29 janvier 2020 | International, C4ISR, Sécurité

New cybersecurity standards for contractors could be finalized this week

The first version of the new cybersecurity requirements the Pentagon wants military contractors to follow could be finalized as soon as Jan. 31.

Katie Arrington, chief information security officer for the Office of the Under Secretary of Defense for Acquisition and the point person for the Cybersecurity Maturity Model Certification (CMMC), told an audience Jan. 28 that she will have the requirements by the end of the month.

The CMMC is a tiered cybersecurity framework that grades companies on a scale of one to five. A score of one designates basic hygiene and a five represents advanced hygiene. Arrington said Jan. 28 that the lowest level will become the default for Department of Defense contracts and will include basic tasks such as changing passwords.

Speaking at an event hosted by the law firm Holland and Knight, Arrington said the new standards won't be in effect overnight. The auditors and assessors who will grade companies need training and new contracts will be slowly phased in.

“The likelihood that any awards will be made until 2021 [of the certification] is, I would say, highly unlikely,” she said. She noted that companies are not required to have CMMC certification until the time of award. “You have a full year to get yourselves set, to get yourself in position.”

According to one slide in her presentation, all new contracts will have the requirements in fiscal year 2026. Arrington expects 1,500 companies to be certified by the end of 2021.

The requirements are expected to be free of jargon and overly technical language that can often make military documents befuddling.

“I asked if it could be created on an eighth grade reading level. Why? Because I'm not smart and I owned a small business and I fell prey to this,” she said. “I needed it to be in something that anybody could adapt to. We hear companies all the time say my nephew is doing my cybersecurity. I need your nephew to read what I need him to do.”

Arrington promised that the requirement would not become a simple checklist, because if it does “I've failed. We failed.”

Moreover, she suggested the framework be reevaluated at least once each year because cyber threats will continue to evolve.

https://www.fifthdomain.com/dod/2020/01/28/new-cybersecurity-standards-for-contractors-could-be-finalized-this-week/

Sur le même sujet

  • Canadian satellites vulnerable to cyberattack, internal Defence note warns

    25 octobre 2018 | International, C4ISR

    Canadian satellites vulnerable to cyberattack, internal Defence note warns

    Jim Bronskill / The Canadian Press OTTAWA — Satellites vital to Canadian military operations are vulnerable to cyberattack or even a direct missile strike — just one example of why the country's defence policy must extend fully into the burgeoning space frontier, an internal Defence Department note warns. The Canadian military already heavily depends on space-based assets for basic tasks such as navigation, positioning, intelligence-gathering, surveillance and communications. Canada is also working on the next generation of satellites to assist with search-and-rescue and round-the-clock surveillance of maritime approaches to the country, including the Arctic. But those important roles could be endangered as technological advances and lower costs allow more countries, including adversaries, to cause trouble in orbit. Powers such as China and Russia are developing the ability to wage technological attacks in space, the note points out. "Easier access could also open the door to non-state actors or to failed states with nothing to lose from disrupting space." Canada's new defence policy underscores the importance of space, creating a need for "innovative investment" to ensure National Defence has the tools and know-how to fend off threats, the internal document adds. A copy of the note, Space Technology Trends: Threats and Opportunities, was recently obtained by The Canadian Press through the Access to Information Act. Several sensitive passages were stripped from the note, prepared last November for the deputy minister of National Defence. In a statement, the department called the intention to protect and defend military space technology a "very important change" in the new policy. "What 'defending and protecting' these assets means in practice will evolve, as technology and international discussions mature." Despite public perception, the militarization of space actually happened decades ago, said Dave Perry, vice-president and senior analyst at the Canadian Global Affairs Institute. "Militaries the world over depend on an extraordinary amount of infrastructure that's space-based, even if there are no physical weapons in space," he said in an interview. "Space is well-emerged, but we keep calling it emerging." Even so, the internal note points out space is becoming ever more congested due to the advent of commercial space companies and the dawn of space tourism. "In addition, more and more nations are becoming space-capable and will expect their share of access to space." The most direct threat to Canada's space capabilities comes from adversaries with the ability to attack satellites, the note bluntly states. China, for example, has demonstrated the ability to destroy one of its aging low-orbit weather satellites with a ballistic missile, creating plenty of space debris. Other possible tactics include a directed energy attack, electronic jamming or a cyberattack, which can temporarily or permanently disable a satellite, the note adds. It says Canada is working with the U.S. and other allies on the idea of being able to quickly dispatch replacements for critical space assets that are damaged or destroyed. As artificial intelligence becomes more prevalent in operating space technology, such as a robotic arm, it will be easier for a hostile player to sabotage it, Perry said. "If you can figure out a way to affect the software, then that's a potential vulnerability. Whereas before you would have (needed to fly) someone there, and actually put them on the piece of equipment, to be able to do something." High-resolution images of the Earth captured by space satellites, once exclusive to the military, have become increasingly available to other government agencies, companies, the public and hostile players — essentially "whomever is willing to pay," the note says. The accessibility of this data and the ability to link it with other sources, such as social media, "will present immense challenges" to privacy and public safety. As space-based sensing and communication technologies rapidly improve, they become capable of scooping up more information, creating another headache for the military, the note says. "The challenge of collecting, handling, storing, processing and accessing this data will become more and more severe as the data volume, velocity and variety continues to increase." — Follow @JimBronskill on Twitter https://www.richmond-news.com/canadian-satellites-vulnerable-to-cyberattack-internal-defence-note-warns-1.23474192

