Cyber Security Collaborative Research Alliance

Since approximately 1992, ARL formed a number of partnerships that involved the triad of industry, academia and government. One of them was the Cyber Security Collaborative Research Alliance (CSCRA) which was awarded on September 20, 2013.^[2] The program was expected to be completed in September 2022.^[3]

Recognizing the need to address the growing threat of attacks on its cyber networks, the U.S. Army launched CSCRA. The alliance conducted research to advance the theoretical foundations of cyber science in the context of U.S. Army networks. According to the Army, research into cybersecurity is critical due to『the growing number and sophistication of attacks on military cyber networks coupled with the ever-increasing reliance on cyber systems to conduct the Army’s mission.』 The ultimate goal of this research was the rapid development of cyber tools that could be used to dynamically assess cyber risks, detect hostile activities on friendly networks, and support agile maneuvers in cyber space in addressing novel threats.^[4]

Objectives of CSCRA included development of the following:^[1]

• Fundamental understanding of cyber phenomena, including human aspects
• Laws, theories, and theoretically grounded and empirically validated models
• Concepts applicable to a broad array of Army domains, applications, and environments

The CSCRA program was organized around several research thrusts, including the following:^[1]

• Risk, Detection, Agility

The research under this program was performed collaboratively by scientists of the US Army Research Laboratory and by scientists and engineers of the following institutions:^[1]

• Army Research Laboratory
• Pennsylvania State University
• Carnegie Mellon University
• Indiana University
• University of California at Davis
• University of California Riverside
• Applied Communication Sciences

Examples of research results developed by the CSCRA program include the following:

• Four publicly available datasets generated using a testbed with simulated benign users and a manual attacker. The datasets were created to provide examples of cyber exploitations and aid in the production of reproducible research that addresses cyber security challenges.^[5]
• An adaptive cyber deception system that provided a virtual network view to each host in an enterprise network, capable of detecting malicious activities resulting from intrusions and probing.^[6]
• A common vocabulary and context for Cyber-Physical Systems (CPS) intended to support research, assessment and responses to threats in this area.^[7]
• A finding that face-to-face interactions deter the success of cybersecurity teams. High-performing teams relied on leadership and functional specialization.^[8]