ORGANICALLY ASSURED

1
ORGANICALLY ASSURED SURVIVABLEINFORMATION
SYSEMSPRINCIPAL INVESTIGATORS MEETING

• Santa Fe, NM
• 24 July 2001
• Jaynarayan H. LalaProgram MangerAdvanced
  Technology Office

2
TOPICS

• Workshop on Survivability Validation
• Workshop on OASIS Technology Integration
• DARPA News
• International Conf on Dependable Systems
  Networks
• Invited Speaker Thursday AM

3
Survivability Validation

• A survivability validation framework that can be
  used by all OASIS projects has been created by
  Mitre with assistance from Mitretek/IDA.
• A pilot project begun with four OASIS
  participants to test-drive and refine the
  framework
• BBN / Univ. of Illinois-UC
• Carnegie Mellon Univ.
• Draper Lab.
• Princeton / Yale
• Results will be presented at the workshop.

4
Survivability Validation

• Workshop goals
• to illustrate the framework to all PIs via four
  worked-out examples
• to complete its definition and refinement.
• We need a usable framework, but not necessarily a
  perfect one
• A good organization is useful
• but contents of the framework, to be produced by
  you, are even more important

5
OASIS Technology Integration

• Most OASIS projects will be completing in the
  next 12 18 months.
• By conclusion of this phase of OASIS, we should
  know the following relationships
• mechanisms / means to use
• to counter impairments (attacks and
  vulnerabilities)
• for resources and domain of application (e.g.,
  clients, servers, middleware, databases, storage,
  building software, etc.)
• so as to maintain the desired security attributes
  (confidentiality, integrity, authentication,
  availability, and non-repudiation) and achieve
  system functional goals (e.g., control ship,
  launch missile, provide situation awareness,
  etc.)

6
Proof Carrying CodeValidation Matrix
7
Intrusion Tolerance byUnpredictable Adaptation
8
IT by Masking, Redundancy and Dispersion
9
Integration Questions

• Whats the value added by integrating OASIS
  technologies?
• And how much effort would be needed?
• What are the DARPA-hard challenges in integrating
  multiple defense layers provided by OASIS
  technologies?
• What would constitute a compelling demo?

10
Integration Questions

• Is there any constructive (or destructive)
  synergism between technologies?
• Can a combination of mechanisms show non-linear
  improvement in survivability attributes?
• If yes, how and how much?
• Given a logical OR of all TAVs, what would a
  notional integrated Intrusion Tolerant System
  architecture that counters them look like?
• Think what would be required just to counter Code
  Red?

11
Integration Questions

• What technology integrations would help expedite
  technology transition to the military?
• Can integration efforts reveal technology gaps?
  How?

12
DARPA News

• Survivable Global Information Grid
• Phase 0 study (led my Mitretek with Mitre, IDA,
  NRL, AFRL, SSC) has been completed.
• Considerations in Developing Survivable
  Architectures for Global Information Grid
  Systems
• Report undergoing limited distribution C
  release Govt Agencies and their contractors
• ATO management cancelled SGIG Phase 1
• ATO management preference is for program-specific
  (Cyber Panel, OASIS, FTN) integration /
  demonstration efforts

13
DARPA News

• IA S Program Restructuring (continued)
• Survivable Wired and Wireless Information Systems
  for military (SWIMM) program was merged into
  Fault Tolerant Networks (FTN) program in June
  2001.
• Dr. Tony Tether appointed DARPA director
• An agency-wide reorganization is expected soon.

14
DSN 2002

• International Conf on Dependable Systems and
  Networks, June 23rd 26th , 2002, Washington, DC
• Multiple tracks and workshops
• Main Track Dependable Computing and
  Communications (DCC)
• International Performance Dependability
  Symposium
• Workshops on
• Intrusion Tolerant Systems
• Dependability Benchmarking
• Dependability of e-commerce Systems
• Call for Contributions www.dsn.org

15
DSN 2002

• General Chair yours truly
• DCC Track Co-Chair Farnam Jahanian
• Publications Chair Tiffany Frazier
• Publicity Chair Anup Ghosh
• Tutorial Chair Victoria Stravidou
• Fast Abstracts Chair Dave Bakken
• Local Arrangements Chair Yair Amir
• Intrusion Tolerant Systems Workshop Chair Carl
  Landwehr
• Steering Committee Chair Bill Sanders
• Several members of Program Committees for various
  tracks and workshops