9 juillet 2020 | International, C4ISR, Sécurité

This training tool could be the answer to stop mass cyberattacks

At air bases across Europe, networks are under attack. Malicious hackers have gained access to sensitive systems, information, controls and critical infrastructure. But cyber operators from U.S. Cyber Command, in concert with Five Eyes partners, have been called in to thwart these attempts in real time.

This was the main scenario for this year's capstone cyber training exercise put on by Cyber Command, Cyber Flag 20-2.

The exercise, which took place June 15-26 and was exclusively defensive in nature, saw more than 500 participants and 17 teams participating from five countries across nine time zones, and it included America's National Guard, the U.S. Energy Department and the Five Eyes alliance — Australia, Britain, Canada, New Zealand and the U.S. Australia, however, did not participate during this iteration.

Officials told reporters this week that the purpose of Cyber Flag 20-2 was to continue building the community of defensive cyber operations and to improve the overall capability of the Five Eyes countries to defend against cyber aggressors.

The drill involved teams defending IT and operational security networks against a live, opposing force trying to disrupt, deny and degrade the air bases' operations. The networks under attack were industrial control systems simulated to generate network traffic for an aviation fuel farm, power grid, air traffic control radars and electronic access control systems. The attacks came in the form of malware that targeted devices responsible for fuel and power.

But the unique aspect of this year's exercise, as C4ISRNET previously reported, was the use of a new remote cyber training tool called the Persistent Cyber Training Environment.

PCTE is an online client that allows Cyber Command's cyber warriors, as well as partner nations, to log on from anywhere in the world to conduct individual or collective cyber training as well as mission rehearsal, which to date had not existed for the cyber force as it does for physical troops.

The program is run by the Army on behalf of the joint cyber force. The platform not only allowed the exercise to continue as planned amid the coronavirus pandemic, but it enabled collaboration and simultaneous training across the world.

A new way to train

Officials say PCTE is providing Cyber Command with an entirely new way to train cyber forces, which previously was difficult given a lack of infrastructure and the time needed to set up ranges and scenarios.

It also allows Cyber Command and military units to conduct more frequent training. Cyber Flag typically was Cyber Command's largest and only holistic tactical training event, held annually during June. For units, aside from Cyber Flag, there were no other ways to stay sharp on their skills unless they built their own environments.

Now, Cyber Command plans to hold more exercises, with Cyber Flag 20-3 occurring in the fall.

“The delivery of the Persistent Cyber Training Environment absolutely allows us to increase the frequency and the complexity of exercises that are conducted by the command itself,” Coast Guard Rear Adm. John Mauger, director of exercises and training at Cyber Command, told reporters. “Going forward, I would expect you to see a series of exercises throughout the year where we are reaching out to the different teams to test their capabilities or to focus on specific issues that are of concern or interest to us.

“Going forward, we're going to get the benefits of both those distributed exercises along with increasingly complex exercises as PCTE is instantiated across both the secret network and the top-secret network.”

Scenarios and environments can be stored, saved, reused and modified if needed in the system for later exercises. Smaller units will also be able to leverage these scenarios to practice whenever needed.

The PCTE virtual environment for this year's exercise included 25 interconnected ranges of more than 3,000 virtual machines — a high-fidelity network that simulated and emulated open internet traffic with more than 4,000 static websites that store and share data.

The simulated air base networks created in PCTE had fully configured Windows active directory domains with over 100 nodes running more than 10 types of major operating systems, along with 35 simulated user control workstations actively surfing the internet and using Microsoft Office products to access, create and transfer files.

Moreover, officials also explained PCTE can be integrated into larger, multi-combatant command-type exercises to simulate the cyber effects, such as Global Lightning and its companion Cyber Lightning.

Global Lightning is an annual global exercise run by Strategic Command to test integration across several geographic and functional combatant commands. Cyber Lightning is Cyber Command's portion to the exercise.

“We think that is the next evolution of the Persistent Cyber Training Environment and how we take to the tier 1 exercises, incorporate cyber effects. They're no longer white-carded,” Col. Tanya Trout, Cyber Command's PCTE director and acting director of the Joint Cyber Training Enterprise, told reporters.

White carding involves telling exercise participants that a certain action has occurred. This was typical of cyber effects, given it was difficult to realistically simulate them, which diminished the training value in exercises because participants didn't experience the full breadth of these actions.

