Back to news

January 22, 2020 | International, C4ISR, Security

What new documents reveal about Cyber Command’s biggest operation

Mark Pomerleau

New documents provide insight into the growing pains U.S. Cyber Command faced in building a force while simultaneously conducting operations.

The documents, which were released as part of a Freedom of Information Act request from the National Security Archive at George Washington University and later shared with journalists, are a series of internal briefings and lessons from the Defense Department's most complex cyber operation at the time, Operation Glowing Symphony.

That operation was part of the larger counter-ISIS operations — Joint Task Force-Ares — but specifically targeted ISIS's media and online operations, taking out infrastructure and preventing ISIS members from communicating and posting propaganda.

While Cyber Command described the operation, which took place in November of 2016, as a victory in the sense that it “successfully contested [ISIS] in the information domain,” the documents demonstrate the extent to which the command was still learning how to conduct operations and the exact steps to follow.

“Process maturation is something they pull out a lot. Obviously, as CYBERCOM was standing up, it was pulling together plans for how they were going to operate. They actually hadn't operated that much,” Michael Martelle, cyber vault fellow at the National Security Archive, told reporters. “A lot of these frameworks were formed in theory. Now they go to try them out in practice.”

Cyber Command leaders have stressed in public remarks for years that the command was building its force while operating. But the extent of those operations has been limited. Officials in recent years have explained that the command didn't undertake many offensive operations. One official said last year he could count on less than two fingers the number of operations, Cyber Command conducted in the last decade or so. One member of Congress said DoD didn't conduct an offensive cyber operation in five years.

But when they were in action, in this case with Operation Glowing Symphony, Martelle said the documents show cyber leaders did not anticipate the amount of data they would access.

“They actually weren't prepared for the amount of data they were pulling off of ISIS servers ... CYBERCOM was not set up for an operation of this magnitude from day one,” he said. “They had to learn on the fly, they had to acquire on the fly, they had to grow on the fly.”

The documents note that Cyber Command's capability development group, is “developing USCYBERCOM data storage solutions.”

The capabilities develop group, now known as the J9, serves as the advanced concepts and technology directorate and worked to plan and synchronizing cyber capability development and developed capabilities to meet urgent operational needs.

Experts had noted that in the past the CDG/J9 had been stressed in recent years by a limited staff and burdened by developing tools for operational needs, namely Joint Task Force-Ares.

Another example of potential growing pains the documents point to was the fact that updates to operations checklists were not made available readily to the team.

Finally, the documents note that authorities and processes the command was operating under that the time were restrictive in some cases.

“Absent of significant policy changes from [the office of the secretary of defense], USCYBERCOM is limited in its ability to challenge ISIS [redacted]. As a result, USCYBERCOM has [redacted] to achieve our objectives,” the executive summary of a 120-day assessment of Operation Glowing Symphony says.

Those authorities and processes have been streamlined by the executive branch and Congress in recent years.

Commanders now follow a process that defaults toward action, Maj. Gen. Dennis Crall, deputy principal cyber adviser and senior military adviser for cyber policy, said during an event Jan. 9. He explained the updated process provides continuity, tempo, pace and timing.

Ultimately, Martelle noted that the real importance behind Operation Glowing Symphony is that Cyber Command used the experience from those events and Joint Task Force-Ares more broadly as a template for future operations.

Cyber Command's top official, Gen. Paul Nakasone, who was also led Joint Task Force-Ares, has noted that the task force laid the foundation for the Russia Small Group, which was created to combat election interference in the 2018 midterms.

“This concept of a task force lives on. A lot of that thinking came from what we were doing in 2016,” he told NPR.

That task force has now evolved to be more all encompassing covering election threats more broadly.

https://www.fifthdomain.com/dod/cybercom/2020/01/21/what-new-documents-reveal-about-cyber-commands-biggest-operation/

On the same subject

  • USAF rethinks future fleet, ponders clean-sheet 4.5-generation fighter

    February 18, 2021 | International, Aerospace

    USAF rethinks future fleet, ponders clean-sheet 4.5-generation fighter

    The US Air Force is studying a future fighter fleet that might include new Lockheed Martin F-16 fighters or possibly a clean-sheet 4.5-generation fighter.

