Service Compiling Cyber Threat Sources

This notice serves as market research in accordance with FAR Part 10. Pursuant to FAR 52.215-3 Request for Information or Solicitation for Planning Purposes, responses to this notice are not offers and cannot be accepted by the Government to form a binding contract. THIS IS NOT A REQUEST FOR COMPETITIVE PROPOSALS AND NO CONTRACT WILL BE AWARDED FROM THIS REQUEST FOR INFORMATION. This sources sought synopsis is issued solely for information and planning purposes. The purpose is to improve the Government's understanding of the current marketplace and to identify potential sources capable of performing the effort described herein. The Defense Security Service (DSS) is seeking sources to provide a service which compiles cyber threat sources and aggregates this data from the Internet. The offeror shall provide a single SSL web graphical user interface (GUI) to: - View botnet family (e.g., Dridex, Solar, Jedobot) activity, to include DDoS activity (i.e., victim IP(s), duration of attack, nature of attack) - Ensure all information retrieved is Title 18 compliant - Acquire and make available an average of 50M records/day passive DNS data - Discern and make available global network link state and connectivity information, including but not limited to neighboring routers and traceroute history - Present host operating system information (with version level, if available) in reponse to a query, including but not limited to port banners and web server information - Observe and make available global network insight - Query global Internet routing tables, including routing snapshots and announce/withdraw notifications - Monitor and make queriable global TCP/UDP scanning activity - Present detailed geolocation information - Detect, monitor and make available global hosts' compromise status with identification of nature of compromise - Provide query access, by nickname, email, URL, keywords, to data from sources such as Pastebin, pastie.org, etc. The system shall provide multiple export formats and offer an Application Program Interface (API) for both input and output. The system shall allow for user notification when a query is complete. Access to the web GUI and all identified databases shall be available at contract award. The National American Industry Classification System (NAICS) code for this action is 519190 - Information - All Other Services, size standard $27,500,000.00. All prospective contractors must be registered in the System for Award Management (SAM) database to be awarded a DoD contract. The acquisition strategy has not yet been determined. Market research results will assist the Defense Security Service in determining whether this requirement will be full and open, a small business set-aside, or a sole source acquisition. Note that, if there is sufficient demonstrated interest and capability among small business contractors, a key factor in determining if an acquisition will be a Small Business set-aside is that two or more potential small business prime contractors are capable of performing at least 50% of the effort as defined in FAR 52.219-14 Limitations. If a contractor believes that they have the capability and are qualified to meet the government's requirement, please respond to this Sources Sought Synopsis with a capabilities package. The capabilities package should be brief and concise, yet clearly demonstrate an ability to meet the stated requirements. The package shall not exceed 10 pages and include the following information: 1. Name of Company 2. Address 3. Point of Contact (to include phone number and email address) 4. Recent, relevant experience in all areas should be provided 5. Firms responding to this announcement should indicate whether they are a large business, small business, Small Disadvantaged Business (SDB), Women-Owned Small Business (WOSB), Economically Disadvantaged Women-Owned Small Business (EDWOSB), 8(a) certified business, Veteran-Owned Small Business (VOSB), Service-Disabled Veteran-Owned Small Business (SDVOSB), or Historically Underutilized Business (HUBZone) 6. Company Size and CAGE code 7. Is your company domestically or foreign owned (if foreign, please indicate the country of ownership) This is an INDUSTRY NOTIFICATION and is for information purposes ONLY. This is NOT A SOLICITATION. In accordance with FAR 15.201, this announcement shall not be construed as an obligation on the part of the Government. The Government does not intend to award a contract on the basis of this notice or otherwise pay for information solicited. All submissions are requested to be made electronically by 4:00pm, local time Quantico, on 19 March 2015 and emailed to Julie Bardo, email: contact@example.gov. The Government reserves the right to contact the submitting parties as required, for further clarification on material provided. In addition, the Government will use its assessment of the information and other research to determine which sources appear qualified to perform the work required by the Government. Respondents will not be notified of the assessment results.