Reactive aggregate model protecting against real-time threats

• Main Authors: Baugess, Kenneth G., Chamberlain, Jason R., Chung, Samuel K., Kelly, Ryan F.
• Other Authors: Gallup, Shelley
• Published: Monterey, California: Naval Postgraduate School 2014
• Online Access: http://hdl.handle.net/10945/43874

Approved for public release; distribution is unlimited === Current network protection technologies often require code recompilation to integrate new technologies, can be prone to denial of service attacks, may require invasive software applications to provide an automated response, and provide little to no protection against unknown threats. Unknown threat discovery generally requires an expert human analyst in an impractical labor-intensive process, but these analysts are in short supply. A Vector Relational Data Modeling approach was implemented to automate the human-intensive decision-making and subsequent response processes when a common phpMyAdmin attack is suspected. We modeled constituent component technologies and data sources within the Global Information Network Architecture, a DOD network certified information modeling framework, and constructed a cyber test range consisting of multiple servers. This implementation and testing of Reactive Aggregate Model Protecting Against Real-time Threats demonstrated the successful employment of an information apparatus that executed the complex processes necessary to mitigate phpMyAdmin cyber threat detection and response.