Developing Cyber Situation Awareness for Enterprise Health

To ensure survival, next-generation networks in defense enterprise systems must monitor the health of each component, detect failures and anomalies, and fight through attacks. Currently-deployed intrusion detection systems (IDS) and network monitoring tools cannot provide the complete view and seamless access required to understand and react quickly. Real-Time Innovations (RTI) will develop a distributed framework that can collect status from an ISR or enterprise network, integrate the information into a common picture, and deliver the data for analysis fast enough to respond decisively. The framework will integrate the most proven commercial and open-source sensors and probes. Data-Distribution Service (DDS) standard-compliant middleware will provide portable, interoperable, real-time data delivery. Operators and analysis servers will then simply subscribe to this data, learn the schema, and perform analysis, aggregation, or recording. RTI has extensive experience with sensor fusion, defense networks, visualization, and supporting TRL 8/9 technology in mission-critical applications. We will collaborate with Prime and Government partners to validate our architectural design for applicability in complex military systems. This research will build an open, extensible infrastructure for collecting, visualizing, analyzing, and reacting to health information in real-time. Dynamic, real-time Situational Awareness (SA) will increase network reliability and agility during offensive and defensive cyber conflict.