LRBAA 18-01 Amendment 3 - 03032020.pdf

2018 Long Range Broad Agency Announcement 18-01

Department of Homeland Security (DHS)

Science and Technology (S&T) Directorate

Long Range Broad Agency Announcement (LRBAA) 18-01

AMENDMENT 3

LRBAA 18-01

TABLE OF CONTENTS

SECTION LINKED TITLE

1 LRBAA INTRODUCTION

2 PROCESS OVERVIEW

3 ELIGIBILTY

4 RESEARCH TOPICS

5 PROCESS DETAIL

6 TERMS AND CONDITIONS

7 CONTACTS

8 LRBAA ATTACHMENTS

1 LRBAA Introduction

The Department of Homeland Security (DHS), Science and Technology (S&T) Directorate announces a modernized Long Range Broad Agency Announcement (LRBAA) featuring improved communications, transparent needs, submission options, and a faster response to your submissions. The LRBAA’s purpose is to fund scientific and technical projects across a spectrum of science and engineering disciplines that significantly improves or increases a capability to the Department’s operational environment and the Homeland Security Enterprise.

DHS S&T is interested in receiving research concept materials that meet one of the following three types of research areas:

• Type I (New Technologies): Scientific study and experimentation directed towards advancing unique state-of-the-art research, technology development, and demonstration. Emphasis for this type classification is on research and development, with technology demonstration in an operational environment;

• Type II: (Unique Prototype Technologies) Includes the development of prototypes that require a proof of concept, including technology demonstrations in an operational environment; and

• Type III: (Advance State of the Art Technology Improvements) Increases scientific discovery or improvements in technology, materials, processes, methods, devices or techniques. Includes technology demonstration in an operational environment.

LRBAA awards may consist of basic and applied research contracts, grants, cooperative agreements and/or other transactions agreements, to include technology development and demonstration. This LRBAA will NOT pursue the following solutions:

• Technical, engineering, or other types of support services, inclusive of “contracting”-type services;

• Evaluation of another contractor’s performance/program;

• Research consortia, association, partnership or a combination, as of businesses or investors, for the purpose of engaging in a joint research and development venture for a particular purpose;

• Mature products; or

• Development of a specific system or hardware solution.

The DHS S&T LRBAA 18-01 is a five (5) year announcement and will remain open until June 3, 2023, 11:59PM, Eastern Daylight Time (EDT). This announcement may also contain topics with a limited open submission period. Industry Engagement materials are due by June 3, 2023, 11:59PM, EDT or as indicated in this announcement in order to be further considered for an invitation to participate in the LRBAA’s Phase I-Virtual Pitch and Phase II-Written Proposal.

Please be advised that the response dates associated with Phase I-Virtual Pitch and Phase II- Written Proposal will be the date specified in the notification letter provided to you and not the LRBAA completion date of June 3, 2023, 11:59PM, EDT, referenced above.

Technical and cost proposal (or any other material) development costs will not be reimbursed.

Technical and cost proposals (or any other material) submitted in response to this LRBAA will not be returned. However, depending on the markings on the materials, DHS S&T will adhere to FAR policy on handling source selection and proprietary information. It is the policy of DHS S&T to treat all materials as proprietary information and to disclose their contents only for the purposes of evaluation. Please note only unclassified Materials may be submitted via the LRBAA website. Classified information must not be transmitted via the LRBAA website.

Awards under the LRBAA will depend on the quality of proposals received and the availability of funds. The Government reserves the right to select all, some, one or none of the invited proposals received. , and/or to accept proposals in their entirety or to select only portions of proposals for award. The Government reserves the right to award without exchanges or discussions. Award decisions will result from a scientific and best value determination as further detailed in this announcement. Awards may take the form of Federal Acquisition Regulation (FAR) –based contracts; or grants, cooperative agreements, Other Transaction Agreements (OTA), or interagency agreements to appropriate parties should the situation warrant.

The applicable laws and regulations governing a particular award will depend on the selected award type as referenced in the previous paragraph. DHS S&T will also facilitate access to laboratory and operationally relevant test and evaluation facilities, where reasonably available. In the event that an Offeror or Offeror’s subcontractor is a Federally Funded Research and Development Centers (FFRDC), Department of Energy National Laboratory, or other federal entity, DHS S&T will work with the appropriate sponsoring agency to issue an interagency agreement pursuant to the Economy Act (31 USC 1531) or other appropriate authority. In many cases, other elements of the U.S. Government are pursuing related technologies. In such cases, S&T will leverage those technology development efforts wherever it is practicable and efficient to do so.

DHS S&T LRBAA Submission Portal Website: https://baa2.st.dhs.gov

2 Process Overview

Process-Overview

The LRBAA begins with an Industry Engagement period. During the Industry Engagement period Project Managers (PMs) engage with interested sources in order to identify a broad range of qualified sources in the scientific and industrial community. Qualified sources may be invited by a S&T Scientific Review Officer to participate in the two-phase proposal process consisting of a Phase I-Virtual Pitch and a Phase II-Written Proposal. Submission requirements and details are further outlined in this announcement.

