8 janvier 2019 | International, Naval, C4ISR

3 ways the Navy wants to protect its weapons from cyberattacks

By:

They have been hacked, tricked and stolen from. Now the message is clear -- no more.

The Navy is looking to support research in 36 areas that can help protect weapons systems from cyberattacks, Naval Air Systems Command said in a Jan. 7 update to a broad agency announcement.

“It's not necessarily cutting edge research, but it is the first step in cybersecurity quality control that should have already been done,” said Bryson Bort, the founder and chief executive officer of Scythe, a cybersecurity platform.

The Navy had admitted as much.

Research into protecting the department's weapons comes amid reports that the American military suffers from sustained cyberattacks. In December, an Inspector General report found that some in the Pentagon were not taking basic cybersecurity steps to protect its ballistic missile system. Although the Pentagon's weapons are worth roughly $1.66 trillion, an October report from the Government Accountability Office found that “nearly all” American missiles, jets, ships and lethal equipment in development are vulnerable to cyberattacks.

The announcement comes after Congress has mandated the Pentagon address its cyber vulnerabilities.

Three of the research areas the Navy is interested are commonly described as the pillars of strong cybersecurity, no matter the institution. They include:

Dynamic reconfiguration

In an effort to confuse attackers, the Navy wants to research “dynamic reconfiguration.” The National Institute of Standards and Technology defines the term as “changes to router rules, access control lists, intrusion detection/prevention system parameters, and filter rules for firewalls and gateways.”

"Organizations perform dynamic reconfiguration of information systems, for example, to stop attacks, to misdirect attackers, and to isolate components of systems, thus limiting the extent of the damage from breaches or compromises,” NIST officials wrote.

Research by the University of Maryland's Christian Johnson found that pairing predictive analytics with dynamic reconfiguration tactics, the new approach can lead to the "successful development of learning models that identify specific classes of malware such as ransomware,” Johnson wrote in a paper for the RSA conference.

Deception tactics

Experts have long used strategies of physical war in digital battles, including with the use of denial and deception tactics. The Navy wants to boost understanding of this area to better secure its weapons systems.

In 2015, researchers at MITRE, which conducts federally funded research, advocated for a 10-step process for planning and executing deception operations.

“Leveraging classical denial and deception techniques to understand the specifics of adversary attacks enables an organization to build an active, threat-based cyber defense,” a team of researchers wrote.

But the Intelligence Advanced Research Project Activity, the intelligence community's research arm, says that the use of deceptive software and hardware in cybersecurity is still in its infancy.

“Many techniques lack rigorous experimental measures of effectiveness,” the organization said, adding that “information is insufficient to determine how defensive deception changes attacker behavior.”

Artificial intelligence

If there was a common denominator of the federal government's investment in cybersecurity it is the use or artificial intelligence.

The Navy has embraced artificial intelligence since its Task Force Cyber Awakening project in 2015.

“We see that the more we automate our networks and the more we use machines to do the heavy lifting, the better. Our brains do not have the intellectual capacity to process all of that information,” Rear Adm. Danelle Barrett, Navy Cyber Security Division Director,told Defense Systems, a trade publication, in a 2017 interview.

More than half of the challenges and research opportunities announced by IARPA in 2018 involved machine learning, according to an analysis by Fifth Domain.

Cyber Command has embraced the technology in a short time period, Capt. Ed Devinney, director of corporate partnerships at the body, said during the November Cyber Con conference hosted by Fifth Domain.

“If you talked to anyone at the command two or three years ago about a system that would be all autonomous, you probably wouldn't get much traction. But I think there is a growing understanding and consensus that we need to operate at machine speed, especially when talking about active defense of the network,” Devinney said.

He said that everyone likes to use the phrases “artificial intelligence” and “machine learning,” however “there aren't that many people who do AI very well.”

https://www.fifthdomain.com/dod/2019/01/07/3-ways-the-navy-wants-to-protect-its-weapons-from-cyberattacks

