Metrinome: Continuous Monitoring and Security Validation of Distributed Systems

reportActive / Technical Report | Accession Number: ADA600471 | Open PDF

Abstract:

Distributed enterprise systems consist of a collection of interlinked services and components that exchange information to collectively implement functionality in support of sometimes mission critical workflows. Systematic experimental testing and continuous runtime monitoring of these large scale distributed systems, including event interpretation and aggregation, are key to ensuring that the system s implementation functions as expected and that its security is not compromised

Author(s):
Atighetchi, Michael ; Ishakian, Vatche ; Loyall, Joseph ; Pal, Partha ; Sinclair, Asher ; Grant, Robert
Author Organization(s):
AIR FORCE RESEARCH LAB ROME NY INFORMATION DIRECTORATE
Descriptive Note:
Journal article
Supplementary Note:
Published in the Journal of Cyber Security and Information Systems, v2 n1 p20-26, Mar 2014. Prepared in collaboration with BBN Technologies, Cambridge, MA.
Pagination:
0008

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release; Distribution Is Unlimited.

RECORD

Collection: TR
Identifying Numbers
Monitor Series:
AFRL-IF-RS
 Subject Terms
Joint Capability Areas:
JCA_5_Command and Control; JCA_6_Net Centric; JCA_8_Building Partnerships; JCA_8.1_Communicate; JCA_8.1.3_Influence Adversary and Competitor Audiences; JCA_5.2_Understand; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_6.4.1_Secure Information Exchange; JCA_7_Protection; JCA_6.4.2_Protect Data and Networks; JCA_6.4_Information Assurance; JCA_7.2.1_Mitigate Lethal Effects; JCA_7.2_Mitigate; JCA_5.6.1_Assess Compliance with Guidance; JCA_5.6_Monitor; JCA_3.2_Engagement; JCA_3_Force Application; JCA_3.2.2_Non-Kinetic Means; JCA_6.2.1_Information Sharing; JCA_6.2.2_Computing Services; JCA_6.2.3_Core Enterprise Services
Modernization Areas:
Cyber
Communities of Interest:
Cyber
Descriptor(s):
*COMPUTER NETWORK SECURITY, *DISTRIBUTED COMPUTING, *INFORMATION EXCHANGE, COMMUNICATIONS PROTOCOLS, CORPORATE INFORMATION MANAGEMENT, GRAPHICAL USER INTERFACE, MONITORING, NETWORK FLOWS, PROGRAMMING LANGUAGES
Field(s)/Group(s):
Computer Programming and Software, Computer Systems Management and Standards
Keyword(s):
DISTRIBUTED ENTERPRISE SYSTEMS, FUNCTIONALITY, CONTINUOUS RUNTIME MONITORING, EVENT INTERPRETATION, EVENT AGGREGATION, IMS(INFORMATION MANAGEMENT SYSTEMS), SNMP(SIMPLE NETWORK MANAGEMENT PROTOCOLS), NMIS(NETWORK MANAGEMENT INFORMATION SYSTEMS), STAF(SOFTWARE TESTING AUTOMATION FRAMEWORKS), SIEM(SECURITY INFORMATION AND EVENT MANAGEMENT PLATFORMS), *METRINOME, RED TEAMING
Report Date:
2014 Mar 01
Creation Date:
2014 Jun 11