A Phase I-Virtual Pitch proposal will not be accepted from any Source that has not been invited to submit. Offerors that submit to and participate in the Phase I Proposal-Virtual Pitch may be invited by a Scientific Review Officer to participate in the Phase II-Written Proposal. Unique proposals submitted to the Phase I-Virtual Pitch that meet high priority technology requirements https://baa2.st.dhs.gov/ but exceed available funding may not be immediately invited to submit a Phase II-Written Proposal. Phase II-Written Proposals will not be accepted from an Offeror that has not been invited to submit.

The below chart maps the DHS S&T LRBAA process from the initial submission to award. The three primary submission and evaluation processes are indicated in orange and contain hyperlinks to submission, evaluation and administrative details. (Also see Section 5)

Long Range Broad Agency Announcement

Process Flow Chart

Learn More-Click on Orange Boxes

Submission and Evaluation Timeframes

The following timeframes have been established for the LRBAA submission and evaluation process. Sources and Offerors should allow 2-5 days at the end of each assessment or evaluation period for administrative processing and notification. In some instances, the assessment or evaluation period may be extended due to the availability of subject matter personnel required

Sources Submit

Research

Offeror Material

Review Officer

Phase II-Written Proposal

Written Proposal 25 pages

Prepare & Submit Written Proposal

Performs Qualified Source Assessment

Phase I-Virtual Pitch Industry Engagement for the Peer Review Panel. DHS S&T Program Managers will work closely with sources and offerors to keep them informed of their submission and assessment status.

Process Timeframe Industry Engagement Assessment Response and follow-up by S&T within 10 Days Part I-Virtual Pitch presentation material Must be submitted to the LRBAA Submission

Portal within 14 Days of written notification Part I-Virtual Pitch and Evaluation Scheduled within 21 Days of the presentation material’s due date Part II-Written Proposal Must be submitted to the LRBAA Submission

Portal within 45 days of written notification Part II-Written Proposal Evaluation Completed by S&T within 21 days of the written proposals due date

NOTE: The Government may obtain support from both Federal SMEs and support contractor when completing LRBAA proposal evaluations. Support contractors may be used to provide administrative assistance to federal employees who are involved in the evaluation of full proposals. Administrative assistance would include tracking the proposals through the review process and assigning proposals by system assigned number or proposal title. Contractors will have limited system access which does not include the capability to read or review proposals.

As the activities typically carried out under the LRBAA do not involve advisory and assistance services (A&AS) contractors evaluating or analyzing proposals, the limitation in FAR 37.203(d) will not apply. If the conflict described in FAR 9.505-4 is found to exist, S&T will ensure that the contractors conclude the necessary agreements, which are kept on file, before proprietary information is shared.

3 Eligibility

All responsible sources are eligible to submit Industry Engagement materials under this LRBAA.

Foreign or foreign-owned sources are advised that their participation is subject to foreign disclosure review procedures, applicable export control laws, and other applicable federal laws, regulations, and policies pertaining to U.S. Government business with foreign entities.

Potential sources may include independent organizations, single entities, or teams from private sector organizations, Government laboratories, airport authorities, FFRDCs, and academic institutions. FFRDCs, including the Department of Energy National Laboratories and Centers, are eligible to respond to this LRBAA individually or as team members with eligible principal sources, as long as they are permitted to respond to such announcements under their applicable sponsoring agreements.

DHS S&T particularly encourages submissions from small businesses. However, no set aside of any kind will be made. Historically Black Colleges and Universities (HBCUs), Minority Institutions (MIs), small businesses, small disadvantaged businesses, women-owned small businesses, service-disabled veteran owned small businesses, and HUBZone small businesses are encouraged to participate in the process and to join other entities as team members.

4 Research Topics

Protecting our nation can be complex—from rapidly evolving threats to longer-term efforts that require our attention. To fully understand the needs of our operational components, DHS S&T and Components routinely identify priority needs that require R&D solutions. The current six key mission areas are:

Securing Aviation Protecting from Terrorist Attacks Securing Borders Securing Cyberspace Preventing Terrorism Managing Incidents

These priority needs drive DHS’s R&D investments. DHS S&T and Components look for the following types of solutions:

1. Over the horizon, future innovations that will transform the way homeland security operators accomplish their missions.

2. Near-term capabilities that will solve current operational challenges and meet the Department’s R&D needs.

3. New applications of technologies to respond to emerging threats to the homeland.

For more information about how DHS compiles these needs, visit our website at https://www.dhs.gov/science-and-technology/ipt and https://www.dhs.gov/publication/stfrg-project-responder-5-report to download our annual Integrated Product Team and Project Responder reports describing the process and priority capability needs in further detail.

(Note: Additional details for each topic listed below can be found on the DHS S&T LRBAA Submission Portal located at https://baa2.st.dhs.gov/)

SECURING AVIATION (SEC AVN)

The aviation security environment presents a constant demand to detect evolving threats while moving passengers, baggage, and cargo safely and quickly through checkpoints and promoting a positive passenger experience. The end goal is to provide non-invasive security screening at our nation’s airports while preventing terrorist attacks and ensuring speedy and lawful trade and travel.

Priority R&D needs and topics for securing aviation are:

http://www.dhs.gov/science-and-technology/ipt http://www.dhs.gov/publication/stfrg-https://baa2.st.dhs.gov/

High-Throughput Cargo Screening (01)

Cost-effective Electronic Imaging for Bulk Air Cargo (02)

Passenger Identification and Vetting (03)

Rapid Detection and Alarming of Explosives (04)

SEC AVN 04-01: Canine R&D Structure and Function

TOPIC DESCRIPTION: Canine R&D Structure and Function, part of the program focusing on the more basic understanding of canine behavior, genetics, olfaction, and cognition of this detector to improve operational efficiencies and training methods.

