Expression of Interest (EoI) for Transfer of Technology Chakra (Network based Dynamic Firewall Solution) Issued by Centre for Development of Advanced Computing (A Scientific Society of the Ministry of Communications and Information Technology, Govt. of India) C-DAC Knowledge Park, Opp. HAL Aeroengine Division, Old Madras Road Byappanahalli, Bengaluru - 560 038 Karnataka (India) Phones: +91-80-6611 6400/01/02/03,25244059/25246823/25246826 Fax: +91-80-2524-7724 www.cdac.in 1
Table of Contents 1 Introduction 2 About C-DAC 3 About Chakra 4 Application Areas 5 Technology Transfer 6 General terms and conditions 7 Who can apply? 8 How to apply? 9 Contact Person Annexure I - Template for the EoI for Technology Transfer Annexure II Product Brochure 2
List of Abbreviations Abbreviation C-DAC DeitY EoI ICT MCIT R & D DoS DDoS ToT ICMP IDS IP NIDS SNMP TCP Description Centre for Development of Advanced Computing Department of Electronics and Information Technology Expression of Interest Information and Communications Technology Ministry of Communications & Information Technology Research and Development Denial of Service Distributed Denial of Service Transfer of Technology Internet Control Message Protocol Intrusion Detection System Internet Protocol Network Intrusion Detection System Simple Network Management Protocol Transmission Control Protocol 3
1. Introduction The Department of Electronics & Information Technology (DeitY) under Ministry of Communications & Information Technology, Government of India initiated the Design and Development of Chakra to dynamically generate and update firewall rules, without any human intervention, for preventing the identified network based attack by analyzing and correlating the data from multiple network monitoring sources in project Design and Development of a Dynamic Firewall Solution with C-DAC, Bangalore and Tezpur University as the implementing agency. The project conceptualizes the indigenous development of Chakra which can be used as a gateway firewall in small and medium scale enterprises and government network. Unlike the traditional firewall, where the rule are static and requires human intervention to update it, Chakra can monitor and analyze the network traffic to detect network anomalies and dynamically generate and update firewall rules to prevent those attacks. Chakra can also be used as a network traffic monitoring and behavior analysis tool. Computer Network and Internet Engineering of C-DAC, Bangalore has developed Chakra and the technology is available for transfer to IT Industry who are specialized in Cyber Security development and Integration services. C-DAC, Bangalore would like to invite competent industrial partners for commercialization of the Chakra through transfer of technology. 2. About C-DAC Centre for Development of Advanced Computing (C-DAC) is the premier R&D organization of the Department of Electronics and Information Technology (DeitY), Ministry of Communications & Information Technology (MCIT) for carrying out R&D in IT, Electronics and associated areas. Different areas of C-DAC, had originated at different times, many of which came out as a result of identification of opportunities. More details about C-DAC can be found at www.cdac.in 4
3. About Chakra Chakra is a powerful, flexible and feature rich network based dynamic firewall solution. Apart from having regular firewall features like traffic filtering, Chakra also provides unique functionalities like dynamic rule generation through network traffic monitoring, analysis and alert correlation. Chakra collects, analyze and correlate the outputs from multiple network monitoring sources like SNMP, network flow and IDS to generate dynamic firewall rules. Chakra can generate and configure firewall rules automatically for attack which change the traffic pattern of network such as DoS, DDoS, flood etc. It is capable to generate flexible reports related to traffic trend, security events and alerts. Chakra provides the flexibility and control over firewall for monitoring, configuration and management in critical attack scenarios through an interactive web based interface. Chakra is a powerful, flexible and feature rich network based dynamic firewall system. Apart from having regular firewall features like traffic filtering, Chakra also provides unique functionalities like dynamic rule generation, traffic monitoring and alert correlation. Chakra collects, analyze and correlate the outputs from multiple network monitoring sources like SNMP, flow and IDS to generates dynamic firewall rules. CHAKRA can generate and configure firewall rules automatically for attack which change the traffic pattern of network such as DoS, DDoS, flood etc. It is capable to It is capable to generate flexible reports related to traffic trend, security events and alerts. Chakra provides the flexibility and control over firewall for monitoring, configuration and management in critical attack scenarios through an interactive web based interface. Salient Features Traffic Filter Dynamic Rule Generation Rule Management Traffic Monitoring Traffic Trend Analysis SNMP and Flow analyzer Multi source input analysis & correlation 5
