4 février 2021 | International, C4ISR, Sécurité

Qatari research center chooses Leonardo for cyber range

BEIRUT — A Qatari cyber research center has selected Leonardo to provide a cyber range and training system to support security operations, the Italian firm announced Feb. 3.

The Qatar Computing Research Institute, or QCRI, was established by the Qatar Foundation for Education, Science and Community Development. The training platform ordered by the QCRI is capable of simulating cyberattacks so users can assess the resilience of digital infrastructure.

“The training is completely to be performed in Qatar, and it is expected, through an approach oriented to ‘train the trainers,' to provide courses to a significant number of operators involved in the cybersecurity framework,” Tommaso Profeta, managing director of Leonardo's Cyber Security Division, told Defense News.

He noted that training and exercise scenarios can be customized using a drag-and-drop graphical interface. The platform can also analyze and classify the results of simulated attacks based on data collected during real-world offensive campaigns. Scenarios can be used for individual training or classroom experiences, and they provide practice for security operations centers and incident response activities.

This training tool “will allow the QCRI to deliver a complete cyber training process, from the design of the learning path to specific training sessions. Users will be able to practice their skills in simulated attack and defense scenarios, employing both information technology (IT) and operational technology (OT). The training will produce qualified teams of operators equipped with up-to-date knowledge and techniques, ready to face ever-evolving cyber threats,” according to a company statement.

“The best cyber training/testing environments are in theory real production systems. But in practice for such environments, institutions, enterprises and organizations cannot easily experience critical situations without paying high, sometime unaffordable prices,” Profeta said. “Training and testing are therefore the two essential, human-driven processes that can effectively support the overall cyber ‘protection' loop, but only if they can cope with real threats and highly realistic systems in highly realistic situations.”

Cyber ranges provide a controlled environment where cybersecurity experts can practice their technical and soft skills in emulated complex networks and infrastructures to learn how to respond to real-world cyberattacks. In these environments, cyber tools can be stressed to reveal their limits and vulnerabilities before deployment into cyberspace. Leonardo's platform challenges such assets and provides digital twin environments for predeployment testing.

Asked whether other Gulf countries have expressed interest in this training system, Profeta said it “has already been presented to other high-level Middle East stakeholders, and a significant level of interest has been registered for the platform.”

What scenarios are available?

Those using the cyber range will try to defend against simulated but realistic cyberattacks. According to Profeta, these include:

  • Man-in-the-middle attacks.
  • Botnets.
  • Exploitation of client and server vulnerabilities with lateral movements in search of sensitive data.
  • Distributed denial-of-service attacks (HTTP flooding or domain name system reflection) designed to disrupt connections to a targeted server.
  • Ransomware via multiple vectors, such as spear-phishing via email or drive-by downloads, relying on DNS-based covert channels.
  • Data exfiltration of personally identifiable information and intellectual property.

Though it's difficult to measure the potential effectiveness of this platform for Qatar, the company official predicted the system will reduce the cost of and improve the user experience in cyber training.

Leonardo also supplies the NATO Computer Incident Response Capability, a cyber defense product.

https://www.c4isrnet.com/cyber/2021/02/03/qatari-research-center-chooses-leonardo-for-cyber-range

Sur le même sujet

  • U.S Space Force awards L3Harris contract to support detecting and tracking Hypersonic Missiles

    30 juin 2023 | International, C4ISR

    U.S Space Force awards L3Harris contract to support detecting and tracking Hypersonic Missiles

    To inform the Space Force’s future missile warning and tracking constellation, L3Harris will conduct an infrared sensor payload critical design phase that will support realistic cost, schedule and performance predictions.

  • Italian Navy tasks Fincantieri to design drone-laden warships

    30 octobre 2024 | International, Naval

    Italian Navy tasks Fincantieri to design drone-laden warships

    “It means looking at how best to handle storage, maintenance and loading ammunition,” an Italian Navy official said.

  • Contract Awards by US Department of Defense - October 12, 2018

    15 octobre 2018 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - October 12, 2018