  • New F-35 Modification Facility Brings Strategic Capability to FRCE

    20 août 2019 | International, Aérospatial

    New F-35 Modification Facility Brings Strategic Capability to FRCE

    By Heather Wilburn, Fleet Readiness Center Public Affairs MARINE CORPS AIR STATION CHERRY POINT, N.C. (NNS) -- A recently-completed facility will bring a new strategic capability to Fleet Readiness Center East (FRCE) and the F-35B Lightning aircraft line next year. When the new F-35 laser shock peening facility is fully operational in 2020, FRCE will be one of two sites in the world that will use laser technology to strengthen F-35 structural components. Construction of the $6 million facility wrapped in July, and the contractor providing the laser shock peening service will take occupancy in early spring, said Donald Jeter, portfolio manager of the F-35 aircraft line at FRCE. Under that timeline, the first F-35 aircraft inducted for laser shock peening would arrive in June to undergo the validation and verification process, and then the depot will begin work on the remainder of the F-35 fleet that requires the laser shock peening modification. “This facility is a big get for Fleet Readiness Center East,” Jeter said. “It's very exciting. Being able to perform this laser shock peening process adds a huge strategic capability to our depot. With it, we'll be able to provide a critical support element to the F-35B program and act as a force multiplier for the fleet and the warfighter.” The 16,000-square-foot facility comprises two bays, where the actual laser shock peening process will take place, and a connected area that will house the laser generator. The state-of-the-art laser shock peening process will allow FRCE to conduct heavy structure modifications that will strengthen areas of the F-35's airframe without disassembling the entire aircraft, said Matthew Crisp, the F-35 Joint Program Office site lead at FRCE. The process strengthens designs without adding additional metal or weight, which increases the aircraft's life and reduces maintenance costs. It has been used on the F-22 Raptor and in manufacturing aircraft components including engine blades, Crisp said, but has never been employed for the F-35. Now, FRCE will use the technology to help Marine Corps aircraft reach their full life limit. Aircraft maintenance professionals at FRCE will conduct prep work and some structural modification on the F-35s inducted into the depot, then turn them over to the contractor running the laser shock peening operations. The contractor will complete the process to strengthen the bulkheads and airframes, and FRCE will put the jets back together, perform all the flight test functions and get them back out to the fleet, Jeter said. The end result is aircraft that have been reinforced without adding additional weight, which would reduce the fighter's capabilities by limiting its fuel or weapons carrying capacity. Shot peening is not a new process, Crisp said, but laser shock peening is unique in that it produces a uniform result across the surface being treated. In laser shock peening, the surface of the media is first coated with an ablative layer and covered with a water tamping layer. A high-energy laser beam is fired at the metal, which creates an area of plasma on the metal's surface. The impact creates a shock wave, which travels through the metal, and compressive residual stresses remain. This compression helps improve the metal's damage tolerance, fatigue life and strength. “(Shot peening) has been done for decades,” he explained. “It's where you take a solid media, like glass beads or some kind of metal, and you hit the surface of an item – kind of like sandblasting. You just randomly throw it at the surface, and it creates all these surface dimples. What you get is a very inconsistent surface profile, because it's not controlled.” With laser shock peening, the process is very controlled, Crisp said. “They create a laser beam that's actually square, and the intensity is consistent across the entire laser beam – it's the exact same at the very edge of the beam as it is in the middle,” he said. “They come up with a grid pattern and stack the squares up right beside each other, so the entire surface of the part is completely uniform. You don't have the weak spots in between these areas that would then induce cracking later.” Jeter said he expects laser shock peening to be a main focus of the F-35 line for the next four to five years. Once the first two aircraft have undergone the validation and verification process, it will be a sprint to the finish to complete modifications on the remainder of the F-35B fleet that requires this treatment. “After that val/ver event, the aircraft will basically be nose-to-tail,” Crisp added. “We'll completely fill every aircraft stall that's here, and for the next five years, when one leaves another will come in. That's critical, because this process has to be done on every single airplane that requires it.” The workload does not include every F-35 ever produced, although it does include B and C models, and also encompasses F-35 aircraft owned by partner nations. FRCE will focus solely on the B variant, while Ogden Air Force Base in Utah will work on the F-35C models and take any F-35B overflow. After the first round of laser shock peening modifications, what comes after that is still to be determined, Crisp said. “I'm sure there will be some follow-on work,” he said. “And beyond the F-35 program, this is a little bit exciting, because this really is cutting-edge technology and we have it here at FRCE. I think maybe within the engineering community here, as people find out more about it, they may open additional discussions about how we could implement this on other aircraft lines. We might find a future capability we want to look at.” FRCE is North Carolina's largest maintenance, repair, overhaul and technical services provider, with more than 4,200 civilian, military and contract workers. Its annual revenue exceeds $720 million. The depot generates combat air power for America's Marines and Naval forces while serving as an integral part of the greater U.S. Navy; Naval Air Systems Command; and Commander, Fleet Readiness Centers. https://www.navy.mil/submit/display.asp?story_id=110618

