HSHQDC-13-Q-00371_Q A.pdf

HSHQDC-13-Q-00371 Q&A

Q1: Solicitation page 18 says, "Multiple technology demonstrations will occur simultaneously in a large room, separate from the general session and technical track space." Page 19, as a note under Day 1, says, "The technology demonstrations will be taking place in a separate room from the general sessions/technical tracks.” There is no similar note for Day 2 and Day 3. When are the technology demonstrations taking place?

A1: The technology demonstrations are taking place during Day 1 and Day 2.

Q2: How long are Technical Track 1 and Technical Track 2 each day?

A2: See the draft agenda at the end of this document.

Q3: How long are the technology demonstrations?

A3: See the draft agenda at the end of this document.

Q4: Are the technology demonstrations being held in the same room as one of technical tracks?

A4: No.

Q5: Can you please clarify the sessions, i.e. when do they start each day, how long is the general session, and is there a format we can look at?

A5: See the draft agenda and facility layout maps at the end of this document.

Q6: To verify, the webcast vendor needs to provide the camera(s) and operator(s), and the hotel will provide all the audio and projection equipment needed in each room?

A6: Yes, that’s correct. The webcasting contractor will need to coordinate with the hotel to tap into the hotel’s house sound.

Q7: Is the video for the technology demonstrations being streamed live or simply captured for later viewing in an archive on the portal?

A7: It is being captured for later viewing.

Q8: Will the vendor have access to the PowerPoint Slides for each presentation at least a day prior to the webcast? How far in advance will we get the presentations?

A8: Yes. The presenters are expected to provide their slides a week in advance, and the government will provide them to the webcasting contractor. However, it is very likely that some of the presenters will make last minute changes to their slides. The government will make its best effort to provide the final slides, including any last minute changes, to the webcasting contractor as far in advance as possible.

Q9: Solicitation page 16 (in Task 2: Viewing Capabilities, bullet six) says, “The webcasting engineer/production manager, government personnel and other viewers will be notified of which viewers have entered each presentation track.” Could you please clarify? Is this for the live presentation or archive? How should the person be notified? When you say other viewers, who do you mean? Our system allows for 24/7 access to current viewers in real time via a specific URL we supply to you (can be shared with anyone you choose). Would this satisfy the requirement?

A9: This capability is for the live presentation. It refers to the ability for viewers to see which other viewers are in the same presentation track, much like one would see the other users in a chat room. But we also need the archived presentation viewer data, which refers to the viewer statistics in post-reporting, including who entered which track and how long they stayed.

Q10: Solicitation page 16 (in Task 2: Presentation Format, bullet one) says, “The webcasting portal shall allow the presenter and/or government to upload presentation in Microsoft PowerPoint or PDF format.” Can you please clarify? Are they uploading before the live presentation or as an element on the archive page?

A10: This refers to the presentation files used for the live presentation.

Q11: Regarding the user-defined password; is this a requirement? Or can we use the user email address/global password as the key to gain entry to the webcast(s)? We ask because of the maintenance involved in users losing their passwords, recovery, support, etc. We can use cookie-based development to fulfill the “remember me” requirement.

A11: Using the user email address instead of a user-defined password is acceptable.

Q12: Solicitation page 17 says, “Each of the three days of the event, there will be a 20 minute break after the general session concludes and before the technical tracks begin. The general session room will be split into spaces for the technical tracks during this time. The contractor shall reset the webcasting equipment from the general session to the two technical tracks during these 20 minutes.” Is there any more time available to split the rooms?

A12: No, we are limited to 20 minutes by the schedule.

Q13: Has this event been done before? If so, was it under the same specifications? If so, who was it awarded to, and for how much?

A13: The Science and Technology Directorate has held the Principal Investigators’ Meeting before. Previous contracts were for the facility space only. The event has never been webcast before, and there has never been a solicitation or contract like the current solicitation.

Q14: This solicitation has very specific requirements, such as for the portal. Is there a model that the government is basing this on?

A14: No.

Q15: What bit rate is required?

A15: A minimum of 150 kb/second.

Q16: How long are the researcher interviews and how are they being conducted?

A16: See the draft agenda at the end of this document.

Q17: Please clarify why a toll free number is needed, when currently long distance phone calls are extremely inexpensive. Would a trouble number, instead of a general toll free number, be acceptable?

A17: The toll free number is needed because the government anticipates webcast participants from other countries.

Q18: Who are the intended audience?

A18: Cybersecurity researchers from academia, industry, national laboratories, and other government agencies. They are in the United States and abroad.

