An Architecture For PSAP Data Analysis, Alerting, and Cyber Security

The U.S. relies heavily on 911 to handle emergencies and provide rapid response. The system includes over 5,000 PSAPs using technologies ranging from legacy TDM to advanced NG911 systems with VoIP/SIP. However, 911 frequently experiences outages caused by errors, technology failures, and cyberattacks, including service provider issues, vendor-related disruptions, and broad threats like TDoS. Currently, no standardized, affordable, automated solution exists to alert and report such issues. A proper solution is needed to collect critical metadata, facilitate sharing between PSAPs and ESInets, centralize storage and analysis, ensure privacy, detect anomalies and attacks, and deliver tailored reporting. SecureLogix and Texas A&M University are collaborating on an SBIR project to address these challenges. With a strong history of DHS-supported research in 911 and public safety, we propose a comprehensive solution aligned with solicitation goals. This Phase I project will develop a requirements and design document detailing key aspects: data collection, secure transmission, aggregation, privacy protection, cyberattack detection, reporting and visualization, AI/ML data sharing, and testing methods. Our analysis will leverage proven solutions and prototypes from prior projects, supported by our testbed and call generation capabilities. The resulting solution will be scalable, standardized, and deployable across the 911 networks.