Security Data Warehouse Application

Lyndon B. Johnson Space Center, Houston, Texas

The Security Data Warehouse (SDW) is used to aggregate and correlate all JSC IT security data. This includes IT asset inventory such as operating systems and patch levels, users, user logins, remote access dial-in and VPN, and vulnerability tracking and reporting. The correlation of this data allows for an integrated understanding of current security issues and systems by providing this data in a format that associates it to an individual host. The cornerstone of the SDW is its unique hostmapping algorithm that has undergone extensive field tests, and provides a high degree of accuracy.

The algorithm comprises two parts. The first part employs fuzzy logic to derive a best-guess host assignment using incomplete sensor data. The second part is logic to identify and correct errors in the database, based on subsequent, more complete data. Host records are automatically split or merged, as appropriate.

The process had to be refined and thoroughly tested before the SDW deployment was feasible. Complexity was increased by adding the dimension of time. The SDW correlates all data with its relationship to time. This lends support to forensic investigations, audits, and overall situational awareness.

Another important feature of the SDW architecture is that all of the underlying complexities of the data model and host-mapping algorithm are encapsulated in an easy-to-use and understandable Perl language Application Programming Interface (API). This allows the SDW to be quickly augmented with additional sensors using minimal coding and testing. It also supports rapid generation of ad hoc reports and integration with other information systems.

This work was done by Lynn R. Vernon, Robert Hennan, Chris Ortiz, and Steve Gonzalez of Johnson Space Center, and John Roane of MEI Technologies. For further information, contact the JSC Innovation Partnerships Office at (281) 483-3809.

In accordance with Public Law 96-517, the contractor has elected to retain title to this invention. Inquiries concerning rights for its commercial use should be addressed to:

MEI Technologies

2525 Bay Area Blvd., Suite 300

Houston, TX 77058

Phone No.: (281) 283-6200

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

MSC-24148-1