CYBER-ATTACK AUTOMATED UNCONVENTIONAL SENSOR ENVIRONMENT CAUSE PROPOSERS' DAY January 21 2015 Office for Anticipating Surprise INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA CAUSE Program Proposers' Day Agenda Time Topic 9 00am - 9 15am Welcome Remarks 9 15am - 9 45am IARPA Overview and Remarks 9 45am - 10 30am CAUSE Program Overview 10 30am - 10 45am Break 10 45am - 11 15am Contracting Overview 11 15am - 11 45am CAUSE Program Questions Answers 11 45am - 1 00pm No Host Lunch 1 00pm - 2 30pm 5-minute Capability Presentations 2 30pm - 4 00pm Networking and Teaming Discussions Speaker Mr Robert Rahmer Program Manager IARPA Dr Peter Highnam Director IARPA Mr Robert Rahmer Program Manager IARPA Break Mr Tarek Abboushi IARPA Acquisitions Mr Robert Rahmer Program Manager IARPA Lunch Attendees No Government Attendees No Government INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 2 Proposers' Day Goals o Familiarize participants with IARPA's interest in research to develop methods for detecting and forecasting cyber-attacks o Ask questions and provide feedback this is your chance to alter the course of events o Foster discussion of synergistic capabilities among potential program participants i e foster teaming Take a chance someone might have a missing piece of your puzzle INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 3 Disclaimer o This presentation is provided solely for information and planning purposes o The Proposers' Day Conference does not constitute a formal solicitation for proposals or proposal abstracts o Nothing said at Proposers' Day changes requirements set forth in a Broad Agency Announcement BAA INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 4 Schedule o Full Proposals are due 45 days after BAA is published o Once BAA is released questions can only be submitted and answered in writing via the BAA guidance INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 5 O anm Gm HEM UHWMOHOW Gm Office of the Director of National Intelligence Central Intelligence Agency Department of State Defense Intelligence Agency National Security Agency Department of Energy National Geospatial-Intelligence Agency Department of the Treasury National Reconnaissance Office Drug Enforcement Administration Army Federal Bureau of Investigation Navy Department of Homeland Security Coast Guard Air Force Marine Corps INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 7 IARPA Mission and Method IARPA's mission is to invest in high-risk high-payoff research that has the potential to provide the U S with an overwhelming intelligence advantage over our future adversaries o Bring the best minds to bear on our problems - Full and open competition to the greatest possible extent - World-class rotational Program Managers o Define and execute research programs that - Have goals that are clear measureable ambitious and credible - Employ independent and rigorous Test Evaluation - Involve IC partners from inception to finish - Run from three to five years INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 8 Office of Incisive Analysis Maximizing Insight from the Information We Collect in a Timely Fashion Large Data Volumes and Varieties Social-Cultural and Linguistic Factors Providing powerful new sources of information from massive noisy data that currently overwhelm analysts Analyzing language and speech to produce insights into groups and organizations Improving Analytic Processes Dramatic enhancements to the analytic process at the individual and group level INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 9 Office of Smart Collection Dramatically Improve the Value of Collected Data Novel Access Provide technologies for reaching hard targets in denied areas Asset Validation and Identity Intelligence Detect the trustworthiness of others Advance biometrics in real-world conditions Tracking and Locating Accurately locate HF emitters and low-power moving emitters with a factor of ten improvement in geolocation accuracy INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 10 Office of Safe and Secure Operations Counter Emerging Adversary Potential to Deny our Ability to Operate Effectively in a Globally-Interdependent and Networked Environment Computational Power Trustworthy Components Revolutionary advances in science and engineering to solve problems intractable with today's computers Getting the benefits of leading-edge hardware and software without compromising security Safe and Secure Systems Safeguarding mission integrity in a hostile world INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 11 Office for Anticipating Surprise Detecting and Forecasting Significant Events S T Intelligence Indications Warnings Detecting and forecasting the emergence of new technical capabilities Early warning of social and economic crises disease outbreaks insider threats and cyber attacks Strategic Forecasting Probabilistic forecasts of major geopolitical trends and rare events INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 12 How to engage with IARPA o Website www IARPA gov - Reach out to us especially the IARPA PMs Contact information on the website - Schedule a visit if you are in the DC area or invite us to visit you o Opportunities to Engage - Research Programs o Multi-year research funding opportunities on specific topics o Proposers' Days are a great opportunity to learn what is coming and to influence the program - Seedlings o Allow you to contact us with your research ideas at any time o Funding is typically 9-12 months IARPA funds to see whether a research program is warranted o IARPA periodically updates the topics of interest - Requests for Information RFIs and Workshops o Often lead to new research programs opportunities for you to provide input while IARPA is planning new programs INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 13 Concluding Thoughts o Our problems are complex and truly