19 décembre 2018 | International, C4ISR

DoD IG: Military networks are exposed to ‘unnecessary’ cyber risks

By:

The military services are exposing networks to “unnecessary cybersecurity risks” thanks in part to a lack of visibility over software application inventories, according to a Department of Defense Inspector General report.

The IG investigated whether DoD components rationalized their software applications by identifying and eliminating any duplicative or obsolete applications. Rationalizing software applications seeks to improve enterprise IT by identifying all software applications on the network; determining if existing applications are needed, duplicative or obsolete; and determining if applications already existing within the network prior to purchasing new ones.

The audit — which focused on Marine Corps, Navy and Air Force commands and divisions — found that the groups examined did not consistently perform this rationalization process. By not having visibility into software application inventories, these organizations were unable to identify the extent of existing vulnerabilities within their applications, the report found.

Moreover, such a process could lead to cost savings associated with eliminating duplicative and obsolete applications.

Fleet Forces Command was the only command the IG reviewed that had a process in place for eliminating duplicative or obsolete applications. The Air Force did not have a process in place to prevent duplication when purchasing new applications.

The report placed blame on the DoD chief information officer for not implementing a solution for software rationalization in response to Federal Information Technology Acquisition Reform Act requirements.

The IG made three recommendations for the CIO, who did not provide a response to draft recommendations:

  • Develop an enterprisewide process for conduction software application rationalization throughout DoD;
  • Establish guidance requiring DoD components to conduct rationalization and require DoD component CIOs to develop implementation guidance outlining responsibilities for rationalization. Such a policy should also require components on at least an annual basis to validate the accuracy of their owned and in use software applications inventory; and
  • Conduct periodic review to ensure components are regularly validating the accuracy of their inventory and they are eliminating duplicative and obsolete applications.

https://www.fifthdomain.com/dod/2018/12/18/dod-ig-military-networks-are-exposed-to-unnecessary-cyber-risks

Sur le même sujet

  • Navy’s Next Large Surface Combatant Will Draw From DDG-51, DDG-1000 — But Don’t Call it a Destroyer Yet

    29 août 2018 | International, Naval

    Navy’s Next Large Surface Combatant Will Draw From DDG-51, DDG-1000 — But Don’t Call it a Destroyer Yet

    By: Megan Eckstein THE PENTAGON – The Navy will buy the first of its Future Surface Combatants in 2023 – a large warship that will be built to support the Arleigh Burke Flight III combat system and will pull elements from the Arleigh Burke-class (DDG-51) and Zumwalt-class (DDG-1000) destroyer designs. The combatant – not dubbed a cruiser, and potentially not dubbed a destroyer either – will be bigger and more expensive than the Arleigh Burke Flight III design and will have more room to grow into for decades to come, the director of surface warfare (OPNAV N96) told USNI News today. Future Surface Combatant refers to a family of systems that includes a large combatant akin to a destroyer, a small combatant like the Littoral Combat Ship or the upcoming frigate program, a large unmanned surface vessel and a medium USV, along with an integrated combat system that will be the common thread linking all the platforms. Navy leadership just recently signed an initial capabilities document for the family of systems, after an effort that began in late 2017 to define what the surface force as a whole would be required to do in the future and therefore how each of the four future platforms could contribute to that overall mission requirement. With the ICD now signed and providing the service with an idea of how many of each platform would be needed in a future fleet and how each would contribute as a sensor, a shooter or a command and control asset, Surface Warfare Director Adm. Ron Boxall and his staff are now able to begin diving into the finer details of what each platform would look like. The first to be tackled is the large combatant, Boxall told USNI News today. He noted the effort would be more like the move from the Ticonderoga-class cruiser to the Arleigh Burke-class destroyer – where the same combat capability was kept, but housed in a more suitable hull – rather than the move from the Spruance-class destroyer to the cruiser, which maintained the same hull design but added in new combat capability. After the addition of the AN/SPY-6(V) Air and Missile Defense Radar (AMDR) to the DDGs' Aegis Combat System to create the Flight III design, Boxall said the resulting warfighting capability is one the Navy can use for years to come. “We have a new capability on that hull now, so everything's going good – except for, as we look towards going further, we know we've maxed out that hull footprint,” Boxall said of the Arleigh Burke-class hull design, power-generation capability and more. “So the key elements that we're looking at in this work we're doing on the requirements side is, keep the requirements about the same as DDG Flight III, but now look at what do we need a new hull to do.” USNI News first reported last month that the large combatant would pair a new hull with the Flight III combat system. The Navy will spend about the next six months having that conversation about what the new hull will need, though he suggested to USNI News that it would need sufficient space to carry helicopters and unmanned systems; it would need to support long-range missiles and weapons; it would have to include command and control systems able to support a staff onboard for air defense or offensive surface capability, much like the cruiser does today with the air defense commander role for a carrier strike group; it may incorporate DDG-1000's signature controls and integrated power system; and it will certainly have to be flexible and modular enough to quickly undergo upgrades and modernizations in the future as new systems are developed that the Navy will want to incorporate into the next block buy of large combatants or back fit fielded ones. Though there has been much speculation about whether the large combatant would use an existing design or a new design, Boxall said there really are no designs out there that meet the Navy's needs without significant modifications. Whereas the ongoing frigate design effort was able to mandate that bidders use mature parent designs, Boxall said “a lot of people in the world make frigates. Not many people make large surface combatants of the size and capability that we need. So we've got to kind of look to our portfolio of blueprints that we have as a starting point, and we'll edit and modify the hull and design things as we go forward.” “I think what you're going to see won't be a huge deviation from things we have already, but at the same point, we are going to be making changes to anything we have” already in the fleet, he added. In a nod towards the idea the next large combatant will share the same combat system as DDG Flight III and will perform much the same role in the fleet, Boxall said the Navy is starting with the DDG-51 Flight III capability development document (CDD); will go through a Large Surface Combatant Requirements Evaluation Team effort with requirements, acquisition and engineering personnel from the Navy and industry; and after six months call the finished product a “modified Flight III CDD.” Once that modified CDD is complete, it will be clearer how much the future large surface combatant will resemble its predecessor and how much it will be a new class of ship – which will likely determine its name. “It is the big question: what do you call the future large surface combatant? I don't know. I don't think you call it a cruiser. I don't think you call it a destroyer. Maybe – I don't know what it is,” Boxall said, noting that he has commanded both a cruiser and destroyer and that they get used in much the same fashion, save for the cruiser's role as the air defense commander ship, which the future large surface combatant will have the capability of doing with its command and control suite. Once the first large combatant is designed and purchased in the 2023 “block” – following the current block-buy of Flight III DDGs from Ingalls Shipbuilding and General Dynamics Bath Iron Works, which spans from Fiscal Years 2018 to 2022 – new blocks will be planned for every five years. As USNI News has reported, this block structure, laid out in a Surface Combatant Capability Evolution Plan, would allow the insertion of new hardware and software in a predictable timeline. This would help researchers and developers in the government and in industry understand when a new capability would have to be matured by to be included in the next block design, and anything not quite ready yet could wait until the next block. This setup is much like the Virginia-class attack submarine's block upgrade approach to adding in new capabilities, and its Acoustic Rapid Commercial-off-the-shelf Insertion (ARCI) process of adding new capabilities in via new construction and back fitting existing subs. However, Boxall noted the surface community had the added challenge of managing this block buy and upgrade effort across four or more types of surface combatants, compared to just one class of attack submarines. Unlike before, when the surface community would undergo a massive planning effort – like the CG(X) cruiser replacement design that ultimately was too expensive and not accepted by the Navy – and then cease planning for many years before undertaking another massive effort, Boxall said he hoped the block upgrades would create a “heartbeat type of effort, where you always have something going on.” https://news.usni.org/2018/08/28/navys-next-large-surface-combatant-will-draw-ddg-51-ddg-1000-dont-call-destroyer

