Cyber Resiliency for Fog and Edge Computing Devices

The technology within this topic is restricted under the International Traffic in Arms Regulation (ITAR), 22 CFR Parts 120-130, which controls the export and import of defense-related material and services, including export of sensitive technical data, or the Export Administration Regulation (EAR), 15 CFR Parts 730-774, which controls dual use items. Offerors must disclose any proposed use of foreign nationals (FNs), their country(ies) of origin, the type of visa or work permit possessed, and the statement of work (SOW) tasks intended for accomplishment by the FN(s) in accordance with section 3.5 of the Announcement. Offerors are advised foreign nationals proposed to perform on this topic may be restricted due to the technical data under US Export Control Laws.

Develop a capability to prevent and/or mitigate cyber-attacks on fog and edge computing (FEC) devices and associated networks to provide mission assurance in highly contested environments.

This topic is intended for technology proven ready to move directly into a Phase II. Therefore, a Phase I award is not required. The offeror is required to provide detailed documentation in the Direct to Phase II proposal which demonstrates accomplishment of a "Phase I-like" effort, including a feasibility study. This feasibility study should include an approach, architecture and previous demonstration of a limited-scope prototype with the ability to prevent or mitigate a single class of cyber-attacks on an edge-node device, embedded device, or a similar device. The approach should be capable of scaling to a large of number of edge-nodes and have the ability to autonomously detect and respond to an attack.

As this is a Direct-to-Phase-II (D2)2) topic, no Phase I proposals will be accepted and no Phase I awards will be made under this topic. Offerors responding to this topic shall demonstrate “Phase I-type” technical feasibility through prior research, development, laboratory validation, commercial development, or operational demonstrations performed outside of the SBIR/STTR program. This feasibility study should include an approach, architecture and previous demonstration of a limited-scope prototype with the ability to prevent or mitigate a single class of cyber-attacks on an edge-node device, embedded device, or a similar device. The approach should be capable of scaling to a large of number of edge-nodes and have the ability to autonomously detect and respond to an attack.

The D2P2 effort should expand upon previous work to increase the robustness of the cyber protection and the classes of threats being addressed, specifically improving detection and response capabilities. The D2P2 should also demonstrate the ability of the FEC devices to fight through a supply chain or a remote exploit attack to accomplish mission objectives.

The final product will have both commercial and military avionics and space system applications, as well as a broad class of commercial applications, including Internet of Things (IoT) [6], Internet of Battle Things (IoBT) [5], and Internet of Space Things (IoST) [7].