multidisciplinary o Technical excellence technical truth - Scientific Method - Peer independent review - Full and open competition o We are always looking for outstanding PMs o How to find out more about IARPA www IARPA gov o Contact Information Phone 301-851-7500 INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 14 CYBER-ATTACK AUTOMATED UNCONVENTIONAL SENSOR ENVIRONMENT CAUSE Program Overview Mr Robert Rahmer Program Manager IARPA Office for Anticipating Surprise INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA CAUSE Overview o CAUSE is a multi-year research and development program o It seeks to develop new automated methods for forecasting and detecting cyber-attacks hours to weeks earlier than existing methods o The CAUSE Program aims to develop and validate unconventional multi-disciplined sensor technology that will forecast cyber-attacks and complement existing advanced intrusion detection capabilities INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 16 Background o Cyber attacks evolve in a phased approach which includes activities and observations before a significant event occurs target reconnaissance planning and delivery o Detection of new cyber events and phenomena typically occurs in later phases of an attack o Analysis occurs post-mortem to discover indicators from earlier phases INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 17 Background o Cyber Threat Intelligence capabilities often report threat actor activities behaviors and planning through observables from publicly available data such as social media news chat blogs message boards and many others providing the means to infer motivations and intentions INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 18 Background o Published research states some of these publicly available data sources are useful in the early detection of other events such as disease outbreaks and macroeconomic trends - News feeds Twitter blogs and web search queries o 2014 Verizon Data Breach Investigations Report - Victims of data breaches are notified by external parties 75% of the time INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 19 Current Research o Cyber attack prediction research has evolved utilizing a combination of techniques - Detailed knowledge of internal network infrastructures - Analysis of known vulnerabilities - Intrusion detection sensors for monitoring of an event in progress to predict future phases of an attack o Analysis of cyber actor behaviors and cultural dimensions has shown correlations between groups and cyber activities INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 20 Current Research o IARPA's Open Source Indicators OSI program developed methods for detecting anticipating unexpected societal events e g political crises disease outbreaks by fusing data of multiple types from multiple sources and utilizing ensemble machine learning methods o Few have researched methods for a probabilistic warning system for cyber defense that focuses on utilizing sensors external to an enterprise INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 21 Key Technical Challenges o Identify and evaluate unconventional and technical indicators in the earlier phases of cyber attacks that are leading indicators of later stages of the attack - Looking for well-executed non-traditional creative ideas e g black market sales analysis cyber actor behavior models o Create highly efficient algorithms that will process massive data streams from diverse data sets to extract signals from noisy data o Create techniques to fuse traditional technical indicator sensor data and alternate unconventional indicator data sources to develop automated probabilistic warnings o Identify and evaluate techniques that enable sharing of disparate threat contextual information and indicators among multiple organizations and security professionals to forecast an attack INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 22 Evaluation o Teams will deliver real-world cyber-attack warnings o The goal is to Beat the Security Incident Reports - Teams choose sensors data and methods - Teams are rewarded for early and accurate warnings of as many reportable events as possible o Warning delivered to IARPA Time stamp Probability of attack Cyber-attack details o Event details Event-Class Attacker Target Event Time o Performers will send additional context about events which will be valuable to end users o Competitive forecasting tournament - the delivery of successive better warnings is expected each warning will be scored separately INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 23 Industry Scope o CAUSE is a research program not an operational activity o In earlier phases CAUSE will focus research on a particular U S business sector s that will be identified in the BAA IARPA is choosing a business sector s with the following characteristics - Organizations that have a variety of business areas - Sufficiently representative o Variety of attack types o Variety of existing external bad actors - Variety of publicly available data - Good ground truth data for training and testing o Suggestions for data sharing partnerships with business sector s are welcome please submit an index card INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 24 Events and Scoring o At kickoff the Government team expects to provide a large list of significant cyber security events that occurred over the last 6 -18 months for which an early warning would have been valuable o After kickoff Government team expects to provide monthly ground truth - cyber security events for the last month for which a warning would have been expected o Starting in Month 6 teams will deliver warnings to IARPA o Starting in Month 12 warnings delivered to IARPA are scored against Program milestones INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 25 Events and Scoring Scoring - Lead time Time