TOPIC RESEARCH SOUGHT: Type I

TRL SOUGHT: 4 TRL at CONCLUSION: 7

END OBJECTIVE: Tools, techniques, and knowledge to better understand, train, and utilize the detection canine, and improve proficiency of the DHS/Homeland Security Enterprise (HSE) detection canine teams.

SEC AVN 04-02: Development and Testing of Canine Training Aids

TOPIC DESCRIPTION: Development and Testing of Canine Training Aids, specifically targeting the creation of low cost, non-hazardous emerging threat and conventional explosive training aids, with state-of-the-art laboratory technology for odor validation to the level of canine detection. The program is also interested in odor generalization analysis studies to reduce requisite numbers of trained odors.

TOPIC RESEARCH SOUGHT: Type II

TRL SOUGHT: 4 TRL at CONCLUSION: 7

END OBJECTIVE: S&T goals are to provide our customer base - TSA and the Homeland Security Enterprise (HSE) - with the tools, techniques, and knowledge to better understand, train, and utilize the detection canine and improve proficiency of the DHS/HSE detection canine teams. Provide an enduring research and development capability to the Homeland Security Enterprise with a unique focal point and knowledge base for detection canines by establishing a scientifically rigorous, statistically significant approach for the detection canine community that is currently absent in the industry.

SEC AVN 04-03: Independent Operational Test and Evaluation for Technologies and Methodologies That Advance Detection Canine Performance

TOPIC DESCRIPTION: Technologies and methodologies that advance detection canine performance in controlled and operational environments representative of the Homeland Security Enterprise at the federal, state, and local level and facilitate scientifically significant data capture through independent operational test and evaluation.

TOPIC RESEARCH SOUGHT: Type III

TRL SOUGHT: 5 TRL at CONCLUSION: 7

END OBJECTIVE: S&T's goals are to provide our customer base - TSA and the Homeland Security Enterprise (HSE) - with the tools, techniques, and knowledge to better understand, train, and utilize the detection canine, and improve proficiency of the DHS/HSE detection canine teams. Provide an enduring research and development capability to the Homeland Security Enterprise with a unique focal point and knowledge base for detection canines by establishing a scientifically rigorous, statistically significant approach for the detection canine community that is currently absent in the industry.

SEC AVN 04-08: Enhanced Contact and Non-Contact Trace Explosives Sampling and Detection

TOPIC DESCRIPTION: The primary objective of this LRBAA is to develop enhanced contact and non-contact trace explosives sampling methods and prototypes that are seamlessly integrated with or integration-ready with currently deployed Explosives Trace Detectors (ETDs) and/or Next Generation ETDs. The non-contact sampling methods and prototypes are developed for use in cargo, checked baggage, and or checkpoint screening in aviation security environments.

Currently, contact sampling (by swabbing) in aviation security environments requires divestiture and has limited throughput and detection libraries. Improvements to contact trace sampling has the promise of the ability to detect more threats of interest. Non-contact sampling technologies of both vapor and particulates have the potential to overcome these limitations by:

• Enlarging total surface areas of the objects undergoing screening,

• Minimizing operator errors during automatic or semi-automatic sampling processes

• Enhancing passenger experiences

To realize the full potential of contact and non-contact sampling, candidate technologies must address the following challenges:

1) Have high efficiencies in liberating, entraining, and collecting explosive traces in both vapor and particulates

2) Broaden amenability to variable surface types (e.g. plastics, muslin, ballistic nylon, and clothing) yet maintain high collection efficiencies across these surface types

3) Not causing damage to the surfaces undergoing screening

4) Not contaminating the areas surrounding the objects undergoing screening

5) Optimize collection efficiencies for objects with varying shapes and sizes

6) Have provisions for the prototypes to seamlessly integrate with currently deployed ETDs and/or Next Gen ETDs.

7) Provide the ability to detect a broader range of threats than currently available by currently deployed ETDs (especially for contact sampling methods).

TRL SOUGHT: 5 TRL AT CONCLUSION: 7

TRANSITION CUSTOMER or PROGRAM: TSA Requirements and Capabilities Analysis

END OBJECTIVE: Enhanced contact and non-contact trace explosives sampling methods and prototypes that are seamlessly integrated with or integration-ready with currently deployed Explosives Trace Detectors (ETDs) and/or Next Generation ETDs. The methods and prototypes are expected to be developed and undergo Developmental Test and Evaluation at a Government laboratory. Upon successful completion of Developmental Testing and Evaluation (DT&E) phase(s), the method/prototype may be selected for advancement to Integration Test and Evaluation.

Distinguishing Threats from Non-threats on Passengers (05)

Efficient and Accurate Detection of Complex Threat Concealment on Passengers and Carried Property (06)

PROTECTING FROM TERRORIST

ATTACKS (PROT)

Protecting the American people from terrorist threats and attacks is the reason DHS was created and remains our highest priority. Terrorists seek sophisticated means of attack, including chemical, biological, radiological, nuclear, and explosive (CBRNE) weapons, and cyber-attacks. Biological threat security, in particular, focuses around the prevention of release as well as detection of and protection against biological threats and hazards known to pose particularly high risk to the nation.

