31 juillet 2019 | International, Aérospatial, Sécurité

The next cybersecurity concern for NATO? Space

By: Kelsey Reichmann

A new report warns that the cybersecurity vulnerabilities related to military space systems, specifically terminals and command-and-control systems, deserves renewed attention from NATO countries.

The report, titled “Cybersecurity of NATO's Spaced-based Strategic Assets,” was produced by Chatham House, which is part of the Royal Institute of International Affairs, a policy institute in London. The paper, by Beyza Unal, was released July 1.

“There is an urgent need to study and address cyber-related challenges to strategic assets within NATO and its key member countries, particularly the cyberthreat to space-based command and control systems,” the report read. “The increasing vulnerability of space-based assets, ground stations, associated command and control systems, and the personnel who manage the systems, has not yet received the attention it deserves.”

The report highlights cybersecurity vulnerabilities to space systems used by countries in the NATO alliance, notably singling out commercial products used in military operations as a particular risk. These vulnerabilities can come from back-door encryption, supply chain security, and personnel and procedural practices, according to the report. NATO uses space assets to defend territory, peacekeeping missions, humanitarian assistance and disaster relief, counterterrorism, and conflict prevention.

“There is an increasing need to apply higher-grade military hardening and cyber protection specifications to civilian capabilities that have the potential to be used in support of military applications,” the report read. “If military standards are not met, items procured from commercial industry with design flaws may expose NATO's systems to additional vulnerabilities."

The report also points to the importance of securing satellite terminals.

“Terminals located in ground stations constitute a critical vulnerability, as a terminal is an access point to a satellite and is usually not protected by authentication in order not to hinder operational actions,” the report said. “Terminals house software systems that can be compromised and require patching and upgrading.”

Data flowing between satellites, especially ground stations, can become vulnerable, according to the report.

“Adversaries infiltrating ground- or space-based systems could exploit weak software implementation, or the incompatibility of network or data transfer protocols in the chain,” the report read. “While the absence of data is easy to detect, the manipulation of data or erosion of confidentiality at such an interface is potentially more difficult to discern.”

Among the report's recommendations is that NATO strengthen its cyber defense through increased collaboration between the public and private sector. This would allow for more timely information sharing of cyberthreats.

The report also urges NATO to emphasize that commercial manufacturers meet basic cybersecurity standards and possibly more stringent military protection standards.

“In the future, military systems will be increasingly connected to non-military systems,” the report stated. “This has important implications for the laws of armed conflict, as the combination of civilian, commercial and military capabilities in the cyber domain and space raises the risk that civilian capabilities used for military purposes qualify as legitimate military targets.”

https://www.fifthdomain.com/international/2019/07/30/the-next-cybersecurity-concern-for-nato-space/

Sur le même sujet

  • Contract Awards by US Department of Defense – October 02, 2020

    5 octobre 2020 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité, Autre défense

