Through a practitioner-driven approach, the Science and Technology Directorate (S&T) creates and deploys information resources—standards, frameworks, tools and technologies enabling seamless and secure interactions among homeland security stakeholders. With its wide-range of partnerships across federal agencies; state and municipal administrations and first responders; critical infrastructure sectors; Internet security researchers; universities; national laboratories and international organizations, S&T works to strengthen capabilities to communicate, share, visualize, analyze and protect information.

S&T leads the federal government’s efforts in funding cybersecurity research and development projects that result in transforming an idea to a deployable solution. Through an aggressive cybersecurity R&D lifecycle process—research, development, test, evaluation and transition to practice—S&T produces unclassified solutions that address today's complex challenges and can be implemented in both the public and private sectors. In addition to being innovative, the division develops usable technologies, tools and techniques to defend, mitigate, and secure current and future systems, networks and critical infrastructures against cyber-attacks.

S&T R&D Lifecycle Process

To accomplish its mission and serve its customers, S&T funds a wide range of cybersecurity projects aimed at improving security in both Federal networks and the larger Internet.

• Anonymous Networks & Currencies
• Application of Network Measurement Science
• Application Security Threat and Attack Modeling (ASTAM)
• Critical Infrastructure Design and Adaptive Resilient Systems
• Cyber Risk Economics (CYRIE)
• Cyber Physical Systems Security (CPSSEC)
• Cyber Security Forensics
• Cybersecurity Competitions
• Cybersecurity for Oil & Gas Systems (COGS)
• Data Privacy Technologies
• Distributed Denial of Service Defense (DDoSD)
• Federated Security
• Experimental Research Testbed (DETER)
• Homeland Open Security Technology (HOST)
• Identity Management
• Information Marketplace for Policy and Analysis of Cyber-risk and Trust (IMPACT)
• Insider Threat
• Mobile Application Security
• Mobile Device Security
• Next Generation Cyber Infrastructure Apex
• Smart Cities
• Software Assurance Marketplace (SWAMP)
• Software Quality Assurance
• Static Analysis Tools Modernization Project (STAMP)
• Transition to Practice (TTP)