Slovakia selects F-16 over Gripen for new fighter

Sur le même sujet

• 

  3 septembre 2019 | International, Sécurité

  What’s changing in the cyber domain? We ask industry experts

  By: Andrew Eversden “What are you talking about now in cybersecurity that you weren't talking about six months ago?” Fifth Domain posed this question to cybersecurity experts at Black Hat, a cybersecurity conference in Las Vegas, Nevada, that ran from Aug. 3-8. With the cyber domain rapidly evolving, we wanted to know how conversations within the cyber community are changing. Some pointed to a new focus on utility systems and web-connected devices that sit on critical infrastructure. “It's only a matter of time until there's another major disruption in an electric utility somewhere in the world, probably not in the U.S., but elsewhere,” Sergio Caltagirone, threat intelligence director at Dragos, said at the conference Aug. 5. “But oil and gas has the higher likelihood of a major destructive and loss-of-life event. And I think most people did not realize how close to that we actually were.” Caltagirone was referring to the TRISIS event, malware that struck industrial control systems at a Saudi Arabian petrochemical plant and could've caused physical harm. He said that in the aftermath of that attack, threat researchers diving into the details realized just how bad it could've been. “We started finding a lot of stuff which hadn't been found before,” Caltagirone said. “Which made us realize very quickly how close that space is to a major event.” Dave Weinstein, chief security officer at Claroty, pointed to an “explosion” of devices connected to the internet of things.. “It's really a product of this general consensus among industrial organizations that the benefits exceed the costs in terms of embracing this type of digital transformation," Weinstein said Aug. 8, adding that organizations must be “mindful” of these devices and have a plan to mitigate their potential vulnerabilities. Brian Costello, a senior vice president at Flashpoint, told Fifth Domain on Aug. 8 that he is more often than before focusing on targeted cyberattacks from bad actors. That's a shift away from “campaign-based” attacks that tracked. There's “more planning out, more scoping out of targets and taking long-term planning to go after [a] particular target with a specific asset in mind,” Costello said. Along that same vein, Julian Zottl, a senior cyber architect at Raytheon, said he's noticing more inclusion of all-source intelligence in threat analysis. “We're looking at ... all the sources and trying to figure out indicators,” Zottl said Aug. 7. “[We're] even trying to do predictive analytics now, where it's like, ‘Oh, we see this threat might be coming.' I think that's something that we're starting to talk about more and more.” Several cybersecurity professionals interviewed by Fifth Domain said the U.S. government is moving away from the classic cyber kill chain and over to the MITRE ATT&CK framework, which dives deeper into potential threats to information security. “They used to think the hackers would just come in to steal secrets, conduct espionage and then leave,” said Tom Kellermann, chief cybersecurity officer at Carbon Black and a former commissioner on the Commission on Cyber Security for then-President Barack Obama. “In fact, they're maintaining persistence in these systems. They're manipulating the integrity of data and then they're using federal government agencies themselves and personnel's devices themselves to target anyone who implicitly trusts that person, that agency, that department.” he told Fifth Domain on Aug. 6. Chris Kennedy, chief information security officer at AttackIQ and a former official with the Treasury Department and the Marine Corps, said these new frameworks in use along with federal continuous monitoring programs allow for more attacker emulation, essentially simulating the attack agencies could face. “Agencies are starting to realize the value of attacker emulation as a way to measure and benchmark the effectiveness of their security controls,” Kennedy said on Aug. 7. And with government agencies in different stages of cloud migration, agencies will need to learn how that fits into their cybersecurity posture. Marten Mickos, CEO of white hat hacking company HackerOne, said this a new discussion. He also said the conversation surrounding the use of ethical hackers in government environments has evolved: The word “hacker” is becoming more accepted. “I do think it signals a shift in mindset," Michos said. There's a realization that "those people who portray themselves as hackers are actually those who will rescue us, not those who will destroy us.” Despite all the changing technology and evolving threats, one aspect of cybersecurity remains set in stone, said M. K. Palmore, a field chief security officer for the Americas at Palo Alto Networks and a recently retired FBI cyber agent. “It's about adhering to cybersecurity fundamentals,” Palmore said. “That message hasn't changed regardless of my position or where I'm located.” https://www.fifthdomain.com/show-reporters/black-hat/2019/08/30/whats-changing-in-the-cyber-domain-we-ask-industry-experts

