Cognitive Modeling for Cyber Defense Navy SBIR FY2013.2 Sol No.: Navy SBIR FY2013.2 Topic No.: N132-132 Topic Title: Cognitive Modeling for Cyber Defense Proposal No.: N132-132-1105 Firm: SA Technologies, Inc. 3750 Palladian Village Drive Building 600 Marietta, Georgia 30066 Contact: Laura Strater Phone: (770) 790-5420 Web Site: www.satechnologies.com Abstract: The Cyber battlespace is extraordinarily dynamic, complex and challenging, with both human and automated adversaries (bots) acting alone and in concert to achieve the desired aims. Before Cyber defenders can act to guard against these attacks, they must first achieve and maintain a level of Situation Awareness (SA) that allows them to identify, understand, and anticipate evolving threats so they can implement strategies to defeat them. Cognitive modeling of Cyberspace SA can assist the Cyber defender in risk monitoring and mitigating activities, supporting an understanding of the effects of attacks on their own Cyber systems, along with the projected evolution of Cyber events and their impacts, and finally executing the proper decisions that are required to disrupt or defeat attacks. The cognitive modeling system proposed will support Cyber defenders in recognizing, characterizing, and responding to threats. CyberFACE uses fuzzy logic based cognitive modeling coupled with a learning-enabled neural network, to produce a cognitive engine built upon the knowledge representation structure of domain experts. Diagnostic outputs comprise recommended actions, targeted to the specific network, as well as the current threat posed by the most likely threat profile identified. Benefits: There are many benefits for CyberFACE to be adopted across DoD and other Federal agencies and commercial entities. With the explosion in Cyber threats that lead to a demand for improved Cyber tools, we expect CyberFACE to have a large potential market base, as the Cyberspace market segment alone is massive. A tool like CyberFACE that helps operators appropriately identify and respond to Cyber threats is critical in light of the massive volume of data involved in evaluating Cyber risk. CyberFACE will be applicable to any number of complex networked operational environments where operators must monitor the status and security of these networks and the data they provide. Our emphasis on developing enhanced Cyberspace capabilities strengthens the transition potential for CyberFACE even in a tight budget environment. Our initial objective is to commercialize CyberFACE either with the US Navy Cyber Forces (CYBERFOR) or in partnership with a government prime contractor. Beyond DoD, there is significant demand for Cyber tools. The oil and gas distribution industry and the transportation industry are two prominent non-military domains that can benefit from CyberFACE. Return