2014_LRBAA_Announcement_-_Amendment_00009_-_120215.pdf

Science & Technology Directorate U.S. Department of Homeland Security

2014 Long Range Broad Agency Announcement 14-02 Amendment 00008

1. GENERAL INFORMATION

Agency Name: Department of Homeland Security

Washington, DC 20528

Research Opportunity Title: DHS S&T Long Range Broad Agency Announcement

Research Opportunity Number: BAA 14-02

Catalog of Federal Domestic Assistance (CFDA) Number: 97.065

Catalog of Federal Domestic Assistance (CFDA) Title: Homeland Security Advanced Research Projects Agency

Response Date: This is a five (5) year announcement and will remain open until December 31, 2018, 11:59PM, Eastern Standard Time (EST). White Papers are due by this response date;

thus, if you are encouraged to submit a Full Proposal based on your White Paper submission, please be advised that the due date of the full proposal will be the date that is specified in the notification letter; and not the response date by December 31, 2018, 11:59PM, EST.

However, if an offeror’s proposal is not encouraged based on their White Paper submission, and the offeror still opts to submit a full proposal, they may do so within 60 days of the notification letter; and not the response date by December 31, 2018, 11:59PM, EST.

Points of Contact:

S&T BAA

Website: https://baa2.st.dhs.gov

S&T BAA Website Tech Support: dhsbaa@reisystems.com or (703) 480-7676

Division Division Email BMD sandt.bordersmaritime@hq.dhs.gov

CDS standards@hq.dhs.gov CSD sandt-cyber-liaison@hq.dhs.gov

EXD sandt.explosives@hq.dhs.gov

FRG sandtfrg@hq.dhs.gov

RSD sandt.rsd@hq.dhs.gov https://baa2.st.dhs.gov/ mailto:t:%20dhsbaa@reisystems.com mailto:sandt.bordersmaritime@hq.dhs.gov mailto:sandt-cyber-liaison@hq.dhs.gov mailto:sandt.explosives@hq.dhs.gov mailto:sandtfrg@hq.dhs.gov mailto:sandt.rsd@hq.dhs.gov

2014 Long Range Broad Agency Announcement 14-02

2. INTRODUCTION

The Department of Homeland Security (DHS) Science & Technology Directorate (S&T) reserves the right to reject submissions if the work proposed duplicates current S&T activities, falls outside the particular division’s current efforts, or does not comply with the submission instructions. Therefore all interested parties must read these instructions carefully.

This is a Long Range Broad Agency Announcement (LRBAA), as contemplated in Federal Acquisition Regulation (FAR) 6.102(d)(2) and 35.016. It is not a request for information (RFI).

The LRBAA’s submission and evaluation processes are distinct from those of conventional procurements that use Requests for Proposals (RFPs) or Requests for Quotes (RFQs).

S&T’s mission is to “support basic and applied homeland security research to promote revolutionary changes in technologies; advance the development, testing and evaluation, and deployment of critical homeland security technologies; and accelerate the prototyping and deployment of technologies that would address homeland security vulnerabilities.” This Announcement declares S&T’s general interest in competitively funding R&D projects across a spectrum of science and engineering disciplines. S&T will focus on areas where risk inhibits mission or operational investments, and where significantly improved or increased capability payoffs can be expected.

S&T seeks R&D projects for revolutionary, evolving, and maturing technologies that demonstrate the potential for significant improvement in homeland security missions and operations. The unique contribution of your proposed research or technical concept, and how it differs from similar efforts or solutions, must be clearly articulated in your White Paper. Offerors should read the descriptions of the research topic areas of interest and identify the specific topic for which their concept will have the maximum impact. Offerors are encouraged to select the one division that most directly corresponds to their proposed subject matter.

It cannot be emphasized too strongly that all submissions must indicate significant advancement in the evolution of a topic area identified in this Announcement. The Government reserves the right to reject submissions that do not clearly articulate such advances or innovations.

This announcement is restricted to work relating to basic and applied research and that portion of advanced technology development not related to a specific system or hardware procurement.

This announcement does not cover support services, such as technical services, engineering services, or other types of support services to include “contracting”-type services (e.g., quasi-directed subcontracting) or contracts to “evaluate” another contractor’s performance/program.

Such submissions are considered non-compliant with this LRBAA and will be rejected without evaluation.

Fully developed products are not normally considered under this LRBAA, unless the Offeror is proposing a totally different application for the product or a modification is needed, which requires substantial research. Purchase of capital equipment will only be allowed under a given

2014 Long Range Broad Agency Announcement 14-02 proposal if S&T deems it reasonable and necessary to conduct the particular project. No LRBAA award shall be primarily for the purchase of capital equipment.

Offerors who seek, through this LRBAA, to extend work previously completed must clearly articulate where the old work ended, where the new work begins, and what new advances are expected from the work contemplated under this LRBAA. Please ensure it is clear that the work now being submitted is independent of previous work (i.e. the next logical step in the research, or investigating a subject that was discovered and not funded under the previous award).

