Threat Intelligence Platform for Cyber Planners and Cyber Analysts

In 2021, ransomware attacks increased by 1,885% against governments worldwide. State sponsored cyber criminals are actively and perpetually scanning and probing to discover vulnerabilities and to gain access to networks in order to cripple critical infrastructure points, risking our national security and that of our allies. Russia and China continually execute sophisticated surveillance and sabotage of critical infrastructure, ransom data, and perpetuate disinformation schemes. Iranian cyber criminals were linked to a cyber-sabotage of Israeli water supplies. Continuing cyber-attacks by the governments of China, Russia, Iran, North Korea, and others are notoriously difficult to trace to a sponsoring government, partly because no digital trail may link the perpetrators to their sponsors. Days and weeks are spent determining if any of the new threat information learned has already compromised the customers’ network. COSMO is innovative as it not only consolidates all threat intelligence platforms while placing historical data into a central repository, but it also uses predictive analysis to determine if there are potential attacks against a network and provides the cyber professional with daily reports of potential threat campaigns to take action on. COSMO supports the warfighter by better preparing the cyber professional to keep systems safe, secure, and running without downtime due to cyber-attacks. The impact of adapting Cypher’s COSMO for DAF and DoD use will be increased readiness at reduced cost.