Patterns of Self-Organizing Agile Security for Resilient Network Situational Awareness and Sensemaking

The security gap is widening as adversarial communities of all kinds employ more sophisticated techniques and broaden their targets of opportunity. These adversarial communities are structured as self organized proactive collaborators in tight learning loops driving rapid innovation -- preying upon systems protected by wait and see strategies. In this paper we build upon six fundamental characteristics common to adversarial success, suggest that winning security can employ the same characteristics, show two patterns appropriate for resilient network support that fit this criteria, and describe a larger project that is developing a pattern language of next generation agile security. The two patterns described in this paper are modeled on the Biological Immune Systems and on mammalian hierarchical cortical sense making architecture. A technology that appears capable of implementing these patterns in relatively high biological fidelity is briefly introduced to support pattern-employment feasibility.