Communications Security R&D
Abstract
The FY 2020 funding request was reduced by .616 million to account for the availability of prior year execution. The Information Systems Security Program (ISSP) Research Development Test & Evaluation (RDT&E) efforts extend our cybersecurity and resiliency, provide Defensive Cyberspace Operations (DCO), and cross domain solutions to protect data, Department of Defense (DoD) Information Networks (DoDIN), net-centric operations, the forward deployed, and other designated systems in order to protect cyberspace and critical warfighting capabilities. This project includes a rapidly evolving development, design and application integration effort to modernize cryptographic equipment and ancillaries with state-of-the-art replacements to counter evolving and increasingly sophisticated threats. Communications Security (COMSEC) and Transmission Security (TRANSEC) are evolving from stand-alone, dedicated devices to embedded modules incorporating National Security Agency (NSA) approved cryptographic engines, loaded with the certified algorithms and keys, and interconnected via industry-defined interfaces. This includes the DoDIN capability requirements document for the development of Content Based Encryption (CBE). Computer Network Defense (CND): The CND program provides cyberspace capabilities to secure the Cyber Domain. CND is a combination of hardware, software, sets of processes and protective measures that use computer networks to detect, monitor, protect, analyze and defend against network infiltrations resulting in service/network denial, degradation and disruptions. CND enables a government or military institute/organization to defend against network attacks perpetrated by malicious or adversarial computer systems or networks. Navy Cryptography (Crypto): Navy Crypto modernizes legacy cryptographic equipment which includes families of COMSEC and TRANSEC devices that are divided into crypto voice, crypto data, crypto products and associated ancillary devices. These devices provide modern cryptographic solutions to replace obsolete, legacy devices within the crypto categories. Key Management (KM): KM monitors and tracks capability verification testing, designs and tests capabilities to provide a net-centric web based architecture, for the ordering, management, and distribution of all cryptographic key material to support Navy users, to include integration of Intermediary Application (iApp). Public Key Infrastructure (PKI): The DoD PKI program, under the authority of the Under Secretary of Defense for Acquisition, Technology, and Logistics (USD AT&L), develops and tests PKI equipment and is responsible for meeting statutory and regulatory requirements for the DoD PKI program. The Navy PKI program tests and implements products for afloat networks and shore non-Navy Marine Corps Intranet (NMCI) networks and institutionalizes Identity and Access Management (IdAM) so that person and non-person entities can securely access all authorized DoD resources. SHARKCAGE: SHARKCAGE is a global, federated Defensive Cyberspace Operations (DCO) enclave consisting of shore sensor nodes, DCO analysis workbenches, and analytic suites. Utilizing one-way passive taps in a protected, isolated, classified environment, SHARKCAGE consolidates cyber event data from multiple platforms and networks, providing Navy DCO forces with a shared environment and common platform for integrated workflow, collaboration, and analysis. SHARKCAGE efficiently detects, correlates, and analyzes nation and non-nation state attacks against maritime Navy networks and the Naval Networking Environment (NNE). Navy Cyber Situational Awareness (NCSA): NCSA is a command and control infrastructure that provides Navy commanders with timely, trusted, and comprehensive Situational Awareness (SA) of the cyberspace domain to include tailored, near real-time visualization of network health, vulnerabilities, and operational readiness through the correlation of data from multiple sources. NCSA combines asset