Q19: Does the live webcast and the archive need to be Section 508 compliant? Does there need to be captioning for the live event? Can we supply a transcript for the video on demand?

A19: Yes, the live webcast and the archive need to be Section 508 compliant. There must be live/on-demand captioning. A transcript for the video on demand is acceptable.

Q20: Please clarify why we are being asked to supply a laptop when house A/V is supplying a laptop. What will it be used for?

A20: The government anticipates that the webcasting contractor will need to load the slides for webcasting onto a separate laptop in order to offer the picture-in-picture format, where the viewer can simultaneously see the presentation and the presenter on the same screen. If the webcasting contractor can provide this capability without having a separate laptop, that is acceptable, and the contractor should indicate it in its quote.

Q21: What are the dimensions of the general session room? Specifically, how far back are we from the podium/panel? Is there any change in the dimensions for the technical tracks?

A21: See the facility layout diagrams at the end of this document. When the General Session splits to the Technical Tracks, an air wall will be set up between Salons A&B and Salon C.

There will be 88 schoolroom and 72 theatre seats in AB (160 total) and 52 schoolroom and 40 theatre style seats (92) in room C. The capacity chart along with the room dimensions can be found: http://www.marriott.com/hotels/event-planning/floor-plans/wasgw-crystal-gateway-marriott/.

Q22: Are you looking for references, past government work?

A22: No.

Q23: Is a single video panel (switching content in that panel) or dual panels showing PowerPoints required?

A23: The government needs the viewer to be able to see both the present and the PowerPoint presentation simultaneously, whether they are side by side or picture-in-picture. The webcasting contractor can use any sort of panel configuration that allows for this.

Q24: Are other types of recording formats, in addition to what the Statement of Work outlined, acceptable?

A24: No, the three possible formats are given on solicitation page 5.

http://www.marriott.com/hotels/event-planning/floor-plans/wasgw-crystal-gateway-marriott/ http://www.marriott.com/hotels/event-planning/floor-plans/wasgw-crystal-gateway-marriott/

Event Location: Crystal Gateway Marriott | 1700 Jefferson David Highway | Arlington, VA 22203

Draft v1

2013 DHS S&T CSD

Principal Investigator Meeting – Agenda

September 16, 2013

7:30AM – 8:30AM Registration

GENERAL SESSION

8:30AM – 8:45AM Introduction/Welcome Doug Maughan

8:45AM – 9:30AM CSD's Strategic Vision Doug Maughan

9:30AM – 10:40AM

International Partners Panel (10 mins per country + 20 min Q&A) United Kingdom, Australia, Canada, Netherlands, Sweden

Speakers, TBD

10:40AM – 11:00AM Networking Collaboration Break

11:00AM – 11:30AM Customer Presentation SES Level

11:30AM – 12:00PM Transition to Practice Mike Pozmantier

12:00pm – 1:15pm Lunch Set up Technology Demonstration/ Poster Session All technologies from TTA 1, 2, 4, 5, 6, 8, 9, 10, and 14 will showcase their technology

TECHNICAL TRACKS

Each presentation is 15 minutes with 5 minutes Q&A. Presentations with * are 10 minutes only.

Technical Track 1 Technical Track 2

Digital Provenance (TTA 10) Software Assurance (TTA 1)

1:15PM –

2:15PM

The University of Alabama at Birmingham: Secure Location Provenance for Mobile Devices

ITT Advanced Engineering & Sciences Division: Evidentiary Integrity for Incident Response

The University of North Carolina at Chapel Hill: Efficient Tracking, Logging, and Blocking of Accesses to Digital Objects

1:15PM –

2:15PM

Applied Visions, Inc: Code Fox: Software Assurance Visual Analytics for Dynamic Analysis of Code

HRL Laboratories, LLC: Tunable Information Flow

Kestrel Technology, LLC: A “Gold Standard” Method for Benchmarking C Source Code Static Analysis tools

2:15PM –

2:35PM Networking Collaboration Break

Enterprise-Level Security Metrics (TTA 2) SWAMP (TTA 14)

2:35PM –

3:25PM

University of Illinois at Urbana- Champaign: Enterprise Level Security Metrics

George Mason University: Measuring Enterprise Risk Through Automated Security Testing

TBA New Contract*: TBD

2:35PM –

2:55PM

Morgridge Institute for Research: Continuous Software Assurance through a National Marketplace

Incident Response Communities (TTA 8)

2:55PM –

3:15PM

Trustees of Dartmouth College: Incident Response Communities

TECHNOLOGY DEMONSTRATION AND POSTER SESSION

3:25PM – 4:25PM All technologies from TTA 1, 2, 4, 5, 6, 8, 9, 10, and 14 will showcase their demonstrations (17 technologies to exhibit)

COLLABORATION BREAKOUT SESSIONS

Participants will choose a collaboration session track during registration.

