AF Defensive Cyberspace Operations
Abstract
The Firestarter program provides newly improved capabilities and technical transition opportunities for Cyber Defense and Information Assurance (IA) technologies and tools needed to defend Air Force Command, Control, Communications, Computer, and Intelligence (C4I) systems from Cyber-attacks, while ensuring recovery in the event of an attack. The emphasis of the program is directed toward defensive cyberspace capabilities; computer and network systems security; damage assessment and recovery; cyber threat recognition, attribution, and mitigation; and active response methodologies in response to evolving threats and changes to cyber environment. These areas of emphasis are realized through research and development, test and acquisition in the areas of: proactive defense, defensive counter cyberspace, cyberspace intelligence, surveillance and reconnaissance & situational awareness, persistent network operations, as well as decision support, recovery, and digital forensics. Current Air Force systems, such as the AFNET NIPRNet Gateways, SIPRNet Modernization program, and Host Based Security System leverage this technology to meet their information assurance and defensive cyberspace needs/requirements. Firestarter utilizes cyber and IA technology investments by US Cyber Command, the Defense Advanced Research Projects Agency (DARPA), the National Security Agency (NSA), Director of National Intelligence (DNI), Intelligence Advanced Research Projects Activity (IARPA), and the Department of Homeland Security (DHS) to jump-start its development of solutions to existing Air Force cyber and IA requirements. This program supports AF Space Commands Cyberspace strategic direction in support of Cyber Defense which provides capabilities to 24th AF, as AF component to Cyber Command (CYBERCOM), Defense Information Systems Agency (DISA), National Security Agency (NSA), and other services to ensure Global Information Grid (GIG) cyber and IA requirements are being met. Activities performed include those designed to identify, analyze, test, rapidly acquire, and integrate emerging IA and cyber technology and defensive cyberspace weapons systems and capabilities into all regions of the GIG - terrestrial, airborne, and space systems.In addition, this effort will support implementation of DoD Enterprise-wide IA & Computer Network Defense (CND) Solutions Steering Group (ESSG) solutions. This requirement is to support the Cyberspace Vulnerability Assessment/ Hunter Team (CVA/H) weapon system development of new capabilities to provide Air Force Cyber Command (AFCYBER) and Combatant Commanders additional mobile precision in addition to currently fielded protection capabilities to identify, pursue, and mitigate cyberspace threats. The CVA/H weapon system performs defensive sorties world-wide via remote or on-site access. CVA/H executes vulnerability, compliance, defense and non-technical assessments, best practice reviews, penetration testing and Hunter missions on AF and DoD networks & systems. Hunter operations characterize and then eliminate threats for the purpose of mission assurance. The Hunter mission focuses on the capability to find, fix, track, target, engage, and assess (F2T2EA) the advanced persistent threat (APT). This effort funds development efforts to expand the capability of the current weapon system to meet scope and scale of the USCYBERCOM directed Cyber Protection Teams. Cyberspace Defense Analysis(CDA)is an assessment of non-secure telecommunications to determine type and amount of sensitive and/or classified information that may have been disclosed to our adversaries and encompasses the following mission subsets: Telephony Communications, Radio Frequency (RF) Communications, E-mail Communications, Internet based Capabilities (IbC), Web Risk Assessment (WRA), and Cyber Operations Risk Assessment (CORA). CDA is the cyberspace weapon system that is used to conduct assessments during peace time and contingency operations. CDA shows its true capability in the force protection realm and helps ensure our adversaries are not provided early warning of our plans, capabilities, or limitations. AF Computer Emergency Response Team (AFCERT) supports the AF Cyberspace Defense (ACD)weapon system is designed to prevent, detect, and respond to adversarial penetration into AF unclassified and classified networks. It also provides forensic analysis if AF unclassified and classified networks are infiltrated by our adversaries. AFCERT funding for this effort will focus on development of capability, capacity, and potential modifications to increase the utility of the ACD weapon system to the warfighter In FY16 this program element will include funding for Air Force Defensive Cyberspace Operations (1) Firestarter (2) Cyberspace Vulnerability Assessment (3) Cyber Defense Analysis and (4) AFCERT. Activities include studies and analysis to support both current program planning and execution and future program planning. These programs are in Budget Activity 7, Operational System Development, because this budget activity includes development efforts to upgrade systems that have been fielded or have received approval for full rate production and anticipate production funding in the current or subsequent fiscal year.
Document Details
- Document Type
- R2 Budgetary Justification
- Publication Date
- Oct 01, 2016
- Source ID
- 0208088F_7_3600_PB_2016
- Change Summary Explanation
- The FY2016 funding request was reduced by $24.819M in support of higher Air Force priorities.
- Service Agency Name
- Air Force
Entities
Organizations
- United States Air Force
Related Documents
- Child Project: Computer Security RDTE: Firestarter
- Child Accomplishment: Cyber Forensic Tools & Methodologies
- Child Accomplishment: Cyber Threat Recognition
- Child Accomplishment: Cyber Threat Attribution & Mitigation
- Child Accomplishment: Transition of Cyber and IA Technologies
- Child Cost Item: 51c8f797c4d0db11455f4c7afd0e6a91
- Child Cost Item: a280de3002efc199a4ab396ff42db7b8
- Child Cost Item: d0ed5e7bef8c702e8d917a7e926fd961
- Child Cost Item: 3b0d16524b8c7b80908257e23f481bf6
- Child Project: Cyberspace Vulnerability Assessment
- Child Accomplishment: Cyber Threat Mitigation
- Child Cost Item: b68258ee6ba529fd58c3e080ae574af9
- Child Project: Cyber Defense Analysis
- Child Accomplishment: Cyber Defense Assessments
- Child Cost Item: 1221c058a7708d511a8ce0b39656a29c
- Child Project: AFCERT
- Child Accomplishment: Computer Threat Response
- Child Cost Item: 8a2a63a5492bffaad1c574ae9c52aa45