Brand_Name_-_VTMIS_-_2015.pdf

MEMORANDUM

DATE: June 26, 2015

TO: Anne Mineweaser, Contracting Specialist, OLAO

FROM: Joshua Knust, FO, ITB, OAM, ORS, OD

SUBJECT: Brand Name Justification for VirusTotal Malware Intelligence Service (VTMIS)

This is a brand name justification for VirusTotal Malware Intelligence Service (VTMIS) from Rotarua Limited dba VirusTotal. VirusTotal has a unique malware data set and proprietary API to access their commercial intelligence that is not available through any other source. There is no competing product/vendor, and no other way to access this set of commercial intelligence.

Other government agencies that NIH collaborates with have integrated VTMIS into their work-flow, and NIH will benefit by being able to search and share on the same data set used by other agencies. We are only able to leverage VTMIS workflow, code and examples shared by other agencies if we have access to VTMIS.

We need the VTMIS because there is an immediate need for this data to aid in locating additional intrusion activity/actors that are known to target NIH; targeting by adversaries that degrades NIH mission & National Security. VTMIS can support active and open LE/CI (Law Enforcement and Counterintelligence) cases.

This is also a renewal from a prior order:

HHSN263201400720P

"DUNS 985086791"

(Signature of the individual requesting justification) Date

Joshua Knust, Team Lead, FO, ITB, OAM, ORS, OD____ (Printed name and title of the individual responsible for the procurement)