4 février 2021 | International, C4ISR, Sécurité

Qatari research center chooses Leonardo for cyber range

BEIRUT — A Qatari cyber research center has selected Leonardo to provide a cyber range and training system to support security operations, the Italian firm announced Feb. 3.

The Qatar Computing Research Institute, or QCRI, was established by the Qatar Foundation for Education, Science and Community Development. The training platform ordered by the QCRI is capable of simulating cyberattacks so users can assess the resilience of digital infrastructure.

“The training is completely to be performed in Qatar, and it is expected, through an approach oriented to ‘train the trainers,' to provide courses to a significant number of operators involved in the cybersecurity framework,” Tommaso Profeta, managing director of Leonardo's Cyber Security Division, told Defense News.

He noted that training and exercise scenarios can be customized using a drag-and-drop graphical interface. The platform can also analyze and classify the results of simulated attacks based on data collected during real-world offensive campaigns. Scenarios can be used for individual training or classroom experiences, and they provide practice for security operations centers and incident response activities.

This training tool “will allow the QCRI to deliver a complete cyber training process, from the design of the learning path to specific training sessions. Users will be able to practice their skills in simulated attack and defense scenarios, employing both information technology (IT) and operational technology (OT). The training will produce qualified teams of operators equipped with up-to-date knowledge and techniques, ready to face ever-evolving cyber threats,” according to a company statement.

“The best cyber training/testing environments are in theory real production systems. But in practice for such environments, institutions, enterprises and organizations cannot easily experience critical situations without paying high, sometime unaffordable prices,” Profeta said. “Training and testing are therefore the two essential, human-driven processes that can effectively support the overall cyber ‘protection' loop, but only if they can cope with real threats and highly realistic systems in highly realistic situations.”

Cyber ranges provide a controlled environment where cybersecurity experts can practice their technical and soft skills in emulated complex networks and infrastructures to learn how to respond to real-world cyberattacks. In these environments, cyber tools can be stressed to reveal their limits and vulnerabilities before deployment into cyberspace. Leonardo's platform challenges such assets and provides digital twin environments for predeployment testing.

Asked whether other Gulf countries have expressed interest in this training system, Profeta said it “has already been presented to other high-level Middle East stakeholders, and a significant level of interest has been registered for the platform.”

What scenarios are available?

Those using the cyber range will try to defend against simulated but realistic cyberattacks. According to Profeta, these include:

  • Man-in-the-middle attacks.
  • Botnets.
  • Exploitation of client and server vulnerabilities with lateral movements in search of sensitive data.
  • Distributed denial-of-service attacks (HTTP flooding or domain name system reflection) designed to disrupt connections to a targeted server.
  • Ransomware via multiple vectors, such as spear-phishing via email or drive-by downloads, relying on DNS-based covert channels.
  • Data exfiltration of personally identifiable information and intellectual property.

Though it's difficult to measure the potential effectiveness of this platform for Qatar, the company official predicted the system will reduce the cost of and improve the user experience in cyber training.

Leonardo also supplies the NATO Computer Incident Response Capability, a cyber defense product.

https://www.c4isrnet.com/cyber/2021/02/03/qatari-research-center-chooses-leonardo-for-cyber-range