Now, these activities can play a real role in exercises increasing the overall fidelity of training across the joint force and continuity of all operations of warfare.

The system will also be able to be used for mission rehearsals. A Cyber Command official said the force can input prior operations, such as those used against the Islamic State group, to train against. Additionally, they'll be able to upload to the platform malware discovered in operations.

The PCTE program office, which is in the prototyping phase despite delivering the first portion to Cyber Command in February 2020, also learned valuable lessons in Cyber Flag. Officials said the two-week exercise provided the program office with six months' worth of data it can use to make significant improvements.

Prior to the February delivery, the program office leveraged several smaller-scale training events at the unit level to incrementally increase capabilities and scalability as well as help geographically dispersed teams prepare for tier 1 exercises like Cyber Flag.

Overall, officials are happy with how the system performed in its first tier 1 exercise, pointing to little to no latency issues, though there were periodic improvement tickets.

“What we found through the rapid development and use of the Persistent Cyber Training Environment is that we really have a unique capability to move forward with,” Mauger said.

https://www.c4isrnet.com/dod/cybercom/2020/06/25/this-training-tool-could-be-the-answer-to-stop-mass-cyberattacks

Sur le même sujet

  • Naval sales buoy French arms exports in new tally

    4 juin 2020 | International, Naval

    Naval sales buoy French arms exports in new tally

    By: Christina Mackenzie PARIS – France remained in the world's top five defense exporters in 2019 with €8.3 billion ($9.3 billion) worth of contracts signed, notably with European partners Belgium, the Netherlands, Hungary and Spain, according to a defense ministry report published this week. Half of these contracts were in the naval sector, a very sharp rise from the average 10 percent this sector represented in the past. The contract to replace the mine-hunters for the navies of Belgium and the Netherlands, a program piloted by Belgium on behalf of the two nations, accounted for more than 40 percent of naval sector sales. These sales also partially explain the very sharp rise in 2019 of exports to EU member states: 42 percent of the total, a figure that rises to almost 45 percent if one includes European non-EU members, compared to 25 percent in 2018 and an average 10-15 percent in previous years. The next major export client was the United Arab Emirates (with the Gowind corvette contract) but the 30 percent share of exports in the Africa/Middle East zone was 20 points down compared to 2018 but also compared to the average of the past decade. The report notes that France's exports are, above all, aimed at preserving its own security by establishing bilateral cooperations with European countries and strengthening transatlantic ties. The bilateral cooperations are high-level, long-term, intergovernmental agreements and exports to help the partner nations strengthen and adapt their military capacity. The sale of 16 H225M helicopters and 20 H145M helicopters to Hungary, of two telecommunication satellites to Spain and of the mine-hunters to Belgium and the Netherlands illustrate this philosophy. These exports are on par with those of the past decade “and were obtained in a particularly competitive context with the confirmation of U.S. supremacy and the emergence of new major exporters (notably China).” The parliamentary report also notes that Russia “occupies a very strong position on markets with limited financial resources [...] notably to conquer clients outside its traditional sphere of influence. Over the past few years, Russia has strengthened its position on the Asian markets, in the Middle-East and in north Africa.” There were 4,634 export licenses delivered in 2019, either for transfer of equipment (within the European Union) or for export (to all non-EU countries). But each license does not necessarily mean that an export took place, they merely give the framework for the authorization and establish the conditions for the export. Twenty-five license requests were turned down and some 110 were withdrawn by the applicant. https://www.defensenews.com/global/europe/2020/06/03/naval-sales-buoy-french-arms-exports-in-new-tally/

  • US Navy shipbuilders’ union approves labor pact at Bath Iron Works

    21 août 2023 | International, Naval

    US Navy shipbuilders’ union approves labor pact at Bath Iron Works

    Workers are receiving an increase in contributions to their national pension plan while health insurance costs will grow.

  • SAIC wins $3.6 Billion U.S Army contract for engineering services supporting hardware in the loop and modeling and simulation development

    13 avril 2021 | International, Aérospatial, C4ISR

    SAIC wins $3.6 Billion U.S Army contract for engineering services supporting hardware in the loop and modeling and simulation development

    The potential eight-year contract, with a possible six-month extension, enables SAIC to continue providing engineering services supporting the full life cycle for AvMC HWIL techniques for development and testing of...

Toutes les nouvelles