8 mai 2024 | International, Sécurité

The Fundamentals of Cloud Security Stress Testing

The cloud promises agility, but opens a Pandora's box of cyber risks if not secured properly. Understand your responsibility under the shared responsi

https://thehackernews.com/2024/05/the-fundamentals-of-cloud-security.html

Sur le même sujet

  • Britain’s defense ties to the EU are still up in the air post-Brexit

    2 décembre 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Britain’s defense ties to the EU are still up in the air post-Brexit

    By: Martin Banks BRUSSELS – The Dutch chief of defense says it would be “stupid” if the UK did not continue to be closely involved in EU-funded defense projects even when it is no longer a member of the bloc. But British future involvement in EU-led initiatives such as the European Defence Fund and PESCO (Permanent Structured Cooperation) remains unclear, with EU member states yet to decide on a legal framework for third-party participation. With Brexit, the UK will technically become an outsider to the European Union's push for greater defense autonomy. That means London will no longer take part in EU decision-making or operational entities, and any British contribution to an EU operation will be subject to the rules that apply to third countries. Adm. Rob Bauer, chief of defense in The Netherlands, told Defense News he believes it is “imperative” that the UK remains “very closely” involved in such projects. Speaking at the sidelines of the annual European Defence Agency conference in Brussels on Thursday, Bauer said, “Remember, from a military point of view, the UK, even after Brexit, will still be a member of NATO and part of Europe. It is leaving the EU, not Europe. If the focus in Europe is on security then the UK should be part of that. To do otherwise would be stupid.” The PESCO initiative aims to develop and deploy forces at the EU level. Nearly 50 projects have been unveiled to date with the aim of pushing member states to work more closely together in the area of security and defense. So far, €13 billion has been allocated to the EDF which seeks to promote cross-border collaboration on defense research and technology projects, plus another €6.5 billion in the pipeline to upgrade roads, bridges, rail lines, ports and airports for military mobility, and €16 billion on space programs. Formal rules on third-party access to PESCO projects and the EDF are still being decided. Discussions are continuing at EU member state level, and no final decision is expected until the UK formally exits the EU, officials here said. London's departure has been delayed for the third time until Jan. 31, 2020. Bauer said, “I have spoken to the Brits about this and they have told me how difficult these discussions have been and continue to be. It is clear that agreement on access is certainly not a done deal.” “But we need to be pragmatic about this and continue to work together in the future.” His comments were broadly echoed by Lieutenant General Franz Leitgeb, Austria's Military Representative to the EU and NATO, another attendee at the EDA summit who told Defense News, “After Brexit, the UK will have third-party status, so third-party partnership rules will apply regarding its contribution to and participation in EU-funded projects like PESCO. “We still need to decide what precisely this means in the UK case but, whatever transpires, the UK has to realise this is a two-way street. That means that if the UK and its defense industry is to have access to EU-funded schemes and projects it has to contribute to these.” “Whatever happens we're going to need the current close relations on defense between the two sides to continue.” Further comment came from Benedikt Zimmer, state secretary at the German defense ministry, who took part in a session on PESCO and the EDF and said, “The more open cooperation is after Brexit, the better.” In a keynote address, Michel Barnier, the EU's chief Brexit negotiator, warned that UK involvement in EU defense and security would only become clearer once discussions start, probably at the start of 2020, on a political agreement between the two sides. Barnier told the packed audience, comprising senior military officials and personnel, that reaching agreement will be an “enormous challenge,” adding, “I do not want to interfere in the current UK election campaign but I am sure the Brits will still have an appetite for continued cooperation in the defense field. But, even so, they have to realize it will no longer be business as normal. I hope that UK defense companies, providing the rules are met, will still participate in European defense. We have the tools to make it happen but we still need to find a new framework for future cooperation.” More than 50 non-EU states have participated in Common Security and Defence Policy (CSDP) operations since its first mission in 2003, including four regional powers – namely Turkey, Russia, Brazil and South Africa. The official British position on security and defense is ambitious about the possible scope of the UK-EU relationship post-Brexit, talking about a “deep and special partnership” that would go “beyond existing third country arrangements.” However, little in the recent past suggests the UK would seek much CSDP involvement once no longer a member: the UK has not been the most enthusiastic supporter of the EU's defense agenda thus far, and it's questionable if this would change after Brexit. https://www.defensenews.com/global/europe/2019/11/29/britains-defense-ties-to-the-eu-are-still-up-in-the-air-post-brexit/

