Cognitive Modeling for Cyber Defense Navy SBIR FY2013.2 Sol No.: Navy SBIR FY2013.2 Topic No.: N132-132 Topic Title: Cognitive Modeling for Cyber Defense Proposal No.: N132-132-0233 Firm: Soar Technology, Inc. 3600 Green Court Suite 600 Ann Arbor, Michigan 48105-2588 Contact: Van Dyke Phone: (734) 887-7643 Web Site: www.soartech.com Abstract: SC2RAM ( Simulated Cognitive Cyber Red-team Attacker Model) is a cyber red-team-in-a-box that enables proactive response to cyber-attacks by developing a deeper understanding of the cognitive behavior of the players in the cyber-ecology (attackers, users, and defenders), embedding this understanding in a computational model, and translating it to tools that can help detect and respond to unfolding attacks. SC2RAM can be used to test a system configuration, train Information Assurance staff, and develop configurations for defensive automation systems. The SC2RAM team combines SoarTech's world-class cognitive modeling platform and experience with IHMC's recognized leadership in understanding the human and cognitive side of cyber-defense, and has already begun assembling a transition team, including the Michigan Cyber Range, AFRL's Human Effectiveness Directorate, and TIBCO, a commercial software tools vendor. Benefits:  Dynamic emulation of strategic attacks (those that are directed by human attackers and that unfold over a period of days or longer)  Lower-cost exploitation of cyber-range by providing semi-automated red-teaming for quantitative system evaluation, risk assessment, and training  Methodological and technical foundation for development of other cyber roles (defender, user)  An application environment that can be extended to provide a multi-purpose environment for test, evaluation, and LVC simulation in cyber-ranges  Enabler for configuration of automated defensive capabilities, demonstrated through an es-tablished industrial-strength toolset (the TIBCO Information Bus and Complex-Event Pro-cessing COTS software offerings) Return