Submitting existing Statements of Work and indicating which steps have been completed is not sufficient justification for an independent award under the LRBAA.

DHS S&T will not issue paper copies of this Broad Agency Announcement. Oral presentations are not permitted at any point during the LRBAA process.

3. ELIGIBILITY INFORMATION

All responsible Offerors are eligible to submit White Papers under the LRBAA, but DHS S&T particularly encourages submissions from small businesses. However, no set aside of any kind will be made.

Foreign or foreign-owned Offerors are advised that their participation is subject to foreign disclosure review procedures, applicable export control laws, and other applicable federal laws, regulations, and policies pertaining to U.S. Government business with foreign entities.

Offerors may include independent organizations, single entities, or teams from private sector organizations, Government laboratories, airport authorities, Federally Funded Research and Development Centers (FFRDCs), and academic institutions. FFRDCs, including the Department of Energy National Laboratories and Centers, are eligible to respond to this LRBAA individually or as team members with eligible principal Offerors, as long as they are permitted to respond to such announcements under their applicable sponsoring agreements.

Historically Black Colleges and Universities (HBCUs), Minority Institutions (MIs), small businesses, small disadvantaged businesses, women-owned small businesses, service-disabled veteran owned small businesses, and HUBZone small businesses are encouraged to submit proposals and to join other entities as team members in submitting proposals.

Offerors must be prepared to cooperate and exchange data and technical information as requested by DHS S&T. Data rights and intellectual property terms and conditions will be addressed after Full Proposal evaluation.

The cost of preparing White Papers and Full Proposals in response to this Announcement is not considered an allowable direct cost. Offerors should consult FAR 31.205-18 when considering whether these costs may be allocated as indirect costs. The Contracting Officer will determine allowability and allocability. The Offeror may be required to submit certified cost and pricing data if the value of a prospective award exceeds the Truth in Negotiations Act threshold.

2014 Long Range Broad Agency Announcement 14-02

4. AWARD INFORMATION

The S&T technical subject matter expert personnel shall coordinate with the Contracting Officer to identify White Papers that present “particular value” to S&T. The Division Contracting Officer will encourage the Offerors of these White Papers to submit Full Proposals consisting of detailed technical and cost information. Please note that any such encouragement does not assure an award.

The primary basis for selecting proposals for acceptance shall be technical, importance to agency programs, and funding availability. Cost realism and reasonableness shall also be considered to the extent appropriate. Therefore, DHS S&T reserves the right to select for negotiation of a potential award to fund all, some, or none of the Full Proposals received in response to this Announcement. The amount of resources made available under this BAA will depend on the quality of the proposals received and the availability of funds. A proposal may be selected, but only specific portions may be of interest. The award value and period of performance of each selected Full Proposal will be determined on a case-by-case basis.

Proposal development costs will not be reimbursed. Technical and cost proposals (or any other material) submitted in response to this BAA will not be returned. However, depending on the markings on the proposal, DHS S&T will adhere to FAR policy on handling source selection information and proprietary proposals. It is the policy of DHS S&T to treat all proposals as proprietary information and to disclose their contents only for the purposes of evaluation.

Multiple awards are anticipated through this LRBAA. Award decisions will be based on a competitive selection of proposals resulting from a scientific and cost review. Awards may take the form of Time-and-Materials/Labor Hour or Cost-Reimbursement type contracts. However the Government also reserves the right to award grants, cooperative agreements, Other Transaction Agreements (OTA) (if authorized by law at time of award), or interagency agreements to appropriate parties should the situation warrant.

The applicable laws and regulations governing a particular award will depend on that award vehicle. S&T will also facilitate access to laboratory and operationally relevant test and evaluation facilities, where reasonably available. In the event that an Offeror or subcontractor is an FFRDC, Department of Energy National Laboratory, or other federal entity, DHS S&T will work with the appropriate sponsoring agency to issue an interagency agreement pursuant to the Economy Act (31 USC 1531) or other appropriate authority.

In many cases, other elements of the U.S. Government are pursuing related technologies. In such cases, S&T will leverage those technology development efforts wherever it is practicable and efficient to do so.

5. ETHICAL CONSIDERATIONS

Communication During Evaluation: Once a White Paper or Full Proposal has been submitted, the evaluation becomes active until the Division Director issues an official notification letter to the Offeror. During the evaluation (White Paper or Full Proposal), no

2014 Long Range Broad Agency Announcement 14-02 Amendment 00009 communication shall occur between S&T personnel and the Offeror regarding the submission or its general subject matter, except as noted below.

During the evaluation period, the LRBAA Division Director must be the focal point of any exchange with Offerors. After receipt of a Full Proposal, no discussion regarding the scope of work, resources required to execute the scope, etc., will be allowed during the Source Selection process. However, a Division Director may initiate communications if and when specific facts in the submission require further clarification from the Offeror (such as confirmation of a delivery date).

