Back to news

January 22, 2020 | International, C4ISR, Security

What new documents reveal about Cyber Command’s biggest operation

Mark Pomerleau

New documents provide insight into the growing pains U.S. Cyber Command faced in building a force while simultaneously conducting operations.

The documents, which were released as part of a Freedom of Information Act request from the National Security Archive at George Washington University and later shared with journalists, are a series of internal briefings and lessons from the Defense Department's most complex cyber operation at the time, Operation Glowing Symphony.

That operation was part of the larger counter-ISIS operations — Joint Task Force-Ares — but specifically targeted ISIS's media and online operations, taking out infrastructure and preventing ISIS members from communicating and posting propaganda.

While Cyber Command described the operation, which took place in November of 2016, as a victory in the sense that it “successfully contested [ISIS] in the information domain,” the documents demonstrate the extent to which the command was still learning how to conduct operations and the exact steps to follow.

“Process maturation is something they pull out a lot. Obviously, as CYBERCOM was standing up, it was pulling together plans for how they were going to operate. They actually hadn't operated that much,” Michael Martelle, cyber vault fellow at the National Security Archive, told reporters. “A lot of these frameworks were formed in theory. Now they go to try them out in practice.”

Cyber Command leaders have stressed in public remarks for years that the command was building its force while operating. But the extent of those operations has been limited. Officials in recent years have explained that the command didn't undertake many offensive operations. One official said last year he could count on less than two fingers the number of operations, Cyber Command conducted in the last decade or so. One member of Congress said DoD didn't conduct an offensive cyber operation in five years.

But when they were in action, in this case with Operation Glowing Symphony, Martelle said the documents show cyber leaders did not anticipate the amount of data they would access.

“They actually weren't prepared for the amount of data they were pulling off of ISIS servers ... CYBERCOM was not set up for an operation of this magnitude from day one,” he said. “They had to learn on the fly, they had to acquire on the fly, they had to grow on the fly.”

The documents note that Cyber Command's capability development group, is “developing USCYBERCOM data storage solutions.”

The capabilities develop group, now known as the J9, serves as the advanced concepts and technology directorate and worked to plan and synchronizing cyber capability development and developed capabilities to meet urgent operational needs.

Experts had noted that in the past the CDG/J9 had been stressed in recent years by a limited staff and burdened by developing tools for operational needs, namely Joint Task Force-Ares.

Another example of potential growing pains the documents point to was the fact that updates to operations checklists were not made available readily to the team.

Finally, the documents note that authorities and processes the command was operating under that the time were restrictive in some cases.

“Absent of significant policy changes from [the office of the secretary of defense], USCYBERCOM is limited in its ability to challenge ISIS [redacted]. As a result, USCYBERCOM has [redacted] to achieve our objectives,” the executive summary of a 120-day assessment of Operation Glowing Symphony says.

Those authorities and processes have been streamlined by the executive branch and Congress in recent years.

Commanders now follow a process that defaults toward action, Maj. Gen. Dennis Crall, deputy principal cyber adviser and senior military adviser for cyber policy, said during an event Jan. 9. He explained the updated process provides continuity, tempo, pace and timing.

Ultimately, Martelle noted that the real importance behind Operation Glowing Symphony is that Cyber Command used the experience from those events and Joint Task Force-Ares more broadly as a template for future operations.

Cyber Command's top official, Gen. Paul Nakasone, who was also led Joint Task Force-Ares, has noted that the task force laid the foundation for the Russia Small Group, which was created to combat election interference in the 2018 midterms.

“This concept of a task force lives on. A lot of that thinking came from what we were doing in 2016,” he told NPR.

That task force has now evolved to be more all encompassing covering election threats more broadly.

https://www.fifthdomain.com/dod/cybercom/2020/01/21/what-new-documents-reveal-about-cyber-commands-biggest-operation/

On the same subject

  • Bell dévoile le 360 Invictus, un nouvel hélicoptère d’attaque et de reconnaissance pour l’US Army

    October 3, 2019 | International, Aerospace

    Bell dévoile le 360 Invictus, un nouvel hélicoptère d’attaque et de reconnaissance pour l’US Army

