Back to news

July 9, 2020 | International, C4ISR, Security

This training tool could be the answer to stop mass cyberattacks

At air bases across Europe, networks are under attack. Malicious hackers have gained access to sensitive systems, information, controls and critical infrastructure. But cyber operators from U.S. Cyber Command, in concert with Five Eyes partners, have been called in to thwart these attempts in real time.

This was the main scenario for this year's capstone cyber training exercise put on by Cyber Command, Cyber Flag 20-2.

The exercise, which took place June 15-26 and was exclusively defensive in nature, saw more than 500 participants and 17 teams participating from five countries across nine time zones, and it included America's National Guard, the U.S. Energy Department and the Five Eyes alliance — Australia, Britain, Canada, New Zealand and the U.S. Australia, however, did not participate during this iteration.

Officials told reporters this week that the purpose of Cyber Flag 20-2 was to continue building the community of defensive cyber operations and to improve the overall capability of the Five Eyes countries to defend against cyber aggressors.

The drill involved teams defending IT and operational security networks against a live, opposing force trying to disrupt, deny and degrade the air bases' operations. The networks under attack were industrial control systems simulated to generate network traffic for an aviation fuel farm, power grid, air traffic control radars and electronic access control systems. The attacks came in the form of malware that targeted devices responsible for fuel and power.

But the unique aspect of this year's exercise, as C4ISRNET previously reported, was the use of a new remote cyber training tool called the Persistent Cyber Training Environment.

PCTE is an online client that allows Cyber Command's cyber warriors, as well as partner nations, to log on from anywhere in the world to conduct individual or collective cyber training as well as mission rehearsal, which to date had not existed for the cyber force as it does for physical troops.

The program is run by the Army on behalf of the joint cyber force. The platform not only allowed the exercise to continue as planned amid the coronavirus pandemic, but it enabled collaboration and simultaneous training across the world.

A new way to train

Officials say PCTE is providing Cyber Command with an entirely new way to train cyber forces, which previously was difficult given a lack of infrastructure and the time needed to set up ranges and scenarios.

It also allows Cyber Command and military units to conduct more frequent training. Cyber Flag typically was Cyber Command's largest and only holistic tactical training event, held annually during June. For units, aside from Cyber Flag, there were no other ways to stay sharp on their skills unless they built their own environments.

Now, Cyber Command plans to hold more exercises, with Cyber Flag 20-3 occurring in the fall.

“The delivery of the Persistent Cyber Training Environment absolutely allows us to increase the frequency and the complexity of exercises that are conducted by the command itself,” Coast Guard Rear Adm. John Mauger, director of exercises and training at Cyber Command, told reporters. “Going forward, I would expect you to see a series of exercises throughout the year where we are reaching out to the different teams to test their capabilities or to focus on specific issues that are of concern or interest to us.

“Going forward, we're going to get the benefits of both those distributed exercises along with increasingly complex exercises as PCTE is instantiated across both the secret network and the top-secret network.”

Scenarios and environments can be stored, saved, reused and modified if needed in the system for later exercises. Smaller units will also be able to leverage these scenarios to practice whenever needed.

The PCTE virtual environment for this year's exercise included 25 interconnected ranges of more than 3,000 virtual machines — a high-fidelity network that simulated and emulated open internet traffic with more than 4,000 static websites that store and share data.

The simulated air base networks created in PCTE had fully configured Windows active directory domains with over 100 nodes running more than 10 types of major operating systems, along with 35 simulated user control workstations actively surfing the internet and using Microsoft Office products to access, create and transfer files.

Moreover, officials also explained PCTE can be integrated into larger, multi-combatant command-type exercises to simulate the cyber effects, such as Global Lightning and its companion Cyber Lightning.

Global Lightning is an annual global exercise run by Strategic Command to test integration across several geographic and functional combatant commands. Cyber Lightning is Cyber Command's portion to the exercise.

“We think that is the next evolution of the Persistent Cyber Training Environment and how we take to the tier 1 exercises, incorporate cyber effects. They're no longer white-carded,” Col. Tanya Trout, Cyber Command's PCTE director and acting director of the Joint Cyber Training Enterprise, told reporters.

White carding involves telling exercise participants that a certain action has occurred. This was typical of cyber effects, given it was difficult to realistically simulate them, which diminished the training value in exercises because participants didn't experience the full breadth of these actions.

Now, these activities can play a real role in exercises increasing the overall fidelity of training across the joint force and continuity of all operations of warfare.

The system will also be able to be used for mission rehearsals. A Cyber Command official said the force can input prior operations, such as those used against the Islamic State group, to train against. Additionally, they'll be able to upload to the platform malware discovered in operations.

