Project Grant 2613277

The National Science Foundation Office of Advanced Cyberinfrastructure awarded Arizona State University $1.199 million on August 1, 2026, under the Computer and Information Science and Engineering program (CFDA 47.070) to develop a cyber threat triage and investigation system for scientific institutions.

The award funds development of three integrated capabilities: an adaptive provenance collection framework combining lightweight anomaly detection with selective memory monitoring to capture evidence of stealthy attacks against scientific cyberinfrastructure; contextual knowledge extraction techniques deriving application semantics from system logs and structured knowledge from cyber threat intelligence reports; and a collaborative AI framework that correlates alerts, reconstructs attack campaigns, retrieves evidence, and generates explainable investigation results by integrating system audit data, application context, and threat intelligence. The system addresses the challenge that scientific institutions face significant cybersecurity resource constraints and existing security solutions generate excessive false positives or detect only known attack patterns.

Work is performed in Scottsdale, Arizona, with a performance period through July 31, 2029. Arizona State University's Office of Research and Sponsored Projects Administration (Orspa) holds the award as the administrative entity for the university.