D -- Cloudshield CS-2X000 Support/Integration

The Information Operations Technologies Division of the Information Operations Directorate, a major component of the Air Force Information Operations Center (AFIOC) is currently seeking sources for a potential requirement for services to support and/or integrate emerging technologies into the AFIOC developed Information Operations Platform (IOP). These services include, but are not limited to, training, fielding support, trouble shooting, maintenance, and integration of capabilities into the Cloudshield?s CS-2X00 series hardware, firmware, and software. Beyond extensive knowledge of the hardware, firmware, and software, the source will also be required to modify the Cloudshield Technologies hardware and firmware to integrate additional capabilities in a supportable way?this in respect to both the legal aspects of any Intellectual Property and the practical aspects of producing supportable changes in both current and future releases of hardware, firmware, and software.This is a Sources Sought Synopsis only. This is not a solicitation announcement. This synopsis neither constitutes a Request for Proposal, nor does it restrict the AFIOC Information Operations Technologies Division (IOT) to an ultimate acquisition approach. No contract will be awarded from this announcement and requests for a solicitation will not receive a response. No reimbursement will be made for any costs associated with providing information in response to this announcement. Any information submitted by respondents to this synopsis is strictly voluntary. This Sources Sought Synopsis is in support of a market survey being conducted by the Integrated Network Defense System (INDS) team to determine potential sources capable of fulfilling all requirements associated with supporting and integrating current and/or emerging capabilities with the Cloudshield Technologies CS-2X00 series hardware. Any resultant contract is anticipated to be a time and material contract with one (1) base year and two (2) option years. Firms responding to this sources sought synopsis are also requested to provide the INDS team with relevant experience related to all requirements and knowledge areas included in this Sources Sought Synopsis. Responses must be submitted electronically to Bill Kaufman, Contracting Officer at William.kaufman@lackland.af.mil by 3:00 p.m. Central Standard Time on 14 Dec 07. In the event that electronic submission is not possible, responses can be forwarded in hard copy to the following address: AF ISR Agency /A7KA, Attn: Bill Kaufman, 102 Hall Blvd, Ste 268, San Antonio, TX 78243. If responses are mailed, they must be received by 14 Dec 07. No phone calls will be accepted. BACKGROUND: The Air Force Information Operations Center is tasked to develop intrusion prevention systems (IPS) to protect current and future AF network configurations from certain forms of attack by hostile individuals, organizations, and/or governments. The next generation IPS is required to maintain the flexibility and configurability of the current IPS while handling the increased data rates of tomorrow?s networks. AFIOC/IOT has a mission to keep abreast of state-of-the-art advances in the intrusion detection field. A primary component of the IOP is the CS-2X00 series hardware. The CS-2X00 series is an advanced, purpose-built system that offers the ability to scale powerful inspection capabilities at extremely high speeds through parallel processing and appropriate distribution of tasks. The INDS? intent is to enhance the IOP capability set via the Cloudshield platform with current and/or emerging capabilities to include, but not limited to steganography detection, covert channels, VoIP, IPv6, geolocation, fail-open Network Interface Cards (NIC) and other commercial applications. All efforts associated with the integration and support of the Cloudshield Technologies CS-2X00 series hardware will be conducted by a source with Top Secret clearances under the guidance of the Air Force Information Operations Center, Information Operations Directorate. Any and all unique application integration would therefore be the property of the United States Air Force. The source will be required to obtain the proprietary rights to the Cloudshield Technologies CS-2X00 series hardware. GENERAL TASKS: Task 1 - Training to AFIOC/IOT on operation and maintenance of the CS-2X00 series Task 1.1 - Training The source shall provide training for up to 12 AF designated personnel at the source?s facility or at a mutually agreed upon facility that is determined to provide the best participant experience at the most economical cost. Each course?s training documentation plan must include, but is not limited to, course objectives, agenda, lab exercises, and some method of evaluation. Training topics include: Task 1.2 - Hardware overview, installation and maintenance for CS-2X00 Course description: This course covers the installation, maintenance and troubleshooting of CS-2X00 series. Students will learn how to install all CS-2X00 components including the Application Server Module (ASM), and Deep Packet Processor Module (DPPM) cards. Task 1.3 - System Management and Network Deployment and Lab Course description: This course provides an examination of the hardware and software architecture of the CS-2X00. Task 1.4 - CPOS Training and Lab Course description: This course is a comprehensive overview of the source?s Packet Operating System (CPOS) for the CS-2X00. Task 1.5 - CMAP Training and Lab Course description: This course is a comprehensive overview of the source?s Compiler and Multi-App Project (CMAP) for the CS-2X00. . Task 1.6 - Open Network Services (ONS) Integrated Development Environment (IDE) 1.0 Training and Lab Course description: This course covers in-depth consideration of the IDE application development environment. Task 1.7 - Advanced ONS IDE Development Program Training and Lab Course description: This course offers students the opportunity to explore advanced IDE development techniques. Task 1.8 ? Timely Training for All Hardware, Firmware, and Software Changes Made to Accomplish the Integration Efforts Listed in Following Tasks Course description: This course will provide updated curriculum and training services for modifications to the hardware, firmware, and software for purposes of satisfying the integration requirements of the following tasks. Task 2 - Technical Support to AFIOC/IOT Task 2.1 Support Concept Refinement, Capability Integration, Demonstrations, Exercise, and Fielding of Government Unique