The Secure Agent-based Operations Reconstitution (SABOR) System

Cyber attacks are a constant drain on resource, and a serious threat to our privacy, commerce, and security. Numerous efforts are underway to detect, analyze, deter, and respond to attacks. Nonetheless, attacks will be successful, and Computer Network Defense (CND) systems themselves will succumb to such attacks. The Secure Agent Based Operations Reconstitution (SABOR) technology addresses the problem of rapidly and automatically reconstructing a CND system, possibly in a degraded mode, with the resources that remain after an attack has occurred. In Phase I, a prototype implementation of key components demonstrated not only that SABOR was feasible, but that its applicability is not limited to a single system, and that the it may be used to recover from failures in general, and not only failures caused by a cyber attack. In this Phase II SBIR proposal, we submit plans to further develop the reconstitution technology explored in Phase I, and to extend the scope to include: detection of a system-wide failure in a running system, application of the SABOR technology to WCI-CND in a demonstration environment, and development of a plan for the future deployment of the SABOR technology to the fielded WCI-CND application.