Priority R&D needs and topics are:

Personal Protective Equipment for all CBRNE Hazards (01)

Modeling and Predictive Analytics for Decision Making (02)

Disease and Biological Threat Detection, Identification, and Classification in Field Operational Environments (03)

Biological Attack Verification (04)

SECURING BORDERS (SEC BORD)

Our borders are vital economic gateways that account for trillions of dollars in trade and travel each year. Border security presents complex challenges due to geographic locations, modes of transportation, trade and travel volume, and transnational criminal organizations.

DHS works to secure our borders through the deployment of personnel, infrastructure, and technology— including sensors, radar, and aerial assets—and investments to modernize the ports of entry.

Priority R&D needs for border security are:

Cross-border Tunnel Detection, Surveillance, and Forensics (01)

Infrastructure Tunnel Surveillance (02)

Integrated and Improved Sensors, Systems, and Data

(03)

SEC BORD 03-05: Air Based Technologies

TOPIC DESCRIPTION: The Air Based Technologies (ABT) program advances manned and unmanned aircraft technology to improve the mission capability of the DHS operational components as well as the extended Homeland Security Enterprise (HSE).

Within the ABT program, there are three focus areas:

1) ISR Sensors;

2) Small UAS (Suas) Technology; and

3) C4 Operations (Command, Control, Communications, and Computers)

The focus area of ISR Sensors seeks solutions, processes, and means to advance the development and transition of ISR sensor technology applicable for HSE operational scenarios.

TRL SOUGHT: 1-7 TRL at CONCLUSION: 8

END OBJECTIVE: The end objective of any ABT project is to transfer the advancement of aircraft technology (manned and/or unmanned) to enhance the mission capability of the DHS Operational Components and the extended HSE. The enhancement must be operationally relevant, measurable, beneficial, and consistent with the documented priorities and needs of the mission partner.

Actionable Intelligence Gathering and Sharing (04)

SEC BORD 04-02: Non-Intrusive Screening to Detect Synthetic Opioids and Other Illicit Drugs

TOPIC DESCRIPTION: Illicit drugs, such as fentanyl and other synthetic opioids, are entering the US at alarming rates. DHS requires the ability to non-intrusively screen bulk packaged materials (individual parcels/packages, mail bags, cargo, or containers) to detect synthetic opioids and other illicit drugs being smuggled into the United States at International Mail Facilities (IMFs), Express Consignment Centers (ECCs), and Border Ports of Entry (BPE). Topic seeks technologies that result in improvements to screening capabilities for end-users to include (1) advanced technologies that offer novel improvements or approaches to three-dimensional imaging; (2) algorithms or other analytical approaches to assist in operators in anomaly detection and reduce false alarms; and (3) technologies that will enable end-users to discriminate illicit materials from lawful materials to resolve alarms. Technologies are sought that enable end-users to conduct rapid, high-throughput inspection operations with minimal disruption to the flow of commerce and can be readily integrated into current Customs and Border Protection (CBP) field inspection operations.

TRL SOUGHT: 4-7 TRL at CONCLUSION: 6-8

END OBJECTIVE: A technology that improves non-intrusive screening capabilities to detect and interdict illicit drugs with minimal disruption to the flow of commerce, is likely to be adopted by end users, and has a path to transition and/or commercialization.

Dark Aircraft and Vessel Detection, Tracking, and Interdiction (05)

SEC BORD 05-01: Sensors for Unmanned Maritime Systems

TOPIC DESCRIPTION: DHS Science & Technology seeks innovative, capable, and reliable sensors to mount on small, commercially available unmanned maritime sensor platforms. The sensors are envisioned to be suitable for the size of the platform, require minimal power (less than 1,000 KVA), capable of functioning above and/or below the surface (as appropriate for the sensor type), and able to be integrated with the platform’s communication system using non-proprietary data formats. Sensors are expected to surveil the surface and/or subsurface for a variety of threats (i.e. fast boats, chemical spills, subsurface vehicles, obstacles, etc.). Sensors are also required to classify the detected object. Sensor system need to be less than 3 kg and marinized for ocean environments.

TRL SOUGHT: 7-9 TRL at CONCLUSION: 8-9

END OBJECTIVE: DHS S&T seeks TRL 7-9 technologies to provide sensor capability to existing unmanned maritime system platforms. In the end state, sensors and sensors platforms are envisioned to integrate with existing government command and control systems to aid in the detection, classification, and resolution of maritime threats.

Expedited People Screening (06)

Maritime Surveillance and Communications in Remote Environments (07)

SECURING CYBERSPACE (SEC CYB)

DHS has identified strengthening the security and resilience of cyberspace as a priority in its Quadrennial Homeland Security Review efforts. Priority areas for safeguarding and securing cyberspace are:

• Strengthen the security and resilience of critical infrastructure

• Secure the federal civilian government information technology enterprise

• Advance law enforcement, incident response and reporting capabilities

• Strengthen the ecosystem:

o Drive innovative and cost effective security products, services and solutions throughout the cyber ecosystem o Conduct and transition research and development, enabling trustworthy cyber infrastructure o Develop skilled cybersecurity professionals o Enhance public awareness and promote cybersecurity best practices o Advance international engagement to promote capacity building, international standards and cooperation