The PCTE program office, which is in the prototyping phase despite delivering the first portion to Cyber Command in February 2020, also learned valuable lessons in Cyber Flag. Officials said the two-week exercise provided the program office with six months' worth of data it can use to make significant improvements.

Prior to the February delivery, the program office leveraged several smaller-scale training events at the unit level to incrementally increase capabilities and scalability as well as help geographically dispersed teams prepare for tier 1 exercises like Cyber Flag.

Overall, officials are happy with how the system performed in its first tier 1 exercise, pointing to little to no latency issues, though there were periodic improvement tickets.

“What we found through the rapid development and use of the Persistent Cyber Training Environment is that we really have a unique capability to move forward with,” Mauger said.

https://www.c4isrnet.com/dod/cybercom/2020/06/25/this-training-tool-could-be-the-answer-to-stop-mass-cyberattacks

On the same subject

  • Contract Awards by US Department of Defense - January 22, 2019

    January 23, 2019 | International, Aerospace, Naval, Land, C4ISR, Security

    Contract Awards by US Department of Defense - January 22, 2019

    NAVY AAR Government Services Inc., Wood Dale, Illinois (N61340-19-D-1000); ACET JV LLC,* Waldorf, Maryland (N61340-19-D-1001); Adams Communication & Engineering Technology Inc., Waldorf, Maryland (N61340-19-D-1002); Aircraft Readiness Alliance,* Anchorage, Alaska (N61340-19-D-1003); The Boeing Co., Jacksonville, Florida N61340-19-D-1004); The Boeing Co., Oklahoma City, Oklahoma (N61340-19-D-1005); DynCorp International, Fort Worth, Texas (N61340-19-D-1006); INNOVAIR LLC,* Chesapeake, Virginia (N61340-19-D-1007); Kay and Associates Inc., Buffalo Grove, Illinois (N61340-19-D-1008); L-3 Communications Integrated Systems LP, Waco, Texas (N61340-19-D-1009); L-3 Communications Vertex Aerospace LLC, Madison, Mississippi (N61340-19-D-1010); Leidos Innovations, Gaithersburg, Maryland (N61340-19-D-1011); M1 Support Services, Denton, Texas (N61340-19-D-1012); M7 Aerospace LLC, San Antonio, Texas (N61340-19-D-1013); Northrop Grumman Systems Corp., Herndon, Virginia (N61340-19-D-1014); PAE Aviation and Technical Services LLC, Arlington, Virginia (N61340-19-D-1015); Rockwell Collins, Cedar Rapids, Iowa (N61340-19-D-1016); Sunrise Beach Corp., doing business as M2 Services Corp., Allen, Texas (N61340-19-D-1017); URS Federal Services, Germantown, Maryland (N61340-19-D-1018); and Yulista Standard Aero (JV),* Huntsville, Alabama (N61340-19-D-1019), are each awarded indefinite-delivery/indefinite-quantity contracts. These contracts provide for logistics services for the Contracted Maintenance, Modification, Aircrew and Related Services (CMMARS) Program in support of aviation platforms of various Navy and Air Force type/model/series aircraft, inter-related systems, subsystems, and services. CMMARS will provide contractor logistics services for fixed-wing, rotary-wing, unmanned aircraft vehicles, and lighter than air vehicles, as well as integrally related systems and weapon systems. Logistical support to be provided includes logistics functions and maintenance tasks required to keep U.S. and Foreign Military Sales (FMS) customers aircraft ready, available, and operating worldwide. CMMARS may be used for platforms at all phases of the acquisition life cycle. The estimated aggregate ceiling for all contracts is $12,599,999,930, with the companies having an opportunity to compete for individual orders. Work will be performed at various afloat and ashore locations inside the continental U.S. (99 percent); and outside the continental U.S. (1 percent), and is expected to be completed in January 2024. No funds are being obligated at time of award; funds will be obligated on individual orders as they are issued. These contracts were competitively procured via an electronic request for proposals; 21 offers were received. The Naval Air Warfare Center Training Systems Division, Orlando, Florida, is the contracting activity. Lockheed Martin Aeronautics Co., Fort Worth, Texas, is being awarded a $542,225,679 firm-fixed-price indefinite-delivery/indefinite-quantity contract for ancillary mission equipment (AME) and associated AME initial spares in support of Lot 13 F-35 Lightning II aircraft for the Air Force, Marine Corps, Navy, non-U.S. Department of Defense (DoD) participants, and Foreign Military Sales (FMS) customers. Work will be performed in Fort Worth, Texas, and is expected to be completed in May 2023. Fiscal 2018 and 2019 aircraft procurement (Navy, Marine Corps, and Air Force,); non-U.S. DoD participant, and FMS funds in the amount of $437,333,989 will be obligated at time of award, none of which will expire at the end of the current fiscal year. This contract was not competitively procured pursuant to Federal Acquisition Regulation 6.302-1. