Utilization Of Inference Engine Technology For Navy Cyber Situational Awareness

Throughout our modern world, most of the global population has evolved a heavy reliance on computing and networks for almost all essential components of our lives. Unfortunately the threats to the information we maintain on our systems and networks are ever growing and the risks to our personal lives, economic base, national security and critical infrastructure are increasing at an overwhelmingly rapid rate. Machines are being used to attack other machines and to harvest information and prevent valid access, all at machine processing rates. Identification of these threat actors, their techniques and their presence in restricted cyber space locations can no longer be accomplished by human analyst exploring indicators at human processing rates. The automated tools and techniques currently in place are disjointed, proprietary in many cases, they monitor for well-defined (known) events or triggers, and provide labor intensive information for review by the analyst. The technology proposed to address these problems is adaptive and predictive rather than solely responsive after a penetration, exfiltration or malicious event has occurred. This sophisticated capability addresses the many perilous gaps and seams in the cyber situational awareness information currently available to the analyst and provides comprehensive SA over systems and infrastructure.