November 13, 2019 | International, C4ISR, Security

Here are some new tools coming to protect the supply chain

By: Andrew Eversden

The Department of Defense is working with a unnamed company to mitigate cybersecurity vulnerability discovered in a technology used by the Pentagon, the DoD's Deputy Chief CIO Michele Iversen said Nov. 12.

Without going into specific detail, Iversen said the department is working to remove the product.

“The company was compromised [and] had a big cybersecurity vulnerability,” said Iversen, speaking at Fifth Domain's annual CyberCon conference. “And we have seen bad things coming from those products, so we are looking at how to use our authorities ... [to] block those products or companies for national security systems.”

This highlights a broader issue facing the DoD: how to protect its supply chain.

To mitigate supply chain risk, Iversen said that she is working on a supply chain illumination tools. She said that these are useful because its made up of publicly available information that doesn't need any level of classification.

Specifically, she said she's working on a decision support tool where she can expose a “bare minimum set of publicly available supply chain information.”

“So when people are going to look and make their purchases, they have information available to them,” she said.

She said, ultimately, she wants the DoD CIO's office to offer that tool as a service.

The National Institute of Standards and Technology is also starting to develop cybersecurity tools. NIST's Jon Boyens, acting deputy chief of the computer security division, said that his team at the standards agency is working on a supplier inter-dependency tool “to look at different suppliers and their criticality” to allow for government to be more effective in asking for capabilities during the procurement process.

“Industry is saying, ‘You know, we've invested in this but we're not getting any incentives' ... and so they're kind of looking for incentives for investing in technology,” said Boyens.

Iversen said that technology research and development also presents its own attack surface with which it needs to grapple. If the research and development was done in a foreign country, that presents a unique set of threats. For example, Iversen pointed to back-up software being placed into a nuclear command-and-control system.

“Maybe you just say anything where the R&D ... [is] done in those countries is just off limits,” Iversen said. “It just makes common sense. It's fixing stupid.”

https://www.fifthdomain.com/smr/cybercon/2019/11/12/here-are-some-new-tools-coming-to-protect-the-supply-chain/

On the same subject

September 7, 2018 | International, Aerospace, Naval, Land, C4ISR

Réglementation ITAR : la France veut réduire sa dépendance aux Etats-Unis
Par Michel Cabirol La France a lancé un plan pour réduire les dépendances de l'industrie d'armement aux composants américains qui entrent dans la fabrication de certains programmes français. La France veut réduire sa dépendance aux composants américains dans la Défense afin de ne pas gêner l'exportation de ses programmes, a déclaré jeudi la ministre des Armées Florence Parly. La France doit actuellement demander aux Etats-Unis la levée d'interdictions sur certains composants. "Nous avons besoin progressivement de nous désensibiliser par rapport à un certain nombre de composants américains, ce qui ne veut pas dire nécessairement pouvoir se désensibiliser complètement", a-t-elle expliqué lors d'une rencontre avec l'Association des journalistes professionnels de l'aéronautique et de l'espace (AJPAE). La France a d'ailleurs lancé un plan pour réduire les dépendances par rapport à ces composants américains. "Je ne donnerai pas d'exemple précis mais nous avons été confrontés, dans des échanges liés à des prospects exportations, à des difficultés. Et nous savons bien que ces difficultés sont liées en apparence à des questionnements stratégiques et en réalité souvent à des problèmes de concurrence commerciale. Il ne faut pas en être dupes", a-t-elle expliqué. Si un système d'armes contient au moins un composant américain sous le régime de la réglementation américaine ITAR, les Etats-Unis ont le pouvoir d'en interdire la vente à l'export à un pays tiers. Ainsi, ils ont récemment bloqué la vente de missile de croisière Scalp, qui devait armer le Rafale, à l'Egypte et au Qatar. En 2013, Washington avait déjà refusé une demande de réexportation de la France aux Emirats Arabes Unis de composants "made in USA" nécessaires à la fabrication de deux satellites espions français (Airbus et Thales). La visite de François Hollande aux États-Unis en février 2014 avait permis de régler positivement ce dossier. Lors de son audition en juillet dernier à l'Assemblée nationale, Florence Parly avait reconnu que "nous sommes à la merci des Américains quand nos matériels sont concernés". "Avons-nous les moyens d'être totalement indépendants des composants américains ? Je ne le crois pas. Cherchons-nous à améliorer la situation ? La réponse est oui", avait-elle déjà assuré en juillet. La France travaille notamment à désensibiliser les futurs programmes d'armement. Ainsi Florence Parly a affirmé que cette moindre dépendance serait cruciale pour la viabilité du futur programme d'avion de combat (SCAF). Cela passe pour Paris et Berlin d'avoir la capacité d'exporter ce futur système d'armes. Elle a estimé que les industriels devaient prendre en compte ce dossier en lançant des investissements en matière de recherche et de technologie pour être en mesure de fabriquer un composant analogue qui échapperait au dispositif ITAR. "Certains industriels l'ont compris", a-t-elle précisé. C'est le cas du missilier MBDA dans le cadre du développement du futur missile air-air MICA-NG. Ce programme, qui sera opérationnel en 2025, est développé en prenant en compte la contrainte ITAR. Ils seront ITAR Free, assure-t-on à La Tribune. Florence Parly a également rappelé la dépendance de la France pour les drone MALE Reaper. "Pour armer les Reaper, il faut une autorisation du Congrès américain. Est-ce satisfaisant ? Non. Mais aujourd'hui on n'a pas le choix", a-t-elle expliqué, faisant référence aux drones achetés aux Etats-Unis depuis 2013. Pour autant, l'armement des Reaper ne signifie pas que la France armera le futur drone MALE de reconnaissance et de surveillance en préparation pour 2025. "Dans les spécifications, il sera possible de l'armer, ce qui ne signifie pas qu'aujourd'hui la décision est prise sur la question de savoir s'il sera en définitive armé", a-t-elle souligné. https://www.latribune.fr/entreprises-finance/industrie/aeronautique-defense/reglementation-itar-la-france-veut-reduire-sa-dependance-aux-composants-americains-789612.html
June 18, 2024 | International, Aerospace