Conflict of Interest: Per HSAR 3025.209-72, Organizational Conflict of Interest issues will be evaluated on a case-by-case basis as outlined below:

(a) Disclosure. In a Full Proposal submission Offerors must represent to the best of their knowledge: (1) whether any of their current employees were previously employed by DHS S&T, and whether any of their former employees are now DHS S&T employees;

(2) full disclosure of any actual, potential, or perceived organizational conflicts of interest. The Offeror shall include a mitigation plan for any actual or potential conflicts of interest, in accordance with paragraph (d) of this provision.

(b) Determination. The Division Director may determine that this effort may result in an actual, potential, or perceived conflict of interest.

(c) If an Offeror with an actual, potential, or perceived conflict of interest believes it can be mitigated the Offeror may submit a mitigation plan to the Division Director. The Division Director may approve a mitigation plan; reject a mitigation plan and ask for revisions; or reject a mitigation plan, determine that the conflict of interest cannot be resolved or avoided, and find the Offeror ineligible for award.

(d) Other Relevant Information. In addition to the mitigation plan, the Division Director may require additional relevant information from the Offeror. The Division Director will use all information submitted by the Offeror, and any other relevant information known to DHS, to determine whether an award may be made and whether the mitigation plan adequately mitigates the conflict.

(e) Corporation Change. The successful Offeror shall inform the Contracting Officer, within

30 calendar days of the effective date of any corporate mergers, acquisitions, or divestitures that may affect this provision.

(f) Flow-down. The contractor shall insert the substance of this clause, paragraphs (a) through (f), in each subcontract that exceeds the simplified acquisition threshold.

Offerors who have existing contract(s) with DHS S&T for scientific, engineering, technical or administrative support will receive particular scrutiny.

2014 Long Range Broad Agency Announcement 14-02

Note also that FAR-based awards will incorporate Homeland Security Acquisition Regulation (HSAR) clause (deviation) 3052.209-70 Prohibition on Contracts with Corporate Expatriates.

6. PRE-SUBMISSION INQUIRIES

A pre-submission inquiry is optional. The LRBAA webpage has a submission portal specifically for pre-submission inquiries. Through this portal only, you may submit a brief statement of your idea and receive general feedback on if the idea meets the mission of DHS. Inquiries emailed directly to divisions will not be considered. S&T personnel can indicate whether an idea appears to be within the scope of the division’s interests and this LRBAA. S&T personnel cannot assist in the preparation of a White Paper, nor can they propose any ideas they would like Offerors to address. However, regardless of the feedback you receive, you may still submit a White Paper.

Go to https://baa2.st.dhs.gov and click on the following links: (1) Current Solicitations; (2) LRBAA 14-02; (3) Pre-Submission Inquiry. This will take you to the online pre-submission inquiry portal. You will be asked to identify a topic area to ensure it is routed to the correct division and individual(s).

7. RESEARCH TOPICS

Below are brief treatments of the topic areas of interest. In your White Paper submission, you will be asked to identify the division and/or specific topic area that best fits your proposed research.

BORDER AND MARITIME SECURITY

The Borders and Maritime Security division is interested in the development and evaluation of security technologies and pilot testing new surveillance, tracking, and response capabilities that cover vast expanses of remote border territories. Our focus is on technologies that improve the security of our Nation’s borders and waterways without impeding the flow of commerce and travelers.

Land Border Security

Detection of, tracking of, classifying of, and responding to all threats along the terrestrial border between the Ports of Entry, specifically technologies that can perform one of the following functions:

BMD 1.1 - Noninvasive, minimally disruptive sensors and systems that can detect and locate clandestine, unknown subterranean threats (tunnels and other objects of interest to law enforcement) within varied geologies of the southwest border.

BMD 1.2 - Cost-effective airborne sensors for better land border security to assist in locating illicit activities, materials, or their means of conveyances, including:

• Runway-agnostic unmanned aerial systems that could be evaluated on their ability to provide ground operators with situational awareness and airborne imagery of areas of

2014 Long Range Broad Agency Announcement 14-02 interest

• Unmanned systems development and demonstration for detecting, responding to, characterization or classification of threats to include illicit border crossings, drug trafficking, severe weather, and natural disasters

• Enabling technologies that will allow tactical, low-altitude unmanned aircraft systems to be operated safely, securely, and responsibly in the National Airspace System

• Strategies for long-term and economical operations and maintenance of unmanned aircraft systems, such as innovative uses of modularity, spares, and power management

BMD 1.3 - Small, covert sensors for detection and classification of personnel day or night. Low false/nuisance alarm rates and long battery or renewable energy lifetimes of a minimum of 6 months. Capability to exfiltrate information.

BMD 1.4 - Sensors for detection and/or tracking of personnel in dense foliage day or night.

Estimated procurement costs versus area coverage is an important consideration. Capability to exfiltrate information and suitable for four season weather. Battery or renewable energy lifetimes of a minimum of 6 months.

BMD 1.5 - Border Illegal Flow Pattern Recognition: Technology which accesses multiple data sets and applies an algorithm to identify existing patterns of border illegal flows, along with the confidence index of the correlation. An example of stimuli and outcomes could be there is a 90% correlation of decreased violence along the land border with increased interdiction rates. This would enable DHS to understand the threat landscape and potential use it has a basis for predictive analytics.

