Cyber Grammar Representations for Attack Meta-Monitoring including Analysis and Response (CyGRAMMAR)

Fighting through in-flight cyber attacks requires quickly observing and analyzing the attack, then deploying effective mitigations. Recent advances in avionics design are producing systems with many cyber monitors, but they lack a sophisticated mechanism for fusing and acting upon the monitor results. We will adapt our new Odineye™ commercial product to produce an innovative Cyber Meta-Monitor™ product. Odineye applies advanced grammars from linguistics to create more rigorous and scalable attack trees, and uses them for cyber threat analysis and mitigation planning for cyber tabletop exercises. Based on highly promising results from demonstrations for the Air Force, Charles River Analytics proposes a Direct to Phase II effort, Cyber Grammar Representations for Attack Meta-Monitoring, including Analysis and Response (CyGRAMMAR), to adapt Odineye for real-time, in-flight analysis of system-wide monitor alerts and mitigation planning to achieve unprecedented cyber resilience. We will demonstrate and evaluate the Cyber Meta-Monitor through integration with monitor-rich avionics. We will first create a rapid prototype to integrate the Cyber Meta-Monitor with an AFRL UxAS system, and then integrate the Cyber Meta-Monitor with heavily monitored avionics being developing for the CH-47 helicopter.