Congress wants to restore nukes on conventional B-52 bombers
With Russia suspending participation in New START and the arms control treaty's future in doubt, Congress wants to restore nuclear weapons to some B-52s.
January 14, 2020 | International, Aerospace

Lebanon’s Air Force to arm newly refurbished AB 212 helicopters
By: Agnes Helou BEIRUT — The Lebanese Air Force has refurbished an Agusta-Bell AB 212 helicopter as part of a proof of concept, and will now begin a five-year project to revive the fleet with five operational helicopters. “The twin engine choppers have been out of service since 1990. We are bringing them back to service to perform [multiple] tasks, from military missions to firefighting missions and search and rescue,” Brig. Gen. Ziad Haykal, the commander of the Air Force, told Defense News. Due to the similarity between the AB 212 and the Huey II, which is currently operational with the fleet, the Air Force can use spare parts and technical expertise gained from the latter helicopter for local refurbishment, the general added. Indeed, local refurbishment will reduce the cost of the project by 60 percent because the service is not sending the helicopters back to the manufacturer. “The expected operational life span of the helicopters is 20 years, and it is worth noting that we obtained technical references for the project from Leonardo company, the manufacturer of this type of choppers,” Haykal said. “We are anticipating to operate these twin-engined helicopters in the missions to help secure oil and gas installations above Lebanese waters, particularly security preservation of the exclusive economic zone, by air or by sea.” The five helicopters are expected to be equipped with 70mm Hydra rockets, .50-caliber machine guns and 250-kilogram bombs, much like the Huey II during missions at the Nahr el-Bared refugee camp in 2007, a Lebanese official told Defense News on a condition of anonymity. Fatah al-Islam militant launched at attack on the Lebanese Army from the Palestinian refugee camp in North Lebanon in May 2007. The Army struck back with modified Huey helicopters that were able to deploy 250-kilogram bombs. The Hydra rockets and their integration on the helos are part of American military aid to Lebanon, the official said. The head of Lebanon's military, Gen. Joseph Aoun, oversaw the refurbishment project, which was launched at Beirut Air Base. https://www.defensenews.com/air/2020/01/13/lebanons-air-force-to-arm-newly-refurbished-ab-212-helicopters

All news

Here are some new tools coming to protect the supply chain

On the same subject

Congress wants to restore nukes on conventional B-52 bombers With Russia suspending participation in New START and the arms control treaty's future in doubt, Congress wants to restore nuclear weapons to some B-52s.

Congress wants to restore nukes on conventional B-52 bombers
With Russia suspending participation in New START and the arms control treaty's future in doubt, Congress wants to restore nuclear weapons to some B-52s.