Solutions based on the Cloudshield Product Line The source shall work with IOT personnel to understand their unique requirements and, using its best efforts integrate a capability into the Cloudshield product line that demonstrates a specialized application program interface (API) for unique government requirements. The source shall work with IOT personnel to identify additional sample applications and API requirements related, but not limited, to: steganography detection, covert channels, VoIP, IPv6, Geolocation, fail-open Network Interface Cards (NIC) and other commercial applications. Task 2.1.1 Capability/Technology Integration The source shall participate in Technical Interchange Meetings to present Cloudshield product roadmaps, to coordinate integration efforts, and to assist in capability/technology refinement activities. The source shall contribute to and author whitepapers as required to document concepts and enhanced implementation of the Cloudshield product line to be integrated into the AF architecture. Task 2.1.2 Scope and Integrate Capability/Technology Solutions for Unique Government Requirements The source shall provide scoping, engineering, and integration support in white paper format to proof refined capabilities into working models. The source shall construct all models to be Multi-App enabled and in the open standard PacketC, where possible. Where not possible, the source shall be capable of modifying the PacketC standard to incorporate the missing functionality required for integration. Task 2.1.3 Covert Channel Detection Applications The source shall provide a white paper and/or capability integration for detecting covert channels and remotely accessed backdoors. The source shall optimize government-furnished algorithms and incorporate them into a Cloudshield RAVE application. The source shall explore/analyze the introduction of math-intensive portions of provided algorithms into the Field Programmable Gate Array (FPGA) of their CS-2X00 series system, and alternatively a co-processor for the CS-2X00 chassis. Task 2.1.4 VoIP Security Applications The source shall provide a white paper and/or application integration that demonstrates full protocol handling of all industry standard VoIP protocols for purposes of anomaly detection, use categorization, lawful intercept, and OPSEC enforcement. Task 2.1.5 IPv6 Translation Gateway Application The source shall provide a white paper and/or application integration that provides a two-way translation gateway between IPv4 and IPv6 hosts and networks. Task 2.1.6 Geolocation Application The source shall provide a white paper and/or application integration to utilize a geographically distributed network of Cloudshield hardware to indicate the true geographical source of network traffic and ultimately identify the true source of network traffic. Task 2.2 Support Demonstrations, Exercises, and Fielding activities The source shall provide engineering support to and participate in AF demonstrations, exercises, and fielding activities that include Cloudshield products in the solution set. Task 2.3 Support Next Generation Hardware Utilization and Integration The source shall provide courses of action and demonstrations, as required, to assist in transitioning AF solution sets to the Cloudshield hardware and firmware versions. Task 2.3.1 Access Support to Cloudshield-enabled IBM BladeCenter Architecture The source shall provide access to its next generation hardware architecture in partnership with IBM. The source shall provide engineering support to assist in transitioning the existing capabilities to the blade architecture and planning the roadmap for other integration opportunities that take advantage of the blade architecture capabilities. Task 2.3.2 ?Size, Weight, Power? (SWP) Analysis The source shall provide a study to include a whitepaper, project plan, and cost estimate for an embedded appliance that is code compatible with the current CS-2X00 series architecture while reducing the size to less than 10?x10?, increasing the throughput capacity to 10Gbit, and consuming less than 20W under normal operating conditions. Task 2.3.2.1 Produce SWP Prototype The source shall demonstrate a prototype according to the approved plan described in 2.3.2. Task 2.3.3 Multi-App MLS Application Framework Analysis The source shall provide a study to include a whitepaper, project plan, and cost estimate to implement a Multi-App environment on the CS-2X00 and BladeCenter platforms that is capable of running applications of different classifications simultaneously while protecting the control and reporting of applications to the security domain they belong to. Task 2.3.3.1 Produce Multi-App MLS Prototype The source shall demonstrate a prototype according to the approved plan described in 2.3.3. Task 2.3.4 Network Data Capture, Storage, and Retrieval Application (Tornado) Analysis The source shall provide a study to include a whitepaper, project plan, and cost estimate to implement a network capture, storage, and retrieval system for the CS-2X00. The system?s capture and storage functions shall operate at full line rate of the CS-2X00. The retrieval function shall operate concurrently with capture and storage functions, while supporting simultaneous queries from multiple users in less than 30 seconds (objective) or within two minutes (threshold) from time of request. Task 2.4 Refine and Integrate Commercial Application Integration Prototypes The source shall provide commercial application integration and certification support, where appropriate. The source shall work with IOT personnel to identify target commercial products that may be candidates for integrating with/onto the source CS-2X00. SOURCE QUALIFICATION REQUIREMENTS: Source expertise must include: ?? Software and firmware development and project management capabilities allowing for maintenance & enhancement of INDS developed test components using these languages: ? PacketC ? RAVE ? VHDL ? Assembler ? C ? C++ ? Java ? Database development ? Perl Scripting ? Shell Script ? SQL ?? Hardware modification capabilities to include power supply and cooling issues, size issues, functional issues, to include the following component types: ? Intel IXP Network Processors ? Content/Pattern Matching Chips ? Field Programmable Gate Array (FPGA) ? Ternary Content Addressable Memory (CAM) ? Network PHYs ? Multi-Processor Systems ? Storage Network Technology ?? The working environment requires but may not be limited to: ? Travel to Government or remote facilities ? A quick response capability in CONUS