  • UK Ministry of Defence orders more than 500 Boxers in €2.6 billion contract

    November 8, 2019 | International, Land

    UK Ministry of Defence orders more than 500 Boxers in €2.6 billion contract

    November 8, 2019 - The Artec consortium, led by Rheinmetall and Krauss-Maffei Wegmann (KMW), has signed a contract with the UK Ministry of Defence (MoD) to produce more than 500 Boxer 8x8-wheeled armoured vehicles for the British Army. The total current value of the order is approximately €2.6 billion (£2.3 billion). The contract has been awarded to Artec via the European procurement agency Organisation for Joint Armament Cooperation (OCCAR). The contract awarded to Artec falls under the UK's Mechanised Infantry Vehicle (MIV) procurement programme and includes more than 500 vehicles. Artec will each sub-contract 50% of the order volume to Rheinmetall and Krauss-Maffei Wegmann. The total number of Boxer vehicles already delivered by Artec or currently on order now exceeds 1,400 vehicles. The Boxer vehicles ordered by the British Army will be supplied in several different configurations, including an armoured personnel carrier, command vehicle, specialist carrier and field ambulance. Delivery of the vehicles is expected to start from 2023. Most of the production will take place in the UK, ¬safeguarding and creating a substantial number of British jobs. Full-scale production will begin in Germany, but 90% of the Boxer vehicles destined for the British Army will be produced in the UK, principally at plants operated by Rheinmetall BAE Systems Land (RBSL) and KMW's subsidiary WFEL. This order marks the return of the UK to a European defence programme having taken part in the Boxer project when it was still in its infancy. Boxer is now on its way to becoming one of NATO's standard vehicles. A modular vehicle – versatile, tried and tested The Boxer is a highly protective 8x8-wheeled armoured vehicle. Its modular architecture enables more operational configurations than any other vehicle system. At present, some 700 vehicles in twelve different versions are on order from three different NATO nations: Germany, the Netherlands and Lithuania. Australia has also ordered 211 Boxer Combat Reconnaissance Vehicles (CRV) in seven variants, the first of which was recently delivered. Artec GmbH was established in 1999. It is a joint venture of Krauss-Maffei Wegmann GmbH & Co. KG, Rheinmetall Military Vehicles GmbH, and Rheinmetall Defence Nederland B.V.. The company coordinates serial production of the Boxer and serves as the point of contact for export enquiries. View source version on Rheinmetall Military Vehicles GmbH: https://www.rheinmetall.com/en/rheinmetall_ag/press/news/latest_news/index_18880.php

  • L3Harris pushes advanced autonomy for unmanned maritime vehicles

    July 8, 2020 | International, Naval

    L3Harris pushes advanced autonomy for unmanned maritime vehicles

    by Gerrard Cowan L3Harris has set its sights on the intelligence, reconnaissance, and surveillance (ISR) market for unmanned maritime systems, identifying opportunities to combine the legacy unmanned surface vehicle (USV) technologies of ASV Global with the communications and sensor specialisms of the wider company since the latter was acquired in September 2018. These changes have brought a range of technological opportunities for the former ASV Global business, including the platforms it had originally developed before the acquisition, said James Cowles, business development manager at L3Harris. Cowles told Janes that L3Harris' ASV technology is suited to three major applications: mine countermeasures (MCM), where it has for example worked on the Anglo-French Maritime Mine Counter Measures (MMCM) programme with Thales; anti-submarine warfare (ASW), through such vehicles as its C-Worker USV; and ISR. He added that the integration of L3Harris and ASV's technologies is still at an early stage, although this effort is expected have a significant effect on its systems, particularly in ISR. L3Harris has several communication arms focused on high-bandwidth line-of-sight communications and satellite communications (satcom), he noted. “While we did have some excellent radios in the past, I think that some of the radios that we can now access for our military customers will really enhance our capability to move data in a safe and efficient way,” he said. Additionally, he said L3Harris is exploring internal collaboration, utilising the technologies of L3Harris Wescam in terms of integrating electro-optic/infrared (EO/IR) sensors into the ASV platforms. Beyond this, the company is potentially looking to work with TRL – an L3Harris-owned cyber security and electronic warfare specialist – on areas like cryptography. https://www.janes.com/defence-news/news-detail/l3harris-pushes-advanced-autonomy-for-unmanned-maritime-vehicles

All news