Agent-based Knowledge-design Assistant (AKA) Technology for Computer Network Defense (CND)

The proposed technology will provide runtime knowledge management and discovery for Computer Network Defense (CND) and other applications. Proposed innovations entail a convergence of research developments now in progress: the Work-Centered Interface Computer Network Defense (WCI-CND) and the Agent-based Knowledge-design Assistant (AKA). The WCI-CND is a multi-agent knowledge system for dynamic decision support. The AKA is an interactive environment for building distributed, heterogeneous multi-agent knowledge resources. The proposed technology, called AKA-CND, focuses on three principal capabilities, leading to three innovative technologies. These are the Correlation Manager, the Decision Support Knowledge Builder (DSKB), and the Active Response Console (ARC). These applications will enable CND managers to perform runtime knowledge discovery in the CND environment, to control decision analysis processes, and to manage automated and semi-automated system response to cyber-attack. Innovations include the ability to manage distributed knowledge resources without disrupting ongoing processes, provisioning of high-end usability for integration of knowledge resource management with operational processes, development of comprehensive ontologies in support of human-computer knowledge sharing, and encodification of symbolic processes for automated decision management. CND managers need adaptive systems to respond effectively to dynamic, complex, and adversarial conditions. The AKA-CND will provide the necessary innovation to give CND managers this capability.