BMD 1.6 – Border Illegal Flow Prediction: Technology which accesses multiple data sets and applies an algorithm to predict where border illegal flows will shift under different circumstances, along with the confidence index of the prediction. An example of stimuli and outcomes could be there is a 95% confidence level increased enforcement action at ports of entry resulting in illegal flows shifting to the land between ports of entry in the immediate vicinity. This would enable DHS to ensure that resources between ports of entry are increased in the vicinity whenever increased enforcement actions at ports of entry are occurring.

BMD 1.7 – Border Illegal Flow Risk Assessment: Technology which accesses multiple data sets and applies an algorithm or suite of algorithms to analyze the vulnerabilities for border illegal flows based on force structure, along with the confidence index of the prediction. An example is exploring the resource allocation of agent patrols vs. technology surveillance assets for patrolling various zones, based on their detect/identify/track capabilities along with the need to execute interdiction actions. This would enable DHS to analyze multiple force laydowns in response to various threat environments and determining optimal resource allocation that would drive current deployment along with strategic planning.

BMD 1.8 – Forensic Analysis Tools: Technologies and methods to efficiently collect, analyze, and identify forensic properties such as pollen, material types, fingerprint, DNA, isotopic, and others.

2014 Long Range Broad Agency Announcement 14-02

Maritime Border Security

Promising maritime border security capabilities defined in the following categories will be required to demonstrate suitability of use including ease of connectivity and operational effectiveness. S&T is developing the Coastal Surveillance System (CSS) which employs open standards and selected technologies/capabilities/concepts must ensure connectivity to the CSS enterprise architecture and will undergo an interoperability assessment.

BMD 2.1 - Improved visualization and tools - enhancements to industry standard Ozone Widget Framework (OWF), common operating picture and toolset to incorporate new capabilities and provide better cross-domain support.

BMD 2.2 - Improved situational awareness by automated or assisted behavior analysis and alerting -tracking small boat activity, detecting anomalous and/or illegal behavior, and providing timely and actionable information in support of law enforcement and port security efforts.

BMD 2.3 - Improved quality of data, via sensor performance or near real-time processing to enable improved detection and tracking of small and large vessels by overcoming environmental clutter issues within the port/harbor as well as coastal environments.

BMD 2.4 - Concepts, methodologies, and/or technologies that utilize public as well as private databases, data sets, data collection devices, or sensors of opportunity to increase detection/tracking accuracy and/or the field of regard surrounding inland waterways, ports, harbors, and coastal regions.

BMD 2.5 - Improved communication devices or methods to enable simplified sharing of selected radar, video, and other information to tactical commanders.

CAPABILITY DEVELOPMENT SUPPORT (CDS) – OFFICE OF

STANDARDS

CDS Office of Standards provides technical assistance and policy guidance to the DHS Components on the development of voluntary consensus standards that meets their needs. Standards support the development of consensus-based measures- from basic specifications to performance criteria – that give DHS and its customers confidence that technology and systems will perform as required. CDS Office of Standards works across DHS and with external partners to build consensus and encourage the adoption of needed, voluntary standards.

CDS.01 – Accelerate the development and integration of consensus standards by researching and identifying standards gaps and developing road-maps and integration plans for development of standards in the areas of Digital Imaging and Communication Security, Response Robots to Nuclear Power Incidents, and First Responder standards.

CYBER SECURITY DIVISION

The Cyber Security Division focuses on research for advanced cyber security and information assurance solutions to secure the Nation’s current and future cyber and critical infrastructures

2014 Long Range Broad Agency Announcement 14-02 against persistent threats and dynamic attacks. This research is guided by the President’s National Strategy to Secure Cyberspace and Comprehensive National Cyber Security Initiative. These solutions include secure protocols, end system security, user identity and data privacy technologies, research infrastructure, law enforcement forensic capabilities, competitions, and education.

CSD.01 – Internet Infrastructure Security – including secure internet protocols including Domain Name System Security (DNSSEC) and Secure Protocols for Routing Infrastructure (RPKI and

BGPSEC).

CSD.02 – National Research Infrastructure for Cyber Security Experimentation - Effective, strongly grounded experimental research forms a key element of CSD’s strategy to address the nation’s critical cyber security challenges. To catalyze and support such research, CSD seeks to develop advanced experimental research tools, technologies, methodologies and infrastructures as broadly available national resources. Key to the success of this program objective will be the realization of experimental research infrastructures, capabilities, and approaches that reach beyond today’s state of the art. These infrastructures, together with similar broad-based objectives that transform discovery, validation, and ongoing analysis in an increasingly complex and challenging domain must provide, as examples:

• Support for multi-disciplinary, complex, and extreme scale experimentation;

• Support for emerging research areas such as specialized cyber-physical systems and cybersecurity relevant human behavior;

• The creation and capture of advances in scientific methodologies, experimental processes, and education; and

• Strategies for dynamic and flexible experimentation across user communities and infrastructure facilities.

