You are here

Cybersecurity Assessment and Risk Enumeration for Systems (CARES)

Award Information
Agency: Department of Defense
Branch: Navy
Contract: N68335-18-C-0655
Agency Tracking Number: N181-043-0144
Amount: $124,963.00
Phase: Phase I
Program: SBIR
Solicitation Topic Code: N181-043
Solicitation Number: 18.1
Timeline
Solicitation Year: 2018
Award Year: 2018
Award Start Date (Proposal Award Date): 2018-06-20
Award End Date (Contract End Date): 2019-10-23
Small Business Information
625 Mount Auburn Street
Cambridge, MA 02138
United States
DUNS: 115243701
HUBZone Owned: No
Woman Owned: No
Socially and Economically Disadvantaged: No
Principal Investigator
 Mr. Daniel Mitchell Mr. Daniel Mitchell
 Software Engineer
 (617) 491-3474
 dmitchell@cra.com
Business Contact
 Yvonne Fuller
Phone: (617) 491-3474
Email: yfuller@cra.com
Research Institution
N/A
Abstract

While the resilience of Navy systems to cyber attacks is critically important, cybersecurity is still frequently bolted-on to deployed systems and is rarely built-in during the early design stages. Bolted-on security is costly and not as effective as building it in from the start. Current approaches for assessing security during the design stage tend to be manual, which is slow, expensive, and can also lead to conflicting recommendations. Tools in this space often provide qualitative results and struggle with a lack of detailed information that is often not available during the system design stage. Cybersecurity Assessment and Risk Enumeration for Systems (CARES) will provide a means for modeling systems during the early design stages. It will use systemic functional grammars to provide an expressive, scalable enumeration of the entire attack space. It will automatically produce a quantitative list of security vulnerabilities for the target system and provide a list of consistent recommendations for remediating the vulnerabilities, while taking into account the other needs of the system and designers, such as performance and cost.

* Information listed above is at the time of submission. *

US Flag An Official Website of the United States Government