Visual Representation of Cyber Defense Situational

Applied Visions, Inc. (AVI) proposes to develop visualization aids to enhance the situational awareness of information assurance analysts regarding: 1) temporal changes in cyber security events, and 2) the impact of cyber security events (e.g. probes,intrusions) on mission-critical tasks (e.g. ATO generation; preparation of Mission Situation Reports). The visualization aids will operate on a Windows NT platform, and will be installed in the Technology Integration Center (TIC) or at anotherDARPA-selected facility. The designs of the visualization scenes will be based on those developed and prototyped in Phase I. Enhancements and extensions to those designs will be made based on feedback received from potential users of the displays. Tosupport the implementation of mission impact displays, AVI will coordinate its work with those cognizant researchers who are developing mission models and mission dependency databases for DARPA and DISA. AVI will recommend data fields to be added to themission model databases for use with the visualizations as well as other data mining tasks. AVI proposes to drive the content of the mission impact displays with data supplied by one of the mission model databases developed by DARPA or DISA.