  • The coronavirus threatens NATO. Let’s move to protect the alliance.

    14 avril 2020 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    The coronavirus threatens NATO. Let’s move to protect the alliance.

    By: Sophia Becker , Christian Mölling , and Torben Schütz The global fight against COVID-19 has devastating economic consequences which might soon be felt in the defense sector. First estimates by OECD and national institutions conclude that the initial economic impact of the measures to fight the virus will by far exceed that of the 2008 financial crisis. The severe socio-economic consequences may tempt European governments to prioritize immediate economic relief over long-term strategic security and defense considerations. The good news is: there is no automatism – it remains fundamentally a political decision. If European governments do decide to slash defense spending as a result of the current crisis, it would be the second major hit within a decade. Defense budgets have only just begun to recover towards pre-2008 crisis levels, though capabilities have not. Nationally, as well as on an EU and NATO level, significant gaps still exist. European armies have lost roughly one-third of their capabilities over the last two decades. At the same time, the threat environment has intensified with an openly hostile Russia and a rising China. With European defense budgets under pressure, the United States might see any effort to balance burden-sharing among allies fall apart. A militarily weak Europe would be no help against competitors either. The US should work with allies now to maintain NATO's capabilities. Improve coordination to avoid past mistakes Europe's cardinal mistake from the last crisis was uncoordinated national defense cuts instead of harmonized European decisions. In light of the looming budget crisis, governments could be tempted to react the same way. This would be the second round of cuts within a decade, leaving not many capabilities to pool within NATO. If domestic priorities trump considerations about procurement of equipment for the maintenance and generation of military capabilities the system-wide repercussions would be severe. NATO defense, as well as the tightly knit industrial network in Europe, will suffer. Capabilities that can only be generated or sustained multinationally – like effective air defense, strategic air transport or naval strike groups - could become even more fragile; some critical ones may even disappear. If Europeans cut back on capabilities like anti-submarine warfare, armored vehicles of all sorts and mine-warfare equipment again, they could endanger the military capacity of nearly all allies. Ten years ago, such capabilities for large-scale and conventional warfare seemed rather superfluous, but today NATO needs them more than ever. This outcome should be avoided at all costs, because rebuilding those critical forces would be a considerable resource investment and could take years. Europe would become an even less effective military actor and partner to the US, resulting in more discord about burden-sharing. Uncoordinated cuts would also affect the defense industry, as development and procurement programs would be delayed or cancelled altogether – hitting both European and American companies. Moreover, their ability to increase efficiency through transnational mergers and acquisitions and economies of scale is limited due to continued national sentiments in Europe. Companies might decide to either aggressively internationalize, including massive increase of defense exports, or leave the market as national armed forces as otherwise reliable clients drop out. Technological innovation would suffer from a shrinking defense industrial ecosystem and duplicated national research and development efforts, risking the foundation of security for the next generation of defense solutions. To safeguard NATO's strategic autonomy, lean on lead nations In order to prevent the loss of critical capabilities and infrastructure within NATO, the US should immediately start working with its European partners to preemptively plan for increasingly tight budgets. NATO should take stock of existing capabilities and offer alternatives for consolidation. Based on a coordinated effort to redefine NATO's level of ambition and priorities, it should offer plans for maintaining the military capacity to act while retiring unnecessary and outdated resources. Such a coordinated effort should include close cooperation with the European Union. Building on the NATO Framework Nations Concept, the United States should work with a network of larger member states, better equipped to weather the economic shock of the current crisis, to act as lead nations. These countries could safeguard critical defense capabilities and provide a foundation of essential forces, enabling smaller partners to attach their specialized capabilities. Such an arrangement allows for a comparatively good balance of financial strain and retention of military capacity. Additionally, NATO should look beyond the conventional military domain and build on lessons learned from hybrid warfare and foreign influence operations against Europe. The way ahead is clear: As ambitions for European strategic autonomy become wishful thinking in light of the current crisis, allies should focus on retaining NATO's strategic autonomy as a whole. For the foreseeable future, both sides of the Atlantic have to live by one motto: NATO first! The authors are analysts at the Berlin-based German Council on Foreign Relations (DGAP). https://www.defensenews.com/opinion/commentary/2020/04/09/the-coronavirus-threatens-nato-lets-move-to-protect-the-alliance/