Session #1 Session #2

4:25PM –

5:25PM

Successful Technology Transition, led by CSD Program Managers Mike Pozmantier and Greg Wigton and Oak Ridge National Laboratory Principal Investigator John Goodall

4:25PM –

5:25PM

Competitions - How a Performer’s technology Can Benefit from Participating in Cyber Competitions, led by CSD Program Manager Edward Rhyne and

PNNL

Session #3 Session #4

4:25PM –

5:25PM

PREDICT Workshop, led by CSD Program Manager Manish Karir

4:25PM –

5:25PM

Cyber Economic Incentives, led by CSD Program Manager Joe Kielman

Session #5

4:25PM –

5:25PM

HOST: How to Open Source and Manage Projects, led by CSD Program Managers Dan Massey and Luke Berndt and GTRI Principal Investigator

5:25PM Adjourn Tear down Technology Demonstrations

September 17, 2013

GENERAL SESSION

8:30AM – 8:45AM Introduction/Housekeeping Doug Maughan

8:45AM – 9:45AM Keynote - USST/DUS/HSARPA Speaker, TBD

9:45AM – 10:05AM COE – VACCINE – Purdue University Kaethe Beck, Deputy Director

10:05AM – 10:25AM COE – CCICADA – Rutgers University Fred Roberts, Director

10:25AM – 10:45AM Networking Collaboration Break

Each presentation is 15 minutes with 5 minutes Q&A. Presentations with * are 10 minutes only.

Identity Management (IDM) Software Assurance (SBIRs)

10:45AM –

11:25AM

Johns Hopkins University, Applied Physics Laboratory: TBD

Queralt: TBD

10:45AM –

11:45AM

GrammaTech: Multi-Platform Program Analysis

Data Access: Tool Output Integration Framework

Secure Decisions: Code Dx: Software Assurance Visual Analysis

Insider Threat (TTA 4) Modeling of Internet Attacks (TTA 6)

11:25AM –

11:45AM

Naval Postgraduate School: Insider Threat Detection: Using Lightweight Media Forensics Security

11:45AM –

12:05PM

TBA New Contract*: TBD

TBA New Contract*: TBD

Cyber Forensics

11:45AM –

12:05PM

viaForensics: Mobile Forensics and Cyber

12:05PM –

1:20PM

Lunch on your own Set up Technology Demonstration/ Poster Session All technologies from TTA 3, 6, 7, 11, 12, 13 will set-up their technology and posters.

Insider Threat (TTA 4) Resilient Systems & Networks (TTA 5)

1:20PM –

1:30PM

TBA New Contract*: TBD 1:20PM –

2:00PM

Raytheon BBN: Real-Time Protocol Shepherds (RePS)

Naval Postgraduate School: Methodology for Assessment of Security Properties

Cyber Economics (TTA 9) Modeling of Internet Attacks (TTA 6)

1:30PM –

2:20PM

TBA New Contract*: TBD

Carnegie Mellon University: Understanding and Disrupting the Economics of Cybercrime

University of Maryland: Reducing the Challenges to Make Cybersecurity Investments in the Private Sector

2:00PM –

2:20PM

University of Southern California: The Retrospective Future in the Internet (Retro- Future)

2:20PM –

2:40PM Networking Collaboration Break

Usable Security (TTA 3) Network Mapping & Measurement (TTA 7)

2:40PM –

3:40PM

IBM Research: Usable Multi-Factor Authentication and Risk-Based Authorization

Trustees of Indiana University: CUTS:

Coordinating User and Technical Security

University of Houston: Implicit and Continuous Mobile User Identification/Authentication Using Smartphone Sensors

2:40PM –

3:00PM

Merit Network Inc.: Enabling Operational Use of RPKI via Internet Routing Registries

Modeling of Internet Attacks (TTA 6)

3:00PM –

3:40PM

Oak Ridge National Laboratory: Visually Fusing Contextual Data for Situational Understanding

Georgia Tech Research Corporation:

Comprehensive Understanding of Malicious Overlay Networks

TECHNOLOGY DEMONSTRATION AND POSTER SESSION

3:40PM – 4:40PM All technologies from TTA 3, 6, 7, 11, 12, and 13 will showcase their technology (16 technologies exhibiting)

COLLABORATION BREAKOUT SESSIONS

Participants will choose a collaboration session track during registration.