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity (N0001919D0015). Rolls-Royce Corp., Indianapolis, Indiana, is awarded $35,672,562 for modification P00007 to a previously awarded firm-fixed-price contract (N00019-17-C-0081). This modification exercises an option to produce and deliver 17 AE1107C engines in support of the V-22 aircraft, to include one engine for the Marine Corps, eight engines for the Navy, and eight engines for the government of Japan. Work will be performed in Indianapolis, Indiana, and is expected to be completed in May 2020. Fiscal 2018 and 2019 aircraft procurement (Navy);and Foreign Military Sales (FMS) funds in the amount of $35,672,562 will be obligated at time of award, none of which will expire at the end of the current fiscal year. This modification combines purchases for the Navy ($18,885,474; 53 percent); and the government of Japan ($16,787,088; 47 percent) under the FMS program. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. Coastal Marine Services,* San Diego, California (N55236-19-D-0001); and Thermcor,* Norfolk, Virginia (N55236-19-D-0002), are each awarded firm-fixed-price, indefinite-delivery/indefinite-quantity, multiple award contracts with a five-year base ordering period to provide pipe lagging onboard Navy ships vessels within a 50-mile radius of San Diego, California. These contracts have an overall combined maximum ceiling value of $7,142,499. These two companies will have an opportunity to compete for individual delivery orders. Work will be performed in the vicinity of San Diego, California, and is expected be complete by January 2024. Fiscal 2019 operations and maintenance (Navy) funding in the amount of $7,000 ($3,500 for minimum guarantee per contract) will be obligated under each contract's initial delivery order and expire at the end of the current fiscal year. These contracts were competitively procured via the Federal Business Opportunities website, with three offers received. The Southwest Regional Maintenance Center, San Diego, California, is the contracting activity. ARMY BAE Systems Land & Armaments LP, York, Pennsylvania, was awarded a $474,084,062 cost-plus-fixed-fee contract for system technical support, sustainment system technical support, depot maintenance support, field service representatives, systems engineering, program management, engineering management, quality management, configuration management, logistics support, and software management and maintenance for the M109 Family of Vehicles. One bid was solicited via the internet with one bid received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 21, 2025. U.S. Army Contracting Command, Warren, Michigan, is the contracting activity (W56HZV-19-D-0040). General Dynamics C4 System Inc., Taunton, Massachusetts, was awarded a $26,767,467 firm-fixed-price contract for replenishment spares for the Warfighter Information Network-Tactical. One bid was solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 23, 2020. U.S. Army Contracting Command, Aberdeen Proving Ground, Maryland, is the contracting activity (W15P7T-19-F-0030). Elbit Fort Worth Inc., Fort Worth, Texas, was awarded a $24,360,089 firm-fixed-price contract for the Common Helmet Mounted Display. Bids were solicited via the internet with three received. Work locations and funding will be determined with each order, with an estimated completion date of Jan. 21, 2024. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity (W58RGZ-19-D-0035). Great Lakes Dredge & Dock Co., Oak Brook, Illinois, was awarded a $14,136,343 modification (P00015) to contract W912BU-15-C-0054 for dredging and rock removal. Work will be performed in Chester, Pennsylvania, with an estimated completion date of March 15, 2019. Fiscal 2019 operations and maintenance, Army funds in the amount of $14,136,343 were obligated at the time of the award. U.S. Army Corps of Engineers, Philadelphia, Pennsylvania, is the contracting activity. Facility Services Management Inc.,* Clarksville, Tennessee, was awarded a $13,241,456 firm-fixed-price contract to plan, manage, perform operations and maintenance for the Department of Public Works functions in facility maintenance, water, fuel, sewage plant operations, land resource utilization, family housing maintenance, and Real Property maintenance activity supply management. Bids were solicited via the internet with 11 received. Work will be performed in Fort Huachuca, Arizona, with an estimated completion date of Jan. 31, 2024. Fiscal 2019 operations and maintenance, Army funds in the amount of $1,270,261 were obligated at the time of the award. U.S. Army Contracting Command, Aberdeen Proving Ground, Maryland, is the contracting activity (W9124A-19-C-0002). DEFENSE LOGISTICS AGENCY Ready One Industries Inc.,** El Paso, Texas, has been awarded a maximum $186,375,600 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for Joint Service Lightweight Integrated Suit Technology (JSLIST). This is a one-year base contract with an 18-month ordering period and no option periods. Location of performance is Texas, with a July 22, 2020, performance completion date. Using military services are Army, Air Force, Marine Corps and