Situation Awareness and Impact Assessment for Cyber Network Defense

The goal of this effort is to develop technologies enabling situational awareness for large-scale cyber network defense, assessing the impact of adversarial action against a network, and predicting future adversary attack strategy. Based on Phase I, we plan to develop, implement, and validate a prototype system. The prototype shall be sufficiently detailed to evaluate scalability, usability, and self-protection from any compromise of its ability to monitor the network’s situation. We shall define metrics or measures that can be used to evaluate the sufficiency of the prototype’s ability to present the network situation and impact of attacks. The objectives of the effort are (i) to close on Phase I assumptions and limitations, finalize the prototype system, conduct a validation study, and conduct a scalability study, (ii) to deliver an effective, scalable, and useable product to the Air Force, and (iii) to establish a plan for non-military commercialization to be carried out during Phase III, including GUI, integration, and data source requirements.