AF CyberWorx: Discrete Packet Capture

Contract Action was a Firm-Fixed and competitive award through the AFCyberWorx Commercial Solutions Opening (CSO). This effort proposes a series of small-scale tests (SSTs) to evaluate SANDTECH’s IRIS technology in multiple and evolving mission scenarios to provide covert security monitoring to high-value or high-risk network connected host systems.

The first mission set being evaluated is monitoring of workstations in AETC’s purview that are connected to the internet to conduct research and access sites not available through typical workstations shielded by DISN/AF gateways and enterprise security service providers. The initial SST is proposed to be 90-days with two follow-on 90-day options to add/update software and shape follow-on testing based on initial findings. One of the 90-day options addresses deploying the IRIS card to a second network enclave.

The second mission set being evaluated is a similar test and update scenario, but with a focus on malicious code and insider threat detection for the National Nuclear Security Agency. The second SST is proposed as a 90-day option and two follow-on 90-day options.