FA8773-15-R-0043_Draft_Atch_5_-_Shelter_Relevancy_Assessment.pdf

Draft RFP: FA8773-15-R-0043 Attachment 5

OCO/DCO RTO&I SHELTER Project 21 Oct 15

SHELTER RELEVANCY ASSESSMENT

Software Development Relevant Somewhat Relevant Not Relevant

To be considered relevant, the offeror must show experience in A, B, and C or A, B and D of the criteria listed below.

To be considered somewhat relevant, the offeror must show experience in criteria A and B in a contract.

Does not meet the criteria of Relevant or Somewhat Relevant.

A. Perform software development tasks including software design and architecture, analyzing requirements, and designing a functional solution.

B. Develop capabilities designed to detect advanced malicious logic on client information systems or core devices (desktop, server, routers, switches, mobile, etc.).

C. Conduct agile software development tasks and management on various OS platforms based on a set of requirements.

D. Develop capabilities for mobile platforms for kernel and user-level mobile software architectures.

Vulnerability Research

To be considered relevant, the offeror must show experience in A, B and C, or A, B and D or A, B and E of the criteria listed below in a contract.

A. Perform software and hardware Vulnerability Analysis.

B. Perform detailed threat analysis to identify vulnerabilities, determined level of risk associated with the malware, and recommended countermeasures.

C. Perform vulnerability discovery with the goal of developing exploits.

D. Perform identification, detection, and analysis of previously known and unknown system vulnerabilities.

E. Experience supporting security technologies and computer forensics to include: LE/CI investigations and operations, host level kernel monitoring, host level counter intelligence, network intrusion prevention development, Hardware/BIOS/Firmware/Operating System forensics and counter intelligence, Aerial Layer Networks & systems, and mobile platforms.

Reverse Engineering & Forensics

To be considered relevant, the offeror must provide experience in all of the criteria listed below in a contract.

show experience in criteria A, and B or C in a contract.

A. Perform reverse engineering of malicious software through detection, containment, collection, and analysis resulting in mitigation.

B. Perform analysis to support computer network operations and experienced in disassembling toolkits, performing behavioral and code analysis, bypassing authentication mechanisms, examining protected or packaged executables, and patching compiled executables.

C. Perform tasks utilizing reverse engineering tools and fuzzers.

Network Intrusion Detection/Prevention Analysis

To be considered relevant, the offeror must show experience in all of the criteria listed below in a contract.

A. Develop tools to detect, analyze, and neutralize malicious logic traveling through the Global

Information Grid.

B. Develop tools to allow maneuverability through cyberspace related to communications using traditional internet protocol (IP)-based models as well as non-IP based models and protocols for the U.S. and its allies.

C. Develop software utilities that assist in managing network resources.

D. Identifying unauthorized, illicit, and anomalous behavior based solely on network traffic.

Quality Assurance

To be considered relevant, the offeror must show experience

A. Perform software quality assurance of a system/network or application through the software development lifecycle.

B. Perform evaluations (or assessments) and quality assurance on software and software features and validate that all code works to the functional requirements.

C. Perform tasks identifying and reporting bugs and missing functionality to developers.

D. Document test plans for products and product features.

Network and System Administration

To be considered relevant, the offeror must show experience

A. Maintaining system infrastructure and network infrastructure including backups of systems and source code for computer networks.

B. Creating different project environments and securing those environments.

C. Perform network/system administrative support to include software upgrades/patches, hardware/software installation, and user administration and security policies.

D. Perform tasks required to ensure the facility networks meet all certification and accreditation requirements, maintaining software licenses, and current with all approved updates and patches.

E. Deploying, monitoring, and employing hardware/software tools to enhance network security, ensuring confidentiality, integrity and availability.