DHS S&T identifies, develops and delivers new cybersecurity technologies, tools, techniques, and next-generation capabilities that enable DHS and the nation to defend and secure current and future critical systems and networks against cyberattacks. We leverage public-private partnerships to identify real-world requirements for innovative technology solutions, which are developed with the partners and transitioned into the marketplace. Some examples of priority cybersecurity R&D needs include:

• Distributed cloud-based communications and monitoring

• Industrial control systems, cyber sensors, analytics, and prevention

• Metrics for cybersecurity effectiveness, severity, and comparison

• Data capture of networked devices for forensic examination Website: www.dhs.gov/cyber-research

Distributed Cloud-based Communications and Monitoring – Associated/Related Efforts (01)

Human Aspects of Cybersecurity-Associated/Related Efforts (02)

SEC CYB 02-03: Cyber Risk Economics (CYRIE)

TOPIC DESCRIPTION: Cybersecurity is a multidimensional problem that demands interdisciplinary attention. The CYRIE program supports research into the business, legal, technical, and behavioral aspects of the economics of cyber threats, vulnerabilities, and controls. CYRIE R&D emphasizes empirically based measurement, modeling, and evaluation of:

• Investment into cybersecurity controls (technology, regulatory, and legal) by private-sector, government, and private actors

• Impact of investment on the probability, severity, and consequences of actual risks and resulting cost and harm

• Value of the correlation between business performance measures and evaluations of cybersecurity investments and impacts

• Incentives to optimize the investments, impacts and value basis of cyber risk management

TRL SOUGHT: 2-5 TRL at CONCLUSION: 6

END OBJECTIVE: Priority R&D needs for this program are analytics and metrics for cybersecurity effectiveness, severity, and comparison. The CYRIE program endeavors to improve value-based decision making by those who own, operate, protect, and regulate the nation's vital data assets and critical infrastructure. As such, the program looks beyond the traditional economics view of incentives for cybersecurity, where individuals are assumed to be rational actors who know how to maximize their well-being, and considers a broader array of factors that include business, legal, technical, and behavioral factors.

In this way, CYRIE R&D can more effectively address strategy and tactics for cyber risk avoidance, acceptance, mitigation, and transfer.

Network and Systems Security-Associated/Related Efforts (03)

SEC CYB 03-01: Distributed Denial of Service Defense (DDoSD)

TOPIC DESCRIPTION: Distributed Denial of Service Defense and Telephony Denial of Service Defense (DDoSD/TDoSD) – Denial of service attacks are pervasive and have the potential to disrupt critical network infrastructure. Proposals that identify, provide situational awareness for, mitigate, provide recovery techniques, or protection for networks such as the Internet, enterprise networks, emergency communications [e.g. Next Generation 9-1-1 (NG911)], or other critical infrastructure networks are of interest. Situational Awareness, identification of, mitigation, recovery, and protection for communication channels such as voice, text, video, or other communication that may be received by NG911 are also of interest.

TRL SOUGHT: 4 or above TRL at CONCLUSION:8-9

END OBJECTIVE: The end goal is mitigation of Distributed Denial of Service (DDoS) attacks or protection for relevant networks and communication channels from Denial of Service attacks.

Efforts that provide tools and/or techniques for situational awareness and identify Denial of Service (DoS) attacks on relevant networks and communications channels, including differentiating between DDoS and other disruptions on relevant networks are of interest. These disruptions may occur at various layers of the network.

Efforts that provide mitigation techniques/tools, recovery techniques/tools, or protection to relevant networks and communication channels are also of interest. These efforts may leverage existing policies and practices or adopt existing technologies for near term protection. Novel approaches for understanding and mitigating new forms of DDoS against relevant networks and communication channels are encouraged.

SEC CYB 03-02: Federated Enterprise Environments (formerly Cloud Computing Security)

TOPIC DESCRIPTION: Research and Development to build upon security in Federated Enterprise Environments including secure protocols to protect data flow to, within and out of the federated environment;

command and control (C2) infrastructure for federated environments; incorporation of adaptive defenses into federated environments; preserving data integrity; privacy constraints; privacy-preserving computation/contract generation; and systems to identify unauthorized activity.

TRL SOUGHT: 4-7 TRL at CONCLUSION: 8

END OBJECTIVE: Research and development results of this topic should provide innovative technologies, techniques, and processes towards the creation, operation, and maintenance of federated enterprise environments and the related C2 infrastructure. Objectives include enabling local decision making given global knowledge and the seamless incorporation of various cybersecurity technologies and techniques (Moving Target/Dynamic/Adaptive Defenses, privacy preserving and multi-party computing, deception, etc.) into federated enterprise environments. Results are also sought to protect any cloud-based infrastructure that enables federated enterprise environments. Results are also sought to protect any cloud-based infrastructure that enables federated enterprise environments.

SEC CYB 03-04: Predictive Analytics

TOPIC DESCRIPTION: Predictive Analysis, as applied to cybersecurity, is the ability to identify potential cyber threat vectors and determine the probable course of action for each threat.

TRL SOUGHT: 4 or higher TRL at CONCLUSION: 8-9

END OBJECTIVE: Predictive Analysis, as applied to cybersecurity, is the ability to identify potential cyber threat vectors and determine the probable course of action for each threat. These findings should be presented automatically, with human-in-the-loop if desired, but not required. Presentation should be in an easily understandable format, to allow resource management to address threats as they evolve. Predictive Analysis may be applied at any phase or stage, from fully protected to compromise and recovery. All types from fully protected to compromise and recovery. All types of cyber threats may be considered.

