, 2024 Tier 2
Tiers Tier 1 court records & gov docs · Tier 2 established outlets · Tier 3 regional & specialty press · Tier 4 opinion or single-source. Methodology →
Cite this entry
The Cascade Ledger. “DHS awards HBGary, Inc. $975,000 SBIR Phase II contract — maturation funding that ran concurrently with Team Themis planning.” The Capture Cascade Timeline, December 1, 2007. https://capturecascade.org/event/2007-12-01--hbgary-dhs-sbir-phase-2-botnet-detection/