13 mai 2020 | International, C4ISR, Sécurité
The Defense Innovation Unit awarded a $45 million to a Silicon Valley-based tech startup to perform cybersecurity testing on Defense Department weapon systems' applications, the company announced May 11.
The company, ForAllSecure, has been prototyping its cybersecurity testing platform, known as Mayhem, with DoD components for more than three years. DIU made the award on the five-year contract April 23, a ForAllSecure spokesperson said.
ForAllSecure is working with the Air Force 96th Cyberspace Test Group, the Air Force 90th Cyberspace Operations Squadron, the Naval Sea Systems Command (NAVSEA) and the U.S. Army Command, Control, Communication, Computers, Cyber, Intelligence, Surveillance and Reconnaissance Center (C5ISR).
The same DoD users have worked with ForAllSecure throughout the prototyping process for the company's platform, which finds bugs in applications and shows the user how they can be triggered. The platform will allow for a continuous testing for vulnerabilities in weapons systems.
“One of the problems that [the department] run[s] into is this idea that there's a point in time when you're done" with cybersecurity," said David Brumley, chief executive officer of ForAllSecure. "It all comes down to how quickly can you test and retest.”
In the last few years of prototyping, the company went through 10 iterations of Mayhem. One significant piece the company added to those iterations were cybersecurity tutorials for users.
ForAllSecure's work on Mayhem started before a troubling report from the Government Accountability Office that highlighted several cybersecurity challenges and shortfalls that the Defense Department's weapons systems faced in light of potential advanced cyberattacks.
“If you look at the GAO report, they simply weren't embedding cybersecurity testing in the process at all," Brumley said. “So this is adding this common sense measure and it's automating it.”
In 2016, the company's Mayhem platform won the Defense Advanced Research Projects Agency's Cyber Grand Challenge, an automated defensive cybersecurity competition. That victory came with a $2 million prize.
Since that victory, Brumley said that the company has run into a few unique challenges working with other DoD components, particularly around installing the platform.
“When DARPA has their contest, it really only has to work for the developers,” Brumley said. “When you go to a product, you have to go to an unknown site, you have to install. You have to repeatedly do that.”
https://www.fifthdomain.com/dod/2020/05/12/diu-awards-45m-contract-for-weapon-systems-cybersecurity/
11 novembre 2022 | International, Autre défense
BAE Systems’ FAST Labs™ R&D organization, along with subcontractors Uncharted Software and Kestrel Institute, will develop a solution to rapidly generate and review multiple plans and select the most robust
27 avril 2021 | International, C4ISR, Sécurité
L'exercice de cyberdéfense Locked Shields 2021 s'est tenu à Tallinn (Estonie) du 13 au 16 avril dernier. Il a réuni 2000 spécialistes occidentaux issus de 22 pays, qui, selon le scénario préétabli, se sont opposés à une « Red Team » (attaquants) qui aurait déclenché une vaste série d'incidents cyber contre le « Berylia », un pays situé près de l'Océan Atlantique. L'attaque aurait visé les infrastructures critiques, dont le secteur de l'eau et le secteur financier, et les systèmes de communication militaires. La « Blue Team » était chargée de protéger et de restaurer les systèmes de défense aériens et maritimes. L'exercice a impliqué quelque 4 000 attaques informatiques et 5 000 systèmes virtuels. La Suède a remporté l'édition 2021, suivie par la Finlande et la République Tchèque. Air & Cosmos du 27 avril
7 avril 2020 | International, Aérospatial
Alex Derber If the ongoing corona-crisis does effect a structural shift in the air transport market, both the production and aftermarket sectors will have to adjust. Much has been made of aviation's ability to weather previous external shocks such as 9/11, SARS and the financial crash, but the present upheaval is likely to outdo all others in its severity, and there is a good chance we won't see demand bounce back as quickly as in the past. In fact, the best comparison may not be with other external shocks at all, but rather with the profound impact that low-cost carriers (LCCs) had upon the established airline sector. Granted, this occurred region by region on a rolling basis over many years, rather than as a discrete global event like coronavirus, but the demand hit to full-service short- and medium-haul operations was huge. The LCCs also prompted significant changes in the MRO market, including: a move away from letter checks to more flexible maintenance programs; a rise in outsourcing and full-service maintenance contracts; and consolidation as larger MRO providers sought to enhance their nose-to-tail capabilities. So, what further changes might be wrought by the present crisis? Much will depend on the extent of the disruption and the demand profile thereafter, but certain tentative predictions can be made. For example: many airlines will probably fail; the survivors will emerge as smaller operations; many older aircraft will retire earlier; and business travel may never recover its pre-crisis highs. For the aftermarket this may mean: more competition for contracts and a need to find greater cost efficiencies; a greater focus on new-technology inspection, testing and repair capabilities, such as for carbon fiber and the latest engines; and a trend towards simpler cabins. Also a fair bet, of course, is that the most significant ramifications of coronavirus for the aftermarket are ones that almost no-one is considering currently. For an in-depth look at the factors that have shaped the MRO market to this point, see the next Inside MRO. https://aviationweek.com/mro/how-will-coronavirus-change-aftermarket