14 août 2018 | International, C4ISR

Pentagon invites researchers to hack the Marine Corps

By:

The Department of Defense kicked off its sixth bug bounty program Aug.12 with Hack the Marine Corps, a challenge focusing on the Corps' public-facing websites and services.

“Hack the Marine Corps allows us to leverage the talents of the global ethical hacker community to take an honest, hard look at our current cybersecurity posture," said Maj.Gen. Matthew Glavy, the head of the U.S. Marine Corps Forces Cyberspace Command, in a news release.

“Our Marines need to operate against the best. What we learn from this program will assist the Marine Corps in improving our war-fighting platform, the Marine Corps Enterprise Network. Working with the ethical hacker community provides us with a large return on investment to identify and mitigate current critical vulnerabilities, reduce attack surfaces and minimize future vulnerabilities. It will make us more combat ready.”

The DoD launched its first bug bounty, Hack the Pentagon, in May 2016, which was considered one of the first major successes for the then-newly minted Defense Digital Service. Since then the DoD has held bug bounties for the Army, the Air Force, the Air Force again and the Defense Travel System.

The combined programs resulted in over 600 resolved vulnerabilities with approximately $500,000 awarded to the ethical hackers participating in the program.

“Information security is a challenge unlike any other for our military. Our adversaries are working to exploit networks and cripple our operations without ever firing a weapon," said Chris Lynch, the director of the Defense Digital Service.

"Sometimes, the best line of defense is a skilled hacker working together with our men and women in uniform to better secure our systems. We're excited to see Hack the Pentagon continue to build momentum and bring together nerds who want to make a difference and help protect our nation.”

Hack the Marine Corps was launched with HackerOne, which partners with the hacker community to help businesses and government conduct bug bounties, and kicked off with a live hacking event coinciding with the Black Hat USA, DefCon and BSides conferences in Las Vegas.

The live hack resulted in 75 unique vulnerability reports and more than $80,000 in awards.

“Success in cybersecurity is about harnessing human ingenuity,” said Marten Mickos, CEO at HackerOne.

“There is no tool, scanner or software that detects critical security vulnerabilities faster or more completely than hackers. The Marine Corps, one of the most secure organizations in the world, is the latest government agency to benefit from diverse hacker perspectives to protect Americans on and off the battlefield.”

The bug bounty program ends Aug. 26.

https://www.fifthdomain.com/dod/marine-corps/2018/08/13/pentagon-invites-researchers-to-hack-the-marine-corps/

Sur le même sujet

  • BAE Systems Wins $495 Million Contract from USAF

    26 août 2020 | International, C4ISR

    BAE Systems Wins $495 Million Contract from USAF

    The U.S. Air Force has awarded BAE Systems a $495 million contract to continue to provide a wide range of instrumentation support and sustainment services to military and government agencies for the U.S. and its allies. BAE Systems has been involved in the Instrumentation Range Support Program (IRSP) for 35 years and this new contract extends the company's role in ensuring the accuracy and operational reliability of tracking systems in support of national security missions. The single-award contract has a ceiling amount of $945 million over seven years. “Since 1985, we have been the sustainment contractor of choice for the IRSP program to ensure test ranges are operational and mission ready,” said Pete Trainer, vice president and general manager of BAE Systems' Air Force Solutions business. “We are pleased to continue our instrumentation sustainment, engineering support, and maintenance services for the 27 IRSP test ranges worldwide. Our work improving the mission readiness of these systems ensures air, missile, and space situational awareness is provided seamlessly to the warfighter and decision makers.” BAE Systems will service components and subsystems for instrumentation tracking systems such as radars, telemetry and optical range mission systems, flight termination systems, data acquisition systems and global positioning systems. Under the firm-fixed-price, cost-plus-fixed-fee, and cost-reimbursable indefinite-delivery indefinite-quantity contract, work will be performed on the 27 ranges globally that are part of the IRSP. They include those in the U.S. operated by the U.S. Air Force, Army and Navy, National Aeronautics and Space Administration, and the U.S. Department of Energy, as well as allied ranges operated in the United Kingdom, Germany, Norway, Sweden, Republic of Korea and Switzerland. BAE Systems is a leading systems integrator supporting militaries and governments, and U.S. intelligence community members across the globe. The company is the world's premier provider of radar life-cycle support service, sustainment, and modernization for radar, telemetry, and optical tracking systems. http://www.canadiandefencereview.com/news?news/2937

