laboratory ctisl a new generation of cyber warriors has suited up for battle and is targeting u.s. interests . gtri is a leader in developing the technologies that secure defend and respond to threats within our country s information distribution and network systems on the virtual battlefield . gtri experts are tackling tough security issues within military and non military networks developing new tools and methods for securing information educating and increasing awareness in the cyber domain and applying leading technologies in network design to keep us safe now and in the future . the cyber technology and information security laboratory ctisl conducts applied research focused on cyber threats and countermeasures secure multi level information sharing resilient command and control network architectures reverse engineering information operations and exploitation high performance computing and data analytics . ctisl engineers develop and apply cutting edge technologies in computing network architectures signal and protocol analysis network forensics malware analysis open source threat information collection and correlation insider threat detection and mitigation hardware and software reverse engineering and advanced analytics to solve the toughest problems of the times . ctisl brings this knowledge to the classroom by providing professional education offerings across the cyber landscape . ctisl has six strategic thrusts reverse engineering vulnerability identification and exploitation resilient network systems engineering malicious software analysis threat intelligence and penetration testing high performance computing and analytics multi level secure software systems and collaboration tools professional education outreach and awareness reverse engineering vulnerability identification and exploitation ctisl s network vulnerability division nvd concentrates on exploitation and reconstruction of information in the form of signals communication protocols and application and embedded binaries . nvd engineers determine hardware and software vulnerabilities and reconstruct signals to determine overt and covert methods of exploitation . threat countermeasures span a wide range from conventional radio frequency rf jamming denial of service to offensive computer network operations tactics . providing support to the u.s. military for more than 20 years nvd engineers are well versed in assessing the operating capabilities and vulnerabilities of communications and routing equipment . the division also supports various other government agencies and industry sponsors in countering adversary information networks . resilient network systems engineering ctisl s command and control mission assurance division c2ma concentrates on design and fielding of resilient information distribution systems . cutting edge technologies including secure network enclaves virtualization multi level security and adaptive quality of service management are applied to construct joint command and control systems for combat operations . the division s solutions have been accredited tested and fielded for ground air and maritime operations centers . many of these systems have been deployed around the globe for a variety of operations such as the haiti humanitarian relief effort . malicious software analysis threat intelligence and penetration testing ctisl s emerging threats and countermeasures etcm division performs research in the areas of malicious software analysis network and media intelligence gathering and unique clustering and analytic visualization tools to provide cyber situational awareness . etcm has developed apiary formerly titan a repository of more than 23 million malware samples that provide to the community automated analysis and threat reporting . leveraging the apiary framework other etcm tools such as spear phishing utilize the intelligence data to perform sophisticated clustering and grouping to reveal hidden relationships . etcm develops custom algorithms frameworks and visualizations to support the detection of targeted malware and other sophisticated threats . etc also provides unique penetration testing services and consultation to help customers comprehensive information security programs . high performance computing hpc and analytics the innovative computing division icd designs develops and applies hpc techniques to advance the field of parallel computing and to support ultra fast analytics in support of big data problems real time deep packet inspection insider threat detection password cracking and high speed relational mapping of feature sets . icd has extensive experience with diverse aspects of high throughput computing systems including gpu computing massively parallel systems high performance software libraries middleware compilers low level optimization and platform design for diverse application domains including cryptanalysis network analysis signal processing and more . multi level secure software systems and collaboration tools ctisl s secure information systems sis division concentrates on the design and development of secure real world multi level information sharing applications . both hardware and software design methodologies are combined to deliver information exchange solutions that pass the rigorous testing required to operate on the nation s most secure networks . sis solutions are nationally recognized within the government as state of the art affordable secure and scalable . professional education outreach and awareness although much hype exists about the threat of cyber attacks many organizations still fail to understand the costs of data exfiltration network disruptions and other nefarious actions that may result from a cyber attack . perimeter protection although necessary is not enough . ctisl is dedicated to equipping and educating the good guys . to that end ctisl cyber security experts provide tailored educational opportunities hacker competitions emerging threat conferences threat landscape reports and other outreach activities . we believe that effective information security programs must first be grounded in education and training as threats become more and more sophisticated . contact information andrew howard lab director contact ctisl map & directions