Threats Redirection and Analysis System

To address the OSD need for an innovative model and a dynamic system of cyber threat identification coupled with a means to redirect suspicious or malicious network activity to independent locations for investigation, Physical Optics Corporation (POC) proposes to develop a new Threats Redirection and Analysis System (TRAS). TRAS integrates POC-developed network protection model with existing BGP FLOWSPEC. TRAS monitors network traffic and dynamically detects attacks despite signature. It correlates and aggregates different threat data and uses FLOWSPEC to covertly redirect detected malicious traffic to disparate location for DoD to perform organized analysis of advanced persistent threat. TRAS"s rule-based intrusion detection mechanism enables detecting stealth network reconnaissance, low frequency attacks, and currently undetectable new generation of cyber attacks such as highly distributed and coordinated attacks. In Phase I, POC will define a plan to develop TRAS"s model and ruleset and demonstrate the feasibility of concept by assembling and testing a prototype. In Phase II, POC plans to develop an advanced prototype to demonstrate the capability to directly manipulate the path of network activity and hop count using IPv6 and reliably protect networks against existing and future attacks.