Intelligent Cyber Threat Operational Planner for Under Sea (iCTOPUS)

While cyber operations have become an increasingly effective weapon to undermine the capability of net-centric systems, including those deployed in Theater Undersea Warfare (USW), cybersecurity has not traditionally been a part of Theater USW mission planning, execution, or post-mission analysis. The environments in which undersea platforms operate make them more susceptible to cyber-attacks while simultaneously making it more difficult to detect such attacks. There exists an urgent need to assess system-of-systems vulnerabilities of networked USW platforms and mitigate the impact of cyber-attacks from multiple, diverse, and coordinated sources. We propose the Intelligent Cyber Threat Operational Planner for Under Sea (iCTOPUS), a system which will integrate a high fidelity emulated network that incorporates environmental factors simulated cyberspace attacks and defenses modeling of the impact of environmental conditions on message transmissions live data feeds logging and measurement into a fully instrumented synthetic cybersecurity assessment system for Theater USW mission planning, execution and post-mission analysis. iCTOPUS will support mission planning by simulating scenarios which incorporate in-situ environmental data, live platform positions, and actual intelligence and data from networked sensors. The faster than real-time simulations can be used to compare and evaluate multiple Courses of Action (COAs) with varying routes and search areas in light of evolving meteorological and oceanographic data, spectrum management, network performance, connectivity, and susceptibility to cyber-attacks. iCTOPUS will support mission execution by running on the Consolidated Afloat Networks and Enterprise Services (CANES) and integrating with Undersea Warfare Decision Support System (USW-DSS) for the Sea Combat Commander and Theater USW Commander (TUSWC). In this mode, it will ingest live data feeds and support real-time assessments by human operators of ongoing operations in the theater. iCTOPUS will support post-mission analysis by incorporating potential cyber activities into the current post-mission analysis construct to analyze and enhance communications and network-related resilience for future operation. In this mode, it will run at least 4X faster than real-time. iCTOPUS will use high fidelity models to create a digital twin to represent the entire network, the various protocol layers, including the application and physical layers, and devices. The digital twin will accurately model the communication pathways and the effect of environmental factors on the communication between geographically distributed sensors and platforms. iCTOPUS will provide a zero-risk, realistic environment in which the impacts of a diverse set of cyber-attacks can be assessed without compromising the real system, and will also reduce efforts to provide Objective Quality Evidence (OQE) for theater cybersecurity resiliency in operational environments.