data, baseline configuration data, and real-time threat data which is critical for defending a fully-interconnected network infrastructure. NCSA enables early threat detection and timely decision making. Cybersecurity Services: Cybersecurity Services develop cyber architecture and provides cybersecurity engineering for the Department of the Defense (DoD) and Department of the Navy (DoN) cybersecurity interests based on the requirements prioritized by Fleet Cyber Command/Commander Tenth Fleet (FCC/C10F). Cybersecurity Services transitions new technologies to address current Navy cybersecurity challenges. FY20 will focus on efforts that address the risk management of cyberspace, which provides capabilities to protect, detect, restore and respond. The ISSP provides the Navy with the following cybersecurity elements: (1) defense of National Security Systems (NSS), including the Nuclear Command, Control, and Communications, Navy (NC3-N) system, naval weapons systems, critical naval infrastructure for Command, Control, Communications, Computers, & Intelligence (C4I) afloat and shore networks, joint time and navigation systems, and industrial control systems, using modern cryptographic solutions and cyber security tools; (2) technologies supporting the Navy's Computer Network Defense (CND) service provider that will help the Navy's ability to prevent, constrain, and mitigate cyber attacks and critical vulnerabilities; (3) Navy Cyber Situational Awareness (NCSA) technologies that provides the operational context for cyber threat intelligence and Situational Awareness (SA), from external boundaries to tactical edge infrastructures; (4) assurance of the Navy's Crypto telecommunications infrastructure and the wireless spectrum; (5) sensing cyber threats across all Navy shore and afloat networks to expand the capabilities of monitoring, assessing, and detecting adversary activities across multiple enclaves through the collection of tools in SHARKCAGE; (6) alignment to Navy's Insider Threat program; (7) assurance of joint-user cyberspace domains, using a Defense-In-Depth (DiD) security architecture and its alignment with the Joint Information Environment (JIE)/Joint Regional Security Stack (JRSS); (8) assurance technologies, including the Key Management (KM) and Public Key Infrastructure (PKI).
Document Details
- Document Type
- Project
- Publication Date
- Oct 01, 2020
- Source ID
- 0734_0303140N_7_1319_PB_2020
Related Documents
- Root: Information Sys Security Program
- Child Accomplishment: Computer Network Defense (CND)
- Child Accomplishment: Navy Cryptography (Crypto)
- Child Accomplishment: Key Management (KM)
- Child Accomplishment: Public Key Infrastructure (PKI)
- Child Accomplishment: SHARKCAGE
- Child Accomplishment: Navy Cyber Situational Awareness (NCSA)
- Child Accomplishment: Cybersecurity Services
- Child Cost Item: 28c5895628dda870fc1443cd82ccfc6a
- Child Cost Item: de60fab02d65af3fa406622926f159f3
- Child Cost Item: 828b6dfa1ca6c572af8da78d166bda62
- Child Cost Item: b84aed96c15fb9366dbc7d600e2c5c33
- Child Cost Item: 8f036091c6a1e51019d4c2275cfd77c4
- Child Cost Item: d42d0a4b187c336e50d9b029f1adc6d4
- Child Cost Item: 52f809961db8f3c33abf624b296367b3
- Child Cost Item: d5ca344c392cc7171800e2428ffc3ccc
- Child Cost Item: c828dff353a6aa980a0987679dc762fa
- Child Cost Item: 9a5da00516d35d26a00292439cda0277
- Child Cost Item: 58750b79251a3ce8f19d4ff2d89d27c2
- Child Cost Item: e2511fc0d631aa041a507370da62fb3f
- Child Cost Item: 22af156b8864f5f8be85bc59c6799c4b
- Child Cost Item: 2acea80fb298848450ad5fd47b791707
- Child Cost Item: 5c408099b3e3004704c35c47e8c05ceb
- Child Cost Item: 0daf0566a3382fdddeab462c9b16cb71
- Child Cost Item: f7475bb59f6086096b85ad3f3e11f7a3
- Child Cost Item: 905e1470a35161e4da87db34d74a1c4b
- Child Cost Item: a26872d723b8ff0321c99745cf769d4e
- Child Cost Item: 4ce92689ba2f0c55d7a0aa609f2c198f
- Child Cost Item: 18589d69ff343219e7a2f78ecbe68e93
- Child Cost Item: 213972ad3e63dddab6d460795e2355b6
- Child Cost Item: 664b8f7ee98bd1c3743554ecfde4ef9d