AFCERT

Abstract

Beginning in FY25, continuation of this work is described in BPAC 677824. Funding in this BPAC contributes to the development of software and related activities in support of the creation of an Integrated Defensive Cyberspace system (IDCS). IDCS generates defensive cyberspace capabilities supported by active response methodologies as the main focus of our efforts (we utilize NIST-standardized actions, such as protecting and securing computer and network systems, detecting and assessing damage, defending while recognizing / attributing / mitigating cyber threats, and recovering systems and data) as the DAF seeks to keep pace with ever-evolving threats and changes to our operational [cyber] environment. IDCS benefits the DAF Total Force, including Active Duty (AD), Air National Guard (ANG), and Air Force Reserve Command (AFRC) Airmen by enabling rapid deployment of defensive cyber sensor capabilities while disrupting bad actors from exploiting critical vulnerabilities upon the initial discovery of adversarial action at the tactical edge, by utilizing both automated decision making (ADM) and human/machine teaming (HMT) with trained defensive cyber operators. IDCS will equip DAF operational units (predominantly 16th Air Force (AFCYBER), 688th Cyber Security Service Provider (CSSP), and 67th Cyber Wing, Air Force Cyber Protection Teams (CPTs), in addition to Mission Defense Teams (MDTs) and network defenders) with capabilities required to sensor, monitor and protect DAF and ad-hoc mission networks (including networks utilized by AFSOC - Air Force Special Operations Command), Industrial Control Systems (ICS), and Weapon Systems. IDCS supports both enterprise (fixed) and edge/mobile use cases. IDCS exists to sustain two major components: (1) common sensor platform, known as VOLTRN+; (2) situational awareness platform, known as ELICSAR, acting as DAF's version of a Big Data Platform (BDP). IDCS components are comprised of 3 main parts: (A) Strategic Data Platform; (B) Strategic and Tactical Analytics; (C) Joint Situational Awareness Applications. Working together, IDCS enables AF DCO to host, integrate, and feed defensive-cyber-related data, which informs both operational and strategic analysis, contributing to enhanced situational awareness for senior leaders. IDCS addresses the lack of a synchronized, enterprise-level approach to mitigate cyberspace vulnerabilities related to mission performance and/or mission assurance. Failing to address capability gaps will hinder DAF's ability to project Air Power and dominate in a fight against near-peer adversaries. The increased request to RDT&E funding for this portfolio reflects the threats (identified with SecAF support) to Air Force Defensive Cyber Operations, specifically requiring sensor data and enhanced situational awareness to mobilize, deploy, and sustain forces. IDCS develops, sources, sustains, and provides common non-proprietary modular hardware (including commercial-off-the-shelf / COTS solutions), hosting, an edge cloud-compute defensive cyber platform (with options for both standalone or cloud-connected software), and cloud-based containerized software needed to execute the Cyberspace Vulnerability Assessment/Hunter (CVA/H), Air Force Cyber Defense (ACD), and Cyber Defense Analysis (CDA) missions. IDCS makes its cyber data available to the Department of the Air Force (DAF) Data Fabric (including JCWA / ABMS), providing increased visibility into health and readiness of cyberspace systems for both local and enterprise leaders. IDCS aggregates and analyzes cyberspace data with the ability to enhance strategic assessments through the use of Artificial Intelligence and Machine Learning, along with providing a comprehensive dashboard and reporting structure, which assists DCO operators in detecting and defeating Advanced Persistent Threats (APTs). Increased funding for IDCS development and sustainment is required to enable DAF's Defensive Cyber Operations to meet the urgent need to deploy modernized, interconnected cyber defenses across the entire Air Force, including the Pacific theater to deter near-peer aggression. IDCS contributes to successful sortie generation (getting our planes off the ground and keeping them in the fight) while ensuring the integrity and global dominance of US Air Power. IDCS will be integrated with and leverage developmental activity from across the DoD including USCYBERCOM's Joint Cyber Warfighting Architecture and the Department of the AF's Command, Control, Communications and Battle Management (C3BM) (formerly known as ABMS). Activities also include various Advisory and Assistance Services (A&AS) and Program Management Administration (PMA) activities to support the aforementioned development efforts. This program element may include necessary civilian pay expenses required to manage, execute, and deliver weapon system capability. The use of such program funds would be in addition to the civilian pay expenses budgeted in program element 0605827F, 0605828F, 0605829F, 0605831F, 0605832F, 0605833F, 0605898F, 0606398F. In FY23 $0.000M was expended for civilian pay expenses in this program element, and in FY24 $4.053M is forecasted for civilian pay expenses in this program element.

Document Details

• Document Type: Project
• Publication Date: Oct 01, 2025
• Source ID: 677823_0208088F_7_3600_PB_2025

Tags

Fields of Study

• Computer science

Readers

• Civilian Systems Systems Program Capability Development and Upgrade Support Activity Expense and Pay Management.
• Cybersecurity.
• Enterprise Information Systems Architecture and Joint Command Capability Interoperability Support.

Technology Areas

• AI & ML
• AI & ML - DoD AI Strategy
• Cyber
• Fully Networked C3
• Fully Networked C3 - Command and Control