Back to news

January 22, 2020 | International, C4ISR, Security

What new documents reveal about Cyber Command’s biggest operation

Mark Pomerleau

New documents provide insight into the growing pains U.S. Cyber Command faced in building a force while simultaneously conducting operations.

The documents, which were released as part of a Freedom of Information Act request from the National Security Archive at George Washington University and later shared with journalists, are a series of internal briefings and lessons from the Defense Department's most complex cyber operation at the time, Operation Glowing Symphony.

That operation was part of the larger counter-ISIS operations — Joint Task Force-Ares — but specifically targeted ISIS's media and online operations, taking out infrastructure and preventing ISIS members from communicating and posting propaganda.

While Cyber Command described the operation, which took place in November of 2016, as a victory in the sense that it “successfully contested [ISIS] in the information domain,” the documents demonstrate the extent to which the command was still learning how to conduct operations and the exact steps to follow.

“Process maturation is something they pull out a lot. Obviously, as CYBERCOM was standing up, it was pulling together plans for how they were going to operate. They actually hadn't operated that much,” Michael Martelle, cyber vault fellow at the National Security Archive, told reporters. “A lot of these frameworks were formed in theory. Now they go to try them out in practice.”

Cyber Command leaders have stressed in public remarks for years that the command was building its force while operating. But the extent of those operations has been limited. Officials in recent years have explained that the command didn't undertake many offensive operations. One official said last year he could count on less than two fingers the number of operations, Cyber Command conducted in the last decade or so. One member of Congress said DoD didn't conduct an offensive cyber operation in five years.

But when they were in action, in this case with Operation Glowing Symphony, Martelle said the documents show cyber leaders did not anticipate the amount of data they would access.

“They actually weren't prepared for the amount of data they were pulling off of ISIS servers ... CYBERCOM was not set up for an operation of this magnitude from day one,” he said. “They had to learn on the fly, they had to acquire on the fly, they had to grow on the fly.”

The documents note that Cyber Command's capability development group, is “developing USCYBERCOM data storage solutions.”

The capabilities develop group, now known as the J9, serves as the advanced concepts and technology directorate and worked to plan and synchronizing cyber capability development and developed capabilities to meet urgent operational needs.

Experts had noted that in the past the CDG/J9 had been stressed in recent years by a limited staff and burdened by developing tools for operational needs, namely Joint Task Force-Ares.

Another example of potential growing pains the documents point to was the fact that updates to operations checklists were not made available readily to the team.

Finally, the documents note that authorities and processes the command was operating under that the time were restrictive in some cases.

“Absent of significant policy changes from [the office of the secretary of defense], USCYBERCOM is limited in its ability to challenge ISIS [redacted]. As a result, USCYBERCOM has [redacted] to achieve our objectives,” the executive summary of a 120-day assessment of Operation Glowing Symphony says.

Those authorities and processes have been streamlined by the executive branch and Congress in recent years.

Commanders now follow a process that defaults toward action, Maj. Gen. Dennis Crall, deputy principal cyber adviser and senior military adviser for cyber policy, said during an event Jan. 9. He explained the updated process provides continuity, tempo, pace and timing.

Ultimately, Martelle noted that the real importance behind Operation Glowing Symphony is that Cyber Command used the experience from those events and Joint Task Force-Ares more broadly as a template for future operations.

Cyber Command's top official, Gen. Paul Nakasone, who was also led Joint Task Force-Ares, has noted that the task force laid the foundation for the Russia Small Group, which was created to combat election interference in the 2018 midterms.

“This concept of a task force lives on. A lot of that thinking came from what we were doing in 2016,” he told NPR.

That task force has now evolved to be more all encompassing covering election threats more broadly.

https://www.fifthdomain.com/dod/cybercom/2020/01/21/what-new-documents-reveal-about-cyber-commands-biggest-operation/

On the same subject

  • Le Tempest démarre avec l'Italie... et le Japon - Aerospatium

    August 23, 2021 | International, Aerospace

    Le Tempest démarre avec l'Italie... et le Japon - Aerospatium

    Loin des contraintes politiques qui freinent son homologue franco-germano-espagnol, le Tempest a franchi une étape programmatique.

