Embedded R&D for Cybersecurity in an Operational Environment

Abstract

This paper describes a paradigm shift from how cybersecurity research and development (R&D) is traditionally applied in an operational environment. The methodology is referred to as embedded R&D (eR&D); cybersecurity researchers are tightly coupled with the operational stakeholders. This tight-knit relationship allows the researchers to elicit R&D requirements from the stakeholders seamlessly on a continuous basis, and gives the researchers immediate access to the tactical environment in which the analysts and operators work; this helps close the gap in the age-old disconnect between the research and operational communities.Tools may be employed to enhance, augment, and advance the mission of an eR&D team. One such tool, REQcollect [5], was developed through several agile development iterations and the through the transition of other projects. Multiple federal agencies have sponsored the work and subsequently transitioned the technologies into use. The predecessors to REQcollect are REQdb (REQuirements Database) and DART3 (Department of Homeland Security Assistant for R&D Tracking and Technology Transfer) [6]. REQcollect combines the best components of these two systems: a requirements elicitation and collection tool and a Google-like matching algorithm to identify potential transitions of R&D projects with similar or identical requirements.

Using the eR&D Approach to Pilot Deployment and Assessment in DHS

“…Security's (DHS) cyber center using the embedded research and development (eR&D) methodology/approach detailed in [1]. The eR&D methodology ensures the eR&D Team is tightly coupled with operational stakeholders to seamlessly and continuously identify operational requirements from stakeholders, discover R&D projects that may apply to the requirements, filter the R&D projects to select the applicable R&D technologies, then integrate the selected technology into the operational environment.…”

“…The eR&D Team constructed a comprehensive four-phase approach [1] (see Figure 2) to allow the researchers to elicit R&D requirements from the stakeholders seamlessly on a continuous basis; clarify challenges in the problem space; give the researchers immediate access to the tactical environment in which the analysts and operators work; and enhance the likelihood of a successful implementation and integration into the operational environment.…”

“…

This paper describes the success of the Hyperion Tool's pilot deployment and assessment in a Department of HomelandSecurity's (DHS) cyber center using the embedded research and development (eR&D) methodology/approach detailed in [1]. The eR&D methodology ensures the eR&D Team is tightly coupled with operational stakeholders to seamlessly and continuously identify operational requirements from stakeholders, discover R&D projects that may apply to the requirements, filter the R&D projects to select the applicable R&D technologies, then integrate the selected technology into the operational environment.

This pilot deployment and assessment served as a "proof of concept" of the eR&D approach by demonstrating a stakeholder's articulated requirements could be matched with newly developed technologies.

…”

Embedded research in rehabilitation engineering

“…Within anthropology it has been used to refer to researchers physically being there in the field of study to learn elements of social and cultural life. The concept has been broadly applied outside anthropology, including to the performance of field-based studies by cybersecurity researchers in operational environments (Goldrich et al, 2015), education researchers in schools (McGinity and Salokangas, 2014), criminologists in police departments (Braga and Davis, 2014), healthcare investigators in hospitals (Walley et al, 2007;Thompson and Steiner, 2014), science and technology scholars in nanotechnology laboratories (Jenkins, Maxwell and Fisher, 2012) and engineering designers with users (Segalowitz and Brereton, 2009). Common elements of embedded research in these studies include the expectation that researchers participate as a team member within the group they are studying and, second, have research independence, often with a view to improving practice or increasing research impact (Lewis and Russell, 2011).…”