Topological Vulnerability Analysis

CAULDRON in the news: Click here

Sushil Jajodia
Steven Noel
Pramod Kalapa

CSIS pioneered the field of Topological Vulnerability Analysis (TVA) attack graph technology, with several publications.  Over the last 8 years, CSIS has conducted R&D in TVA technology under various government agencies, with average funding of over $1 million per year.  This TVA technology development has culminated in the software product CAULDRON (Combinatorial Analysis Utilizing Logical Dependencies Residing On Networks).

CAULDRON has been independently evaluated in a variety of settings, including red team/blue team exercises, support for penetration testing, and as a tool for security risk assessment and network administration.  CAULDRON delivers the efficient construction, analysis, and graphical depiction of attack paths through enterprise networks.

CAULDRON is being used at several government organizations under our ongoing funded research projects.

US Patent 7,555,778 has been issued for TVA minimal-cost hardening. There are 4 patents pending for other aspects of TVA technology.

The CAULDRON product is available commercially from ProInfo, Inc. Contact John Williams (office: 301-237-0007) for additional information.

A more in-depth description of TVA/CAULDRON is here.