Topological Vulnerability Analysis

Cauldron in the news: Click here

Sushil Jajodia
Steven Noel
Pramod Kalapa

CSIS pioneered the field of Topological Vulnerability Analysis (TVA) attack graph technology, with dozens of publications and hundreds of literature citations.  Over the last decade, CSIS has conducted R&D in TVA technology under various government agencies, with average funding of over $1 million per year.  This TVA technology development has culminated in the Cauldron suite of tools.

Cauldron has been independently evaluated in a variety of settings, including red team/blue team exercises, support for penetration testing, and as a tool for security risk assessment and network administration.  Cauldron delivers the efficient construction, analysis, and graphical depiction of attack paths through enterprise networks.

Cauldron is being used at several government organizations under our ongoing funded research projects.

US Patents 7,555,778, 7,627,900, 7,735,141, and 7,904,962 have been issued for aspects of TVA technology, and others are pending.

The Cauldron product is available commercially from CyVision. Contact John Williams (301-237-0007) for additional information.

A more in-depth description of TVA/Cauldron is here.