Network Sensor to Geolocate Cyber Attacks and Framework

Tactical networks utilizing Mobile Ad hoc Network (MANET) protocols, inherent in such waveforms as SRW and WNW, are providing new net-centric capabilities to the warfighter. These new capabilities are being deployed in a contested cyber environment that is made more challenging due to resource constraints such as bandwidth, Size-Weight-and-Power (SWaP) constraints, and the dynamic nature of deployed MANETs. New cyber defense approaches are needed that address the constraints of operating securely in this new tactical networking environment. The goal of this effort is to continue development of technologies that address the unique challenges of providing defense in depth to these tactical radio networks. The focus of this effort has been to conduct and use a cyber-defense study of SRW to motivate the design, development, and demonstration of those technologies. Reservoir Labs has identified, and is developing, two technologies under this effort: (1) R-Check, a static analysis tool for identifying and prioritizing software vulnerabilities through source-code analysis and (2) Blackball, a dynamic technology for countering Byzantine attacks through a model of outlier detection based on collaborative trust. While motivated by an analysis of SRW, both technologies should be portable and applicable to other JTNC waveform products.