Automated Decision Making for Active Cyber Defense: Panel Discussion

The high growth of cyber connectivity significantly increases the potential and sophistication of cyber-attacks. New capabilities based on active cyber defense (ACD) are required to offer automated, intelligently-driven, agile, and resilient cyber defense. Both accurate "sense-making" based security analytics of the system artifacts (e.g., traces, configurations, logs, incident reports, alarms and network traffic), and provably-effective "decision-making" based on robust reasoning are required to enable ACD for cyber security and resiliency. In this panel session, a collection of academic, government, and national laboratory representatives will discuss current drivers and emerging research priorities for ACD technologies. Scheduled panelists include Phil Quade (NSA), Arlette Hart (FBI), Ehab Al-Shaer (UNCC), and Chris Oehmen (PNNL). The panel will focus on the impact of new emerging cyber technologies on the future of resilience and the realization of ACD technologies. Example emerging technologies include clouds/data centers, cyber-physical systems, software defined networking, and Internet of things.