  • Macron kicks off French race to build a new nuclear-powered aircraft carrier

    9 décembre 2020 | International, Aérospatial, Naval

    Macron kicks off French race to build a new nuclear-powered aircraft carrier

    By: Christina Mackenzie   PARIS – French President Emmanuel Macron announced on Dec. 8 that his country's next aircraft-carrier will be nuclear-powered and should be operational by 2038 in time to replace the Charles de Gaulle, which entered active service in 2001. The new aircraft carrier is expected to be the biggest warship France has ever built. Florence Parly, the armed forces minister, said in October that the ship, whatever its propulsion, would be designed to deploy the future combat aircraft system (FCAS) and today her ministry confirmed that the vessel would deploy about 30 of these aircraft “which will be bigger than the Rafales.” The ministry said the ship would be in the 75,000 tonne class (82,673 tons), be around 300 meters long (984 feet) and be able to sail at 27 knots (31 mph), even bigger than the second aircraft carrier that Naval Group was working on in the early 2000s until that program was shelved by the government for lack of money. In comparison, the Charles de Gaulle is 261m (856 feet) long and weighs 42,000 tonnes (46,297 tons) fully loaded. The new ship will have a crew of about 2,000, including the air group. Speaking at Framatome, France's principal nuclear-power company headquartered at Le Creusot in the centre of France, Macron announced just four minutes before the end of his 28 minute speech that he had “decided that the future aircraft-carrier which will serve our country and our navy will, like the Charles de Gaulle, be nuclear-propelled.” It will have two K22 power generators each generating 220 megawatts (hence the 22) derived from the K15 (that generate 150 MW each) that currently power the Charles de Gaulle. Naval Group, which is the prime contractor for these major ship-building projects, immediately issued a statement hailing the decision, pledging to work with its major industrial partners Chantiers de l'Atlantique, TechnicAtome and Dassault Aviation. Pierre Eric Pommellet, chairman and CEO of Naval Group, said, “We are delighted with the announcement (...) which will enable France to maintain its position in the very restricted circle of major powers holding a nuclear aircraft carrier.” Echoing what Macron had said in his speech, Pommellet stressed the importance of projects like this to “ensure the continuity of our skills” and of developing innovative solutions “in the fields of propulsion and high added-value military systems, thus maintaining France's technological lead and its position as a key geostrategic player.” Now that the nuclear option has been chosen to power France's new aircraft carrier, other major decisions will have to be taken, notably concerning the catapults which are a vital part of the project. France has no expertise in this highly specialized technology and so will have to import the catapults from the United States, as it has done for the past 60 years. Those on the Charles de Gaulle are steam-powered, but those on the new aircraft carrier will be electromagnetic. Naval Group and its partners will now start a two-year preliminary design study, which sources said may use a number of the ideas that had been worked on for the aborted second aircraft carrier. That will be followed by more detailed plans with the development phase expected to finish at the end of 2025 at which point the ministry will order the ship. The design phase up to the end of 2025 is expected to cost some €900 million ($1.09 billion) of which €117 million ($142 million) will be spent in 2021. https://www.defensenews.com/global/europe/2020/12/08/macron-kicks-off-french-race-to-build-a-new-nuclear-powered-aircraft-carrier/

  • Cyber Command’s acquisition authority still in its infancy

    10 septembre 2018 | International, C4ISR

    Cyber Command’s acquisition authority still in its infancy

    By: Mark Pomerleau U.S. Cyber Command is still in the beginning stages of building out an acquisition capability. Eight years after its launch and about two years after being granted limited acquisition authority from Congress, the command is still working to demonstrate that its wares and abilities make good use of funds and that it is capable of managing contracts, its acquisition executive said. “I will say we are in our infancy from an acquisition perspective. We are putting the foundation of the personnel and the skills,” Stephen Schanberger said Sept. 6 at the Billington Cybersecurity Summit. “We're in the beginning stages right now.” In the fiscal 2016 defense authorization bill, Congress gave Cyber Command limited acquisition authority capped at $75 million with a sunsetting in 2021. Congressional aides have equated this authority to that of Special Operations Command, noting that they wanted to employ a crawl, walk, run mentality to make sure Cyber Command can execute it. Schanberger said the command is asking for more on both fronts, with a ceiling of $250 million and a sunset of 2025 — the timeline being the most important element as it makes it easier to work with vendors who know contracts might not be in doubt three years from now. For Congress's part, Schanberger said they want the command to show it can use the authority in the way it's supposed to and start to stand up the backbone of a contracting organization. This includes being able to put together solicitation packages, plan contracting strategy for years ahead and be able to effectively implement and put out proposals and award them without making a mess, he said. Schanberger said the command currently has one contracting officer and one specialist and a couple of contractors aside from himself in the contracting shop, though he expects those numbers to double in the next three months. Cyber Command issued its first contract under this limited authority in October 2017. Schanberger said the command awarded only one contract in fiscal 2017, due in part to the fact they lacked a contract writing system, which is now in place. In fiscal 2018, the command is on track to award roughly $40 million in contracts and in fiscal 2019 is on a path to get close to its cap, Schanberger said. Congress has also asked what the delineation lines are between the acquisition efforts of Cyber Command and those of the services, Schanberger said. “Right now what we really look at are what are the gaps between us and our service partners and how do we help fill those gaps,” he said. “Typically, there are a couple of programs where we did the prototyping efforts and we transitioned that to the services. That's where we see our most value ... things that can benefit all our service cyber components.” Some within Congress have expressed that Cyber Command has approached acquisition cautiously and are concerned the services aren't budgeting and providing the tools and capabilities that the cyber mission force needs. Schanberger said he thinks that command has demonstrated that it can issue contracts effectively, efficiently and quickly. However, he noted, he still does not think the command has the wherewithal internally to run something as big as the Unified Platform, one of DoD's most critical cyber programs, from a resource perspective. https://www.fifthdomain.com/dod/cybercom/2018/09/07/cyber-commands-acquisition-authority-still-in-its-infancy

Toutes les nouvelles