INTRODUCTION:
This Sources Sought notice is for informational and planning purposes only. It does not constitute a Solicitation and is not to be considered as a commitment by the Government. All firms responding to this sources sought notice are advised that their response to this notice is not a request that will be considered for contract award. The information from this market research is for planning purposes only, no solicitation documents exist at this time. This is strictly market research and the Government will not entertain questions concerning this market research. Neither the US Army Cyber School nor the Government will be responsible for any cost incurred in furnishing this demonstration. The NAICS Code for this requirement is 511210.
The US Army Cyber School is interested in understanding currently available technologies that may enhance the hands-on application of skills and knowledge in a culminating event. Specific areas of interest for this sources sought include 1) Virtualized target network infrastructure, 2) Target entities, 3) Network traffic generation, 4) Auto-grading, 5) Artificial Intelligence/Student assistance, 6) Operational relevance, 7) Incorporation of physical domain

GENERAL BACKGROUND:
The US Army Cyber School is creating curriculum that provides world-class technical training for 17* series (17A, 17C, and 170A) personnel that perform in both Offensive and Defensive Cyberspace Operational work roles. Hands-on application of skills and knowledge gained from instruction in a culminating event that closely parallels the Operational Environment is a critical component of the US Army Cyber School's approach to training all 17* series personnel. It is the intent of the US Army Cyber School to provide all training, to include culminating events, in a setting that fosters adult learning, dynamic problem-solving, and critical thinking, all of which prepare 17 series personnel for the highly technical missions they will be serving in upon graduation.

SPECIFIC INFORMATION OF INTEREST:
1) Virtualized target network infrastructure: The virtualized network for the culminating event must be dynamic in that the instructor should be able to make modifications in near-real-time. The infrastructure should consist of a variety of hosts with various operating systems, servers, routers, switches, and firewalls.

2) Target entities: Target entities must include various adversarial organizations (military, government, terror, and criminal) and persona that employ a variety of offensive and defensive tools and techniques. Additionally, target entities must have a variety of vulnerabilities unique to each to avoid a single solution that works across the board.

3) Network traffic generation: Network traffic must not only mimic the "noise" generally encountered on a network, but must also include clear, encrypted, and obfuscated textual and data traffic that emulates conversations, transactions, file-sharing, malicious code, attacks, and reconnaissance that relate to a greater underlying scenario storyline.

4) Auto-grading: An auto-grading system is required to optimize the flow of training, provide near instant feedback to the student, and to identify student shortfalls in near-real-time.

5) Artificial Intelligence/Student Assistance: An artificial intelligence system is required to provide a dynamic target that adapts to student input; poorly executed tasks may cause additional work based on the AI's reaction to the input. Also, a student assistant is required to facilitate adult learning and to optimize instruction time for concepts that involve higher instructor-to-student interaction.

6) Operational Relevance: Tasks completed during the culminating event must be intertwined with planning, intelligence, and effects delivery, assessment of effectiveness, defensive actions, and reporting of information, actions, and shortfalls to a higher headquarters within established timelines.

7) Incorporation of the Physical Domain: Activities conducted in the logical domain should have some interconnection with the physical domain. This may involve sending a team to conduct reconnaissance, collection, and/or attack against a wireless target in a distant location, to performing malicious code injection against a portable device within the classroom that represents a host, server, network device, or Industrial Control System.

Potential offerors having the skills, experience, professional qualifications, and capabilities necessary to perform the described requirement are invited to provide a capabilities statement via e-mail. The Capability statements shall not exceed ten (10) pages and must include the following: 1) Company name and Point of Contact information (address, telephone, e-mail, web-site, etc.); 2) DUNS number and CAGE code; 3) Small Business Size/Certification (to include 8(a), HUBZone, SDVOSB, etc.); and 4) Familiarity and knowledge of the requirement.

Responses are due no later than 09:00 am, Friday, 4 November 2016, and shall be electronically submitted to [email protected]. All responses will be used to determine the appropriate acquisition strategy for a potential future acquisition. Response is strictly voluntary; no reimbursement will be made for any costs associated with providing information in response to this synopsis or any follow-up information requests.

 

 

Bid Protests Not Available