Cyber Security Collaborative Research Alliance (CSCRA) was a
research program
A research program (British English: research programme) is a professional network of scientists conducting basic research. The term was used by philosopher of science Imre Lakatos to blend and revise the normative model of science offered by Ka ...
initiated and sponsored by the
US Army Research Laboratory
The U.S. Army Combat Capabilities Development Command Army Research Laboratory (DEVCOM ARL) is the U.S. Army's foundational research laboratory. ARL is headquartered at the Adelphi Laboratory Center (ALC) in Adelphi, Maryland. Its largest sing ...
(ARL). The objective of the program was “to develop a fundamental understanding of
cyber
Cyber may refer to:
Computing and the Internet
* ''Cyber-'', from cybernetics, a transdisciplinary approach for exploring regulatory and purposive systems
Crime and security
* Cyber crime, crime that involves computers and networks
** Conventi ...
phenomena, including aspects of human attackers, cyber defenders, and
end user
In product development, an end user (sometimes end-user) is a person who ultimately uses or is intended to ultimately use a product. The end user stands in contrast to users who support or maintain the product, such as sysops, system administrat ...
s, so that fundamental laws,
theories
A theory is a rational type of abstract thinking about a phenomenon, or the results of such thinking. The process of contemplative and rational thinking is often associated with such processes as observational study or research. Theories may be ...
, and theoretically grounded and empirically validated models can be applied to a broad range of Army domains, applications, and environments.”
Collaborative Technology and Research Alliances is a term for
partnership
A partnership is an arrangement where parties, known as business partners, agree to cooperate to advance their mutual interests. The partners in a partnership may be individuals, businesses, interest-based organizations, schools, governments o ...
s between Army laboratories and centers,
private industry and
academia
An academy (Attic Greek: Ἀκαδήμεια; Koine Greek Ἀκαδημία) is an institution of secondary education, secondary or tertiary education, tertiary higher education, higher learning (and generally also research or honorary membershi ...
for performing
research and technology development intended to benefit the
US Army
The United States Army (USA) is the land service branch of the United States Armed Forces. It is one of the eight U.S. uniformed services, and is designated as the Army of the United States in the U.S. Constitution.Article II, section 2, cla ...
. The partnerships are funded by the
US Army
The United States Army (USA) is the land service branch of the United States Armed Forces. It is one of the eight U.S. uniformed services, and is designated as the Army of the United States in the U.S. Constitution.Article II, section 2, cla ...
.
History
Since approximately 1992, ARL formed a number of partnerships that involved the triad of industry, academia and
government
A government is the system or group of people governing an organized community, generally a state.
In the case of its broad associative definition, government normally consists of legislature, executive, and judiciary. Government is a ...
. One of them was the Cyber Security Collaborative Research Alliance (CSCRA) which was awarded on September 20, 2013.
The program was expected to be completed in September 2022.
Objectives
Recognizing the need to address the growing threat of attacks on its cyber networks, the U.S. Army launched CSCRA. The alliance conducted research to advance the theoretical foundations of cyber science in the context of U.S. Army networks. According to the Army, research into
cybersecurity
Computer security, cybersecurity (cyber security), or information technology security (IT security) is the protection of computer systems and networks from attack by malicious actors that may result in unauthorized information disclosure, t ...
is critical due to “the growing number and sophistication of attacks on military cyber networks coupled with the ever-increasing reliance on cyber systems to conduct the Army’s mission.” The ultimate goal of this research was the rapid development of cyber tools that could be used to dynamically assess
cyber risks, detect hostile activities on friendly networks, and support agile maneuvers in
cyber space in addressing novel threats.
Objectives of CSCRA included development of the following:
* Fundamental understanding of cyber phenomena, including human aspects
* Laws, theories, and theoretically grounded and empirically validated models
* Concepts applicable to a broad array of Army domains, applications, and environments
Research Thrusts
The CSCRA program was organized around several research thrusts, including the following:
* Risk, Detection, Agility
Participants
The research under this program was performed collaboratively by scientists of the US Army Research Laboratory and by scientists and engineers of the following institutions:
* Army Research Laboratory
*
Pennsylvania State University
The Pennsylvania State University (Penn State or PSU) is a Public university, public Commonwealth System of Higher Education, state-related Land-grant university, land-grant research university with campuses and facilities throughout Pennsylvan ...
*
Carnegie Mellon University
*
Indiana University
Indiana University (IU) is a system of public universities in the U.S. state of Indiana.
Campuses
Indiana University has two core campuses, five regional campuses, and two regional centers under the administration of IUPUI.
*Indiana Universi ...
*
University of California at Davis
The University of California, Davis (UC Davis, UCD, or Davis) is a public land-grant research university near Davis, California. Named a Public Ivy, it is the northernmost of the ten campuses of the University of California system. The institut ...
*
University of California Riverside
The University of California, Riverside (UCR or UC Riverside) is a public land-grant research university in Riverside, California. It is one of the ten campuses of the University of California system. The main campus sits on in a suburban dist ...
* Applied Communication Sciences
Results
Examples of research results developed by the CSCRA program include the following:
* Four publicly available
datasets generated using a
testbed
A testbed (also spelled test bed) is a platform for conducting rigorous, transparent, and replicable testing of scientific theories, computational tools, and new technologies.
The term is used across many disciplines to describe experimental rese ...
with simulated benign users and a manual attacker. The datasets were created to provide examples of cyber exploitations and aid in the production of reproducible research that addresses cyber security challenges.
*
* An adaptive cyber deception system that provided a virtual network view to each host in an enterprise network, capable of detecting malicious activities resulting from intrusions and probing.
*
* A common vocabulary and context for
Cyber-Physical Systems (CPS) intended to support research, assessment and responses to threats in this area.
*
* A finding that
face-to-face interaction
Face-to-face interaction is social communication carried out without any mediating technology. It is defined as the mutual influence of individuals’ direct physical presence with their body language and verbal language. It is one of the basic ...
s deter the success of cybersecurity teams. High-performing teams relied on leadership and functional specialization.
References
{{Reflist
Military research
Computer security organizations
Cyberwarfare in the United States
2013 establishments in the United States