Cyber Security Instruction Environment (CYSTINE)

ABSTRACT:Cyberattacks represent a growing threat to military and civilian information systems. The average number and average cost of cyber incidents are increasing, and the FBI has labeled cyberattacks as a top terror threat. What makes responding to cyber threats particularly difficult is the speed with which attackers are constantly adapting. Consequently, cyber defenders must remain similarly agile. Traditional training techniques do not adequately capture the dynamic nature of cyber operations. They are unable to convey the creativity and adaptability of actual cyber attackers, instead relying on instructor-led study. If our warfighters are to learn to respond to a cunning and adaptive adversary, they need to train against a cunning and adaptive adversary.Intelligent agents have the potential to transform the cyber training experience. By integrating Soar agents that learn and adapt, we can provide a realistic environment that supports team-based and distributed mission training exercises. SoarTech, in partnership with KAB Laboratories and Merit Network, is developing the Cyber Security Instruction Environment (CYSTINE) to address these challenges. By combining Soar cognitive agents, Dynamic Tailoring for training personalization, and interoperability tools to support integration with a range of virtual environments, we will create an adaptive training solution that maximizes training effectiveness.BENEFIT:CYSTINE combines Soar cognitive agents, Dynamic Tailoring for training personalization, and interoperability tools to support integration with a range of virtual environments, to deliver an adaptive training solution that maximizes training effectiveness. Our commercialization strategy is to work with cyber ranges to integrate CYSTINE as an additional facet of their cyber training curriculum.