Cyber-Hunting at Scale (CHASE)
Abstract
The Cyber-Hunting at Scale (CHASE) program will develop data-driven tools for real-time cyber threat detection, characterization, and protection within enterprise-scale networks. U.S. computer networks are continually under attack, but at present no tools exist to efficiently extract the right data from the right device at the right time to analyze these attacks for DoD-scale information networks. For example, analysis of an in-memory exploit would require detailed data from a few devices, while analysis of a global botnet attack would require summary data from millions of devices. CHASE will develop novel algorithms and analysis tools to dynamically collect data from across the network, actively hunt for advanced threats that evade routine security measures, and disseminate protective measures that automatically bolster the collective cyber defense posture.
Document Details
- Document Type
- Accomplishment
- Publication Date
- Oct 01, 2019
- Source ID
- ef2824e6ba7d5fb5e295194a17c0b813