Coast Guard. Type of appropriation is fiscal 2019 through 2020 defense working capital funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania (SPE1C1-19-D-N057). Atlantic Diving Supply, doing business as ADS,* Virginia Beach, Virginia (SPE8EG-16-D-0023); Berger Cummins JV, Washington, District of Columbia (SPE8EG-16-D-0024); Caterpillar, Mossville, Illinois (SPE8EG-16-D-0025); Inglett and Stubbs International,* Atlanta, Georgia (SPE8EG-16-D-0026); and Texas Power and Associates,* Dallas, Texas (SPE8EG-16-D-0027), are sharing a maximum $90,000,000 modification (P00005) to a five-year contract for generators and associated supplies. These are firm-fixed-price, indefinite-delivery/indefinite-quantity, 160-day bridge contracts. Locations of performance are Virginia; Washington, District of Columbia; Illinois; Georgia;and Texas, with a July 1, 2019, performance completion date. Using customer is Federal Emergency Management Agency. Type of appropriation is fiscal 2019 defense working capital funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania. AIR FORCE Northrop Grumman Systems Corp., San Diego, has been awarded a $149,616,524 modification to contract FA8726-18-C-0005 to exercise Option Year One for Battlefield Airborne Communications Node, payload operations and sustainment. This modification brings the total cumulative value of the contract to $336,869,185. Work will be performed in San Diego and multiple international sites, and is expected to be completed on Jan. 23, 2020. Fiscal 2019 overseas contingency operations funds; and operations and maintenance funds in the amount of $149,616,524 are being obligated at time of award. Air Force Life Cycle Management Center, Hanscom Air Force Base, Massachusetts, is the contracting activity. Quantum Spatial Inc., Petersburg, Florida (FA4452-19-D-A001); Geographic Information Services Inc., Birmingham, Alabama (FA4452-19-D-A002); Booz Allen Hamilton, McLean, Virginia (FA4452-19-D-A003); Woolpert Inc., Dayton, Ohio (FA4452-19-D-A004); and KFS LLC, Huntsville, Alabama (FA4452-19-D-A005), have been awarded multiyear indefinite-delivery/indefinite-quantity contracts with a combined cumulative face value of $46,564,206. These contracts will provide geospatial tasks and support functions for improved shared situational awareness and decision making across the various echelons of military hierarchy including individual level, installation level, and management headquarters level. Support may include technical assistance at Headquarters Air Force, field operating agencies, numbered Air Forces, main operating bases and reach-back support to forward deployed military personnel at forward operating locations, as well as a surge capability to quickly respond to wartime, contingencies and manmade or natural disasters. Work is expected to be completed by Jan. 21, 2024, and will be performed at various bases throughout the Air Force. These contracts are the result of a competitive acquisition and seven offers were received. Funds will be obligated on individual task orders. The 763d Specialized Contracting Squadron, Scott Air Force Base, Illinois, is the contracting activity for the multiyear indefinite-delivery/indefinite-quantity contracts. However, individual task orders will be decentralized. Northrop Grumman Systems Corp., Herndon, Virginia, has been awarded a $44,428,104 service firm-fixed-price, cost-reimbursable contract in support of the Battlefield Airborne Communications Node E-11A platform maintenance requirement. This contract provides for logistics product support for four E-11A modified Bombardier BD-700 Global aircraft, as well as subsystems and support equipment in support of overseas contingency operations. Work will be performed in Kandahar, Afghanistan; and Maryland, and is expected to be completed by Jan. 23, 2020. This award is a result of a competitive acquisition, and two offers were received. Fiscal 2019 operations and maintenance funds in amount of $44,428,104 are being obligated at the time of award. Air Force Life Cycle Management Center, Hanscom Air Force Base, Massachusetts, is the contracting activity (FA8726-17-C-0011). *Small business **Mandatory source https://dod.defense.gov/News/Contracts/Contract-View/Article/1737551/source/GovDelivery/

  • Serbia acquires 12 Rafale fighters

    September 1, 2024 | International, Aerospace

    Serbia acquires 12 Rafale fighters

    This contract reflects the importance of the bilateral relationship between France and Serbia, and testifies to the determination of both Presidents to make this partnership a success

  • UK ministry of Defence selects L3HARRIS T4 Robots to assist with explosive ordnance disposal missions

    May 13, 2024 | International, Land

    UK ministry of Defence selects L3HARRIS T4 Robots to assist with explosive ordnance disposal missions

    The contract includes providing robots, in-country support, maintenance, training and follows L3Harris’ successful delivery of Project STARTER, a program that replaced the legacy fleet of large EOD robots with 122...

All news