  • Pentagon formulating plan to move F-35 management from central office to services

    April 5, 2018 | International, Aerospace

    Pentagon formulating plan to move F-35 management from central office to services

    By: Valerie Insinna and Aaron Mehta WASHINGTON — The Defense Department plans to dissolve the F-35 Joint Program Office and revert to a more traditional management structure where the U.S. Air Force, Navy and Marine Corps all run their own program offices – eventually. In a March 27 letter to Congress, the Pentagon's top acquisition official acknowledged that splitting up the F-35 management into smaller offices is likely the way to go for the future of the Pentagon's largest acquisition program. But exactly when such a transformation will occur was not defined in the letter written by Ellen Lord, undersecretary of defense for acquisition and sustainment, and the expectation in the Pentagon is that it could happen within the next several years. “In order to effectively integrate and sustain the F-35 in the joint force, the military departments must have more direct ownership of the F-35 program and leverage organic capabilities, processes and infrastructure,” Lord wrote in the letter, which was sent to the congressional defense committees and first acquired by Inside Defense. “The department will evaluate the right time to begin this transition through the F-35 executive steering group, which has participation across the department.” The department intends to formulate a plan over the next year on how best to transition to service-led offices, Pentagon spokesman Cmdr. Patrick Evans told Defense News. Evans told Defense News that the transition will occur in three phases: “A measured restructure of the existing F-35 management structure, which begins immediately.” A hybrid structure, where separate service-run F-35 program offices report to a Joint Program Executive Officer, a position currently held by JPO head Vice Adm. Mat Winter. The full transition, where the services will have separate program offices and program executives that will report to the military department's acquisition head. “The full transition dates will be determined through a conditions-based detailed implementation plan with risk-informed criteria,” he said. Lord's letter lays out nine near-term actions that will enable the stand up of F-35 program offices specific to each military department. Lord's letter specifies that the eventual management structure will be comprised of an F-35A office led by the Air Force and an F-35B/C program office run the Navy and Marine Corps. Some of the near-term changes involve greater participation by the services within the F-35 JPO. For instance, the Air Force, Marine Corps and Navy will establish service deputies at the O-6 level. Those officials will be collocated at the JPO to provide the services' feedback on JPO decisions and also to help execute the transition to separate service-led offices. The JPO will also bring in “F-35A, F-35B and F-35C variant leads” that will eventually form the “nucleus” of future transition teams, the letter states. Meanwhile, the services will “conduct a gap analysis, charter and implementation plan to stand up individual fleet management offices.” That plan will include a proposed schedule and criteria for initial and full operational capability for the offices. The Pentagon will also conduct an audit of the JPO's billet structure and review the F-35 program charter with the intent to optimize manpower and cut down on bureaucracy, it said. While the changes could make it easier for the services to have oversight over their respective F-35 variants, the eventual dissolution of the JPO could make it more difficult for international customers to interface with the program. The JPO currently functions as a one-stop shop for foreign buyers — some of which, like Japan, are considering buying more than one variant of the aircraft. The office also oversees the work done by final assembly lines in Japan and Italy, as well as at sustainment hubs around the world. Evans said that the department will continue to work closely with F-35 international partners, but acknowledged that “in the longer-term, current international agreements will need to be updated and transition to service-based agreements. The phased implementation approach allows time to work through these changes in close coordination with our international partners in a way that maintains our strong commitment to them and our partnership.” In an emailed statement, the JPO said it was supportive of this initiative to improve the management of the F-35 program. “We are implementing improvements to increase transparency, and we'll continue to assess and evaluate the most efficient ways to support and manage this vital national defense program,” the statement read. https://www.defensenews.com/air/2018/04/03/pentagon-formulating-plan-to-move-f-35-management-from-central-office-to-services/

  • New in 2024: Marines to field new, more realistic shooting simulators

    January 3, 2024 | International, Land

    New in 2024: Marines to field new, more realistic shooting simulators

    The first location to field the simulators will be the Marine Corps Air Ground Combat Center in Twentynine Palms, California.

All news