    Contract Awards by US Department of Defense – October 02, 2020

    NAVY Northrop Grumman Systems Corp., Mission Systems Sector, Linthicum Heights, Maryland, was awarded a $100,798,804 fixed-price-incentive-fee and firm-fixed-price contract for follow-on production of Surface Electronic Warfare Improvement Program Block 3 electronic attack systems and hardware design modifications required for aircraft carrier and amphibious assault ship installation. This contract includes options, which if exercised, would bring the cumulative value of this contract to $1,164,529,315. Work will be performed in Baltimore, Maryland (55%); Tampa, Florida (6%); Andover, Massachusetts (5%); Chelmsford, Massachusetts (4%); Rochester, New York (3%); San Diego, California (3%); Los Angeles, California (2%); Winona, Minnesota (2%); Stafford Springs, Connecticut (2%); Glendale, Arizona (1%); Nashua, New Hampshire (1%); Elk Grove Village, Illinois (1%); White Marsh, Maryland (1%); Tucson, Arizona (1%); Chandler, Arizona (1%); Washington, North Carolina (1%); Woodridge, Illinois (1%); Richardson, Texas (1%); Minneapolis, Minnesota (1%); El Cajon, California (1%); Hiawatha, Iowa (1%); Littleton, Colorado (1%); Glendale, California (1%); and miscellaneous locations - each less than 1% (4%), and is expected to be completed by May 2023. If all options are exercised, work will continue through September 2026. Fiscal 2019 other procurement (Navy) (67%); and fiscal 2020 other procurement (Navy) (33%) funding in the amount of $100,798,804 will be obligated at time of award and will not expire at the end of the current fiscal year. This contract was competitively procured via the Federal Business Opportunities website with one offer received. The Naval Sea Systems Command, Washington, D.C., is the contracting activity (N00024-20-C-5519). (Awarded Sept. 30, 2020) EFW Inc., Fort Worth, Texas, is awarded a $35,801,006 five-year requirements type, firm-fixed-priced contract for repair of line-replaceable units in support of the V-22 aircraft. This is a five-year contract with no option periods. Work will be performed in Fort Worth, Texas (50%); and Talladega, Alabama (50%). Work is expected to be completed by October 2025. Annual working capital funds (Navy) will be used and funds will not expire at the end of the current fiscal year. No funds will be obligated at the time of award. One company was solicited for this sole-sourced requirement under authority 10 U.S. Code 2304 (c)(1), with one offer received. The Naval Supply Systems Command, Weapon Systems Support, Philadelphia, Pennsylvania, is the contracting activity (N00383-20-D-Y001). BAE Systems Land & Armaments L.P., Minneapolis, Minnesota, was awarded a $17,290,912 firm-fixed-price contract for the production of two 57mm MK 110 Mod 0 gun mounts and associated hardware. Work will be performed in Karlskoga, Sweden (93%); and Louisville, Kentucky (7%), and is expected to be completed by May 2023. Fiscal 2018 weapons procurement (Navy); and fiscal 2020 weapons procurement (Navy) funding in the amount of $17,290,912 will be obligated at time of award and $249,448 will expire at the end of the current fiscal year. In accordance with 10 U.S. Code 2304 (c)(1), this contract was not competitively procured; only one responsible source and no other supplies or services will satisfy agency requirements. The Naval Sea Systems Command, Washington, D.C., is the contracting activity (N00024-20-C-5300). (Awarded Sept. 30, 2020) Peraton Inc., Herndon, Virginia, is awarded a $13,891,979 cost-plus-fixed-fee, level of effort contract (N00030-21-C-0016) for program support services for the Navy's strategic weapons systems reentry subsystem. Work will be performed in Colorado Springs, Colorado (75%); Washington, D.C. (15%); Albuquerque, New Mexico (8%); Cape Canaveral, Florida (1%); and Omaha, Nebraska (1%). Work is expected to be completed by March 30, 2026. Contract will be awarded subject to the availability of funds. No funds will be obligated at the time of award. Once funding becomes available, contract will be funded as follows: fiscal 2021 research, development, test and evaluation funds in the amount of $7,214,639; and fiscal 2021 operations and maintenance (Navy) funds in the amount of $6,677,340, which will expire at the end of the current fiscal year. This contract is being awarded to the contractor on a sole-source basis under 10 U.S. Code 2304(c)(1) and was previously synopsized on the Beta.sam.gov (formally Federal Business Opportunities) website. Strategic Systems Programs, Washington, D.C., is the contracting activity. BAE Systems Land & Armaments L.P., Minneapolis, Minnesota, was awarded an $8,934,292 cost-plus-fixed-fee and firm-fixed-price order under previously awarded blanket ordering agreement N00024-19-G-5306 for engineering services, open, inspect and repair services and spare and component parts in support of the MK 110 MOD 0 gun mount. This order includes options which, if exercised, would bring the cumulative value of this contract to $23,400,781. Work will be performed in Louisville, Kentucky (50%); and Karlskoga, Sweden (50%), and is expected to be completed by December 2022. Fiscal 2020 weapons procurement (Navy) (92%); and fiscal 2018 weapons procurement (Navy) (8%) funding in the amount of $6,128,002 will be obligated at time of award, of which $495,948 will expire at the end of the current fiscal year. This order was not competitively procured in accordance with 10 U.S. Code 2304(c)(1); only one responsible source and no other supplies or services will satisfy agency requirements. The Naval Sea Systems Command, Washington, D.C., is the contracting activity (N00024-20-F-5301). (Awarded Sept. 30, 2020) ARMY AstraZeneca, Gaithersburg, Maryland, was awarded a $60,000,000 firm-fixed-price contract to manufacture AZD7442, a combination antibody product intended to prevent or treat clinical effects of SARS-CoV-2, for a minimum of 100,000 treatment courses. Work will be performed in Gaithersburg, Maryland, with an estimated completion date of June 30, 2021. Fiscal 2020 Army general funds in the amount of $30,000,000 were obligated at the time of the award. U.S. Army Contracting Command, Aberdeen Proving Ground, Maryland, is the contracting activity (W911QY-20-C-0119). (Awarded Sept. 30, 2020) CORRECTION: The contract announced on Sept. 28, 2020, for Tatum Excavating Co. Inc., Texarkana, Texas (W9126G-20-F-0768), for $10,000,000, was announced with an incorrect award date. The correct award date is Sept. 29, 2020. CORRECTION: The contract announced on Sept. 29, 2020, for University of South Dakota, Vermillion, South Dakota (W9128F-20-D-0059), for $12,800,000, was announced with an incorrect awardee. The correct awardee is South Dakota State University, Brookings, South Dakota. MISSILE DEFENSE AGENCY Lockheed Martin Rotary and Mission Systems, Moorestown, New Jersey, has been awarded a $35,582,832 sole-source, hybrid (cost-plus-fixed-fee, firm-fixed-price) contract (HQ0851-21-C-0001) under Foreign Military Sales (FMS) Case JA-P-NCO to the government of Japan. Under this contract, Lockheed Martin will perform Aegis FMS Baseline J7.B development and SPY-7(V) 1 radar production, integration and test planning support. The work will be performed in Moorestown, New Jersey. The period of performance is from Oct. 2, 2020, through July 31, 2021. Funds from the government of Japan in the amount of $35,582,832 are being obligated at the time of award. The Missile Defense Agency, Dahlgren, Virginia, is the contracting activity (HQ0851-21-C-0001). AIR FORCE Wolverine Supply Inc., Wasilla, Alaska, has been awarded an $8,649,500 firm-fixed-price contract for repair of the Blackstart Generator. This contract provides for repair of the Blackstart Generator at the Eielson Air Force Base central heat and power plant. Work will be performed at Eielson AFB, Alaska, and is expected to be complete by Sept. 22, 2022. This award is the result of a competitive acquisition and four offers were received. Fiscal 2020 operations and maintenance funds in the full amount are being obligated at the time of award. The 354th Contracting Squadron, Eielson AFB, Alaska, is the contracting activity (FA500420C0015). (Awarded Sept. 30, 2020) * Small business https://www.defense.gov/Newsroom/Contracts/Contract/Article/2370617/source/GovDelivery/

