Summary
Cyber-attacks evolve in a phased approach. Detection typically occurs in the later phases of an attack, and analysis often occurs post-mortem to investigate and discover indicators from earlier phases. Observations of earlier attack phases, such as target reconnaissance, planning, and delivery, may enable warning of significant cyber events prior to their most damaging phases.
CAUSE aims to develop and test new automated methods that forecast and detect cyber-attacks significantly earlier than existing methods. The program is envisioned as a multi-year, multi-phase, research effort.
