The increasing importance of the information domain is widely recognised, but this also means there is an increasing threat surface to be protected. Information can be transferred in different forms across multiple systems and across domains, such as cyber space or the electromagnetic spectrum (focussing on radio signals here). As information flows across different systems it creates correlations that form normal patterns of behaviour.

To understand threats to our systems we need to develop a pattern of life (PoL) that captures behaviours to understand what is normal, and then to identify anomalous behaviour that indicates possible threats. Scope here covers behaviours in cyber space and electromagnetic (radio) signals.

Understanding PoL and using it to detect threats will require; information models to describe PoL, data capture and analysis to describe a normal pattern of life and then processing to detect anomalous behaviours. Of particular interest here is PoL involving more than one domain (cyber/electromagnetic).

The project will review existing PoL models (including in the physical domain) and create an information schema and model to describe PoL across domains. This will include cyber and radio environments, and their interaction. It will then capture different methods for the processing and fusion to create a PoL description, and carry out anomaly detection. A software architecture will then be proposed for a complete threat detection system based on PoL.

Outcomes (Artefact)

·       Information model for CEMA PoL.

·       Software architecture for PoL based CEMA threat detection.

·       Recommendations for development roadmap.

Increasing application of agile/cognitive technologies, underpinned by AI/machine learning, means the environment is rapidly changing and the original programming of systems is no longer adequate. Wide availability of software defined capabilities, such as software defined radios, is a key enabler to allow reprogramming to match changing demands and environment. However, it is undesirable to have to return systems to a service centre for reprogramming, ideally this is done remotely with the system in-situ.

The mechanism to carry out remote reprogramming should not depend on system specifics and instead should be system agnostic. However, reprogramming creates a new attack vector and so security of the architectures needs to be considered. This will require common architectures in software and hardware, as well as an interoperable signalling system to transfer code and assure reprogramming. For example, you don’t want to ‘brick’ the device.

Review existing standards for reprogramming of systems and develop a set of desired requirements for a reliable and secure remote reprogramming capability. Identify alternative hardware/software architectures and assess them against the requirements. Provide recommendation on architectures and issues to be resolved requiring further research.

Outcomes

·       Documented requirements for assured remote reprogramming.

·       Assessment of alternative architectures.

·       A recommended architecture for assured remote reprogramming.

A Service Oriented Architecture (SOA) is a software pattern that provides flexibility to rapidly create and manage different workflows, drawing from a number of services. But where there are many available services, the ability to create the workflow needs to consider the user interaction and ease of use.

This project will propose an approach to designing user interfaces for SOA to make workflow creation and management fast and easy.

The project will first review applications of SOA to understand how services are defined and the need to create complex workflows. It will then define a set of requirements for a software application that helps a user build and subsequently maintain a workflow. It will finally, propose an approach to implementing the workflow tool. Exemplar pictorial illustrations of the interface will demonstrate ease of use through user stories.

Outcomes

• A set of requirements and proposed technical approach for a workflow design and management tool.
• Illustrations of different user stories.