Cyber Health and Status Data Collection

We propose to develop an extensible, distributed, highly scalable, real-time, comprehensive and contextually relevant common operating picture for modeling and simulation system Cyber Situational Awareness (CyberSA) building upon widely successful open source and open standards technologies. Our system will continuously, automatically, and securely collect selected data (e.g. node and network data), in real-time both across federated and within non-federated simulations. It will utilize data enrichment and labeling techniques and provide streaming analytics to monitor and to rapidly detect advanced security threats. Given the ubiquitous use of DDS within MDA, it exposes a non-traditional attack vector that IT solutions do not support. As the world-leading experts in securing DDS, we will also develop DDS-specific data collectors and threat detectors. Threat intel can be collected locally, and it can be selectively and securely shared across the community. Advanced, rapidly customizable web-based visualization using proven open source technologies, will provide continuous CyberSA across both non-federated and federated simulations. Approved for Public Release | 16-MDA-8917 (15 November 16)