• 

  17 décembre 2018 | International, C4ISR

  US Air Force set to launch 1st next-generation GPS satellite

  By: Dan Elliott, The Associated Press DENVER — After months of delays, the U.S. Air Force is about to launch the first of a new generation of GPS satellites, designed to be more accurate, secure and versatile. But some of their most highly touted features will not be fully available until 2022 or later because of problems in a companion program to develop a new ground control system for the satellites, government auditors said. The satellite is scheduled to lift off Tuesday from Cape Canaveral, Florida, aboard a SpaceX Falcon 9 rocket. It's the first of 32 planned GPS III satellites that will replace older ones now in orbit. Lockheed Martin is building the new satellites outside Denver. GPS is best-known for its widespread civilian applications, from navigation to time-stamping bank transactions. The Air Force estimates that 4 billion people worldwide use the system. But it was developed by the U.S. military, which still designs, launches and operates the system. The Air Force controls a constellation of 31 GPS satellites from a high-security complex at Schriever Air Force Base outside Colorado Springs. Compared with their predecessors, GPS III satellites will have a stronger military signal that's harder to jam — an improvement that became more urgent after Norway accused Russia of disrupting GPS signals during a NATO military exercise this fall. GPS III also will provide a new civilian signal compatible with other countries' navigation satellites, such as the European Union's Galileo system. That means civilian receivers capable of receiving the new signal will have more satellites to lock in on, improving accuracy. "If your phone is looking for satellites, the more it can see, the more it can know where it is," said Chip Eschenfelder, a Lockheed Martin spokesman. The new satellites are expected to provide location information that's three times more accurate than the current satellites. Current civilian GPS receivers are accurate to within 10 to 33 feet (3 to 10 meters), depending on conditions, said Glen Gibbons, the founder and former editor of Inside GNSS, a website and magazine that tracks global navigation satellite systems. With the new satellites, civilian receivers could be accurate to within 3 to 10 feet (1 to 3 meters) under good conditions, and military receivers could be a little closer, he said. Only some aspects of the stronger, jamming-resistant military signal will be available until a new and complex ground control system is available, and that is not expected until 2022 or 2023, said Cristina Chaplain, who tracks GPS and other programs for the Government Accountability Office. Chaplain said the new civilian frequency won't be available at all until the new control system is ready. The price of the first 10 satellites is estimated at $577 million each, up about 6 percent from the original 2008 estimate when adjusted for inflation, Chaplain said. The Air Force said in September it expects the remaining 22 satellites to cost $7.2 billion, but the GAO estimated the cost at $12 billion. The first GPS III satellite was declared ready nearly 2½ years behind schedule. The problems included delays in the delivery of key components, retesting of other components and a decision by the Air Force to use a Falcon 9 rocket for the first time for a GPS launch, Chaplain said. That required extra time to certify the Falcon 9 for a GPS mission. The new ground control system, called OCX, is in worse shape. OCX, which is being developed by Raytheon, is at least four years behind schedule and is expected to cost $2.5 billion more than the original $3.7 billion, Chaplain said. The Defense Department has struggled with making sure OCX meets cybersecurity standards, she said. A Pentagon review said both the government and Raytheon performed poorly on the program. Raytheon has overcome the cybersecurity problems, and the program has been on budget and on schedule for more than a year, said Bill Sullivan, a Raytheon vice president in the OCX system. Sullivan said the company is on track to deliver the system to the Air Force in June 2021, ahead of GAO's estimates. The Air Force has developed work-arounds so it can launch and use GPS III satellites until OCX is ready to go. While the first GPS III waits for liftoff in Florida, the second is complete and ready to be transported to Cape Canaveral. It sits in a cavernous "clean room" at a Lockheed Martin complex in the Rocky Mountain foothills south of Denver. It's expected to launch next summer, although the exact date hasn't been announced, said Jonathon Caldwell, vice president of Lockheed Martin's GPS program. Six other GPS satellites are under construction in the clean room, which is carefully protected against dust and other foreign particles. "It's the highest-volume production line in space," Caldwell said. For the first time, the Air Force is assigning nicknames to the GPS III satellites. The first one is Vespucci, after Amerigo Vespucci, the Italian navigator whose name was adopted by early mapmakers for the continents of the Western Hemisphere. https://www.airforcetimes.com/news/your-air-force/2018/12/16/us-air-force-set-to-launch-1st-next-generation-gps-satellite

• 

  30 juillet 2024 | International, Naval, C4ISR, Sécurité

  New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

  SideWinder targets maritime facilities in the Indian Ocean and Mediterranean, using spear-phishing and Microsoft Office exploits.