Sur le même sujet

  • DARPA Invites Proposals For Active-Flow-Control X-Plane

    15 août 2019 | International, Aérospatial

    DARPA Invites Proposals For Active-Flow-Control X-Plane

    By Graham Warwick DARPA has formally launched a program to build and fly an X-plane designed around active flow control (AFC), potentially eliminating the need for moving control surfaces. Designing from the ground up around AFC, rather than modifying an existing aircraft, is expected to yield performance and operational benefits. A broad agency announcement (BAA) was released on Aug. 12 for the first two of four planned phases of the Control of Revolutionary Aircraft with Novel Effectors (Crane) program. A proposers' day is scheduled for Aug. 26 and proposals are due to be submitted by Nov. 8. A budget of $21 million is available for multiple awards under the 12-month Phase 0, which will focus on the aircraft design process and understanding the trade space. DARPA expects performers to enter this phase with multiple candidate configurations and flow-control approaches. Each Phase 0 contract will end with a conceptual design review for one or more configurations. Phase 1 will continue to mature up to two concepts and is expected to involve component-level testing and demonstrations to inform a system requirements review. This nine-month phase is planned to culminate in a preliminary design review for the proposed X-plane. DARPA plans to downselect to one performer at the end of Phase 1 in second-quarter fiscal 2022 and award a contract for Phase 2 detailed design. This is planned to conclude in a critical design review and lead to a go/no-go decision in the second quarter fiscal of 2023 for Phase 3 building and flying of the X-plane. First flight is planned for the third quarter of fiscal 2024. DARPA wants a “tactically relevant scale aircraft,” the BAA says. This may include a “clean-sheet design or modification of an existing aircraft.” The agency expects substantial use of off-the-shelf components for the flight demonstrator so that program resources can be focused on AFC development and testing. AFC modifies the flow field around the aircraft using mechanical or fluidic actuators. The BAA specifically excludes using large external moving surfaces, mechanical vectoring of engine exhaust or other traditional moving aerodynamic control surfaces. AFC applications identified in the BAA include eliminating moving control surfaces for stability and control and improving takeoff and landing performance, high-lift flight, thick-airfoil efficiency and high-altitude flight. Proposers may identify additional applications and benefits. A NATO technical study involving Lockheed Martin, BAE Systems and academic institutes in the U.S. and UK identified that an unmanned combat aircraft with AFC could have stealth and other potential performance benefits during the ingress and egress phases of a strike mission. https://aviationweek.com/defense/darpa-invites-proposals-active-flow-control-x-plane

  • Rafael offers new multi-missile launcher for Poland’s tank-destroyer program

    23 juin 2020 | International, Terrestre

    Rafael offers new multi-missile launcher for Poland’s tank-destroyer program

    By: Seth J. Frantzman JERUSALEM — Rafael Advanced Defense Systems has joined Poland's Ottokar-Brzoza tank-destroyer program, offering its line of anti-tank guided missiles for the country's ground forces. Rafael would co-produce the weapons with Polish conglomerate Polish Armaments Group. The Israeli company unveiled a new multi-missile launcher laid out in a configuration of eight Spike non-line-of-sight missiles, which Poland could incorporate onto its BWP-1, a 1960s Soviet-era tracked armored vehicle, or its KTO Rosomak, a Polish variant of the Patria eight-wheel drive armored vehicle. Poland has hundreds of these vehicles in different variants, and wants to replace some aging ones for its anti-tank regiments. Poland launched the competition to be prepared to confront a major threat, such as a mass amount of armored vehicles. The tender is potentially worth hundreds of millions of dollars if the country outfits a large number of its vehicles with launchers. Rafael's NLOS launcher has a standoff range of 32 kilometers and is part of the company's Spike family of weapons, which is on more than 45 different platforms globally, according to the company. Mounted on a fixed rail, the launcher's operator inside a vehicle uses a target consul and coordinates from a target bank or forward observer, such as a UAV. The missiles have a unique data link and do not need GPS to fly to their target. The passive surprise element of the missile (it does not use laser designators) makes it less likely the enemy will see the volley coming. Other missiles, such as the MBDA Brimstone and Lockheed Martin's Hellfire, are also reportedly under consideration, and a variety of vehicle concepts with these weapons are available. These may include a launch station by Wojskowe Zakłady Motoryzacyjne; a chassis by OBRUM; a K9P chassis by Huta Stalowa Wola; the Borsuk tracked future armored vehicle; AMZ-Kutno's Bobr-3 vehicle; or Rheinmetall Defence's armored multipurpose vehicles. Other Spike variants are already used by Poland, including the Spike LR and LR2. A 2015 order from Poland for 1,000 Spike missiles was estimated to be worth $150 million, and an earlier one in 2002 that was reportedly for thousands of missiles was worth about $250 million. The missile type is already produced in Poland by Mesko, which Rafael says provides an existing infrastructure “for the future Polish production of the SPIKE NLOS missile as well as the launchers.” “As part of the its general vision and particularly now at this time of the COVID-19 pandemic, which has had a dramatic effect on all industries and economies, Rafael is continuously working to leverage industrial cooperation by contributing and operating with local industries,” the company said. Poland wants to make a qualitative leap in tank-destroyer units, according to local reports, to put a stop to a potential invasion. This would likely require the country to buy the latest generation of armored vehicles, including those with active defense capabilities. https://www.defensenews.com/land/2020/06/22/rafael-offers-new-multi-missile-launcher-for-polands-tank-destroyer-program/