CSD.03 – Homeland Open Security Technology – Open Source Security Technology to enable implementation and deployment of open source security technologies in Federal, State, and Local environments.

CSD.04 – Forensics support to law enforcement – including the research and development of tools and technologies that will allow investigators to visualize, analyze, share and present data derived from cell phones, GPS devices, computer hard drives, networks, and other digital media.

CSD.05 – Identity Management (IdM) - seeking tools, technologies, credential vulnerability studies, and other efforts that improve the security of identity management and access control in both cyber and physical environments. The mission of the IdM research projects is to develop, test, and evaluate interoperability, tools, technologies, standards conformance, and protocols for the purpose of managing user access within and outside of organizational boundaries. The foundational goal is to increase security and productivity while decreasing cost and security risks. The primary goals for the next 2-5 years are to develop tools for electronic, cloud-based identity vetting, and virtual credentialing and badging based on high assurance identity proofing.

CSD.06 – Data Privacy Technologies - seeking to develop a set of technologies and associated business processes which aid organizations in managing personally identifiable information (PII) in a manner that protects individual privacy consistent with applicable law, policy, and mission. Data Privacy tools and techniques that inherently provide privacy are critical enablers for information

2014 Long Range Broad Agency Announcement 14-02 sharing, as they automate control of privacy data and foster confidence that personal information is being maintained and utilized appropriately while minimizing privacy risk. Data Privacy projects support the application of technologies for federal, state, local, and critical infrastructure and key resource information sharing missions - by exploring, refining and integrating technologies and techniques, and piloting the results in an operational setting. The primary goals for the next 2-5 years are to develop tools and best practices that support the application and management of privacy technologies and tools, accountability of privacy data for the law enforcement missions in surveillance, data analytics, and information sharing.

CSD.07 – Software Assurance – The CSD objective in the area of Software Assurance is to develop and improve Software Analysis technologies, tools, and techniques to reduce the exposures and vulnerabilities in software. To address this objective, CSD is seeking research in areas such as:

software analysis techniques for vetting untrustworthy software to address Software Supply Chain Risk Management; secure coding techniques to assist developers with software development activities to improve coding practices; mobile app vetting capabilities; binary analysis capabilities;

and formal methods used for specification, development, and verification of software systems.

CSD.08 – Cyber Security Education – objective is to develop, demonstrate and transition substantive and adaptive cyber security education models that impact organizations and infrastructures/sectors for the better. These models should address key dimensions of the challenge, such as multiple age levels, cyber security across multiple operational domains, and different kinds of threats. An overarching objective of this work is to support development of “learning organization” capabilities across all kinds of organizations and infrastructures/sectors. The models and associated technologies need to support cyber security competitions, education and curriculum development, and workforce training and development needs. To address this objective, CSD anticipates cyber security research in areas such as:

• the coupling of operations with education and training;

• abstract learning versus learning with context;

• Bayesian learning (prior knowledge) and where and how it might be applicable;

• Incident response feedback systems, that drive subsequent training/learning directions;

• Regional education and learning models coordinating efforts across different kinds of organizations.

CSD.09 – Cyber-physical control and Critical Infrastructure Systems and Security – The intersections of cyber security and critical infrastructure is a growing vulnerability for the American homeland, characterized by tight coupling, coordination, and interconnections among sensing, communications, computational, control, information and physical resources. Their interconnections in particular form a complex system of systems, and the complexity of these systems and interconnections will continue to grow. The complexity of systems poses challenges in resiliency, vulnerability, threat, and recovery assessment. To address this area, CSD is interested in applied research addressing areas such as:

• Models, theories, methods, and tools to fully address the cyber security of cyber-physical systems, in a unified and integrated way;

• Analysis, understanding and control approaches at the intersection of security analysis and operations analysis, i.e. possible overlaps between control and critical infrastructure systems and their cyber security, industrial security and operations security capabilities;

• The interplay of control, business and consumer-facing systems, and the interplay between different critical infrastructure systems;

2014 Long Range Broad Agency Announcement 14-02

• Security architectures, in particular how different security approaches might best work to protect critical infrastructure systems.

CSD.10 – Internet Measurement and Attack Modeling Techniques—Security focused measurement and attack modeling for all aspects of cyberspace. This includes the Internet (e.g., ASNs, routers) as well as other devices (e.g. medical devices) or networks (e.g. ICS) that may connect to the Internet, via a static or dynamic (possibly intermittent) connection. Security focused measurement includes but is not limited to algorithms, tools, techniques, data and analysis for enabling security, from global scale to the individual user. Attack modeling includes not only models of various attacks, but models of how to secure a system from attacks, either internal or external, at scales that may include individuals, enterprises, or the entire Internet. There is also interest in models of attacks on systems that intermittently connect the Internet and how to secure such systems. The security focus of models is broadly interpreted, to include such topics as attack attribution, secure composition of systems, and other related topics.

