Enhanced Attribution
Abstract
The Enhanced Attribution program, building upon the Active Cyber Defense program, will develop technologies to associate the malicious actions of cyber adversaries to individual cyber operators and then to enable the government to reveal publicly the malicious actions of individual cyber operators without damaging sources and methods. Technologies of interest include new approaches for identification of malicious cyber operators, techniques to deconstruct their software tools and actions into semantically rich and compressed knowledge representations, algorithms for developing predictive behavioral characteristics, and methods for confirming this information with other commercial and public sources of data. As Enhanced Attribution technologies mature and show promise they will be implemented in tools for evaluation by potential transition sponsors.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2018
- Source ID
- 49e7500ca77301b8c6306c81d5450b0a