SEC CYB 03-05: Information Marketplace for Policy and Analysis of Cyber- risk & Trust

TOPIC DESCRIPTION: The Information Marketplace for Policy and Analysis of Cyber-risk & Trust (IMPACT) project supports the global cyber risk research community by coordinating and developing real world data and information sharing capability tools, models, and methodologies. To accelerate solutions around cyber risk issues and infrastructure security, the IMPACT project enables empirical data and information sharing between and among the global cybersecurity research and development (R&D) community in academia, industry, and government. Importantly, IMPACT also addresses the cybersecurity decision-analytic needs of Homeland Security Enterprise (HSE) customers in the face of high volume, high-velocity, high-variety and/or high-value data through its network of Decision Analytics-as-a-Service Providers (DASP). These resources are a service technology or tool capable of supporting the following types of analytics: descriptive (what happened), diagnostic (why it happened), predictive (what will happen) and prescriptive (what should happen).

END OBJECTIVE: The Department of Homeland Security (DHS) Science and Technology Directorate's (S&T) Office of Mission Capability Support (MCS) Physical and Cyber Security (PCS) Division seeks to coordinate, enhance, and develop advanced data and information sharing tools, datasets, technologies, models, methodologies, and infrastructure to strengthen the capabilities of national and international cyber risk R&D. These data sharing components are intended to be broadly available as national and international resources to bridge the gap between producers of cyber risk-relevant ground truth data, academic and industrial researchers, cybersecurity technology developers, and decision makers to inform their analysis of and policymaking on cyber risk and trust issues.

SEC CYB 03-06: National Research Infrastructure of Cyber Security Experimentation

TOPIC DESCRIPTION: When new or updated tools and techniques are developed, the first step is to test them in a restricted environment. Testing always reveals subtleties in the environment that mandate changes to any new tool or technique. The DETER is such an environment and is required for testing, especially for Distributed Denial of Service tools and techniques as they are developed.

TRL SOUGHT: 8-9 TRL at CONCLUSION: 9

END OBJECTIVE: The primary objective is to have a mature testbed that can be used to test and validate claims from various projects, in particular the DDoSD projects.

The results of this topic will catalyze and support the research and development of advanced experimental research tools, technologies, and methodologies as broadly available national resources. Indicators of the success of this program objective will be the realization of experimental research capabilities and approaches that reach beyond today’s state of the art.

SEC CYB 03-07: IMPACT Data Catalogue

TOPIC DESCRIPTION: The Information Marketplace for Policy and Analysis of Cyber-risk & Trust (IMPACT) is a data catalogue with access protections.

TRL SOUGHT: 8-9 TRL at CONCLUSION: 9

END OBJECTIVE: The end objective is to have data available for research, development, testing and training. The data shall be managed for access and to meet all data provider requirements.

The Information Marketplace for Policy and Analysis of Cyber-risk & Trust (IMPACT) project supports the global cyber-risk research community by coordinating and developing real world data and information sharing capabilities, tools, models, and methodologies. To accelerate solutions around cyber-risk issues and infrastructure security, the IMPACT project enables empirical data and information sharing between and among the global cybersecurity research and development (R&D) community in academia, industry, and government. Importantly, IMPACT also addresses the cybersecurity decision-analytic needs of Homeland Security Enterprise (HSE) customers in the face of high volume, high velocity, high variety, and/or high value data through its network of Decision Analytics-as-a-Service Providers (DASP). These resources are a service technology or tool capable of supporting the following types of analytics: descriptive (what happened), diagnostic (why it happened), predictive (what will happen), and prescriptive (what should happen).

Mobile Security-Associated/Related Efforts (04)

SEC CYB 04-02: Mobile Security & Resiliency R&D

TOPIC DESCRIPTION: The research and development of creating or enhancing technologies to enable the secure and/or resilient use of mobile ecosystem technologies in support of the DHS mission. Areas of interest include: 5G, mobile supply chain, security analysis, mobile infrastructure resilience, emergency communications, mobile vulnerability analysis, mobile communication security protocol analysis, and security.

TRL SOUGHT: 3 TRL at CONCLUSION: 7

END OBJECTIVE: The development of technologies that secure and add resilience to the mobile ecosystem that support DHS use cases.

Critical Infrastructure – Associated/Related Efforts (05) (Including Industrial Control Systems, Cyber Sensors, Analytics, and Prevention)

Software Assurance– Associated/Related Efforts (06)

SEC CYB 06-01: Software Assurance

TOPIC DESCRIPTION: The research and development of tools and techniques to reduce vulnerabilities in software and to improve how security is addressed in the process of developing and vetting software applications.

TRL SOUGHT: 6 or higher TRL at CONCLUSION: 9

END OBJECTIVE: Develop or provide software assurance tools, including making combinations of tools easier to use and to understand the results of such tools. This may be provided as a cloud service or as a stand-alone product. Both static and dynamic analysis tools or access to tools are desired. Code coverage metrics should be provided for any tools proposed or supported.

Additional desired activities include improving the software assurance ecosystem in novel or unique ways.