CSD.11 – Securing the mobile workforce—Technologies to support flexible client-side security, including secure protocols to protect data flow to, within and out of the cloud; data integrity; user privacy constraints; forensics analysis to preserve digital evidence; and measurement systems to identify unauthorized activity.

CSD.12 – Insider Threat - research in the areas of understanding and identifying threats and potential risks, development of trustworthy systems with specific policies to hinder insider misuse, and remediation when insider misuse is detected but not prevented.

CSD.13 – Experiments and Pilots – Technologies developed through federally funded research requiring test and evaluation in experimental operational environments to facilitate transition.

CSD.14 – Research into the areas of: cybersecurity insurance and cyber behaviors (individual and organizational; criminal or terrorist in nature)

a) Economic, policy, and regulatory interactions in the promulgation and implementation of cybersecurity measures

b) Testing and demonstrating the utility of cyber economic incentives

c) Business models for cybersecurity investment and for cybercrime – the boundary between incentives and disincentives

d) Applications of modern game theory to cybersecurity

e) Cyber insurance and liability

CSD.15 – Data Analytics – The exponential increase in the volume of data created and transmitted worldwide over interconnected and interdependent cyberinfrastructures creates new challenges for cyber security. S&T is interested in technologies and tools to support the analysis of datasets whose size and complexity are beyond the ability of commonly used software tools to capture, manage, process, and interpret. These include but are not limited to:

• Threat discovery

• Automated or real-time analysis techniques

• Machine and self-learning algorithms

• Data visualization

• Resilience of physical and societal infrastructures to cyber threats

2014 Long Range Broad Agency Announcement 14-02

CSD.16 – Predictive Analysis-- Predictive Analysis, as applied to cyber security, is the ability to identify potential cyber threat vectors and determine the probable course of action for each threat. These findings should be presented automatically, with human-in-the-loop if desired, but not required. Presentation should be in an easily understandable format, to allow resource management to address threats as they evolve. Predictive Analysis may be applied at any phase or stage, from fully protected to compromise and recovery. All types of cyber threats may be considered.

CSD.17 - Distributed Denial of Service Defense – Denial of service attacks are pervasive and have the potential to disrupt critical network infrastructure. Topics of interest include:

• efforts that leverage existing policies and practices to mitigate DDoS attacks,

• techniques that adopt existing technologies for near term DDoS protection, and

• novel approaches for measuring and understanding DDoS attacks and new techniques for future

DDoS mitigation.

CSD.18 – Cloud Computing Security – Research and Development to build upon security in cloud based systems—including secure protocols to protect data flow to, within and out of the cloud; data integrity; user privacy constraints; forensics analysis to preserve digital evidence; and measurement systems to identify unauthorized activity.

CSD.19 – Next Generation Cyber Infrastructure – CSD’s Apex project is focused on capabilities for use in Finance Sector environments, but they can be applicable across multiple sectors. CSD requires capabilities in the following areas:

• Advanced Sensing Technologies, to include technologies which verify the presence or absence of unauthorized modifications to endpoints and behavioral modeling

• Situation Understanding, to include technologies to correlate sensor alerts and human inputs and present relevant observations for improved human understanding and characterize networks and network topologies

• Response and Recover technologies, to include those that enable rapid, policy-based execution of situation-specific responses (e.g. reconfiguring a sensor grid to clarify a situation)

• Advanced Network control planes, to include secure dynamic enclaves, secure routing, browsing and network essential services

EXPLOSIVES COUNTERMEASURES DIVISION

Explosives Countermeasures include the detection, mitigation, and response to explosive threats in all modes of transportation (Aviation, Maritime, Mass Transit, Highway, Freight Rail, and Pipeline). The Explosive Countermeasures Division seeks to improve detection, response, and defeat capability for homemade explosives (HME); improvised explosive devices (IEDs), vehicle borne (VBIED) and person borne improvised explosive devices (PBIED).

EXD.01 – Standoff Detection of Explosives: Technologies for the standoff detection of explosives and explosive devices related to PBIEDs and VBIEDs. The ideal system would detect diverse explosive signatures, including commercially available explosives, military explosives, and HMEs. Standoff Detection implies that both the detection equipment and operator are located at some distance (>1 m up to tens of meters) away from the subject or object under interrogation. Subtopics include:

2014 Long Range Broad Agency Announcement 14-02

(1) Integration of both multimodal and multispectral technologies for improved detection and/or imaging.

(2) Automated detection and/or identification capabilities associated with both imaging and spectroscopy.

EXD.02 – Trace Detection of Explosives: This subtopic includes detecting the broadest possible range of trace particle and vapor signatures in aviation security, facility protection, and mass transit security operations. Specific interests include handheld and benchtop explosives trace detection (ETD) systems, optical methods for quickly and quantitatively measuring trace contamination on a range of surfaces, advanced ETD system concepts, and technologies that improve sampling from passengers (e.g., hand swipes), clothing, baggage, and personal items such as electronic devices.

