Technology Licensing Opportunity for Variational Autoencoder for Network Anomaly Detection
Agency: | ENERGY, DEPARTMENT OF |
---|---|
State: | Idaho |
Level of Government: | Federal |
Category: | |
Opps ID: | NBD00159510693975085 |
Posted Date: | Nov 10, 2022 |
Due Date: | Nov 30, 2022 |
Source: | Members Only |
- Contract Opportunity Type: Special Notice (Original)
- All Dates/Times are: (UTC-05:00) EASTERN STANDARD TIME, NEW YORK, USA
- Original Published Date: Nov 10, 2022 12:55 pm EST
- Original Response Date: Nov 30, 2022 11:00 am EST
- Inactive Policy: 15 days after response date
- Original Inactive Date:
-
Initiative:
- None
- Original Set Aside:
- Product Service Code: 7H20 - IT AND TELECOM - PLATFORM PRODUCTS: DATABASE, MAINFRAME, MIDDLEWARE (HW, PERPETUAL LICENSE SOFTWARE)
-
NAICS Code:
- 518210 - Computing Infrastructure Providers, Data Processing, Web Hosting, and Related Services
-
Place of Performance:
Idaho Falls , ID 83415USA
TECHNOLOGY LICENSING OPPORTUNITY
Variational Autoencoder for Network Anomaly Detection
A novel variational autoencoder that uses reconstructed probability to detect network packet anomalies and enables the detection of zero-day attacks.
Opportunity: Idaho National Laboratory (INL), managed and operated by Battelle Energy Alliance, LLC (BEA), is offering the opportunity to enter into a license and/or collaborative research agreement to commercialize this variational autoencoder for network anomaly detection. This technology transfer opportunity is part of a dedicated effort to convert government-funded research into job opportunities, businesses, and, ultimately, an improved way of life for the American people.
Overview: The cyberattack surface is expected to increase by an order of magnitude between now and 2025, while network attacks have increased by over 50 times between 2015 and 2020. Machine learning-based classification models for attack detection are difficult to achieve with high classification speed. They remain vulnerable to zero-day attacks, while conventional rule-based classification systems are not scalable for increased accuracy. While rule-based network packet security systems have previously been the gold standard for protection, INL's research anticipates that auxiliary machine learning-based systems will be needed to secure future systems analogous to the systems currently used for credit card fraud detection.
Description: Researchers at Idaho National Lab have developed a mechanism for detecting network packet anomalies indicative of a network attack using the reconstruction probability from a variational autoencoder. This semi-supervised learning approach is not built around binary classification but around anomaly detection to address previously mentioned shortcomings. Network packet metadata shows significant distribution variability with multiple attack signatures ranging from malicious downloads, brute force attempts, vulnerability scans, and malicious command execution.
Once the variational autoencoder is trained, separate packet metadata can be passed to the autoencoder to compute a reconstructed probability based on the multivariate normal probability distribution function. This system is orthogonal to rule-based network protection systems, including firewall rule implementations and exceptions, and can be deployed in conjunction with such technologies. Unlike rule-based systems, packets are blocked entirely based on the machine learning-based reconstructed probability score, with the only user-tuned feature being the threshold for anomaly designation.
Benefits:
- Allows an organization to detect zero-day attacks.
- Applicable to existing rule-based network protection systems.
Applications:
- IT organizations with hundreds to thousands of systems.
Development Status: TRL 3, currently undergoing proof-of-concept work.
IP Status: Patent Application No. 17/663,883, “Network Security and Related Apparatuses, Methods, and Security Systems,” BEA Docket No. BA-1297.
INL seeks to license the above intellectual property to a company with a demonstrated ability to bring such inventions to the market. Exclusive rights in defined fields of use may be available. Added value is placed on relationships with small businesses, start-up companies, and general entrepreneurship opportunities.
Please visit Technology Deployment’s website at https://inl.gov/inl-initiatives/technology-deployment for more information on working with INL and the industrial partnering and technology transfer process.
Companies interested in learning more about this licensing opportunity should contact Andrew Rankin at td@inl.gov
- 1955 N Fremont Avenue
- Idaho Falls , ID 83415
- USA
- Andrew Rankin
- andrew.rankin@inl.gov
- Nov 10, 2022 12:55 pm ESTSpecial Notice (Original)
TRY FOR FREE
Not a USAOPPS Member Yet?
Get unlimited access to thousands of active local, state and federal government bids and awards in All 50 States.