Computer Network Operations (CNO)

The evolution of the Ballistic Missile Defense System (BMDS) introduces new external components, such as Aegis as an external sensor/interceptor, into what was traditionally a closed loop system. While these additional elements will expand and improve the capabilities of the BMDS, they also introduce significant new Computer Network Operations (CNO) concerns. The integration of these elements introduces avenues for network-based attacks that may seek to disrupt, deny, degrade, or destroy information, computer systems, and communications networks. Improved methods are needed that can provide protection from these attacks. Torch Technologies will examine the feasibility of integrating Adaptive Concept Understanding from Modeled Enterprise Networks (ACUMEN) technology into agent-based intrusion detection (ID) systems. Through adaptive, multidimensional statistical modeling of network traffic within the system, ACUMEN-capable ID systems will both increase the detection rates of internal and external malicious activity and decrease false positives. ACUMEN, based on an adaptive neural system, is a technology that can refine the system model as data is received. Feasibility analysis will focus on distributed ACUMEN-capable ID agents that tap network communications at multiple points. Sensitivity to latency is effectively mitigated through the use of passive optical taps.