14 août 2018 | International, C4ISR

Pentagon invites researchers to hack the Marine Corps

By:

The Department of Defense kicked off its sixth bug bounty program Aug.12 with Hack the Marine Corps, a challenge focusing on the Corps' public-facing websites and services.

“Hack the Marine Corps allows us to leverage the talents of the global ethical hacker community to take an honest, hard look at our current cybersecurity posture," said Maj.Gen. Matthew Glavy, the head of the U.S. Marine Corps Forces Cyberspace Command, in a news release.

“Our Marines need to operate against the best. What we learn from this program will assist the Marine Corps in improving our war-fighting platform, the Marine Corps Enterprise Network. Working with the ethical hacker community provides us with a large return on investment to identify and mitigate current critical vulnerabilities, reduce attack surfaces and minimize future vulnerabilities. It will make us more combat ready.”

The DoD launched its first bug bounty, Hack the Pentagon, in May 2016, which was considered one of the first major successes for the then-newly minted Defense Digital Service. Since then the DoD has held bug bounties for the Army, the Air Force, the Air Force again and the Defense Travel System.

The combined programs resulted in over 600 resolved vulnerabilities with approximately $500,000 awarded to the ethical hackers participating in the program.

“Information security is a challenge unlike any other for our military. Our adversaries are working to exploit networks and cripple our operations without ever firing a weapon," said Chris Lynch, the director of the Defense Digital Service.

"Sometimes, the best line of defense is a skilled hacker working together with our men and women in uniform to better secure our systems. We're excited to see Hack the Pentagon continue to build momentum and bring together nerds who want to make a difference and help protect our nation.”

Hack the Marine Corps was launched with HackerOne, which partners with the hacker community to help businesses and government conduct bug bounties, and kicked off with a live hacking event coinciding with the Black Hat USA, DefCon and BSides conferences in Las Vegas.

The live hack resulted in 75 unique vulnerability reports and more than $80,000 in awards.

“Success in cybersecurity is about harnessing human ingenuity,” said Marten Mickos, CEO at HackerOne.

“There is no tool, scanner or software that detects critical security vulnerabilities faster or more completely than hackers. The Marine Corps, one of the most secure organizations in the world, is the latest government agency to benefit from diverse hacker perspectives to protect Americans on and off the battlefield.”

The bug bounty program ends Aug. 26.

https://www.fifthdomain.com/dod/marine-corps/2018/08/13/pentagon-invites-researchers-to-hack-the-marine-corps/

Sur le même sujet

  • German Ministry of Interior orders up to 44 H225 helicopters for its Federal Police

    9 juin 2024 | International, Aérospatial

    German Ministry of Interior orders up to 44 H225 helicopters for its Federal Police

    The H225 will replace the H155 and AS332 helicopters that have been in service with the German Federal Police for more than 20 years

  • US government shutdown creating angst for defense contractors

    9 janvier 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    US government shutdown creating angst for defense contractors

    By: Valerie Insinna WASHINGTON — As the U.S. government shutdown continues into its 18th day, defense firms and industry advocates are beginning to worry that the pause in business could eat into companies' cash flow. The Defense Department is funded for fiscal 2019, with Congress having passed a spending bill for the new fiscal year in September. That means work on the military's weapons programs continue apace, but many defense companies also hold contracts with agencies that are not currently funded, like the Department of Homeland Security — which includes the Coast Guard as well as Customs and Border Protection — and NASA. The Aerospace Industries Association, a lobbying group that represents defense and commercial aviation companies, warned that impacts to the aerospace sector extend beyond the 800,000 federal workers who are furloughed or working without pay. For example, weapons sales and transfers to U.S. allies and partners are stalled as a result of the closure of the departments of State and Commerce, AIA said in a Jan. 8 statement. Research projects at NASA, the Federal Aviation Administration, and National Oceanic and Atmospheric Administration are suspended, “setting back development of game changing technologies.” And meetings between the government and industry have been canceled or delayed. “Every day the shutdown lasts, the impacts grow and become more difficult and more expensive to fix,” said AIA President and CEO Eric Fanning. “It's time to get these dedicated public servants back to work.” Tony Moraco, the CEO of government service and information technology firm SAIC, told investors Jan. 7 that the effects of the shutdown are expected to be short term and primarily affecting accounts with NASA, the FAA and the U.S. Department of Agriculture. Moraco characterized the effect on SAIC and Engility — the latter of which is set to merge with the former this year — as a “modest impact on revenues and potentially cash collection, which we think we can recover — mostly — if this is resolved in the near term.” But SAIC Chief Financial Officer Charlie Mathis said the government is already behind on payments to the two companies by about $40 million to $50 million. “If we get through this quickly, they could catch up,” he said, but the shutdown would have to be resolved within a week for the companies to hit their cash-flow goals for their fiscal year ending Jan. 31. Furthermore, the companies are seeing a hit of about $10 million per week in revenue as the shutdown progresses, and “if it continues, that number could increase,” Mathis said. The probability of an extended shutdown seems to be rising. The government shutdown started Dec. 22 amid disagreements between President Donald Trump and Congress over funding for a border wall that would separate the United States and Mexico. But with Democrats now controlling the House of Representatives, a deal on funding for the wall may take weeks and could propel this shutdown past the 21-day mark of the 1995 shutdown, currently the longest on the books, according to CNN. Defense contractors will eventually get paid back for work accomplished while the government was shut down, but there could be long-standing consequences. If the shutdown persists for a protracted amount of time, there could be repercussions for the federal government's recruiting pipeline, as well as the balance of federal employees and contractors, said Byron Callan, an analyst for Capital Alpha Partners. “How will this shutdown impact the ability of federal agencies impacted by the shut-down to recruit and retain skilled individuals?” he wrote in an emailed analysis of SAIC's investor meeting. “There might be near-term collateral damage if people leave government service, but a 1-3 year factor to consider is how this shutdown and the potential for future ones accelerates reliance on federal service contractors.” https://www.defensenews.com/industry/2019/01/08/us-government-shutdown-creating-angst-for-defense-contractors

  • Flying NATO RQ-4D Phoenix remotely piloted aircraft

    30 janvier 2023 | International, Aérospatial

    Flying NATO RQ-4D Phoenix remotely piloted aircraft

    With a decision pending on the Royal Canadian Air Force’s Remotely Piloted Aircraft System project, a Canadian team is flying NATO remotely piloted missions across the Atlantic.

Toutes les nouvelles