GG12102PO2352265S
Description of the overall purpose and expected outcomes, OR results of the contract, including significant deliverables and, if appropriate, associated units of measure.: Mark Gardner May 8- June 5 (ordering hardware) à ¢ââ ¬à ¢ Collect initial data using existing (inadequate) hardware for algorithm folks à ¢ââ ¬à ¢ Research, specify, and order data collection hardware June 6- July 1 (install hardware) à ¢ââ ¬à ¢ Install and configure bring up new data collection hardware à ¢ââ ¬à ¢ Install and configure Bro data collection software July 2- August 1 (initial data) à ¢ââ ¬à ¢ Debug and tune Bro cluster to capture all packets à ¢ââ ¬à ¢ Develop Bro scripts to extract features from Bro http. log
Virginia Polytechnic Institute & State University
Definitive Contract W911NF18C0019
$163.7k 4/4/22 GG12102PO2352276S
Alina Opraa & lina EliassiRad May 18-June 5 (surveys) x Survey DDoS literature wnh focus on the thrH types of attacks of Interest: TCP SYN II-, HTTP GET!-, and HTTP POST. oAllna +1st student x Survey detection algorfthms for the aforementioned three attack types with focus on machine !earning algorHhms. o llna +2nd student June 6- July 1 (features for DDoS) x Provide feature recommendations for the aforementioned three types of attacks: TCP SYN, HTTP GET, HTTP POST. o Alina+ 1st student x Survey llteratura on graph representation !earning and decide on most applicable methods In our context. o llna +2nd student x Analysis of ClU-13 data set, which Includes 3 Description oflhe overall purpose and expected oulcomes, OR results oflhe contract, including significant deliverables and, ii appropriate, associated units of measure.: Subcontractor Place of Performance (POP): Subcontract Number: As provided to you by your subcontractor, in your subcontractor's business or organization's preceding completed fiscal year, did i1s business or organization (the legal entity to which 1he DUNS number it provided belongs) receive (1) 80 percent or more of its annual Description of the overall purpose and expected outcomes, OR results of the contract, including significant deliverables and, if appropriate, associated units of measure.: gross revenues in U.S. federal contracts, subcontracts, loans, grants, subgrants, and/or cooperative agreemen1s; and (2) $25,000,000 or more in annual gross revenues from U.S. federal contrac1s, subcontracts, loans, grants, subgrants, and/or cooperative agreements?: As provided to you by your subcontractor, does the public have access to information about the compensation of 1he executives in 1he subcontractor's business or organization (the legal entity to which the DUNS number it provided belongs) through periodic reports filed under section 13(a) or 1 S(d) of the Securities Exchange Act of 1934 (15 U.S.C. 78m(a), 78o(d)} or section 6104 of1he Internal Revenue Code of 1986?: cla&ae& al traffic: botnet, normal, and background. oAll July 2 - August 1 (Cla&Slflcatlon for DDoS) x Experiment with different feature representation& that capture the sequential and temporal nature al network traffic. o Alina + 1 at student x Implement dHferent stataaltheart classlflcatlon algorithms (auch as LSTMbaaed model&). o Both student& x Evaluate on CTU-13 dataset. o Both students August 2 - September 1 (anomaly detection for DDoS) x De&ign graph representation !earning to capture relatlonal dependencies in local network traffic. o Tlrw. + 2nd student x Implement different atataaltheart anomaly detection algorlthms (such as graphbued models). o Both students x Evaluate on CTU-13 dataset. o Both student
Northeastern University
Definitive Contract W911NF18C0019
$338.5k 4/4/22 GG12102PO2260236S
Mark Gardner May 8- June 5 (ordering hardware) â ¢ Collect initial data using existing (inadequate) hardware for algorithm folks â ¢ Research, specify, and order data collection hardware June 6- July 1 (install hardware) â ¢ Install and configure bring up new data collection hardware â ¢ Install and configure Bro data collection software July 2- August 1 (initial data) â ¢ Debug and tune Bro cluster to capture all packets â ¢ Develop Bro scripts to extract features from Bro http. log August 2 - August 31, 2018
Virginia Polytechnic Institute & State University
Definitive Contract W911NF18C0019
$63.7k 4/29/21 GG12102PO2260242S
Statement of Work for 1st Increment of DARPA subaward for Northeastern University, Alina Opraa & lina EliassiRad May 18-June 5 (surveys) x Survey DDoS literature wnh focus on the thrH types of attacks of Interest: TCP SYN II-, HTTP GET!-, and HTTP POST. oAllna +1st student x Survey detection algorfthms for the aforementioned three attack types with focus on machine !earning algorHhms. o llna +2nd student June 6- July 1 (features for DDoS) x Provide feature recommendations for the aforementioned three types of attacks: TCP SYN, HTTP GET, HTTP POST. o Alina+ 1st student x Survey llteratura on graph representation !earning and decide on most applicable methods In our context. o llna +2nd student x Analysis of ClU-13 data set, which Includes 3 Description oflhe overall purpose and expected oulcomes, OR results oflhe contract, including significant deliverables and, ii appropriate, associated units of measure.: Subcontractor Place of Performance (POP): Subcontract Number: As provided to you by your subcontractor, in your subcontractor's business or organization's preceding completed fiscal year, did i1s business or organization (the legal entity to which 1he DUNS number it provided belongs) receive (1) 80 percent or more of its annual gross revenues in U.S. federal contracts, subcontracts, loans, grants, subgrants, and/or cooperative agreemen1s; and (2) $25,000,000 or more in annual gross revenues from U.S. federal contrac1s, subcontracts, loans, grants, subgrants, and/or cooperative agreements?: As provided to you by your subcontractor, does the public have access to information about the compensation of 1he executives in 1he subcontractor's business or organization (the legal entity to which the DUNS number it provided belongs) through periodic reports filed under section 13(a) or 1 S(d) of the Securities Exchange Act of 1934 (15 U.S.C. 78m(a), 78o(d)} or section 6104 of1he Internal Revenue Code of 1986?: cla&ae& al traffic: botnet, normal, and background. oAll July 2 - August 1 (Cla&Slflcatlon for DDoS) x Experiment with different feature representation& that capture the sequential and temporal nature al network traffic. o Alina + 1 at student x Implement dHferent stataal-the-art classlflcatlon algorithms (auch as LSTMbaaed model&). o Both student& x Evaluate on CTU-13 dataset. o Both students August 2 - September 1 (anomaly detection for DDoS) x De&ign graph representation !earning to capture relatlonal dependencies in local network traffic. o Tlrw. + 2nd student x Implement different atataal-the-art anomaly detection algorlthms (such as graphbued models). o Both students x Evaluate on CTU-13 dataset. o Both student
Northeastern University
Definitive Contract W911NF18C0019
$121.9k 4/21/21