EXD.03 – Cargo Security:

Technologies proposed for cargo security must be cost-effective, high-throughput, and capable of efficiently processing incoming cargo spanning the range of sizes encountered in that mode of transportation.

EXD.04 – Data Fusion and Automated Detection for aviation cargo, checked baggage, carry-on baggage, personal check points and all surface intermodal concerns. Algorithms and techniques are particularly desired for detection fusion and automated alerting that combines a variety of detection modalities, including but not limited to X-ray, trace chemical detection, computed tomography (CT), and Advanced Imaging Technology (AIT) for the screening of passengers and video. Automated Target Recognition algorithms suited for analyzing real-time inputs from video-rate data (video, AIT, or other sources) are of particular interest.

EXD.05 – Advanced Detection Technologies: Development of robust, enhanced explosives detection methods to improve selectivity and sensitivity capabilities. Detection methods should be easily deployed, low cost, and require minimum training to operate. Technologies that provide orthogonal, secondary screening to resolve alarms in checked baggage or checkpoint scenarios are of special interest.

EXD.06 – Risk-Based Screening: Proof-of-concept demonstrations of hardware and/or software-based methods that can intelligently adjust parameters such as alarm thresholds in response to a change in threat level. Of particular interest are methods that could integrate screening data from multiple systems to reach an integrated threat decision.

EXD.07 – Improved X-Ray System Components: This subtopic includes but is not limited to superior X-Ray sources, collimation methods, other optical components, detectors, and any software or algorithms required to operate and interpret the data produced. Techniques that extract additional information (data regarding multiple energies, diffraction, phase, etc.) during X-Ray screening are of special interest.

EXD.08 – Canine Explosive Detection Technologies: Development of non-hazardous HME and conventional explosive training aids with a specific focus on pure odor materials, not pseudo scents or tagged odors. Operational efficacy, safety and cost are major metrics of success.

Technologies and methodologies that advance the capture of canine performance in controlled and operational environments representative of the expanse of the Homeland Security Enterprise at the federal, state and local level and facilitate scientifically significant data capture through independent operational test and evaluation. Specific focus on protocols that facilitate the

2014 Long Range Broad Agency Announcement 14-02 reduction in the number of trained odors required for comprehensive canine explosive detection proficiency.

EXD.09: Homemade Explosives: Develop threat information for HMEs such as intelligence related or hazard validation data and risk-based analysis tools. Develop technologies to inhibit the unlawful use and manufacture of HMEs, such as, precursor inhibitors to reduce the likelihood of use in an HME by eliminating the ability to weaponize a precursor while maintaining its original intent and safe use. Develop desensitization techniques of HME materials for safe movement and response measures for large volume disposal operations such as when HME is not containerized in domestic facilities to reduce the cost of public and private property damage. Develop response tools to impart energy but not detonate more sensitive HMEs such as TATP or HMTD.

Apex Screening at Speed

This portfolio covers the screening of passengers, their personal items, their carryon bags and associated secondary screening for an airport security checkpoint of the future. The checkpoint of the future, planned to be deployable in five years, seeks to improve passenger experience while enhancing detection capabilities. Specifically, EXD.10.1 – Checkpoint Passenger Screening: EXD invites white papers on technologies that allow for screening three hundred or more passengers per hour with minimal need for divestiture of headwear, footwear or personal items while providing detection up to the Transportation Security Administration’s (TSA) Tier IV security detection standards. The systems should be capable of being able to adapt, or upgrade, quickly to respond to emerging threats.

EXD.10.2 – Checkpoint Baggage Screening: EXD invites white papers on technologies that allow the processing of up to 600 bags per hour, without the need to divest laptops, liquids, aerosols, or gels from the bag being screened. Systems will have to meet TSA’s Tier IV detection standards.

EXD.10.3 – Special Purpose Screening: EXD also invites white papers on screening technologies that address niche detection requirements or secondary screening of passengers or their articles. Such technologies might include nuclear quadrupole resonance (NQR), non-contact or automated trace detection, and technologies that support the screening of items and people that alarm during the primary screening process.

EXD 10.4 – Algorithms & Software: EXD invites submissions pertaining to algorithms and software that will allow integration of sensors such as application programming interfaces (API’s), vendor independent detection algorithms, and test beds that can be used to evaluate compliance with Digital Imaging and Communications in Security (DICOS V02) and similar standards.

The Technologies developed under EXD.10.1 through EXD.10.4 should be compatible with standards and protocols in common use in aviation security, including but not limited to DICOS V02, TSA’s Security Technology Integrated Program (STIP), and TSA’s Dynamic Aviation Risk Management System (DARMS) initiatives. Offerors should include provisions for providing a

2014 Long Range Broad Agency Announcement 14-02 prototype of the associated hardware to a Government laboratory chosen by EXD for test and evaluation.

