SBIR Phase I: Dynamically Assessing Network Security Policy Compliance with NP-Live

SBIR 第一阶段：使用 NP-Live 动态评估网络安全策略合规性

• 批准号: 1416490
• 负责人: Robin Berthier
• 金额: $ 15万
• 依托单位: Network Perception, Inc.
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2014
• 资助国家: 美国
• 起止时间: 2014-07-01 至 2015-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1416490&HistoricalAwards=false
• 关键词: SBIR; Phase; Dynamically; Assessing; Network

The broader impact/commercial potential of this Small Business Innovation Research (SBIR) Phase I project results from its potential to significantly strengthen the ability of network operators and security administrators to implement the correct set of rules to keep critical assets out of reach of cyber adversaries. The power grid has been said to be the most important engineering achievement of humankind. Modern civilization depends on electricity at such an intrinsic level that we cannot imagine a world without it. In fact, disruptions of power infrastructures quickly lead to chaotic situations in which human lives are at risk. Now that power grid control centers are relying on IT infrastructures, it has become of the utmost importance to ensure the resiliency of systems and networks through methodical IT security protection, monitoring, and response. Through automated continuous verification technologies, this project has a direct impact on the capabilities of our nation to improve its resiliency. The benefits to the power industry, to computer science security, and for society at large are realized through a technological advance that will improve the security of our most important resources.This Small Business Innovation Research (SBIR) Phase I project plans to develop a constructive approach to providing network security. Cyber security tools are often driven by the necessity to respond to market demand without having the time and resources to develop the proper formalisms and algorithms to solve long-term issues. The innovation proposed here is uniquely positioned to change this paradigm thanks to having roots in both a fundamental academic background and an extensive collaboration with industry partners. Consequently, this project responds to critical customer needs while providing innovations in science, technology, and engineering of critical infrastructure security. The approach the company is taking to compliance assessment has been evaluated in the field and provides a basis for new research leading to theoretically sound solutions to network security modeling, and further development of innovative and provably correct algorithms and tools for accurate and scalable cyber security assessment under real industry constraints.

这个小企业创新研究（SBIR）第一阶段项目的更广泛的影响/商业潜力源于它的潜力，它可以显著增强网络运营商和安全管理员实施正确规则集的能力，使关键资产远离网络对手。电网被认为是人类最重要的工程成就。现代文明在本质上如此依赖电，以至于我们无法想象一个没有电的世界。事实上，电力基础设施的中断会迅速导致混乱局面，危及人类生命。在电网控制中心依赖于IT基础设施的今天，通过系统的IT安全保护、监控和响应，确保系统和网络的弹性变得至关重要。通过自动化的连续验证技术，该项目对我们国家提高其弹性的能力有直接的影响。对电力工业、计算机科学安全以及整个社会的好处是通过技术进步来实现的，这将提高我们最重要资源的安全性。这个小企业创新研究（SBIR）第一阶段项目计划开发一种提供网络安全的建设性方法。网络安全工具往往是由响应市场需求的必要性驱动的，而没有时间和资源来开发适当的形式和算法来解决长期问题。这里提出的创新具有独特的定位，可以改变这种模式，这要归功于其基础学术背景和与行业合作伙伴的广泛合作。因此，该项目在提供科学、技术和关键基础设施安全工程方面的创新的同时，响应关键客户的需求。该公司采用的合规性评估方法已在该领域进行了评估，并为新的研究提供了基础，从而为网络安全建模提供理论上合理的解决方案，并进一步开发创新且可证明正确的算法和工具，以便在实际行业约束下进行准确和可扩展的网络安全评估。