  • Integrated Hypersonic Plan Forms Amid Overlap Concerns

    1 août 2019 | International, Aérospatial

    Integrated Hypersonic Plan Forms Amid Overlap Concerns

    WEST LAFAYETTE, Indiana—The U.S. Defense Department says data from an upcoming four-year test campaign covering 40 flights and three basic vehicle concepts will lay the foundation for a comprehensive hypersonic weapon road map that should allay growing congressional concerns over potential overlaps in costly weapons development capability. To a quarter of the tests, representing as many as 10 flights, will be focused on air-breathing scramjet-powered vehicles, says Mike White, assistant director for hypersonics at the Office of the Under Secretary of Defense for Research and Engineering. Speaking to Aerospace DAILY on the sidelines of the inaugural National Defense Industrial Association (NDIA) hypersonics capability conference at Purdue University here, White says test results from both boosted glide vehicle flights and powered missiles will form the basis for the integrated development plan. The overarching road map also will include the integration of a counter hypersonic development strategy, the preliminary steps toward which have been proposed by both the recently formed Space Development Agency (SDA) and the Missile Defense Agency. The SDA is studying a space-based distributed satellite architecture, while the latter has proposed a Hypersonic and Ballistic Tracking and Surveillance System (HBTSS). “Offensive and defensive coordination is my job,” White says. The bulk of the prototype tests will be conducted using the common hypersonic glide body (C-HGB). Developed by Sandia National Laboratories, the bi-conic re-entry vehicle has been adopted as the basis for near-term boosted glide weapons by the U.S. Air Force, Army and Navy, with only minor differences in each version planned to reflect the varying operational characteristics of each role. The Army, which plans to ground launch the Long-Range Hypersonic Weapon (LRHW) from transporter erector vehicles, is meanwhile making the first moves toward industrializing production of what up to now has been small batch manufacturing runs of experimental vehicles. The service has issued a solicitation for transition of the design and production capability of the initial prototype LRHW C-HGB variant out of Sandia into industry. A contract award is expected to be issued this month. Other versions of the C-HGB are in development for the Navy's vertically launched Intermediate Range Conventional Strike Weapon (IR-CPS), and the Air Force's Hypersonic Conventional Strike Weapon (HCSW). Underwater launch tests of the IR-CPS, which follows the successful Flight Experiment-1 test in October 2017, from the Pacific Missile Range Facility in Kauai, Hawaii, are due to run through 2024. The Air Force is scheduled to complete critical design review of the HCSW in 2020 prior to launch tests from a B-52. At least five other flight-test campaigns make up the remainder of the hectic four-year plan, three of which will be focused on the DARPA-led Tactical Boost Glide (TBG) vehicle and two proposed follow-on air-launched rapid response weapon (ARRW) vehicles in competitive development by Lockheed Martin and Raytheon. The balance are two air breathing vehicles, also in development by Lockheed/Aerojet Rocketdyne and Raytheon/Northrop Grumman, which will be evaluated under the Air Force's Hypersonic Air-Breathing Weapon Concept (HAWC) program. Despite the ongoing efforts to refine the hypersonic road map, the proliferation of prototype vehicle programs continues to cause concern in Congress. Warning that not all programs will receive the funding requested in the fiscal 2020 budget, Peter Visclosky, chairman of the House Appropriations Subcommittee on Defense, says some reductions are planned. Commenting at the NDIA event, he says, “Justifications in the budget for this effort receive the same scrutiny as every other program in the department and unfortunately certain aspects of that 2020 budget request were lacking.” Without identifying particular initiatives, Visclosky adds, “There were cuts to those specific programs where the justifications did not lead to a review. Each of the services impacted have been made aware of the issues that the committee has raised and the need to better define the strategy for the investment in these systems.” Visclosky also cautions that hypersonics, which is provisionally funded with a budget of $2.3 billion for fiscal 2020 and $10.5 billion over the period to 2024, also faces broader threats at a time of increased spending on other high-profile defense programs. “I am concerned about affordability in the future because this is a competitive process,” he said. “We have a nuclear modernization process that is underway and there is going to be a bulge in the federal budget. There is a new submarine and there is going to be a bulge in the budget. It is the same for the new [B-21] bomber under development and, while the Army doesn't have that ‘one' new program, collectively for the modernization program there is going to be one. “We need to make sure there is a concerted effort for commonality and collaboration to a common technical standard and system architecture. I think this will drive better affordability into the sustainment of the system,” he adds. https://aviationweek.com/defense/integrated-hypersonic-plan-forms-amid-overlap-concerns

Toutes les nouvelles