This allows for a broad spectrum of activities, limited only by the creativity of the proposer.

Cyber Security Outreach – Associated/Related Efforts (07)

SEC CYB 07-01: Cyber Security Education

TOPIC DESCRIPTION: Applied research in key education and training areas to ensure the nation has a highly skilled cybersecurity workforce is important to maintaining its systems and networks and combating future cyberattacks. Other areas of interest include:

• The coupling of operations with education and training

• Abstract learning versus learning with context

• Bayesian learning (prior knowledge) and where and how it might be applicable,

• Incident response feedback systems, that drive subsequent training/learning directions

• Regional education and learning models coordinating efforts across different kinds of organizations

END OBJECTIVE: The objective is to develop, demonstrate, and transition substantive and adaptive cyber security education models that impact organizations and infrastructures/sectors for the better. These models should address key dimensions of the challenge, such as multiple age levels, cyber security across multiple operational domains, and different kinds of threats. An overarching objective of this work is to support development of "learning organization" capabilities across all kinds of organizations and infrastructures/sectors. The models and associated technologies need to support cybersecurity competitions, education and curriculum development, and workforce training and development needs.

Cybersecurity for Law Enforcement-Associated/Related Efforts (08) (Including Data Capture of Networked Devices for Forensic Examination)

Cyber Enabled Networked Physical Systems Security (09)

PREVENTING TERRORISM (PREV)

A hallmark of homeland security, the prevention of terrorist attacks runs through the mission of every component within DHS. Terrorist tactics continue to evolve and the threat of terrorism has become increasingly difficult to detect.

Priority R&D needs and topics in preventing terrorism are:

Organic Explosive Compound and Homemade Explosives Detection (01)

Improvised Explosive Device-related Anomaly Detection (02)

Automated Machine Learning (03)

Prevention (04)

PREV 04-02: Vehicle Ramming Mitigation Technology

TOPIC DESCRIPTION: Terrorists and other violent extremists have demonstrated an interest in leveraging simple and less sophisticated methods to inflict harm and disrupt infrastructure operations. As highlighted by incidents both domestically and abroad, vehicle ramming has become a common attack vector that is difficult to prevent given there are few to no identifiable indicators.

TRL SOUGHT: 2 TRL at CONCLUSION: 5

END OBJECTIVE: This project aims to develop a capability that can be commercialized to enhance security against the vehicle ramming threat, with particular emphasis on special events.

Advanced Analytics (05)

PREV 05-01: Advanced Analytics for Next Generation Homeland Security Missions

TOPIC DESCRIPTION: The Data Analytics Technology Center (DA-TC) invests in research, innovative solutions, and emerging technologies to enable advanced analytics for Next Generation Homeland Security Missions. Facilitating data driven solutions demands cross-cutting work on computation, data management, advanced analytics, technical architecture, and the underlying policy and for using enterprise data sets for cross mission applications.

Areas of interest to DA-TC that focus on technical architecture include distributed storage systems, block chain applications for privacy protecting information sharing and analytics, and secure multi-party computation. Effective data analytics requires reliable data, so that DA-TC is also focused on solutions to enable data wrangling and preparation as well as entity resolution.

DA-TC investigates the potential of advanced and emerging analytics capabilities to support the Homeland Security Mission, including advanced computational concepts, analytics and visualization, machine learning and deep learning, human centered systems, analytics for the Internet of Things (IOT), large-scale analytics on publicly available information including social media, real-time analytics for multi-party, multi-latency, metro-scale networks, human-centered systems, and quantum information science.

Nearly all DA-TC research and development undertakings also have important policy implications. A few of DA-TC’s areas of interest highlight the cross-cutting nature of technical and policy considerations such as countering foreign influence, cyber security and cyber-physical security, election security, infrastructure protection, emergency management, and decision support and business processes, advanced privacy and security concepts, and adversarial machine learning.

TRL SOUGHT: 1 TRL at CONCLUSION: 7

TRANSITION CUSTOMER or PROGRAM: Various customers throughout DHS to include the homeland security enterprise and supporting agencies.

END OBJECTIVE: Develop data analytic and quantum capabilities that will increase the Department’s ability to leverage mission data for decision-making.

MANAGING INCIDENTS (MGMT)

Incident Management encompasses emergency response and critical infrastructure security and resilience, to include the preparedness, response, and recovery needs of more than 70,000 state, local, tribal, and federal agencies and 16 critical infrastructure sectors.

Priority R&D needs and topics in support of incident management needs are centered on the following priorities:

Situational Awareness (01)

MGMT 01-01: Alerts, Warnings, and Notifications Program Planning

TOPIC DESCRIPTION: Research and development of Alerts, Warnings, and Notifications (AWN) tools, materials, and strategies for State, Local, Territorial, and Tribal (SLTT) alert originators that foster more effective AWN program planning and reduced alerting delays.

TRL SOUGHT: 3-4 TRL at CONCLUSION: 7

END OBJECTIVE: Conduct research and pilots; and develop Alerts, Warnings, and Notifications (AWN) program planning guidance on how to build an effective AWN Program (e.g., Standard Messaging Templates, Hazard Matrices, Training Standards, Metrics, and Advocacy Materials for key decision makers) with planning artifacts for State, Local, Territorial, and Tribal (SLTT) alert originators.

