Security Tool Shifts to Private Sector

Wednesday, September 2, 2015 @ 09:09 AM gHale

Another cyber security technology grown through a government laboratory will now go out as a commercial product.

PathScan technology, developed by Los Alamos National Laboratory, is a network anomaly-detection tool that Ernst & Young LLP (EY) decided to license and will bring to market.

Practice Guide for Utilities from NIST
Collaborators Sought for Security Projects
Guide to Cut Cyber Risk for Energy Firms
FTC Ruling Puts ICS Firms on Alert

PathScan is the fourth product the Department of Homeland Security (DHS) Science and Technology Directorate (S&T) licensed for commercialization through its Transition to Practice (TTP) program.

“Innovative technology solutions are key to keeping pace with today’s cyber threats,” said DHS Under Secretary for Science and Technology Dr. Reginald Brothers. “Our TTP program is bridging the gap between the private sector and national labs to help transition lab technology to the commercial market.”

In 2012, the TTP program identified PathScan as a promising candidate for transition to the commercial marketplace. By utilizing statistical models to identity network behavior, this technology can detect the movement of hackers once they breach the network and allows operational teams to quickly defend important network information.

“Public and private sector enterprise organizations need technologies that bring innovative approaches to bear so they are able to detect and defend against sophisticated cyberattacks,” said TTP Program Manager Mike Pozmantier. “The PathScan technology is an example of a tool that does this, and if the cyber security industry can bring these types of services and tools to market, the playing field will start to level between the offense and defense.”

Established in 2012 as part of S&T’s Cybersecurity Division, the TTP program looks to transition federally funded cyber security technologies from the laboratory to enterprise consumers. The program, led by Pozmantier, also seeks to create institutional relationships between the cyber research community, investors, end users, and information technology companies by showcasing the technologies across the country to develop pilot and collaborative opportunities.

“Besides identifying mature government-funded cyber security technologies for potential transition, TTP’s priority is to connect the federal research community and private industry,” Pozmantier said. “Historically these groups have had infrequent interactions. If we can help develop these relationships it will reduce the time it takes to transition necessary technology into practice.”

Each year the TTP program selects eight promising cyber technologies to incorporate into its 36-month program. S&T introduces these technologies to end users around the country with the goal of transitioning them to investors, developers or manufacturers that can advance them and turn them into commercially viable products.

Now in its third year, TTP has 24 technologies (eight from fiscal year 2013, nine from 2014 and seven from 2015) that are ready for transition to the marketplace. Four of those technologies — Quantum Secured Communication, Hyperion, NeMS, and now Pathscan — successfully transitioned to the marketplace through commercial licenses. During the next few months, S&T will introduce eight new technologies to TTP’s FY16 class and will start to showcase these technologies within critical infrastructure sectors and to potential investors.