<div class="description">
<p>The Cyber Automated Red Team Tool (CARTT) is designed to address the shortage within the Department of Defense (DoD) of trained red teams that are able to conduct security assessments of cyber systems. CARTT, implemented in software, simulates the actions of a red team by automatically identifying and analyzing vulnerabilities in computer systems, and then exploiting those vulnerabilities with cyber-attack actions. It then presents the user with a summary of the results after it conducts its assessment. An ongoing project at NPS has developed the first version of a CARTT, which can conduct vulnerability assessments of computers. This research has extended the capability of the CARTT graphical user interface (GUI), and software to enable an operator to select and automatically execute scripted red team attacks against specified targets to achieve intended cyber effects. The automated nature of these attack scripts allows their use by operators who do not have extensive training in offensive cyber operations (OCO) or red teaming.
</p>
<br>Subjects: automation; CARTT; cyber; cyber automated red team tool; cyber physical systems; cyber security; cyber systems; offensive cyber operations; penetration testing; red teaming; vulnerability assessment</div>
<div class="fn value">
Edwards, Preston L.</div>
Internet Archive identifier