Cyber Resiliency and Measurement Challenge (CRAM)

To develop algorithms to measure a system’s Cyber Defensive Capabilities against full spectrum threats and calculate the probability of failure against threat profiles, Naval Surface Warfare Center Dahlgren Division (NSWCDD) is seeking undergraduate and graduate students from colleges and universities to develop mathematical models and software algorithms which may include Artificial Intelligence (AI) and Machine Learning (ML) capability for a cyber resiliency assessment tool. The tool will evaluate a system’s architecture, the defined functions, the hardware and software required, the known cyber vulnerabilities present on the hardware and software components, and the effectiveness of the defensive cyber capability implemented within the system during a cyberspace attack from one or more Advanced Persistent Threats (APTs.) The cyber resiliency assessment algorithms will calculate the impact that a cyberspace attack scenario by given APT(s) will have on the system functionality and whether critical functions are likely to remain operational during the cyberspace attack. The challenge will also include developing Graphical User Interface(s) (GUIs) to display the cyber resiliency assessment results.

The goal of this challenge is to invite Participants to present innovative solutions to this problem that NSWCDD has not yet explored. For the purposes of this prize challenge, the term “Participant” refers to the college or university team that apply to participate during the prize challenge and the term “Winner” refers to college or university teams that are selected by the Government Review Panel to receive a cash prize, under this prize challenge, based on the predetermined criteria. Each Participant will be comprised of no more than five student members from the same college or university. The Participants should use Artificial Intelligence (AI) and Machine Learning (ML) to design and train algorithms that will automate the cyber resiliency assessment. Experience with AI and ML algorithm development is desired.

BACKGROUND

NSWCDD has been involved in the development of Navy warfighting capability since 1918. As afloat systems become more interconnected on each ship and the need for more external connections increase to other Navy ships and aircraft systems, various Navy ashore systems, and other DoD component systems, the operational risk from cyberspace has increased significantly due to the expansion of the attack surface and the ever-evolving capability of the adversary nation state APTs. One desired capability is to improve cyber resiliency assessments of each subsystem and the overall system with the objective of developing and deploying a tool that can be used: (1) within a system for ongoing operational cyber resiliency assessments as a system's vulnerability state changes and as the cyber threats change, and (2) as an acquisition decision aid to assess the cyber resiliency improvement resulting from the deployment of new cybersecurity solutions within system architecture so that the most effective solutions are selected and deployed first.
This innovation challenge will enable the development and validation of new and innovative software algorithms, which may include advanced AI/ML algorithms, and a tool prototype that will provide the first step towards meeting the objectives. This challenge will enable collaboration across the university ecosystem and NSWCDD to support the development of new defensive cybersecurity capability.

PRIZE OBJECTIVE

The goal of this prize challenge is to develop a mathematical model that uses as inputs:

the system’s architecture,
the functions and functional threads that the system must perform,
the hardware and software within the system needed for each thread,
the known cyber vulnerabilities present on each hardware and software component, and
the adversary threat actors and tactics, techniques, and procedures they will use to exploit the open cyber vulnerabilities on the system to cause a cyber effect to impact functionality and execution.

The mathematical model will be implemented within software algorithms to form core functionality for the desired cyber resiliency assessment capability. The challenge will include developing a cyber resiliency assessment prototype GUI that displays the assessment results. The GUI will be used during the challenge demonstration phase.

NSWCDD is seeking to recognize college and university technology student leaders in the areas of software engineering, computer science, AI/ML, and cybersecurity, who demonstrate creativity, out-of-the-box thinking, and innovation in their technology endeavors and projects.
NSWCDD is seeking prototyped scalable solution(s) to address the need for improving and automating cyber resiliency assessments for a system.

This prize challenge will be conducted in three phases.

Phase I will consist of developing and submitting an application that describes the proposed approach. The Government Review Panel will evaluate each submitted application and will perform a grading assessment of each as part of the down selection process.

Phase II will consist of the Participants developing the mathematical models and algorithms.

Phase III will consist of each Participant presenting and demonstrating their products to the NSWCDD Panel and other observers. The NSWCDD Panel will grade each demonstration and will provide award(s) based on the overall challenge grade.

Key Dates:

NSWCDD estimates the following timeline for the completion of the prize challenge.

Phase I
Application Submission:

Opens Monday, May 6, 2024
Closes Sunday, September 8, 2024

Questions by interested Participants may also be sent via electronic mail to nswcd_prizechall.fct@navy.mil. Interested Participants are encouraged to submit questions that do not contain any information specific to the team’s approach/experience. If an interested Participant believes a question is necessary that addresses a subject that is specific to the team, the inquiry must be marked accordingly by the submitter. The cutoff for questions sent via electronic mail is August 29, 2024. The challenge will be periodically updated to provide answers to all non-specific team questions. Answers to those questions that are team specific will be responded to directly.

Evaluation of Phase I submissions is tentatively scheduled to begin 9 September 2024. NSWCDD anticipates notifying the selected Phase II Participant teams NLT 12 September 2024.

Phase II
Algorithm Development and Test:

Participants will have five (5) weeks to develop models and algorithms in preparation for Phase III demonstration. Artifacts requested to be delivered before Phase III must be submitted by Thursday 17 October 2024.

Phase III

In-person Demonstration
Tuesday 22 October 2024 – Wednesday 23 October 2024
The event will occur at The University of Mary Washington Dahlgren Campus, 4224 University Drive, King George, Virginia 22485.

Winners are expected to be announced on Wednesday 23 October 2024.

CANCELLATION OF PRIZE CHALLENGE

NSWCDD reserves the right to cancel, suspend, and/or modify the challenge, or any part of it, if any fraud, technical failures, or any other factor beyond NSWCDD's reasonable control impairs the integrity or proper functioning of the challenge, as determined by NSWCDD in its sole discretion. NSWCDD is not responsible for, nor is it required to accept, incomplete, late, misdirected, damaged, unlawful, or illicit submissions.

NAUTILUS

Challenge Details

More Challenges

Cyber Resiliency and Measurement Challenge (CRAM)

Challenge Summary

Description

Additional Information

Submission Deadline

Details

Reference URL

Point of Contact

NAUTILUS