FIRST RESPONDERS GROUP

The First Responders Group identifies, validates, and facilitates the fulfillment of first responder capability gaps through the use of existing and emerging technologies, knowledge products, and the acceleration of standards. The First Responders Group focuses on: (1) developing tools, technologies, methodologies, standards, protocols, and guidance to enable improved communications interoperability for first responders; (2) providing first responder solutions for high-priority capability gaps through rapid prototyping; (3) maintaining a web portal that enables first responders to easily access and leverage Federal web services; (4) overseeing the National Urban Security Technology Laboratory, which provides a test and evaluation capability for DHS-developed technologies and systems; and (5) providing an assessment program for commercially available and emerging technologies.

FRG.01 – The ability to identify trends, patterns, and important content from large volumes of information from multiple sources (including non-traditional sources) to support incident decision-making. Improvements in this Capability can: (1) Prevent incident command and general staff from being overloaded with unmanageable amounts of incident data; (2) Allow incident commanders to synthesize and analyze information to make informed operational decisions. Capability Requirements:

(1) Tools to analyze incoming incident data in real-time to identify trends, patterns and anomalies; (2) Policies and standards to utilize such information to inform and improve decision making.

FRG.02 – The ability to share video from incident scene in a remote location to medical services personnel in a remote location. Improvements in this Capability can: (1) Gather EMS color requirements for compressed video; (2) result in improved compression for video streaming in order to transmit it over the limited available wireless bandwidth. Capability Requirements: (1) applications must retain color truth throughout the video system.

FRG.03 – The ability to analyze the performance of a video system’s transport component.

Improvements in this Capability can: (1) use different types of cameras (e.g., high definition, low definition) to identify the limits of camera use for streaming video (with or without compression) on a given network; (2) help define network bandwidth requirements for a video applications. Capability Requirements: (1) efficient use of bandwidth for a specific video application on a user’s given device.

FRG.04 – The ability of local responders to respond to and recovery from a radiological/nuclear incident. Improvements in this capability can: (1) Assist local responders in managing the complexity of the response; (2) Allow for complete characterization of the incident, including hazard identification;

(3) Provide capability to protect citizens, families, and responders in the initial response; (4) Provide initial medical care for survivors; (5) Provide long-term care for incident casualties and evacuees; (6) Allow for stabilization and control of the impacted area and infrastructure; and (7) Manage long term radiological clean-up and restoration of essential functions.

FRG.05 – The ability to monitor airborne radioactive fallout particles that have been released into the atmosphere, identifies the fallout composition/half-life, and accurately track its path and dispersion.

Improvements in this Capability can: (1) Provide real-time information for decision makers responsible for ordering evacuations and protective actions; (2) Allow for a rapid response coordination by identifying safe areas for resource staging and operations; (3) Provide citizens information about how to best protect themselves and their family; Capability Requirements (1) tracking information must be

2014 Long Range Broad Agency Announcement 14-02 available for access by local decision makers (2) information must have the ability to update in a reasonable timeframe to influence decisions being made.

FRG.06 – Flood Forecasting/Modeling: The ability to monitor the level of precipitation, runoff, and river water levels and flow rates for simulation and a minimum of five day flood forecasting, with daily update capability, and more frequently during actual floods. Improvements in this capability can: (1) Integrate new modeling methodology and/or very low cost sensors; (2) Localize water forecasts to specific geographies/known flood prone areas; (3) Integrate with the National Response Framework; 4) Work for both flood and drought; and (5) Integrate with FEMA’s Integrated Public Alert and Warning System (IPAWS) or other Public Statewide or local alerting systems.

8. SUBMISSION PROCESS AND CLASSIFIED INFORMATION

All LRBAA submissions must be made through the S&T BAA website at https://baa2.st.dhs.gov.

Select Proposal Submission from the side menu, then Register. You will need to know your company’s Tax Identification Number to complete the registration. Submissions will not be accepted from unregistered organizations. Once registered, log into the system and select BAA 14-02. Contact technical support for the website at dhsbaa@reisys.com or (703) 480-7676.

Oral presentations are not permitted at any point during the LRBAA process. A White Paper submission is mandatory. Full Proposals will be rejected outright if they are not preceded by a White Paper. The Offeror must receive an official notification letter from the Contracting Officer regarding the White Paper’s evaluation results prior to submitting the corresponding Full Proposal.

There is no limit to the number of different White Papers a particular Offeror may submit;

however, if a White Paper is not encouraged, do not resubmit the same one or a slightly modified version of it. If an Offeror feels that a White Paper fits multiple topics, select the one topic that best fits the proposed research.

In teaming situations, the lead organization must remain the same on both the White Paper and, if selected, the Full Proposal. Any Full Proposal submitted by an entity other than the prime at the time of the White Paper submission will be rejected.

Submissions will be protected from unauthorized disclosure in accordance with FAR 15.207, applicable law, and DHS regulations. Offerors are expected to mark appropriately each page of their submissions that contains proprietary information.

Classified Information

Only unclassified pre-submission inquiries, White Papers, or Full Proposals may be submitted via the LRBAA website. Classified information must not be transmitted via the LRBAA website. Instructions for submitting classified information are provided below.

The Government encourages contractors to work at the unclassified level whenever possible.