Agile Monitoring for Cyber Defense

Abstract

The Monitoring, Analysis, and Interpretation Tool Arsenal (MAITA) seeks to support rapid construction and empirical reconfiguration of cyber defense monitoring systems inside the opponent decision cycle through a set of mechanisms including a flexible infrastructure for distributed monitoring processes and signal flows, a monitoring executive that coordinates resource allocation and systemic self-monitoring, and a library of monitoring process types, event descriptions, even recognition methods, alerting decision models, and other forms of monitoring knowledge.