Model Based Systems Engineering Meets Cybersecurity

Measured Threat Risk Assessment (MeTRA®) is Tenet3's quantitative approach to System Security Engineering. MeTRA® is our Model Based System Engineering platform for analyzing complex cyber-physical systems. It's USAF approved at IL5, and deployed on AWS GovCloud.

MeTRA® is inherently collaborative and natively cloud-scale. It's a digital engineering platform that simplifies analyses of systemic cyber risks. MeTRA® enables many views of cyber digital twins. These digital models become the authoritative source of truth for complex cyber physical systems by collecting what is known and presenting it as a curated knowledge base. Tying these views together across the system’s life-cycle provides a digital thread connecting “as designed”, “as built”, and “as operating” into a unified risk picture. Automated MeTRA® analytics highlight the most robust cybersecurity strategy options enabling a mission optimized defense.

MeTRA® utilizes property graph models to quickly build a network of components (e.g., a computer network or weapon system). It supports a variety of analyses including Total Cost of Ownership (TCO), robustness/vulnerability estimates, and cyber risk assessment. It enables unprecedented manipulation of graphical system models and rapid calculations of complex system data for quantitative metrics and their resulting insights.

Visualize Compliance and Cybersecurity

The Managing RMF Cost and Schedule (MaRCS™) application combines quantitative approach to System Security Engineering with MeTRA®.

MaRCS™ enables easy development and databasing of Risk Management Framework System Security Plans. MaRCS™ can track Risk Management Framework costs and helps identify schedule impacts when working through compliance efforts for complex cyber systems with specialized security overlays.

Count - Collect - Connect®

Cyber security begins with counting. Using the combination of MeTRA® and MaRCS™ Tenet3 will enumerate your system components. We will identify what is critical, collect and organize your system topology, assess your prioritized security needs, and connect them with cost effective cyber threat mitigation strategies.

Find Vulnerable Open Source Software

Sensing risk in software across a system or enterprise, SAFELib works during the compilation and build process. Our SAFELib technology enables seamless and fast code assessment in a CI/CD pipeline without the drawbacks of static analysis solutions. The capability employs a trained deep learning model (neural network) designed to evaluate, at the function level, whether a block of committed code exhibits patterns that are indicative of one of many vulnerability types. The trained model assesses representations of committed code instantly and yields a clear determination on whether a vulnerability may be present, and if so, its vulnerability type.

SAFELib inherently supports Agile Development while "left-shifting" security assessments to provide the developer instant feedback on vulnerabilities. We empower developers with feedback to fix their own code, rather than needing Red Teams to assess both systematic and code-level security concerns in production software.

Learn how our containerized SAFELib tool can be deployed in your CI/CD pipeline. Contact us for pricing.

Cloud Scale Subgraph Matching to Inspect Microelectronic Designs

MeTRA® Discover is our highly scalable sub-graph matching implementation which permits us to search large property graphs for specified subgraph structures. This capability enables us to search advanced microelectronic chip design netlists for unwanted components in 3rd party intellectual property. Discover is quite general and can support search over system graph models and software graph models as well as any general property graph.

Capture Open Source Supply Chain Data

MIMIC® is a prototype web page crawling and capture tool. It enables rapid and curated collection of open source intelligence by analysts. It aids identification of relationships between important concepts. MIMIC® stores information from each web search and relates each 'string of intel' back to the MeTRA® graph database engine. MIMIC® enables easy capture of cyber-physical system documentation by system security engineers and supports Risk Management Framework artifact collections.

Try our MBSE tools. Evaluation Licenses are Available.
Contact us for more information.

Contact Our Solutions Representatives For Pricing