Navigator

Period of Performance: 08/08/2006 - 02/04/2007

$100K

Phase 1 STTR

Recipient Firm

21st Century Technologies, Inc.
11675 Jollyville Road, Suite 300
Austin, TX 78759
Principal Investigator
Firm POC

Research Institution

George Mason University
4400 University Drive MS 4C6
Fairfax, VA 22030
Institution POC

Abstract

21st Century Technologies, in partnership with George Mason University, present Navigator, a system to inspect and analyze network traffic and configurations in order to prevent and detect intrusions. Navigator s graph-based representation will combine information about configuration (including vulnerabilities, topology, and trust relationships) with real-time input from sensors such as Snort and host event logs. By analyzing these combined graphs, Navigator will provide unparalleled analysis capabilities by effectively presenting both actual and potential network attacks. This will provide both the ability to execute pre-emptive hardening and rapid response to actual attacks in the context of the entire network. A key challenge in such a system is a rich and highly interactive visualization of graphs. Navigator s multi-level graph aggregation abilities will enable the analyst to drilldown and inspect data relating to a detected attack. One of Navigator s unique graph aggregation abilities is the power to reduce graphs based on common patterns effectively hiding redundant information until it is needed. Navigator s innovative combination of powerful event correlation, attack prediction, and forensics capabilities will provide the next generation of network analysis and automated reasoning.