ATC-NY INC — Department of Energy SBIR Phase II: 03a

Description

Large-scale computing systems, formerly relegated to research institutions and behind closed doors, are now often used for critical infrastructure modeling and control. These high-performance computing systems are frequently geographically distributed and exposed to the Internet, making them attractive resources for misuse and cyberattack. As high-performance computing systems grow even more popular and more widely distributed, simply firewalling and isolating a system is no longer feasible as a solution. Statement of how this Problem or Situation is Being Addressed. HOST is a software service that manages high-performance computing resource management activities in order to deceive users that are acting maliciously. HOST applies innovative deception techniques to distributed computing systems, adding tools that facilitate the configuration of cyber deception behaviors as security policies. The HOST software performs automated monitoring of cybersecurity assets, including users, computing resources, and network devices. Information is relayed back to the central service and displayed in a user-friendly dashboard interface. Statement of what will be done in Phase II. The goal of the Phase II effort is to develop and test the complete prototype of HOST to at least DoE TRL 6. This effort will build on the results of the Phase I prototype, developing and demonstrating high-performance computing-specific deception and monitoring techniques. The Phase II effort will address the most significant HPC-specific security concerns: data integrity, computational integrity, and user behavior. It will also enhance the scope and reliability of HOST with respect to production-quality HPC systems while showcasing its commercial potential. Commercial Applications and Other Benefits. HOST will increase the safety and security of critical infrastructure interacting with distributed computing systems. At the same time, HOST’s configurable and adaptable approach to cybersecurity will encourage increased efficiency and lower operating costs. HOST’s approach provides similar benefits to healthcare, power grid modeling, and other compute- intensive sectors.