  • Raytheon Rheinmetall Land Systems submits bid for US Army combat vehicle competition

    2 octobre 2019 | International, Terrestre

    Raytheon Rheinmetall Land Systems submits bid for US Army combat vehicle competition

    DETROIT, October 1, 2019 /PRNewswire/ - Raytheon Rheinmetall Land Systems, a joint venture formed by Raytheon Company (NYSE: RTN) and Rheinmetall Defence, has submitted its bid for the U.S. Army's new Optionally Manned Fighting Vehicle, or OMFV, program. The team will offer the next-generation Lynx Infantry Fighting Vehicle. Lynx is a next-generation, tracked armored fighting vehicle designed to address the critical challenges of the future battlefield. The vehicle provides ample growth capacity to support new technologies over its lifetime, and features lower life-cycle costs. "U.S. Army soldiers deserve the best possible fighting vehicle when they go into battle and that's exactly what this team is offering," said Sam Deneke, Raytheon Land Warfare Systems vice president. "Lynx provides unparalleled troop protection and features advanced technology that will keep our men and women in uniform ahead of the threat." Scheduled for fielding in 2026, the OMFV is expected to replace the Bradley fighting vehicle. "Our team has spent the last year assembling a U.S. supply chain to ensure that Lynx will be built in America by American workers," said Ben Hudson, global head of Rheinmetall's Vehicle Systems division. "This next-generation combat vehicle will help save lives on the battlefield and further bolster the U.S. industrial base - now that's a win-win." Raytheon technology earmarked for the Lynx includes the company's advanced weapons, Active Protection System, third-generation thermal sights, Coyote® unmanned aircraft system and cyber protection. About Rheinmetall Headquartered in Düsseldorf, the publicly traded Rheinmetall AG is a high-tech enterprise dedicated to the twin modern imperatives of mobility and security. Founded in 1889, the group today consists of two operational components: Rheinmetall Defence and Rheinmetall Automotive. One of the world's leading suppliers of military systems and equipment, Rheinmetall's Defence arm comprises three divisions: Vehicle Systems, Electronic Solutions and Weapon and Ammunition. The group's 23,000-strong global workforce generated sales last year of $6.9 billion. Follow us on Twitter. About Raytheon Raytheon Company, with 2018 sales of $27 billion and 67,000 employees, is a technology and innovation leader specializing in defense, civil government and cybersecurity solutions. With a history of innovation spanning 97 years, Raytheon provides state-of-the-art electronics, mission systems integration, C5I(®) products and services, sensing, effects and mission support for customers in more than 80 countries. Raytheon is headquartered in Waltham, Massachusetts. Follow us on Twitter. Media Contacts Raytheon John B. Patterson +1.520. 440.2194 rmspr@raytheon.com Rheinmetall Oliver Hoffmann Head of Public Relations, Rheinmetall AG +49-(0)211-473 4748 oliver.hoffmann@rheinmetall.com http://www.prnewswire.com/news-releases/raytheon-rheinmetall-land-systems-submits-bid-for-us-army-combat-vehicle-competition-300929126.html

Toutes les nouvelles