Advanced Insider Threat Detection and Response

Insider threats have become a major issue in the search to secure our military and global infrastructure. Insiders may already have all the relevant information they need to adversely affect the state and response capabilities of our defenses. Concurrently, insiders must be engendered with some measure of trust to effectively perform their duties. This combination of knowledge and capability make the insider threat more insidious and lethal than the generic attacker, who must expend time, energy, and resources to determine network layouts and vulnerabilities, and to gain access to the needed data and process capabilities on the network. Distributed Infinity will combine evolutionary algorithms for insider characterization with game theory for predictive tactical event analysis, and will utilize the Cybercraft environment for sensor data collection. This powerful combination will enable preemptive understanding of potential threat vectors including who is most likely to attack our networks, and how, with sufficient warning to take effective counter-measures.