    PAR LAURENT LAGNEAU Outre le renouvellement de ses véhicules blindés, confié à la « Next Generation Combat Vehicle Cross-Functional Team », l'US Army a également lancé le plan Future Vertical Lift, lequel doit lui permettre de remplacer une grande partie de ses voilures tournantes ères à l'horizon 2028/30. En avril, dans le cadre du Future Attack Reconnaissance Aircraft [FARA], un sous-programme de ce plan, l'US Army a pré-sélectionné cinq industriels qui devront chacun présenter un prototype. Ont donc été retenus Karem Aircraft [associé à Raytheon et Northrop Grumman], Boeing, AVX Aircraft [avec L3], Sikorsky [groupe Lockheed-Martin] et Bell [filiale de Textron]. Selon les spécifications de l'US Army, ce futur hélicoptère d'attaque doit loger dans la soute d'un avion de transport C-17, voler à la vitesse de 200 noeuds, présenter une architecture modulaire, mettre en oeuvre des drones et se passer, le cas échéant, d'équipage pour certaines missions, en particulier dans les environnements fortements contestés. Et son coût devra être « abordable ». Depuis, et alors que Boeing et Karem Aircraft sont encore discrets sur les intentions, AVX Aircraft a présenté le concept Compound Coaxial Helicopter [CCH], qui repose sur un hélicoptère doté de commandes de vol électriques, d'un rotor contrarotatif et de deux turbines. Quant à Sikorsky, il mise sur son S-97 Raider, également muni d'un rotor contrarotatif, complété par une hélice propulsive. De son côté, le 2 octobre, soit après avoir annoncé un partenariat avec Collins Aerospace pour le système de mission et l'avionique, Bell a levé le voile sur le « 360 Invictus » [tiré du mot latin signifiant « invicible » ou du poème du même nom signé William Ernest Henley?]. Reprenant des technologies développées pour le Bell 525 Relentless, notamment au niveau du rotor, cet appareil serait en mesure de voler à une vitesse supérieure à 185 noeuds [cela dépendra de sa configuration]. Côté armement, il sera équipé d'un canon de 20 mm et pourra emporter des missiles air-sol. Son rayon d'action devrait être de l'ordre de 135 nautiques, avec la possibilité de rester 90 minutes sur zone. « La lutte multi-domaines sera complexe et notre équipe fournit une solution hautement performante et à faible risque pour répondre en toute confiance aux exigences opérationnelles avec une flotte durable », a fait valoir Vince Tobin, le directeur des affaires militaires chez Bell. En effet, disposant de commandes de vol électriques, le Bell 360 Invictus fera appel à des technologies déjà éprouvées ainsi qu'à quelques innovations issues de programmes civils et militaires. Procéder de la sorte permet ainsi à l'industriel d'être très compétitif en terme de coûts, l'US Army ayant fixé à 30 millions de dollars le prix unitaire de ses futurs hélicoptères d'attaque et de reconnaissance. Les autres constructeurs qui ne l'ont pas encore fait devraient prochainement abattre leurs cartes, la prochaine phase du programme FARA devant commencer en 2020, après la sélection de deux concepts. http://www.opex360.com/2019/10/03/bell-devoile-le-360-invictus-un-nouvel-helicoptere-dattaque-et-de-reconnaissance-pour-lus-army/

  • Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

    November 21, 2024 | International, C4ISR, Security

    Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

    Gelsemium debuts Linux malware WolfsBane in cyber espionage attacks on East Asia, ESET reveals.

  • Saab Signs Support Contract With British Army

    April 24, 2020 | International, Aerospace

    Saab Signs Support Contract With British Army

    April 23, 2020 - Saab has signed a three-year contract with the UK Ministry of Defence for the provision of support and services to the Direct Fire Weapon Effects Simulator (DFWES) capability. The contract valued at 320 MSEK came into effect on April 1, 2020. DFWES is a laser based Tactical Engagement Simulation (TES) system, that allows dismounted and mounted soldiers to simulate the effects of direct and indirect fire. This order includes support and maintenance for the British Army's DFWES capability. In addition to the existing sites in the UK, Canada and Germany, this contract includes continuation of support to the Commando Training Centre Royal Marines, the Infantry Battle School in Brecon and the Infantry Training Centre Catterick. “We are proud that Defence Equipment and Support (DE&S) continues to choose Saab as a partner to provide the British military with the DFWES capability. This ensures that British soldiers and marines can continue to receive the best possible support for their training and is a testament to the close and long-term cooperation between Saab and the UK”, says Magnus Lewis Olson, Head of Saab in the United Kingdom. The high fidelity, interoperable and deployable DFWES capability supports individual, collective and mission specific training around the globe. For further information, please contact: Saab Press Centre, +46 (0)734 180 018 presscentre@saabgroup.com Saab serves the global market with world-leading products, services and solutions within military defence and civil security. Saab has operations and employees on all continents around the world. Through innovative, collaborative and pragmatic thinking, Saab develops, adopts and improves new technology to meet customers' changing needs. View source version on Saab: https://saabgroup.com/media/news-press/news/2020-04/saab-signs-support-contract-with-british-army/

All news