Request for Information (RFI): Verification and Compliance Checking for Natural-Language Network Requirements (FastVacc)

Modern networks need to be reconfigured quickly in response to mission changes or emerging threats, but checking compliance with security requirements can take months. This creates a window in which adversaries may exploit vulnerabilities introduced by those changes. The Defense Advanced Research Projects Agency (DARPA) Information Processing Techniques Office (IPTO) seeks information on approaches, tools and practices for closing that window by reducing, by 2-3 orders of magnitude, the time and cost of verifiable compliance checking. DARPA envisions a capability that would take as input two items:

(a) a requirements document written in natural language and (b) the configurations in a concrete network. In an offline phase, it would reason about the requirements for inconsistency, redundancy and incompleteness, and output consistent, non-redundant and completed requirements. Then, it would check, in near real-time, whether the concrete configurations satisfy all of the requirements. In all cases, its output would be understandable by a human.