Session #1 Session #2

4:40PM –

5:40PM

Research Influencing Policy, led by Dr. Irving Lachow, Principal Information Security Engineer, The MITRE Corporation and Ulf Lindqvist, SRI International

4:40PM –

5:40PM

Ethics of Cyber Security, led by Dave Dittrich, University of Washington and CSD Program Manager Manish Karir

Session #3 Session #4

4:40PM –

5:40PM

Mobile Security: Hype or Hard Problem, led by CSD Program Manager Luke Berndt

4:40PM –

5:40PM

Visualization Techniques and Evaluation Tools Discussion, led by CSD Program Managers Ann Cox and Joe Kielman and Dan Best, PNNL

Session #5

4:40PM –

5:40PM

International Discussion, led by CSD’s International Partners

5:40PM Adjourn Tear down Technology Demonstrations

September 18, 2013

GENERAL SESSION

8:30AM – 8:45AM Introduction/Housekeeping Doug Maughan

8:45AM – 9:15AM Special Speaker – “A View of Innovation from the White House” Andy Ozment, White House

9:15AM – 9:35AM EO-PPD Discussion Doug Maughan & Scott Tousley

9:35AM – 9:55AM Networking Collaboration Break

Each presentation is 15 minutes with 5 minutes Q&A.

Hardware-Enabled Trust (TTA 11) Natured – Inspired Cyber Health (TTA 13)

9:55AM –

10:35AM

IBM Research: Hardware Support for Malware Defense and End-to-End Trust

Def-Logix: Hardware Enabled Zero-Day Protection (HEZDP)

9:55AM –

10:35AM

Rutgers University – New Brunswick Campus: Bio-Inspired Distributed Decision Algorithms for Anomaly Detection

Pacific NW National Laboratory:

LINEBACKER: LINE-speed Bio-inspired Analysis and Characterization for Event Recognition

Moving Target Defense (TTA 12 & SBIR) Modeling of Internet Attacks (TTA 6)

10:35AM –

11:35AM

Northrop Grumman Information Systems: Appliance for Active Repositioning in Cyberspace (AARC)

Princeton University: Using Moving Target Defense for Secure Hardware Design

Endeavor: TBD

10:35AM –

10:55AM

Columbia University: Advanced Situation Awareness of High Impact Malware Attacks Against the Internet Routing Infrastructure

Data Privacy Network Mapping & Measurement (TTA 7)

11:35AM –

11:55AM

Massachusetts Institute of Technology:

Data Privacy

10:55AM –

12:15PM

University of California, San Diego:

Cartographic Capabilities for Critical Cyber Infrastructure

Naval Postgraduate School: High-Frequency Active Internet Topology Mapping

Technical Track 1 Technical Track 2 (cont’d)

10:55AM –

12:15PM

(cont’d)

International Computer Science Institute:

Netalyzr NG: Monitoring DNS, DNSSEC, and TLS from the Edge

PNNL: Traffic Circle and CLIQUE

11:55AM –

12:15PM Adjourn / Wrap-Up

12:15PM –

12:35PM Adjourn / Wrap-Up

12:35PM –

1:35PM Lunch on your own

PROGRAM MANAGER – PROGRAM MEETINGS

Participants are not required to attend these meetings, unless the CSD Program Manager has asked for the participant to be present.

1:35PM –

5:35PM TBD 1:35PM –

5:35PM

DHS-DOD Breakout Track Closed meeting – Invite Only

RESTROOMS

PHONES

CONVENTION

REGISTRATION

SECOND FLOOR

ESCALATORS

ASSEMBLY

AREA

RESTROOMS

ELEVATORS

SKY VIEW

ESCALATORS

LOBBY LEVEL

SALON

A

SALON

B

SALON

C

SALON

K

SALON

J

SALON

H

SALON

D

SALON

E

SALON

G

JEFFERSON

LEE

MADISON

JACKSON

SALON I SALON II

SALON III

ARLINGTON BALLROOM

SALON IV

SALON VI SALON V

SERVICE CORRIDOR

FAIRFAX

MCLEAN

MANASSAS

MT. VERNON

ALEXANDRIA

R E

G D

E S

K

G R

A N

D B

A

LL

R O

O M

B U

S

IN

E

C E

N

TE

R

SALON

F

CATERING KITCHEN

Your event, your space…………..

LOBBY LEVEL

YOUR EVENT….

……YOUR WAY

General Session

-ABC

Exhibits / Tech Demo

- Salon DE

Registration

- Grand Foyer

Breakouts

- Jefferson – Jackson – Madison - Rosslyn

HSHQDC-13-Q-00371 Q&A Facility Layout Attachment 2