DEVLEOPMENT OF A SOFTWARE TOOL TO STREAMLINE CYBER DEVELOPMENTAL TEST AND EVALUATION

This proposal describes a novel, standalone, portable web service that will streamline cyber test and evaluation efforts for the Department of the Air Force. A prototype of the application, codenamed Sentry, is currently used by the PNT SE&I cyber test team to manage cyber test activities. Sentry allows for more efficient STIG evaluations, better data management and consolidation, and advanced dashboarding during contractor verification testing, security controls assessments, and penetration tests. We are proposing additional capabilities to include threat modeling and integrations with leading cybersecurity solutions such as Splunk and Elastic. Threat modeling will allow data from cyber assessments to inform real-world risk. Integrations with SIEM solutions will allow real-time identification of mitigations and fix actions from the collected data. A finalized sentry application will enable efficient, effective, and precise information systems tests and will reinforce information resiliency for the Department of the Air Force.