DoS and DDoS detection Anomaly detection Role based Authentication Flexible Report Generation System and Event log System resource Monitoring Web based GUI CHAKRA Minimum System Requirement Sl.No Description Minimum Required Specifications 1 Processor 3 Ghz 2 Memory 8 GB 3 Hard Disk HDD (SAS) with 500 GB storage capacity 4 Network Interface 4 x 1 Gbps Ethernet Interface 5 Ports USB 2.0 Ports 6 OS Platform Open BSD 5.6 The brochure of the product is attached in Annexure II 4. Application Areas Chakra can be used as a network gateway firewall in small and medium scale enterprises and government network Dynamic rule generation based on network traffic behavior Automatic rule update to prevent detected network attacks Multiple network monitoring input source (SNMP, flow and IDS log) data collection, analysis and event correlation Network traffic monitoring and behavior analysis. 6
5. Technology Transfer The technology will be transferred on non-exclusive basis. The technology fee will be finalized at a later stage. The ToT package contains the following 1. Design Documents 2. Source Code 3. User Manual & Installation Manual 4. Test cases and Test report 5. Deployment Manual 6. Training and hand holding 6. General terms and conditions i. An expert committee will scrutinize the applications for follow-up action. ii. The applicants may be called for a presentation regarding their strengths and business proposals. iii. All incidental expenditure incurred in preparation/ submission or presentation of the EoI shall be borne by the participating agency iv. Participation in this EoI does not guarantee any association with C-DAC unless notified by C-DAC in writing. v. C-DAC reserves the right of rejecting any offer without assigning reasons. vi. Last date for submission of EoI is 45 days from issue of the first advertisement. Any offer received after due date and time will not be accepted. vii. viii. ix. There is neither a business guarantee nor any commitment for funding support from C-DAC to the appointed/ empanelled agencies. A Committee of experts constituted by C-DAC will assess capabilities and strengths of the industry before finalizing the technology partners. The industry willing to take technology for commercial exploitation will be required to enter into a ToT agreement with C-DAC as per the terms and conditions approved by the competent authority in the DeitY in the prescribed format. 7
7. Who can apply? Reputed Industries with experience in development & deployment of IT /Network security products with expertise in programming skills in Linux environment and integration capabilities. Agencies willing to take Chakra to the market directly or with value addition as per the ToT guidelines agreement of C-DAC. 8. How to apply? Interested companies may send expression of interest with their details by filling the questionnaire as per Annexure I along with supporting documents to: Executive Director Centre for Development of Advanced Computing C-DAC Knowledge Park, Opp. HAL Aeroengine Division, Old Madras Road Byappanahalli, Bengaluru - 560 038.Karnataka (India) Phones: +91-80-6611 6400/01/02/03, 25244059/25246823/25246826 Fax: +91-80-2524-7724 9. Contact Person for queries Mr Muraleedharan N/Mr. Dittin Andrews C-DAC Bangalore, Electronic City Bengaluru - 560 100 Karnataka (India) Phones: +91-80-28523300(Ext:4120/2511) Fax: +91-80- 28522590 e-mail: murali@cdac.in and dittin@cdac.in 8
The below needs to be given A. Company Profile 1. Name of the Organization: Annexure-I Website 2. Details of the Contact Person: Name: Address Telephone: Fax: E-Mail: 3. Year of Incorporation 4. Type of Organization Public Sector/ Limited/Private Limited/ Partnership/ Propritery/ Society/ Any other Whether Foreign Equity Participation (Please give name of foreign equity participant and percentage thereof) Names of Directors of the Board/ Proprietors Name and address of NRI(s), if any 5. Category of the firm: Large/Medium/Small scale unit 9
6. Address of the Registered Office: 7. Number of Offices with addresses (Excluding Registered Office: India Abroad 8. Certificate of registration as a manufacturing unit 9. Permanent Account Number 10. Sales Tax Number/ VAT 11. Status of ISO9001/ISO13485 Certification The following documents need to be attached along with EoI: 1. Organization Brochure 2. Certificate of Registration / Incorporation 3. Certified copies of turn over for last three financial years (For start-up companies, instead of three years turnover, future business plan for three years should be mentioned). 4. Three year business plan (For start-up companies same as above point i.e business plan for three years should be mentioned). 4. Permanent Account Number. 5. Write up on technical capabilities. 7. The list of machine tools /equipment s/software s/facilities available related with work to be furnished. 8. The manpower strength (Technical: Mechanical, Electrical, Electronics, Software & Non-Technical etc.)at various levels to be furnished Technical: a. B.E./ B.Tech/Ph.D 10
b. Diploma c. Skilled Technicians Non-technical: Note: Expression of interest should be stamped and signed by authorized signatory with a formal declaration note and needs to be submitted in sealed form. 11
Product brochure Annexure II 12