warning delivered to IARPA compared to Time of earliest report of a security incident Not necessarily time of event - Probability score Accuracy of probability assigned to security event - Utility Time Time warning delivered to IARPA compared to the actual time of the security event - Quality of Warning Match between event forecasted detected and true event - Recall and False Discovery Rate FDR o Other assessments qualitative and quantitative will be performed by the Government team to evaluate each team's approach Approaches will also be evaluated on the context within the warnings as judged by potential users INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 26 Metrics o Lead Time Drives earlier event detection - Time between warning and security incident report - Teams will be asked to identify successive warnings for the same event The Government team will use this information for assessment of team's approach for early detection o Probability Score - Quadratic score 1 - o-p 2 - p is the probability assigned to the warning o is ground truth 1 if the event occurred 0 if the event didn't occur within 7 days o Utility Drives forecasting - Time between warning and the actual event occurred as recorded in the security incident report 3 day minimum is the goal The Government team will use this information for assessment of team's approach to forecasting INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 27 Metrics - Quality of Warning o For each warning we calculate the quality q 1 2 3 4 - 1 Attack Classification - 2 Attacker - 3 Target - 4 Event Time - This provides partial credit for partial warnings o Quality will use a typology of threat actors and targets to calculate the difference between ground truth for an attack e g target - Typology 3 Industry Organization Logical Address Vulnerability - Compare warning target with true target to get the vector x1 x2 x3 x4 xi 0 if false xi 1 if true - Location quality 1 4 x1 1 4 x1x2 1 4 x1x2x3 1 4 x1x2x3x4 o For the time of the event use 1- min predicted time - actual time 7 7 INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 28 Metrics Scoring - Example Warning Warning Time Stamp Probability Source of Attack Type of Event Attack CW1 8 1 2015 25 CW2 8 3 2015 40 CW3 8 6 2015 75 Ground 8 10 2015 Truth 1 Remote Exploit Remote Exploit Remote Exploit Remote Exploit Victim Time of Attack Unknown Business A 8 4 2015 IP w x y z IP a b c d IP w x y z IP w x y z IP a b c d Vuln x-1 IP a b c d Vuln x-1 INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 8 4 2015 8 4 2015 8 4 2015 29 Metrics Scoring - Example Quality Scores Victim Industry Organization Logical Address CW1 Industry X Business A - - 5 CW2 Industry X Business A IP a b c d - 75 CW3 Ground Truth Industry X Business A IP a b c d Vuln x-1 1 Industry X Business A IP a b c d Vuln x-1 1 Warning Overall Scores Warning CW1 CW2 CW3 Vulnerability Score Lead Time Probability Score Utility Time Quality Score 9 Days 7 Days 4 Days 44 64 94 3 Days 1 Day 0 Days 2 5 3 08 3 67 INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 30 Metrics o Recall Number of cyber events identified by Government team for which performer team sent a warning to IARPA with non-zero lead time and quality Total number of relevant cyber events identified by Government team o False Discovery Rate Number of false warnings identified by Government team for which performer team sent a warning to IARPA Total number of cyber event warnings sent to IARPA by performer team INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 31 Cyber-attack Events Examples of events to forecast Cyber Event Type Unauthorized Access Description An individual gains logical access without permission to a network system application data or other resource Denial of Service DoS An attack that successfully prevents or impairs the normal authorized functionality of networks systems or applications by exhausting resources Malicious Code Successful installation of malicious software that infects an operating system or application Scans Probes Activity that seeks to access or identify a computer open ports Attempted protocols service or any combination for later exploit This activity Access does not directly result in a compromise or denial of service If you have any suggestions please submit an index card INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 32 Warning Generation o It is expected that the technology developed under this effort will have no human in the loop o Experts can help develop and train the system but they will not manually generate warnings guide the system or filter warnings before they are sent to IARPA o Teams' systems must include an audit trail for each warning listing relevant evidence and weights o Warnings that are related should be explicitly identified for additional evaluation by the Government team - Successive warnings for the same event - Warning for mutually exclusive events INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 33 OFFICE OF THE DIRECTOR OF NATIONAL INTELLIGENCE Program Structure Phase 1 External Data Sensors Only Additional Traditional PUinCly Industry Technical I Available - Sensors Sensors Phase 3 Optlonal Flexibility Cyber Attack ttack Emerging Enhancement Forecasting phenomena Model Trajectory Phase 2 Fusmn of Internal and External Data ensors Cyber Performer I I I I I I Innovation hase 2 Cyber ttaCk 81 Emerging Attack Phenomena Model - Trajectory Internal Data II I 5 Traditional 3 IE Technical I 5 Sensors Innova Ion 5 Ii I I I INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA Program Structure Phase 1 18 months External Data Sources Identify predictive threat signals from technical and unconventional Goal 1 sources Goal 2 Perform data classification and training for model development Goal 3 Generate Warnings Phase 2 12 months Data Fusion w Internal Data Sources Goal 1 Create a data fusion model for integrating