Protecting IT Systems From Cyber Attacks

Based upon successful research in Phase I, this Phase II proposal describes the creation of a demonstrable prototype that will reduce the threat of cyber attacks. In addition, it will reduce the time (and therefore cost) IT staff need to defend their systems. The prototype will be a software utility called the Cyber SPK™ (System Protection Kit). The SPK will fuse data from four sources including traditional IDS/IPS with three additional sources not normally included. These additional sources of data are system configuration data, debug/dump file data, and both internal (private) and external (public) Cyber Threat Repositories (CTR). The configuration data show all delta to the system configuration linearly over time while the debug/dump data reports the state of the system in a vertical slice in time. The CTR reports actual threats experienced by others as well as any detail or resolutions added by IT staff. The Cyber SPK will represent a valuable product applicable to any component of the DoD as well as to any commercial office but will be especially valuable for industries including banking, investment, insurance, and hospitals. Following completion of this Phase II project, Phase III will see an excellent opportunity to commercialize the Cyber SPK.