Computer Network Defense Technologies

Irvine Sensors Corporation (ISC) together with North Carolina State University propose to develop a novel methodology using advance hardware stacking techniques to detect, mitigate, and track insider threats. Information gathered using this new methodology allows for tracking of insider threats across multiple system architectures that use Variable Message Formats (VMF) into a reconfigurable device. Accurate detection of insider threats is performed by the tracking all VMF used internal to the MDA architecture. Such activity involves the tracking of U.S. and allied network traffic "fused together" (within our device) to gain an understanding of traffic behavior during normal, active, and maintenance windows. This activity occurs off-line as to not affect the operations of the real-time network. Anomaly detection together with traditional signature detection work simultaneously to mitigate the risk of "false positives" and to ensure needed bandwidth when such threats arise. This new proposed methodology allows for human intervention on required threat assessments without creating information overload. Novel "statefull inspection" algorithms from North Carolina State University are to be implemented to protect forensic data from malicios tampering.