external and internal data Goal 2 Research highly effective algorithms for processing massive data Goal 3 Generate Warnings Phase 3 12 months Solution Flexibility Enhancement Goal 1 Evaluate solutions' flexibility to integrate within a new organization Goal 2 Evaluate capability for forecasting cyber attacks across multiple organizations Goal 3 Generate Warnings INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 35 Milestones Metric Phase 1 Phase 2 Phase 3 Mean Lead Time 2 days 3 days 5 days Mean Probability Score 2 4 3 3 2 Mean Utility Time 1 day 2 days 3 days Mean Quality Score 2 3 3 5 Recall 0 5 0 7 0 8 False Discovery Rate FDR 0 5 0 2 0 1 INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 36 What CAUSE is not o Not a program focused on - Identification of specific individuals - Collection mechanisms that require directed participation by individuals o Not narrowly focused on a single data source or type o Not a program on developing intrusion detection capabilities leveraging internal data o Not a program focused on insider threats o Not a program on data visualization INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 37 Data o Acquisition collection of external data will require resources time and budget by each team and data requirements will likely overlap across teams o In later phases performers will use internal data from participating U S business sector organization s - Performers may want to access their own or another organization's internal technical data sources earlier in the program to aid R D of novel sensors to support future program goals - BAA will ask bidders to identify internal data sources required to extract novel signals from participating U S business sector organization s INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 38 CAUSE Notional Data Flow Diagram External Unconventional Sensor Data Phase 1 Phase 2 Data Collection and Processing Industry Data Provider s External Unconventional Sensor Data Ground Truth Data Collection and Processing Data Collection and Processing PerformerPerformer 1 2Performer n Forecasting ForecastingForecasting Model Model Model PerformerPerformer 1 2Performer n Forecasting ForecastingForecasting Model Model Model Phase 1 Warnings Internal Sensor Data Normalization Encoding Warning Ingest and Review Phase 2 Data Provider Protected Enclave TBD Phase 2 Warnings T E Scoring INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 39 Team Composition o Given the combination of technical challenges we anticipate teams will possess expertise in - - - - - - - - Computer science Data science Social and Behavioral science Mathematics and statistics Content extraction Information theory Cyber-security Software development INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 40 Teaming o Because of the many challenges presented by this program both depth and diversity will be beneficial - Throughput Consider all that you will need to do all the ideas you will need to test o Make sure you have enough people with the right expertise to do the job o Sufficient resources to follow critical path while still exploring alternatives - risk mitigation - Completeness Teams should not lack any capability necessary for success e g mitigate any dependency risks - Tightly knit teams o Clear strong management and single point of contact o No loose confederations o Each team member should be contributing significantly to the program goals Explain why each member is important i e if you didn't have them what wouldn't get done Remember you may be very accomplished but can you do it all INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 41 Summary o CAUSE seeks to develop new automated methods for forecasting and detecting cyber-attacks hours to weeks earlier than existing methods o The Program aims to develop and validate unconventional multi-disciplined sensor technology that will forecast cyberattacks and complement existing advanced intrusion detection capabilities o We are looking for well-executed creative ideas for unconventional sensors o The BAA supersedes anything presented or said at the Proposers' Day by IARPA INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 42 Questions If you have questions suggestions and comments - please submit an index card now INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 43 Contracting Overview Mr Tarek Abboushi INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA Doing Business with IARPA - Recurring Questions o o o o o Questions and Answers http www iarpa gov index php faqs Eligibility Info Intellectual Property Pre-Publication Review Preparing the Proposal Broad Agency Announcement BAA Section 4 - Electronic Proposal Delivery https iarpa-ideas gov o Organizational Conflicts of Interest http www iarpa gov index php working-with-iarpa iarpas-approach-to-oci o Streamlining the Award Process - Accounting system - Key Personnel o IARPA Funds Applied Research o RECOMMENDATION Please read the entire BAA INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 45 Responding to Q As o Please read entire BAA before submitting questions o Pay attention to Section 4 Application Submission Info o Read Frequently Asked Questions on the IARPA @ http www iarpa gov index php faqs o Send your questions as soon as possible - CAUSE BAA dni-iarpa-baa-15-06@iarpa gov - Write questions as clearly as possible - Do NOT include proprietary information INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 46 Eligible Applicants o Collaborative efforts teaming strongly encouraged - Content communications networking and team formation are the responsibility of Proposers o Foreign organizations and or individuals may participate - Must comply with Non-Disclosure Agreements Security Regulations Export Control Laws etc as appropriate as identified in the BAA INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 47 Ineligible Organizations