Proposal for Task Z
Tuesday, June 2nd, 2009
Version 1.2
Prepared by: Greg Hoglund and Keith S. Cosick

CONFIDENTIAL INFORMATIONHBGary, Inc.
3941 Park Drive, Suite 2030
Eldorado Hills, CA 95762
301-652-8885

Table of Contents
1

Solution Summary................................................................................................... 22

Implementation Plan ............................................................................................... 22.1
2.2
2.3

Analysis Documentation ................................................................................................. 2Intellectual Property rights .............................................................................................. 3Project Management....................................................................................................... 33Client Responsibilities ............................................................................................ 34

Bill of Services ........................................................................................................ 4

Billing Rates, Travel Expenses .................................................................................... 5

Page 1 of 6

Introduction

HBGary empowers customers to counter emerging cyberthreats and the human and organizational factors behind thethreat. HBGary provides this proposal to General Dynamics,
for ‘Project X’, which is described below.

1 Solution Summary
General Dynamics has selected HBGary Inc to provide this proposal for development of asoftware tool, which provides the user a command line interface, that will enable single file, orfull directory exfiltration over TCP/IP. General Dynamics has requested multiple protocols to be
scoped as viable options, and this quote contains options for VoIP (Skype) protocol, BitTorrent
protocol, video over HTTP (port 80), and HTTPS (port 443). HBGary will research and analyze
the best solution given the client’s choice of protocol(s). As outlined in the Bill of Materials on
page 4 of this document, cost per protocol is provided separately, and one or more of theoptions can be chosen by General Dynamics. HBGary will develop this user mode application
with listen capabilities, trace cleanup, and ensure network sniffer testing doesn’t trigger anyalerts. The application will be provided for user testing, and validation at the close of thedevelopment cycle which will be scheduled jointly between HBGary, and General Dynamics.
Primary Objectives:•Development of a user mode application that will enable file or directory exfiltration overTCP/IP utilizing one or more protocols to be selected by General Dynamics•Application has listen (server) side, auto resume capabilities and file/read/exfil loop
inclusion•As part of final validation, HBGary will ensure SNORT/Wireshark testing returns noalerts

2 Implementation Plan
Primary Contact: Ben Wilson
Phone: (650) 966-2438
Cell:
Email: ben.wilson@gd-ais.com

Secondary Contact: Name
Phone:
Cell:
Email:

2.1 Analysis Documentation•As part of the development of the project, HBGary will provide an architecture diagram
explaining the process paths, including any architectural dependencies for the finalizedsolution including all technical specifications.

•In the event that HBGary identifies through its development, an issue which presents afailure point, HBGary would initiate a conference call with the client to readdressarchitecture issue, and initiate any needed alternative planning.

•HBGary will provide the client a project schedule with dependencies and milestones
listed.
Page 2 of 6

2.2 Intellectual Property rights•

The proposed software is offered to the customer with a license for unlimited andunrestricted rights to use. Customer has rights to modify the source code without
restrictions. HBGary retains all software ownership and data rights.

2.3 Project Management
HBGary will provide project coordination services during the course of the project, including
the following:• Development & management of a project plan and schedule for completion of theimplementationo Development of the Project Implementation Timelineo Development of the Project Milestone Checklist
o Development of the Professional Services Summaryo Development & communication of the Testing Plan and results• Identification and management client communication requirementso Internal status on tasks, risks, schedule impacts
o Weekly client updates, including preparation of material & agenda, and closure
minuteso Follow-up on action items, and resolve client & project issues• Management of Performance to scheduleo Ongoing management of project delivery milestones with both client and HBGary
resources to ensure all facets of the project scope is completeo Scope changes communicated and processed with appropriate change orders

3 Client Responsibilities
General Dynamics is responsible for the following:
••
•

•
•
•

Client will designate a primary contact for all project status updates, issues, and changeorder requests. All change order requests must be made through this contact to beconsidered official and valid.
Client will coordinate with HBGary to verify the development schedule.
Client will provide workspace and network (both internal private and public switchedtelephone network) connectivity for HBGary as needed to complete any onsite work forthe client.
Client will make available an employee when needed to assist HBGary and provide
physical and/or remote access to Client facilities.
Client will coordinate installation schedules with HBGary.
If HBGary’ staff is delayed in the performance of their work by client’s failure to provide
any of these items, the delay time will be billable at the same rate as the work scheduled
to be performed.

Page 3 of 6

4 Bill of Services
HARDWARE: N/A
PROFESSIONAL SERVICES ESTIMATE
Note: Rates are based on previously negotiated figures

Page 4 of 6

Billing Rates, Travel Expenses
Contract Bill Rates and Travel Expenses:
The following are the Hourly Bill Rates for HBGary personnel and/or subcontractors:

Standard
Hourly Bill Rate

Emergency OROvertime HourlyBill Rate

Emergency
AND Overtime,or HBGary
Holiday HourlyBill Rate

Subject Matter Expert$330.58

N/A

N/A

Senior Developer$279.39

N/A

N/ADeveloper$193.42

N/A

N/A

Project Manager$244.47

N/A

N/A

HBGary JobClassification• Travel Expenses will be billed at actual cost to General Dynamics. Time inTransit will be billed at $150.00 per round trip within a 50 mile radius of HBGaryfacility or $150/hr for each engineer outside the 50 mile radius.

Page 5 of 6