Protection Analysis Work Stations (PAWS)

Sentar, teamed with The Boeing Corporation and SYColeman is developing a Situation Awareness System for GMD Security Management. The Situation Awareness System is being developed to provide real-time monitoring and decision support to the security manager. What it does not address is the off-line analysis of attacks/threats and the development of plans and guidelines for dealing with them. Sentar proposes the development of a Protection Analysis Work Stations (PAWS) complement the Situation Awareness System that PAWS will be an off-line capability which can be isolated yet interfaced indirectly, via off-line file transfers, to the Situation Awareness System as well as other systems. The inputs to PAWS will consist of existing plans and guidelines for system protection along with a variety of data, information and knowledge on cyber threats, sensor responses, analysis results, and system behavior. The PAWS will perform a variety of analysis on all the inputs, including forensics to determine threats, attack patterns, criticalities, validity of current response plans and guidelines. The output of PAWS will be updates to security plans and cyber threat evaluation and response guidelines. Thus, in conjunction with the Situation Awareness System, the PAWS will provide for continuous evaluation of responses to cyber threats.