  • Boeing Stirs Pentagon’s Ire With More Dings, Damage to Aircraft

    25 novembre 2020 | International, Aérospatial

    Boeing Stirs Pentagon’s Ire With More Dings, Damage to Aircraft

    By Anthony Capaccio Boeing Co. has been cited by the Pentagon's contracts management agency for an increase in incidents of damage to military aircraft or components at three of its facilities. The citation from Army Lieutenant General David Bassett, director of the Defense Contract Management Agency, cited “recent negative trends” in mishaps at Boeing's facilities in Seattle, San Antonio and Mesa, Arizona, “that far exceeds historical rates” and are “not consistent with expected performance.” The results could include damage from parts falling off a cart during transportation or too little overhead “clearance when maneuvering the aircraft or ground support equipment resulting in repairs needing to be made,” Matthew Montgomery, a spokesman for the contracts agency, said in an email. “Our analysis of mishaps indicates a disproportionate number of events occurring at Boeing facilities” since 2018 involving aircraft or parts damaged before delivery to the military, Bassett told Leanne Caret, chief executive officer of Boeing's defense unit, in a previously undisclosed June letter obtained by Bloomberg News. The mishaps add to other indications of challenged performance at units of Chicago-based Boeing, the No. 2 defense contractor after Lockheed Martin Corp. They include problems with parts quality for Apache AH-64 helicopters that led to a recent halt in delivery that's still in effect and a wide-ranging Army-led inspection of the Mesa facility. In addition, Boeing is still struggling to deliver a KC-46 refueling tanker that meets refueling system specifications nine years after the company won the contract. Earlier: Boeing's Arizona Chopper Plant Under Scrutiny by Army Mishaps at Boeing facilities increased from 18% of those tracked by the defense contracts agency for large aviation contractors in fiscal years 2017 and 2018 to 38% in 2019. As of June, they stood at 50%, far exceeding “levels observed in other large DoD aircraft contractors of similar scope over the same time period,” Bassett wrote. The issues included a lack of procedures, a failure to follow those in place and “inattention or supervisory factors” that “contributed to the majority of these mishaps,” Bassett wrote. Of particular concern was Boeing's Seattle facility, where 66% of the company's fiscal 2020 mishaps occurred, he wrote. Since the letter, “Boeing leadership and their employees have responded well” and “have initiated changes that should lead to better quality and mishap outcomes,” Bassett said in a statement. “We look forward to those changes demonstrating enduring improvements in quality and mishap reduction that will improve the products we receive.” Boeing spokesman Todd Blecher said the company didn't have a comment on the Bassett letter. Montgomery, the contracts agency spokesman, said that Boeing ranks in the top three of the 13 major aviation contractors tracked for reported mishaps over fiscal 2019 and 2020. “Each mishap is unique and some mishaps are still under investigation,” Montgomery said. “Some mishaps represent a failure to follow a procedure or take necessary preventative action.” During the time period reviewed, Boeing had five reportable mishaps in fiscal 2017 and four in fiscal 2018, he said. “They are currently sitting at 11 mishaps for fiscal 2020.” https://www.bloomberg.com/news/articles/2020-11-24/boeing-dinged-and-damaged-military-aircraft-pentagon-complains

  • Britain’s shipbuilding strategy has not gone according to plan — and industry is noticing

    10 septembre 2019 | International, Naval

    Britain’s shipbuilding strategy has not gone according to plan — and industry is noticing

