Hermes: A Visualized and Automated Cyber Security Assessment Toolkit

IAI and its transition partners, Raytheon BBN Technologies and Raytheon Integrated Defense Systems, propose the Hermes framework and toolkit for cyber security assessment and evaluation tests, which facilitates test exercises in managing, processing, and analyzing large logging datasets from distributed and service-centric computing test bed. Another major capability of this toolkit is that it gains an aggregate system view before, during, and post assessment exercises, and delivers analytical results on various performance metrics qualitatively, quantitatively, and visually. Hermes is also capable of predictive analysis based on network topology, attack progression, and host/application status. It provides a holistic DVR-like visualization which captures not only the hardware and software resources in the test bed but also attacking and defending progresses, and allows testers to record and repeatedly replay assessment exercises. The Hermes framework will greatly help cyber testers obtain the insight of attack/defense mechanism and Systems Under Test (SUT).