Researchers Create Next-Generation Software Aimed At Defending Cyber Attack

Researchers at George Mason University’s Center for Secure Information Systems have developed new software that can reduce the impact of cyber attacks by identifying the possible vulnerability paths through an organization’s networks.

By their very nature networks are highly interdependent and each machine’s overall susceptibility to attack depends on the vulnerabilities of the other machines in the network. Attackers can take advantage of multiple vulnerabilities in unexpected ways, allowing them to incrementally penetrate a network and compromise critical systems. In order to protect an organization’s networks, it is necessary to understand not only individual system vulnerabilities, but also their interdependencies.

“Currently, network administrators must rely on labor-intensive processes for tracking network configurations and vulnerabilities, which requires a great deal of expertise and is error prone because of the complexity, volume and frequent changes in security data and network configurations,” says Sushil Jajodia, university professor and director of the Center for Secure Information Systems. “This new software is an automated tool that can analyze and visualize vulnerabilities and attack paths, encouraging ‘what-if analysis’.”

The software developed at Mason, CAULDRON, allows for the transformation of raw security data into roadmaps that allow users to proactively prepare for attacks, manage vulnerability risks and have real-time situational awareness. CAULDRON provides informed risk analysis, analyzes vulnerability dependencies and shows all possible attack paths into a network. In this way, it accounts for sophisticated attack strategies that may penetrate an organization’s layered defenses.

CAULDRON’s intelligent analysis engine reasons through attack dependencies, producing a map of all vulnerability paths that are then organized as an attack graph that conveys the impact of combined vulnerabilities on overall security. To manage attack graph complexity, CAULDRON includes hierarchical graph visualizations with high-level overviews and detail drilldown, allowing users to navigate into a selected part of the big picture to get more information.

“One example of this software in use is at the Federal Aviation Administration. They recently installed CAULDRON in their Cyber Security Incident Response Center and it is helping them prioritize security problems, reveal unseen attack paths and protect across large numbers of attack paths,” says Jajodia. “While currently being used by the FAA and defense community, the software is applicable in almost any industry or organization with a network and resources they want to keep protected, such as banking or education.”

Funding for this software development was provided by the defense, homeland security and intelligence communities and the FAA. Researchers in the Center for Secure Information Systems involved in the software development include Jajodia; Steven Noel, associate director; and Pramod Kalapa, senior research scientist. Five patents are currently pending on the CAULDRON software.

Watch more breaking news now on our video feed:



Bookmark http://universeeverything.blogspot.com/ and drop back in sometime.

Researchers Team with Airline to Pinpoint Turbulence in Clouds;

A new turbulence detection system now being tested is alerting pilots to patches of rough air as they fly through clouds. The system, designed by the National Center for Atmospheric Research (NCAR) and tested by United Airlines on commercial flights, is designed to better protect passengers from injuries caused by turbulence while reducing flight delays and lowering aviation costs.

The new system uses a mathematical method developed by NCAR scientists, known as the NEXRAD Turbulence Detection Algorithm, or NTDA, to analyze data obtained from the National Weather Service's network of Next-Generation (NEXRAD) Doppler radars. The resulting real-time snapshot of turbulence can be transmitted to pilots in the cockpit and made available to airline meteorologists and dispatchers via a Web-based display.

The research is funded by the Federal Aviation Administration (FAA) in partnership with the National Science Foundation, NCAR's primary sponsor.

"Pinpointing turbulence in clouds and thunderstorms is a major scientific challenge," says NCAR scientist John Williams. "Our goal is to use these radar measurements to create a three-dimensional mosaic showing turbulence across the country that can help pilots avoid hazardous areas, or at least give them enough warning to turn on the 'fasten seat belt' sign."

The NTDA is being tested until October by a group of United Airlines pilots who fly routes east of the Rockies. The pilots, who receive information in their cockpits about turbulence detected ahead, report that the system provides them with accurate information about turbulence that is not available from any other source.

"The messages I've received in the cockpit gave a very accurate picture of turbulence location and intensity," says Captain Rocky Stone, chief technical pilot for United Airlines. "The depiction of turbulence intensity provides an unprecedented and extremely valuable new tool for pilot situational awareness."

Depending on the results of this year's tests, the next step may be to expand the system to additional United aircraft or other airlines. Williams anticipates that, by 2011, the NTDA will provide input to a system over the contiguous United States that will update comprehensive turbulence "nowcasts" for pilots and air traffic managers every 15 minutes.

Watch more breaking news now on our video feed:

Bookmark http://universeeverything.blogspot.com/ and drop back in sometime.

Variables Remain For Introduction of Very Light Jets, Gov't Auditors Find

For several years, a number of aviation manufacturers have been designing and testing very light jets, a type of small jet aircraft equipped with advanced technologies and priced below other business jets. Aviation forecasters predict that thousands of very light jets will enter the National Airspace System (NAS) over the next two decades, contributing to the overall growth of the general aviation fleet, according to a recent report by the Government Accountability Office (GAO) report.

GAO is the nonpartisan investigative arm of Congress.

While some experts predict that very light jets will be used in ways that are similar to current general aviation aircraft, others predict that they will be used to expand the air taxi market to provide on-demand, point-to-point air transportation, GAO says.

In 2006, the Federal Aviation Administration (FAA) certified the first very light jets for flight.

"The impact of very light jets on FAA’s costs and Trust Fund revenues will depend on factors such as the number of very light jets deployed, the extent to which they replace existing aircraft, and whether they facilitate a large-scale air taxi industry," the GAO report says. "The Congress is considering legislation that could affect how very light jets are taxed but, as with the current funding structure, there is too much uncertainty about very light jets to accurately compare the revenue effects of these proposed alternative funding structures."

Watch breaking news now on our video feed:

Bookmark http://universeeverything.blogspot.com/ and drop back in sometime.