CIM-MIAS (Cyber Information Management and Mission Impact Analysis System)

The DoD lacks an multi-level security (MLS) cyber information management (CIM) system capable of collecting, sharing and disseminating cyber information containing threats, system vulnerabilities and mission impacts and risks for systems operating at multiple security levels. A system that can securely collect and persist this information from various systems operating at various security levels is needed. The system should persist data at the correct security level based on the system from which collected and ensure that no access or dissemination occurs to an agent without proper clearance and need-to-know. An MLS CIM system with these capabilities is urgently needed to enable weapon system stakeholders at all levels (e.g., cyber analyst, operator, sustainment program office, senior leader) to collaboratively address cyber protection and mitigation based on cyber indicators occurring across the enterprise. The proposed solution provides an MLS CIM that uses big data object store for persisting raw cyber events, a permissioned private blockchain for data integrity, and a graph database for analyzing trends, patterns, discontinuities and relations in the cyber information. The solution provides an adaptive process manager and workbench to assist stakeholder in resolving cyber issues. The solution ensures confidentiality, integrity, and availability of the data.