Vivid Clarity

Cryptic Vector, in partnership with Riverside Research, offers the Vivid Clarity solution to meet the cyber defense visualization and assessment problem described by the RC-Vis program. Vivid Clarity ingests descriptions of networks and vulnerability information, transforms this to an intermediate semantic representation, analyzes it for layered vulnerability risk, and then automatically generates customized visualizations of an overall network defensive posture based on a desired level of detail. Vivid Clarity represents an evolution in the consolidation of vulnerability and network information enabling rapid visualizations of potential issues by making use of sophisticated reasoning over a network representation schema. Proven, existing capabilities provide the core of Vivid Clarity, leveraging the Vivid Eagle network planning and visualization tool and the LAVA Capability Graph and Path Analysis Model. Vivid Clarity connects and extends these tools to define, describe, and display an IT System using a semantic language and user-friendly and customizable visualization platform. Application of Vivid Clarity to a target network will provide unique insight into the defensive posture of the network, visualizing the effectiveness of each layer of security in a way that is consumable by users of varying technical expertise. Vivid Eagle is the current standard for network visualization for USCYBERCOMMAND and provides the platform to define and input network and vulnerability data into Vivid Clarity. It also generates easy-to-consume visualizations customized for audiences with different skills and needs, from IT security personnel to C Suite business decision makers. LAVA charts interactions between components of the system, applying conditioned path analysis to gain insights into potential vulnerabilities and the effectiveness of existing security measures. Reachability analysis done in the model connects each layer of organizational security, identifying how and where the system defends against any specific vulnerability.