Knowledge based system that performs sensor aggregation for cyber defense

• Built upon the KnoWeb® dynamic distributed problem solving technology
  - patent issued
• Sixty man-years of development
•  Multi-tiered situation awareness in a rapidly comprehensible form
• High quality attack sensing and alert response

     Represents knowledge about the CND domain

• Sensors, events, alarms
• Computer hosts, network devices, topology
• Security policies, threat levels

     Integrates diverse information and products

• Multiple vendors, solution approaches, application domains
• Common formats and semantic descriptions

     Uses knowledge rules to automatically reason about information

• Consolidates, aggregates, correlates, and filters events
• Matches current vulnerabilities and threats
• Elevates defense posture and generates warnings
• Recommends actions to contain or prevent damage
• Actively responds to threatening conditions

WCI-CND Enterprise - The Foundation Tool for IA

Larger View Here