    DEFENSE INFORMATION SYSTEMS AGENCY Iridium Satellite LLC, Tempe, Arizona, was awarded a non-competitive, firm-fixed-price $44,000,000 contract modification (P00008) for the extension of services on the current airtime contract (HC104714C4000) in accordance with Federal Acquisition Regulation 52.217-8. Fiscal 2019 defense working capital funds will be used. Performance will be at the contractor's facility. The period of performance for the option period is Oct. 22, 2018, through April 21, 2019. The Defense Information Technology Contracting Organization, Scott AFB, Illinois, is the contracting activity. DEFENSE LOGISTICS AGENCY Creighton AB Inc., Reidsville, North Carolina, has been awarded a maximum $35,000,000 fixed-price contract for Air Force lightweight jackets. This was a competitive acquisition with two responses received. This is a one-year base contract with four one-year option periods. Maximum dollar amount is for the life of the contract. Locations of performance are New York and North Carolina, with an Oct. 11, 2023, performance completion date. Using military service is Air Force. Type of appropriation is fiscal 2019 through 2024 defense working capital funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania (SPE1C1-19-D-1104). Simmonds Precision Products Inc., Vergennes, Vermont, has been awarded an $11,024,500 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for electro-me actuators. This is a five-year base contract with four one-year option periods. This was a competitive acquisition with two responses received. Location of performance is Vermont, with an Oct. 15, 2023, performance completion date. Using military service is Army. Type of appropriation is fiscal 2019 Army working capital funds. The contracting activity is the Defense Logistics Agency Aviation, Redstone Arsenal, Alabama (SPRRA1-19-D-0004). Transaero Inc., Melville, New York, has been awarded a $9,500,000 firm-fixed-price, indefinite-delivery/indefinite-quantity contract for assembly clutches. This is a five-year base contract with four one-year options periods. This was a competitive acquisition with two responses received. Location of performance is New York, with a Nov. 30, 2023, performance completion date. Using military service is Army. Type of appropriation is fiscal 2019 Army working capital funds. The contracting activity is the Defense Logistics Agency Aviation, Redstone Arsenal, Alabama (SPRRA1-19-D-0002). ARMY Medvolt LLC,* Colorado Springs, Colorado, was awarded a $19,978,985 firm-fixed-price contract for upgrading the chilled water line system at the Cheyenne Mountain Air Force Station. Bids were solicited via the internet with one received. Work will be performed in Cheyenne Mountain Air Force Station, Colorado, with an estimated completion date of Oct. 15, 2020. Fiscal 2019 operations and maintenance (Army) funds in the amount of $19,978,985 were obligated at the time of the award. U.S. Army Corps of Engineers, Omaha, Nebraska, is the contracting activity (W9128F-19-C-0001). AIR FORCE Rockwell Collins, Richardson, Texas, has been awarded a $12,010,975 definitization (P000013) to previously undefinitized contract FA8204-18-C-0010 (P00005) to implement Security Classification Guide changes. Work will be performed at Richardson, Texas, and is expected to be completed by Dec. 3, 2020. Fiscal 2018, research, development, test and evaluation funds in the amount of $818,227 are being obligated at the time of award. Air Force Nuclear Weapon Center, Hill Air Force Base, Utah, is the contracting activity. NAVY Complete Parachute Solutions, Deland, Florida, is awarded a $9,270,000 modification under previously awarded firm-fixed-price contract (M00264-18-C-0007) for the Multi-Mission Parachute Course. The Multi-Mission Parachute Course provides training and technical support for all Military Free-Fall training to ensure compliance with all Federal Aviation Administration Regulations and Marine Corps Orders to safely meet the Marine Corps Training Input requirements. This contract includes four one-year option periods which, if exercised, could bring the cumulative value of this contract to $42,763,854. Work will be performed in Coolidge, Arizona, and is expected to be completed Sept. 27, 2019. If all options are exercised, work will continue through Sept. 27, 2022. Fiscal 2019 operations and maintenance (Marine Corps) funds in the amount of $9,270,000 will be obligated at the time of contract modification award and will expire at the end of the current fiscal year. The original contract was competitively solicited and competitively procured via solicitation on the Federal Business Opportunity website, with one proposal received. The Marine Corps Installation National Capital Region-Regional Contracting Office, Quantico, Virginia, is the contracting activity. FlightSafety Services Corp., Centennial, Colorado, is awarded an $8,354,866 modification (P00004) under a previously awarded firm-fixed-price contract (N6134018C0019) for aircrew training services in support of the TH-57B/C community, including instruction, operation, and curriculum support. Work will be performed at the Naval Air Station, Whiting Field, Florida, and is expected to be completed in October 2019. No funds are being obligated at time of award. The Naval Air Warfare Center Training Systems Division, Orlando, Florida, is the contracting activity. Huntington Ingalls Inc., Newport News, Virginia, is awarded a $7,031,737 cost-plus-fixed-fee modification to previously awarded contract (N00024-17-C-2103) to exercise an option for the accomplishment of planning and design yard functions for standard Navy valves of nuclear-powered submarines and aircraft carriers. Work will be performed in Newport News, Virginia, and is expected to be completed by September 2019. Fiscal 2019 operations and maintenance (Navy) funding in the amount of $600,000 will be obligated at time of award and will expire at the end of the current fiscal year. The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity. *Small Business https://dod.defense.gov/News/Contracts/Contract-View/Article/1660999/source/GovDelivery/

Toutes les nouvelles