Print Print  
Award Information
Proposal Number: 0421012
Proposal Title: Cross-Domain Intrusion Detection using Privacy-Preserving Distributed Data Mining Technologies
Topic Number: H-SB04.2-001
Phase: Phase I
Topic Title: Cross-Domain Attack Correlation Technologies
Organization: AGNIK, LLC
Address: 8840 Stanford Blvd. STE 1300
Columbia, MD 21045-5833  
Abstract: This document proposes development of PURSUIT, a cross-domain intrusion detection system that relies upon state-of-the-art privacy-preserving distributed data-mining (PPDM) technology. PURSUIT has a distributed multi-agent architecture that supports formation of ad-hoc peer-to-peer, hierarchical, and other collaborative coalitions with due attention to the security and privacy issues. It will be equipped with PPDM algorithms so that the patterns can be computed and shared across the sites without sharing the privacy-sensitive data. The algorithmic foundation of the approach is based on combination of secured multi-party computation and randomized transformation techniques that allow sharing of attack patterns not the raw data. This research will be performed by Agnik, Tresys, and University of Minnesota (UNM) Army High Performance Computing research Center. Agnik team has a strong track record in distributed and privacy preserving data mining. Tresys is a security company with strong record in working with several major governmental agencies dealing with national security. The UMN team has a strong record in building intrusion detection systems, including the MINDS IDS that is currently being deployed in more than sixty different army locations. Being a plug-in IDS PURSUIT has the commercial potential to be marketed to all organizations that currently use one or more IDS.
Award/Contract Number: NBCHC050003
Period of Performance: 11/01/2004 - 05/15/2005
Award/Contract Value: $99,995.00
Award/Obligated Amount: $99,995.00