  • US Army’s jumping to the next level in virtual training

    22 mai 2019 | International, Terrestre

    US Army’s jumping to the next level in virtual training

    By: Jen Judson WASHINGTON — The U.S. Army has been building a virtual world in which to train soldiers for war, and it's expected to award contracts in June for reconfigurable virtual air and ground trainers and for a common synthetic environment that includes complex and real-life terrain. Maj. Gen. Maria Gervais, who leads the Synthetic Training Environment Cross-Functional Team, which is part of Army Futures Command, told reporters during a recent media roundtable that she's “encouraged” to see what her team accomplished since it formed roughly 18 months ago. While the service, at a time, led the charge when it came to developing virtual environments, it has clung to relics of the '80s and '90s — stove-piped training systems lacking in realism. As the Army shifts its focus to fighting in a multidomain environment, the service wants a new system that enables collective training across air, ground, sea, cyber and space with greater fidelity that can be used not only as a trainer but also as a mission-planning tool. Before the synthetic training environment, or STE, was prioritized through the establishment of Army Futures Command, it wasn't going to be ready until 2030, but Gervais shrunk that timeline through new approaches in development and acquisition by involving industry and soldiers in a collaborative and agile manner. What is the STE? Over the last 18 months, the components of the STE have taken shape and will consist of One World Terrain — which compiles realistic and accurate virtual maps of territory — training simulation software, a training management tool and virtual collective trainers. All of this will make up the soldier/squad virtual trainer and the reconfigurable virtual collective trainer. The idea is to be able to click on any place on a virtual globe and go there. Soldiers can then train virtually in an exact environment in which they can expect to operate in reality. Just a few years ago, building One World Terrain was painstaking, tedious and expensive, but through new technology applications, what used to take nine months to build can now take eight hours. The training simulation software will support training simultaneously across many locations and training platforms. The training management tool allows users to build training scenarios through simulation databases. The virtual trainers are being designed for dismounted, air and ground formations to train from a squad level through battalion, and ultimately at higher echelons. The trainer for the soldier and squad will support individual and collective task at the smallest formation. The reconfigurable virtual collective trainers, or RVCT, will represent Army and Marine Corps air and ground systems for training at the unit level and will be used for mission rehearsals at every echelon. Ready player one The Army plans to award contracts next month to build both an RVCT for aircraft and an RVCT for ground vehicles that are reconfigurable based on changes to platform inventories. The STE conducted an initial user assessment of what had been developed in March 2018, Gervais said. Since then, the Army has conducted more than 20 “touch points” with industry partners, which led to a user assessment in Orlando, Florida — where the STE cross-functional team is based — of One World Terrain, the training management tool as well as the training simulation software. Meanwhile, Gervais said, the team is in the middle of a user assessment of an RVCT—Air prototype at Fort Carson, Colorado, which began in April and is supported by soldiers from the 4th Infantry Division. The service completed its assessment of a ground simulation platform that went to Fort Riley, Kansas. Crew members for Abrams tanks, Bradley Fighting Vehicles and Stryker combat vehicles of the 1st Infantry Division supported that effort. One World Terrain is already in use and under evaluation by a Marine battalion as well as three divisions in the Army and Naval Special Warfare Command. It's also used at the National Training Center and by the 3rd and 7th special forces groups. All of the users are providing feedback, according to Gervais. A contract was awarded in September 2018 to build the squad advanced marksmanship trainer, which is a product of the Close Combat Lethality Task Force initiative to improve soldier lethality and survivability, and the capability is already fielded to the 10th Mountain Division at Fort Drum, New York. The new trainer takes what was a tethered system and — while it still uses projectors and screens — allows users to move around a base with more flexibility, which is more operationally realistic. Ultimately, the projectors and screens could be replaced by a headset, which is in keeping with the service's requirement to bring trainers to an operational unit in the field or at home station. This means the system must be easy to set up and transport. “We will continue to field that out to the Army the rest of this [fiscal year],” Gervais said. Taking it to the next level The Army plans to use the other transaction authority, or OTA, contracting mechanism to award contracts next month to move quicker and more agile than the standard and often lengthy acquisition process. The service previously used OTAs for STE development. “What the existing OTAs have done for us is they have actually allowed us to get a quick look from industry on where they were with the capabilities,” Col. Marcus Varnadore, the project manager for the STE CFT, said during the media roundtable. “It was very important for us right up front to identify where industry really was with respect to the technology, which allowed us to then make some decisions about what path to go forward with, and it also allowed us, with that first OTA, to kind of get an idea of how we needed to structure our follow-on OTAs,” he added. With the upcoming OTA contract awards, “we are kind of taking that and moving it to the next level using OTAs to bridge our gap here to get to the [initial operational capability] ... before we transition ultimately into a production [full-operational capability] environment,” said Brian Serra, the branch chief of Army Contracting Command—Orlando. “We are using the flexibility of OTAs,” he added, “to adjust as we go so we are not married to a 100-page specification.” That translates to the CFT taking a two-year process and shrinking it to six months max. The incremental process has also allowed the STE CFT to track industry's progress in this arena. Gervais noted that in some cases, companies might have overstated a specific technology's capabilities, and in turn the serve may need to bolster funding for internal science and technology efforts to improve that specific tech. Alternatively, the Army might notice it's been developing technology that is already well-developed in the commercial world. “I'm very confident and comfortable that our efforts to date are going to keep us on track to meet an initial operational capability of fourth-quarter FY21,” Gervais said. To reach initial operational capability, Gervais expects to field a battalion set of the RVCT—Air and RVCT—Ground — running on the common synthetic environment made up of One World Terrain, the training management tools and the training simulation software — to at least four installations. Over the next two years following initial operational capability, the Army will expand that fielding to include all installations where the capability is required in order to reach full operational capability by FY23. https://www.defensenews.com/land/2019/05/17/us-armys-jumping-to-next-level-in-virtual-training-world/

Toutes les nouvelles