Communications (02)

MGMT 02-01: Resilient Position, Navigation, and Timing (PNT)

TOPIC DESCRIPTION: Accurate position, navigation, and timing (PNT) information is important for the functioning of many critical infrastructure sectors. Disruption of PNT services can hamper the operational capabilities of critical infrastructure operations that rely on precision timing or positioning. This topic seeks technologies that can improve resilience for PNT end-users to include:

1) disruption alerting and mitigation technologies

2) technologies that will enable end-users to continue normal operations through timing disruption events

3) technologies that provide novel timing capabilities

Offerors should consider the operational environment of timing end-users in critical infrastructure and factors that would facilitate successful transition/adoption. These factors include, but are not limited to, ease of integration into existing operational environments, price, and reliability. These considerations should be part of an Offeror's transition strategy.

TRL SOUGHT: 7-9 TRL at CONCLUSION: 8-9

END OBJECTIVE: A technology that improves PNT resilience is likely to be adopted by critical infrastructure PNT end-users and has a path to transition and/or commercialization.

MGMT 02-05: Low-cost tactical communication devices for information sharing in remote environments (Border Security Technology Solution)

TOPIC DESCRIPTION: Low-cost tactical communication devices that interface with modern smartphones to enable secure sharing of position location information (PLI) and text messages in remote environments for increased situational awareness.

TRL SOUGHT: 6-9 TRL at CONCLUSION: 7 to 9

END OBJECTIVE: By providing a low-cost device that interfaces wirelessly with modern smartphones, low bandwidth data including position location information (PLI), text messages and other customer-provided payloads can be transmitted and received by DHS users in remote environments that do not have commercial infrastructure like cell towers. This effort will enable tactical air, land, and maritime information sharing to provide agent safety and increase agent situational awareness.

MGMT 02-07: Measuring Impact of Foreign Influence Operations and Resilience Efforts to Mitigate

TOPIC DESCRIPTION: No methodology exists to measure the impact of foreign influence operations on Americans or the effectiveness of measures put in place to mitigate the risk of foreign influence. In order to design and implement effective resilience measures, a baseline understanding of how foreign influence operations impact citizens and a methodology to measure the effectiveness of programs is required.

Designing robust metrics requires analysis of foreign influence along several dimensions, including both the physical and cyber. Given that much human activity today has both physical and cyber footprints, detecting bad activity would be harder if one focuses on one of the other only. Infrastructure Protection (IP) theft for example, typically involves both.

TRL SOUGHT: 2 TRL AT CONCLUSION: 5

END OBJECTIVE: These metrics would be used to identify the most effective methods for building national resilience to foreign influence operations. The information would be used to design and implement programs and communications to mitigate the risk of foreign influence operations. This is particularly important to DHS’ emphasis on building National resilience through public awareness and education. Messaging, tactics, target audience, and outreach can all be guided by these metrics and methodology.

MGMT 02-08: GMD and Nuclear EMP Critical Infrastructure Risk

TOPIC DESCRIPTION: Extreme electromagnetic incidents caused by an intentional electromagnetic pulse (EMP) attack or a naturally occurring geomagnetic disturbance (GMD, also referred to as “space weather”) could damage significant portions of the Nation’s critical infrastructure. Although EMP can be generated by several means, high-altitude electromagnetic pulse attacks (HEMP) using nuclear weapons are of most concern because they may permanently damage or disable large sections of the national electric grid and other critical infrastructure control system. Similarly, extreme geomagnetic disturbances associated with solar coronal mass ejections (when plasma from the sun, with an embedded magnetic field, arrives at Earth) may cause widespread and long-lasting damage to electric power systems, satellites, electronic navigation systems, and undersea cables. The systems at risk may be directly impacted or affected by damage to the communications and control upon which they are dependent.

TRL SOUGHT: 2 TRL AT CONCLUSION: 5

END OBJECTIVE: Any or all of the following:

• Threat and Hazard Modeling–Severe geomagnetic disturbance (GMD) and nuclear electromagnetic pulse (EMP) are large-scale, high-impact, low-frequency (HILF) events where we have limited historical data and experience. The lack of experience creates a heavy reliance on models and simulations of these events to guide the protection of critical infrastructure (CI) and to estimate post-event responses for recovery and restoration.

• Mapping of National Critical Functions to Critical Infrastructure Networks–National Critical Functions (NCF) provide a high level definitions of functions that need to be sustained to avoid serious disruption to national security and safety and economic activity.

• Identification of Key Critical Infrastructure Assets and Vulnerability Assessments–The CI networks that support the NCFs are composed of many subsystems, devices and components.

• Prediction of Critical Infrastructure Network Performance Under Extreme Conditions–The CI networks that support the NCFs often exhibit complex behavior governed by physics, control systems, and human operator intervention.

• Design of Critical Infrastructure Network Vulnerability Mitigations To Ensure NCF Performance— Resources for hardening or sparing CI network subsystems, devices and components are often limited, and the effect of these mitigations on the CI network, especially as it pertains to NCF PEMP, are often not straightforward due to complex network behavior.

Command, Control, Communications (03)

MGMT 03-01: Enhanced Incident Management Services to Support Interoperable Rich-Data Information Integration and Exchange

TOPIC DESCRIPTION: S&T seeks R&D for standards-based, enhanced incident management solutions with an emphasis on data interoperability and seamless integration…