1. OASI S ORGANICALLY ASSURED & SURVIVABLE INFORMATION SYSEMS PRINCIPAL INVESTIGATORS’ MEETING Santa Fe, NM 24 July 2001 Jaynarayan H. Lala Program Manger Advanced Technology Office

2. OASI S TOPICS Workshop on Survivability Validation Workshop on OASIS Technology Integration DARPA News International Conf on Dependable Systems & Networks Invited Speaker – Thursday AM

3. OASI S Survivability Validation A survivability validation framework that can be used by all OASIS projects has been created by Mitre with assistance from Mitretek/IDA. A pilot project begun with four OASIS participants to test-drive and refine the framework: –BBN / Univ. of Illinois-UC –Carnegie Mellon Univ. –Draper Lab. –Princeton / Yale Results will be presented at the workshop.

4. OASI S Survivability Validation Workshop goals: –to illustrate the framework to all PIs via four worked- out examples –to complete its definition and refinement. We need a usable framework, but not necessarily a perfect one –A good organization is useful –but contents of the framework, to be produced by you, are even more important

5. OASI S OASIS Technology Integration Most OASIS projects will be completing in the next 12 – 18 months. By conclusion of this phase of OASIS, we should know the following relationships –mechanisms / means to use –to counter impairments (attacks and vulnerabilities) –for resources and domain of application (e.g., clients, servers, middleware, databases, storage, building software, etc.) –so as to maintain the desired security attributes (confidentiality, integrity, authentication, availability, and non-repudiation) and achieve system functional goals (e.g., control ship, launch missile, provide situation awareness, etc.)

6. OASI S Proof Carrying Code Validation Matrix

7. OASI S Intrusion Tolerance by Unpredictable Adaptation

8. OASI S IT by Masking, Redundancy and Dispersion

9. OASI S Integration Questions What’s the value added by integrating OASIS technologies? –And how much effort would be needed? What are the DARPA-hard challenges in integrating multiple defense layers provided by OASIS technologies? What would constitute a compelling demo?

10. OASI S Integration Questions Is there any constructive (or destructive) synergism between technologies? –Can a combination of mechanisms show non-linear improvement in survivability attributes? –If yes, how and how much? Given a logical OR of all TAVs, what would a notional integrated Intrusion Tolerant System architecture that counters them look like? –Think what would be required just to counter Code Red?

11. OASI S Integration Questions What technology integrations would help expedite technology transition to the military? Can integration efforts reveal technology gaps? How?

12. OASI S DARPA News Survivable Global Information Grid –Phase 0 study (led my Mitretek with Mitre, IDA, NRL, AFRL, SSC) has been completed. “Considerations in Developing Survivable Architectures for Global Information Grid Systems” –Report undergoing “limited distribution C” release – Govt Agencies and their contractors –ATO management cancelled SGIG Phase 1 –ATO management preference is for program-specific (Cyber Panel, OASIS, FTN) integration / demonstration efforts

13. OASI S DARPA News IA & S Program Restructuring (continued) –Survivable Wired and Wireless Information Systems for military (SWIMM) program was merged into Fault Tolerant Networks (FTN) program in June 2001. Dr. Tony Tether appointed DARPA director –An agency-wide reorganization is expected soon.

14. OASI S DSN 2002 International Conf on Dependable Systems and Networks, June 23 rd –26 th, 2002, Washington, DC Multiple tracks and workshops –Main Track: Dependable Computing and Communications (DCC) –International Performance & Dependability Symposium –Workshops on: Intrusion Tolerant Systems Dependability Benchmarking Dependability of e-commerce Systems Call for Contributions: www.dsn.org

15. OASI S DSN 2002 General Chair: yours truly DCC Track Co-Chair: Farnam Jahanian Publications Chair: Tiffany Frazier Publicity Chair: Anup Ghosh Tutorial Chair: Victoria Stravidou Fast Abstracts Chair: Dave Bakken Local Arrangements Chair: Yair Amir Intrusion Tolerant Systems Workshop Chair: Carl Landwehr Steering Committee Chair: Bill Sanders Several members of Program Committees for various tracks and workshops