Network Survivability, Recovery & Reconstitution (NS2R)

This DHS SBIR Phase I project will contribute technology that enables packet filtering devices to rapidly switch between large security policies which are applied to high-speed packet interfaces. This technology is critical to a solution that secures the Internet: A network protection service that addresses the problem of network survivability, rapid recovery, and reconstitution during attacks. This protection service proactively eliminates attacks on the Internet, before they are launched and reach their targets. The service applies a sequence of packet security policies to the network. The initial security policy restricts packet traffic to communications between critical resources and identifies sources of adverse traffic. Each successive policy increases the scope of allowed communications until normal network operations are restored. The solution architecture enables carriers, service providers, and large enterprises to host the solution and similar network security services. This approach will be the basis of a new Network-Security-as-a-Service (NSaaS) business model. The NSaaS approach improves cyber security quality and effectiveness for critical U.S. networks. It also reduces cyber security costs for all users. This DHS-funded research project will be a catalyst enabling the NSaaS market, a secure Internet, and significantly improved national security.