Other Government Agencies Federally Funded Research and Development Centers FFRDCs University Affiliated Research Centers UARCs and any organizations that have a special relationship with the Government including access to privileged and or proprietary information or access to Government equipment or real property are not eligible to submit proposals under this BAA or participate as team members under proposals submitted by eligible entities INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 48 Intellectual Property IP o Unless otherwise requested Government rights for data first produced under IARPA contracts will be UNLIMITED o At a minimum IARPA requires Government Purpose Rights GPR for data developed with mixed funding o Exceptions to GPR - State in the proposal any restrictions on deliverables relating to existing materials data software tools etc o If selected for negotiations you must provide the terms relating to any restricted data or software to the Contracting Officer INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 49 Pre-Publication Review o Funded Applied Research efforts IARPA encourages - Publication for Peer Review of UNCLASSIFIED research o Prior to public release of any work submitted for publication the Performer will - Provide copies to the IARPA PM and Contracting Officer Representative COR COTR - Ensure shared understanding of applied research implications between IARPA and Performers - Obtain IARPA PM approval for release INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 50 Preparing the Proposal o Note restrictions in BAA Section 4 on proposal submissions - Interested Offerors must register electronically IAW instructions on https iarpa-ideas gov - Interested Offerors are strongly encouraged to register in IDEAS at least 1 week prior to proposal Due Date - Offerors must ensure the version submitted to IDEAS is the Final Version - Classified proposals - Contact IARPA Chief of Security o BAA format is established to answer most questions o Check FBO for amendments IARPA website for Q As o BAA Section 5 - Read Evaluation Criteria carefully - e g The technical approach is credible and includes a clear assessment of primary risks and a means to address them INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 51 Preparing the Proposal BAA Sect 4 o Read IARPA's Organizational Conflict of Interest OCI policy http www iarpa gov index php working-with-iarpa iarpas-approach-to-oci o See also eligibility restrictions on use of Federally Funded Research and Development Centers University Affiliated Research Centers and other similar organizations that have a special relationship with the Government - Focus on possible OCIs of your institution as well as the personnel on your team - See Section 4 It specifies the non-Government e g SETA FFRDC UARC etc support we will be using If you have a potential or perceived conflict request waiver as soon as possible INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 52 Organizational Conflict of Interest OCI o If a prospective offeror or any of its proposed subcontractor teammates believes that a potential conflict of interest exists or may exist whether organizational or otherwise the offeror should promptly raise the issue with IARPA and submit a waiver request by e-mail to the mailbox address for this BAA at dni-iarpa-baa-15-06@iarpa gov o A potential conflict of interest includes but is not limited to any instance where an offeror or any of its proposed subcontractor teammates is providing either scientific engineering and technical assistance SETA or technical consultation to IARPA In all cases the offeror shall identify the contract under which the SETA or consultant support is being provided o Without a waiver from the IARPA Director neither an offeror nor its proposed subcontractor teammates can simultaneously provide SETA support or technical consultation to IARPA and compete or perform as a Performer under this solicitation INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 53 Streamlining the Award Process o Cost Proposal - we only need what we ask for in BAA o Approved accounting system needed for Cost Reimbursable contracts - Must be able to accumulate costs on job-order basis - DCAA or cognizant auditor must approve system - See http www dcaa mil Audit Process Overview - Information for Contractors under the Guidance tab o Statements of Work format may need to be revised o Key Personnel - Expectations of time note the Evaluation Criteria requiring relevant experience and expertise o Following selection Contracting Officer may request your review of subcontractor proposals INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 54 IARPA Funding o IARPA funds Applied Research for the Intelligence Community IC - IARPA cannot waive the requirements of Export Administrative Regulation EAR or International Traffic in Arms Regulation ITAR - Not subject to DoD funding restrictions for R D related to overhead rates o IARPA is not a DOD organization INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 55 Disclaimer o This is Applied Research for the Intelligence Community o Content of the Final BAA will be specific to this program - The Final BAA is being developed - Following issuance look for Amendments and Q As - There will likely be changes o The information conveyed in this brief and discussion is for planning purposes and is subject to change prior to the release of the Final BAA INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA 56 CIFFIEE THE DIREETDR DE INTELLIGENCE QUESTIONS CAUSE Program Q A Mr Robert Rahmer Program Manager IARPA Office for Anticipating Surprise INTELLIGENCE ADVANCED RESEARCH PROJECTS ACTIVITY IARPA                     National Security Archive    Suite 701  Gelman Library  The George Washington University    2130 H Street  NW  Washington  D C  20037    Phone  202 994‐7000  Fax  202 994‐7005  nsarchiv@gwu edu