Sur le même sujet

  • US Air Force relaunches effort to replace MQ-9 Reaper drone

    8 juin 2020 | International, Aérospatial

    US Air Force relaunches effort to replace MQ-9 Reaper drone

    By: Valerie Insinna WASHINGTON — It has been eight years since the U.S. Air Force canceled its effort to field a successor to the MQ-9 Reaper, but it appears the service might take another swing at developing a new combat drone. On June 3, the Air Force issued a request for information on a next-generation unmanned aircraft with strike, intelligence, surveillance and reconnaissance capabilities, with the intent to accept delivery of the first systems in 2030 and field them in 2031. The solicitation was first reported on by Aviation Week. “With the MQ-9 platform planning for end of service life, a need to identify a solution that continues to provide for this demand is imperative,” the RFI stated. “The purpose of this RFI is to research potential solutions for the Next Generation UAS ISR/Strike platform, the Next Generation Medium Altitude UAS and potential follow-on program to the MQ-9 weapon system.” The Air Force is looking to collect market research on existing technologies as well as systems that are currently under development, with a focus on drones that incorporate advanced technologies such as autonomy, artificial intelligence, machine learning, digital engineering and open-mission systems. In addition, the service is open to attritable technologies — meaning systems that are not cheap enough to be considered expendable, but some losses are still expected in combat. “The Air Force is also interested in researching alternative ways to support future lower-end, lower-cost ISR missions which may include initiatives to modernize, augment, and/or replace existing systems,” the RFI stated. “This RFI inquires about unique and innovative practices that can deliver relevant capability efficiently, timely and at a reduced life-cycle cost.” Although the Air Force has not solidified an acquisition strategy, it intends to hold multiple competitions for the air vehicle itself, as well as its ground control systems and the suite of sensors and data exploitation technology it will use to collect and dissect information. Each technology area will be built to open-architecture standards. Responses to the RFI are due July 20. This latest effort would mark the second time the Air Force has tried to replace the MQ-9 Reaper, currently being manufactured by General Atomics. In its first attempt, known as MQ-X, the service sought to procure a more survivable combat drone that could operate in contested spaces where a Reaper cannot fly. The program was canceled in 2012. Over the years, the Air Force remained mostly quiet about what an MQ-9 replacement could look like. But in 2019, Kenneth Bray, acting associate deputy chief of staff for ISR, said the service has done a fair amount of behind-the-scenes thinking on the topic over the past three to four years. But instead of starting with requirements for the aircraft itself, Bray said the service focused on the data the system would collect and how to optimize the drone's design to to gather and use that information. “We're starting to think not from the sensor or from the platform, we're starting to think from the data and decide: Is it even collecting the right size data, or do I need to have different sensors on those platforms?” he told Defense News. “Are those platforms even relevant anymore, or do I need a different platform because what I need is this type of data, and only this type of platform can get me that type of data? That is how we're going to change our thinking.” In March, Will Roper, the Air Force's top acquisition official, said the service is working on a study that will inform the fiscal 2022 budget and lay out a path for replacing the MQ-9 Reaper. Finding a single replacement to fill the MQ-9′s strike and surveillance mission is unlikely, Roper said, as the service wants to be able to operate in all environments without solely relying on exquisite, pricey systems. The service may need a family of systems that includes high-end, military-specific drones as well as cheaper UAVs that could be sourced from the commercial unmanned systems market, he said. https://www.defensenews.com/air/2020/06/04/the-air-force-is-looking-for-a-next-gen-replacement-to-the-mq-9-reaper-drone/

  • Airbus- job cuts defense space

    21 octobre 2024 | International, Terrestre

    Airbus- job cuts defense space

    px-captcha

  • Army will hold industry meeting for Capability Set ‘23 next month

    5 août 2020 | International, C4ISR, Sécurité

    Army will hold industry meeting for Capability Set ‘23 next month

    Andrew Eversden WASHINGTON — The Army network modernization team announced a technical exchange meeting Tuesday to discuss the service's plan for its next round of network tools, known as Capability Set '23. The meeting will be held Sept. 2 on Microsoft Teams due to COVID-19, according to a solicitation posted on beta.sam.gov. “The goal of the event is to assist industry partners and interested government organizations in identifying and aligning their efforts with Army tactical network modernization, specifically Capability Set 23 which is the Army's next integrated kit of tactical network transport, application and command post enhancements,” the announcement reads. The Army network leadership team wants to discuss the results of critical design review for Capability Set '21, the new set of network tools set to be fielded to soldiers next year. The team also wants to discuss Capability Set '23 experimentation and design goals with a focus on its needs for command post integration and modernization efforts. Command post survivability and mobility is a major focus of Capability Set '23. Army's Network-Cross Functional Team (N-CFT), in collaboration with Program Executive Office Command, Control, Communications-Tactical (PEO C3T), the Army's Combat Capability Development Command's Command, Control, Communication, Computers, Cyber, Intelligence, Surveillance and Reconnaissance (C5ISR) Center, is hosting the meeting. The team will also be introducing the Joint Communications Marketplace, the solicitation reads, which will “which will be an online tool and repository for industry and the government to use for submission of CS23 related white papers, and associated technical information,” said Paul Mehney, spokesperson for PEO C3T, in a statement. Registration is required by Aug. 27. https://www.c4isrnet.com/battlefield-tech/it-networks/2020/08/04/army-will-hold-industry-meeting-for-capability-set-23-next-month/

Toutes les nouvelles