Knowledge is empowering! Organizations equipped with timely cyber risk and defense knowledge are in a much better position to properly quantify and react to cyber risks. Surprisingly, many organizations are still poorly prepared with the needed information, experiences, and best practices to effectively combat sophisticated cyber threats.The Cyber Risk Collaboration & Knowledge Tool (CRiCKeT) is an extensible information sharing framework that serves as both knowledge base and collaboration tool. By encouraging collaboration among like-minded organizations, cyber defense and remediation strategy and tactics become much more attainable.As part of this SBIR Phase I, CardSmart Technologies will define the requirements and complete the initial design and architecture for CRiCKeT. The proposed approach is to select a ready-made core framework to provide the basic operations for populating a knowledge repository, peer collaboration, user provisioning, tablet/mobile support, and other fundamental application building blocks. This core is then augmented with enriched functionality which may include threat modeling, machine-learning-assisted risk scoring, predictive alerts, advanced cataloging and support of rich artifacts (source code, logs, config data, VMs/containers, etc.). This "select and extend" strategy will yield a finished system sooner, at a lower cost with less development risk.Phase I will advance the system design to the point where a table top demonstration can be prepared.This will give stakeholders a glimpse at the art-of-the-possible. The system architecture will then be carried forward to Phase II for full scale development and deployment.