  • Lockheed nets $16.2M contract for Virginia-class sub masts

    25 juin 2019 | International, Naval

    Lockheed nets $16.2M contract for Virginia-class sub masts

    By Ed Adamczyk June 24 (UPI) -- Lockheed Martin's Rotary and Missions Systems division received a $16.2 million contract to build elements of Virginia-class submarines, the Defense Department announced. The company will manufacture multifunction modular masts for the submarines' Block V hull, which can be extended by sections, depending on the requirements of the vessels' strike capabilities. Virginia-class submarines with Block V armaments are capable of carrying Tomahawk cruise missiles. The vessels typically carry eight masts, which include a snorkel mast, two photonic masts as replacements for periscopes, high-data-rate satellite communication masts, a radar mast and an electronic warfare mast. The contract was competitively procured through the Federal Business Opportunities website and announced on Friday. It specifies options which can boost it value to $97.8 million. Work on the contract will be done at Lockheed Martin facilities in Nashua, N.H., and Syracuse, N.Y., and is expected to be completed by June 2020. If all options are exercised, the deadline will be extended to June 2024. The Naval Sea Systems Command at Washington Navy Yard in Washington, D.C., was the contracting agent. https://www.upi.com/Defense-News/2019/06/24/Lockheed-nets-162M-contract-for-Virginia-class-sub-masts/1891561390409/

  • IAV 2024: Dutch CV90 MLU releases new firepower and survival tech

    24 janvier 2024 | International, Terrestre

    IAV 2024: Dutch CV90 MLU releases new firepower and survival tech

    Since 2009, the CV90 has been the backbone of the Royal Netherlands Army.

Toutes les nouvelles