    By: Andrew Chuter LONDON — Confronted with the dilemma of maintaining a naval industrial base after the completion of two 65,000-ton aircraft carriers for the Royal Navy, the British government two years ago launched a national shipbuilding strategy aimed at building an efficient sector, and thus keeping skills and capacity alive. But the strategy has failed to work out exactly as planned. Two yards closed this year and a third was rescued by nationalization. Meanwhile in the supply chain, the Ministry of Defence had to act quickly on ordering the motor for the Type 26 frigate to prevent the contractor from moving its capabilities to France. Former shipyard boss Peter Parker, who authored the original shipbuilding strategy, delivered a review of the strategy's status to the MoD, but the update remains under wraps, with no firm timing announced for its publication. One key element of the strategy included procurement of five general-purpose frigates for the Royal Navy to be competed for by local shipyards in an effort to end BAE Systems' maritime monopoly in Britain. Another included an international competition for up to three 40,000-ton fleet solid support ships. Both programs have subsequently run into stormy waters. Paul Everitt, the chief executive of ADS, the lobby group that represents British defense, aerospace and security companies, said it's important to continue to support the strategy, even as some of the impetus has been lost. “We need to stick with the national shipbuilding strategy. It marks a significant shift in the MoD's approach to procurement. The area that has been challenging, though, is that progress has been hindered by the political uncertainty around Brexit and the future size of MoD budgets,” Everitt said, referring to Britain's exit from the European Union. “Some of the decisions that would help to give industry the longer-term certainty they require to invest or hang in there aren't being made,” he added. “Where do we go next ? It is really about the MoD creating certainty around a pipeline of work from all the key programs, all of which should offer significant amounts of work to U.K. industry over the next 15 years.” Shipyard survival Not everyone remains signed up to the shipbuilding strategy, however. Defense commentator Howard Wheeldon, of Wheeldon Strategic Advisory, is unsure about the relevance of the strategy. “It's no longer fit for purpose. We have moved on. More shipyards have closed due to lack of work, and we should not kid ourselves that a commercial shipyard that has little or no expertise in building Navy ships can take on the responsibility and risk that the government requires,” Wheeldon said. “If the government has any belief in the strategy, it will ensure that contracts for the fleet [solid] support ships will be placed in U.K. shipyards. If it fails, then we must conclude that it has neither belief in its own strategy or in ensuring that we retain the sovereign capability that a nation such as the U.K. needs,” he added. An international competition to build two or three fleet solid support ships has been underway for months, with the bidders narrowed down to Navantia of Spain, Japan Marine United Corp., and a homemade consortium made up of BAE Systems, Babcock International, Cammell Laird and Rolls-Royce, known as Team UK. The MoD opened the deal to foreign bidders, reasoning that the vessels were not warships and therefore, under European Union regulations, the competition must be open to all. Now, though, the tide seems to be turning in favor of British yards taking a bigger share of the work than just the fitting of locally made sensitive kit. One senior industry executive, who spoke on condition of anonymity, said the “current fleet solid support [ship] procurement plan is not really tenable with the current government team and a shipbuilding strategy which is in danger of becoming unstitched.” “The government will have come under huge pressure on this issue at every political level. You have a new procurement minister, [Marie-Anne Trevelyn], who only a couple of months ago put her name to a parliamentary report supporting building the ships in the U.K.; you have a Brexiter defense secretary in Ben Wallace; and [Prime Minister Boris] Johnson himself,” the industry executive said. “Is that trio likely to award a contract to a Spanish yard?” Whatever the outcome, it's too late for two of the yards. Babcock's Appledore yard in southwest England closed in early 2019 after the completion of an offshore patrol boat for the Irish Naval Service. Additionally, Harland & Wolff recently went into insolvency proceedings with its Belfast, Northern Ireland, yard that famously built the Titanic — although there remains a chance a buyer could be found for the facility. In Glasgow, shipbuilder Ferguson's nationalization by the Scottish government was announced Aug. 16 after the yard went over time and over budget with a commercial ferry contract it won. Harland & Wolff was the lead U.K. yard in a proposal by German-based Atlas Elektronik to build Type 31e frigates for the Royal Navy. The yard's demise could scuttle the German company's bid, although parent company Thyssenkrupp has a history of reviving cold yards. Atlas isn't the only company with Harland & Wolff on its team. Babcock also listed the Northern Ireland yard in its Type 31e proposal at one stage and also named Ferguson as a subcontractor. Britain has shortlisted three contenders for the Type 31e requirement: Atlas, Babcock and BAE Systems. A decision on a winner is expected this year, although there has been speculation it could come during or soon after the DSEI trade show in September. Second-order effects The supply chain has not been immune from difficulties either. GE Power, which provides power-conversion systems for Royal Navy warships, announced it was closing its Rugby site in Central England and relocating the work to France. In response, the MoD ordered motors for a second batch of Type 26s to prevent the move, even though BAE does not yet have a deal to build the warships. The industry executive said the GE Power episode highlighted a weakness in Britain's shipbuilding strategy. “GE proved the point: It [the strategy] didn't really address the criticality of the supply chain. It assumed the criticality was all about shipyards,” he said. “The other fundamental flaw with it was you were never going to keep all the U.K. yards in business if you were going to put the fleet solid support ship deal offshore.” The situation certainly isn't improved by the political turmoil at the MoD and in wider government. Defense and procurement leaders have been coming and going with alarming regularity for years , particularly since the government adopted the shipbuilding strategy in September 2017. Penny Mordaunt, the pro-Navy, pro-buy-British defense secretary, lasted just more than 60 days before she found herself backing the wrong candidate in a Conservative Party leadership contest, which resulted in Johnson becoming prime minister on July 24. Given the current political uncertainties, there is no guarantee how long the new administration will last. With the Brexit debate occupying the government nearly 24/7, defense has barely rated a mention by the Johnson government; that is, other than during the furor caused by the Royal Navy's inability to stop the seizure of a British-registered tanker by Iran on July 19. The uncertainties have come at a time of mixed fortunes for the British maritime sector. Yards may be closing, but set against that is the Type 26 anti-submarine frigate design scoring major export successes in Australia and Canada — successes that could put Britain back on the maritime export map in a big way. Neither of the export customers will have their frigates built in the U.K., but the deals open the door to potentially billions of pounds of orders for the British supply chain. https://www.defensenews.com/global/europe/2019/09/08/britains-shipbuilding-strategy-has-not-gone-according-to-plan-and-industry-is-noticing/

Toutes les nouvelles