The Defense Advanced Research Projects Agency, the U.S. Army Cyber Command Technical Warfare Center and Project Manager-Defensive Cyber Operations recently conducted an operational test and evaluation of the Cyber Analytics for Network Defense and Response Options, or CANDOR, platform.
The Need for CANDOR
CANDOR seeks to deliver automated threat hunting and enhanced network monitoring capabilities to cyber operators, DARPA said Monday. With the help of containerization, the platform can be speedily integrated into and deployed on various kinds of infrastructure like data centers or the cloud.
Platform Test Results
During the test, CANDOR was successfully deployed in an operational test environment. Developers were then able to use the platform to deploy cyber analytic applications and detect and analyze malicious activity.
Regarding the results, U.S. Army Lt. Col. Nate Bastian, the DARPA program manager for CANDOR, said, “This test proved CANDOR’s high flexibility and adaptability as an innovative solution designed for deployment across multiple environments.”
Constellation Program
The platform is one of six projects being carried out under the Constellation program, which seeks to accelerate the development of cyber technologies so they can be delivered to users. The Constellation program is a joint effort between DARPA and U.S. Cyber Command.
“Given Constellation’s objective to accelerate the transition of research and development to capability delivery, we were able to drastically shorten the design, development, and testing of CANDOR from months to weeks with consistent user integration with ARCYBER,” Bastian noted.
