You are here

Secure Virtual Environment for Cyber Resiliency Validation

Award Information
Agency: Department of Defense
Branch: Missile Defense Agency
Contract: HQ0860-20-C-7071
Agency Tracking Number: B19C-004-0037
Amount: $124,937.00
Phase: Phase I
Program: STTR
Solicitation Topic Code: MDA19-T004
Solicitation Number: 19.C
Timeline
Solicitation Year: 2019
Award Year: 2020
Award Start Date (Proposal Award Date): 2020-04-06
Award End Date (Contract End Date): 2021-10-05
Small Business Information
4240 BALMORAL DR SW STE 300
Huntsville, AL 35801
United States
DUNS: 081310242
HUBZone Owned: No
Woman Owned: No
Socially and Economically Disadvantaged: No
Principal Investigator
 David Jarmon
 Director, Cybersecurity Engineering
 (256) 677-1465
 david.jarmon@grayanalytics.com
Business Contact
 Hunter Vaughn
Phone: (615) 364-8431
Email: hunter.vaughn@grayanalytics.com
Research Institution
 Oak Ridge National Lab
 James Nutaro James Nutaro
 
P.O. Box 2008
Oak Ridge, TN 37831
United States

 (865) 241-1587
 Federally Funded R&D Center (FFRDC)
Abstract

The most direct way to meet the technical objectives for the Secure Virtual Environment (SVE) for Cyber Resiliency Validation would be to replicate the missile defense system’s tactical hardware, software, and network. However, this is cost prohibitive due to the amount of hardware procurement required for the Cyber test environment. Luckily, with the exception of supply chain threats, firmware, and SATCOM jamming/spoofing threats the majority of cyber vulnerabilities that require testing are in the operating systems, software applications, and network configurations as opposed to the physical hardware. As a result, a cyber environment that provides simulated hardware and network devices hosting tactical operating systems, software application, and network configurations is the most cost-effective approach to meet the technical objectives for the SVE for Cyber Resiliency Validation. Gray Analytics shall architect a proof-of-concept architecture for a fully automated SVE incorporating DoD Enterprise DevSecOps Reference Design and the DoD CIO cloud strategy in conjunction with the hardware virtualization work from Oak Ridge National Labs on previous efforts. This Continuous Integration/Continuous Deployment (CI/CD) pipeline architecture is capable of rapidly creating cyber test environments by using virtual emulations of missile defense systems and will include automated cyber resiliency validation regression testing and analysis capabilities. Approved for Public Release | 20-MDA-10398 (2 Mar 20)

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government