Agent Applications in Defense Logistics
3. The DARPA UltraLog Project
Figure 5. Report Card on the ALP 4 Grand Challenges.
Ultimately we have unleashed this power of agent technology for global operations and defense logistics.
Figure 6. Enhancing Cougaar with Advanced Survivability.
TPFDD over a period representing 180 days of sustained military operations in a major regional contingency. UltraLog employed a highly realistic military oper- ations scenario of ALP scale, involving an initial 180 day plan with deployment, RSOI, PREPO, and operations, and included 6 major (and multiple minor) OPlan changes, 28,000 MEIs, 33,000 personnel, and featuring supply class I, III, V, and IX planned to level 5 detail. However, UltraLog specified that this Challenge would be achieved in one of the most challenging computational contexts imaginable: with the global agent system operating under continuous directed adversary informa- tion warfare attack, and suffering both targeted and random infrastructure losses ranging up to 45% of the total CPU, memory, and network bandwidth capability.
In this context, the UltraLog system had to exhibit not more than 20% capabilities degradation and not more than 30% performance degradation in its performance on the logistics planning tasks. By the final year of the project, UltraLog was to demonstrate successful completion of this Grand Challenge.
3.1. UltraLog Approach
UltraLog takes a different technical approach to system survivability than tra- ditional information assurance techniques. Most survivability technologies in ex- istence today view the individual computer and network as the critical compo- nents requiring maximum protection. Typical security products are designed to thwart attacks by detecting and combating them before they can cause damage.
In contrast, while UltraLog does assume that our logistics information systems will incorporate current best practices in information assurance, UltraLog also as- sumes that these best practices will occasionally fail under determined attack. In
a heterogeneous, dynamic, distributed system of systems, no defense is invulner- able. Therefore, a logistics infrastructure will never be secure and robust against all possible attacks. Because of this, UltraLog presupposes that the aggressors can and will be able to occasionally penetrate the network, damage or destroy computing resources, acquire passwords, introduce malicious code, and stress the logistics system in various malicious ways. Instead of protecting individual pieces of hardware or networks, UltraLog technologies are designed to protect vital logistics information wherever it resides and ensure that critical logistics business processes continue to be successfully executed even under extreme conditions. When con- ditions preclude normal operation of the logistics system, UltraLog will manage system degradation such that the most critical functions continue unabated while less important information processing is deferred until operating conditions im- prove.
3.2. Technical Focus
The technical focus of UltraLog is to seek out and develop a suite of software tech- nologies that can make distributed software agent applications sufficiently secure, robust, and scalable to meet the demands of the most difficult wartime environ- ments. Operationally, the most important military impacts of distributed agent systems derive from their ability to integrate data not just globally, but also across the three major levels of military engagement: strategic, operational, and tactical.
The UltraLog vision is to produce the first example of a system that success- fully and survivably bridges the gap between the predictable, non-chaotic world of high-level strategic logistics planning and the much more chaotic, time-critical and failure-prone world of operational and tactical logistics. The distributed agent ar- chitecture of UltraLog makes this bridging feasible through a seamless and robust distributed system framework. This framework is augmented by the on-the-spot ability of agents both to collect and fuse data locally, and to rapidly re-assign resources on a task-priority basis from whatever pool of networked resources is currently available, even if that pool has been damaged or reduced in size. The intelligent employment of these and other capabilities makes it possible to fuse, de- liver and safeguard the exact, real-time data that high-level planners need to make effective, time-critical decisions, while providing field-level operational personnel with the precise information needed to move forward with confidence.
3.3. UltraLog Extensions to Cougaar
As noted previously, the UltraLog Project developed technologies thatexploit the unique characteristics of software agents to create survivable distributed plan- ning systems. In the areas of scalability technologies the program developed and integrated technologies for variable fidelity processing, load balancing, dynamic reconfiguration and problem splitting, and distributed control. In addition, Ultra- Log pursued technologies to scale to high-fidelity force structures, more complex logistics demands, and agent counts greater than 1000 agents while not sacrificing
Figure 7. Technologies, Stresses and Status for UltraLog Survivability.
performance or overloading network resources. In the areas ofrobustness technolo- gies, the basic Cougaar architecture was extended to leverage loose coupling and semantic agent communication to build agent systems with global fault tolerance and recovery, complex workflow dynamism, predictors, and service diversity. On the security side, UL incorporated security technologies that enabled construc- tion of a distributed trust agent security model by developing techniques for agent based data protection, role based access control, policy distribution and enforce- ment, and security monitoring and response. The extensive suite of technologies and techniques integrated into the core Cougaar framework are shown in Fig. 7.
The results were an extremely survivable and adaptive infrastructure that could continue to operate even under extreme kinetic and information warefare stresses.
3.4. Key Experimental Findings
The UltraLog program had a stronger element of experimentation and analytic evaluation than the ALP project before it. As a result, significant experimental system, functional and survivability analysis was performed against the increasing complex experimental baseline developed for the program. This section briefly presents some of those results.
3.4.1. System Findings. The capabilities and performance to build a complex lo- gistics plan continued to grow throughout the ALP and UltraLog programs. By the end of the UltraLog program, the ability to reliably create a high quality logistics plan, even under significant infrastructure losses, was proven. We had improved performance and configuration adaptation to the point that significant infrastruc- ture loss, in excess of 40%, resulted in a negligible impact on completion time and a controllable degradation in product quality. These results are shown in Fig.
8 - each dot in the graph represents a distinct experimental run over the entire simulated 180 day campaign, with different combinations of infrastructure loss.
3.4.2. Functional Findings. UltraLog’s functional analysis focused on the effective- ness of the agents to operate as a system, performing the functions of logistics, under the various forms of stress. The effectiveness of the system dealt with many aspects of the functional processes to include quality, timeliness, and accuracy.
Under independent assessment by groups of active and retired military logisti- cians, UltraLog system demonstrated the ability to build and maintain realistic high fidelity logistics plans under stress, and dynamically replan as required to cope with changes in the requirements, environment or availability of resources.
As the system got larger and more complex, additional management components were required to monitor the system and resources and take the measures neces- sary to ensure proper, secure, sustained operations. Fig. 9 shows the growth in the number of functional and management agents over the course of the program.
Figure 8. UltraLog System Planning Performance under Stress.
Figure 9. Functional and Management Agents in the Experi- mental Baseline.
3.4.3. Survivability Findings. Because evaluation was a key aspect of the UltraLog program, the program employed several independent Red Teams. In the annual evaluation, the development team would stand up the experimental testbed and the Red Team would employ various techniques to attempt to compromise the operation of the system. Prior to the evaluation, the read team was given full access to the source code, configuration, topology, and other aspects of the system operation. The attacks and stresses were applied in categories, with the results of the system performance being assigned a value from 1 to 10, where 1 was poorest and 10 was best performance against the attack. A value of 0 was assigned where no survivability measures existed and no evaluations were performed. Fig.
10 shows the survivability findings of the evaluations for the UltraLog testbed over the course of the program. By the end of the program, few of the stresses had more than a mild impact on the operation of the system and no attacks were regularly and completely successful in bringing the operation of the testbed below the defined minimal operational level.