Army cyber forces should 'take a page' from adversaries

Discussion in 'Cyber' started by AMDR, Oct 16, 2015.

Share This Page

  1. AMDR

    AMDR Captain Staff Member Administrator

    Joined:
    Oct 7, 2015
    Messages:
    376
    Likes Received:
    868
    Occupation:
    Student
    Location:
    United-States
    Army cyber forces should 'take a page' from adversaries
    https://defensesystems.com/articles/2015/10/15/army-cyber-defense-cheap-fast-easy.aspx

    The Army could improve its cyber abilities by studying—even imitating—its enemies, according to one of its top cyber leaders.

    “We as an Army have to take a page and a lesson learned from our adversaries,” Maj. Gen. Paul Nakasone, commander of the U.S. Cyber Command’s Cyber National Mission Force, said at a panel during the annual Association of the United States Army gathering in Washington, D.C., this week. The lesson he was talking about is the notion of “cheap, fast and easy.”

    Nakasone said there have been several examples over the past year of this approach, from the exploitation of vulnerabilities to targeting critical information to advanced phishing attempts. “There are no requirements in this cheap, fast and easy environment for zero days because you get access so easily,” he said, in reference to exploits of vulnerabilities that were previously unknown.

    More striking, he added, “we’re on the wrong side of the cost curve” in terms of cybersecurity. “In many ways, we’re not operating cheap, fast and easy, we’re on the slow, expensive and hard ways of doing business.”

    Nakasone noted how far adversaries have come in cyber exploitations, intelligence gathering, disruptions such as denial-of-service attacks against the financial industry and even potentially destructive capabilities. That led Nakasone to ask, “What’s cheap, fast and easy look like for us? Because cheap, fast and easy on the other side doesn’t look too good.”

    Operating in the cyber domain requires cooperation between the services as well. The myth that the services are not connected or not talking to each other is not true, Col. William Hartman, commander of the 780th Military Intelligence Brigade in the Army’s Intelligence and Security Command, said during the same panel discussion. “When we executed our training event for our teams in Texas that support [the European Command], that team was working for an Air Force Joint Force Headquarters,” Hartman said. “They had to modify the [tactics, techniques, and procedures] to ensure that we were able to talk to the Air Force in language the Air Force understood, although we were an Army force delivering that capability. So from my stand point that’s a pretty good news story.”

    The Defense Department is about halfway to forming the 133 teams that will make up its cyber mission force. Hartman said that once more cyber teams are stood up, they will begin to work with the Joint Force Headquarters Cyber.

    These joint training exercises fall in line with comments made by Gen. Stephen Fogarty, commanding general of the Cyber Center of Excellence and Fort Gordon, Ga., who said the Army must “integrate the efforts of multiple partners, operate across multiple domains, and present our enemies and adversaries with multiple dilemmas.”

    Despite teams stationed at various National Security Agency facilities across the continental U.S. other locations such as Hawaii, Hartman said, “I’ve spent a large portion of the last year going to places like Fort Bragg [N.C.] and Fort Hood [Texas] and Fort Bliss [Texas] and the Joint Readiness Training Center in the national training center,” working on “integrating the cyberspace capability to achieve the effects that a commander is trying to achieve on the battlefield.”

    Hartman said the pilot programs are intended to “define what cyber capabilities to integrate at the corps level and below, determine the expeditionary capability required to support our deployed tactical forces, leverage our combat training centers and operational deployments.” That also would help develop long-term requirements for combat training centers. “

    Working with traditional ground units helped ground commanders and the cyber force see how to better integrate the capabilities needed to support operations. “With the Rangers we really had an interesting problem set because those forces generally operate on a much tighter timeline than we operated at [Joint Readiness Training Center] with 3rd Brigade 25th[Infantry Division],” Hartman said. “And so in some cases, we were able to have to identify a requirement, modify a tool and then present a capability in sometimes hours – I think the shortest kind of flash-to-bang was two hours.”

    Hartman also said that some cyber mission teams are also already supporting Central Command, European Command, Pacific Command and Africa Command.
     
    Admin likes this.
  2. AMDR

    AMDR Captain Staff Member Administrator

    Joined:
    Oct 7, 2015
    Messages:
    376
    Likes Received:
    868
    Occupation:
    Student
    Location:
    United-States
    Army wades into experimental cyber warfare
    http://www.c4isrnet.com/story/milit...des-into-experimental-cyber-warfare/73990730/

    The Army is testing out the best ways to integrate cyber warfare into its operations, this year launching a series of experiments in offensive and defensive cyber operations at training centers across the country.

    The experiments provide support to corps level and below, and involve brigade combat teams rotating through training centers such as the National Training Center in California, according to Army officials.

    "The direction we received from the previous Army Chief of Staff, GEN Ray Odierno, in 2014 was…he wanted specifically to be working cyber as a maneuver and how we truly integrate that with our tactical forces," Ron Pontius, deputy to the commanding general at Army Cyber Command, told reporters Oct. 14 in a briefing at the Association of the U.S. Army annual meeting in Washington, D.C. "What we've really worked [on] is: How do we really begin to bring the full spectrum — the DODIN, the network operations piece along with offensive and defensive cyberspace capabilities? How do you really integrate cyber, signal, electronic warfare, information operations?"

    Army Cyber Command is coordinating with Training and Doctrine Command and Army Forces Command to carry out the experiments, the first one involving members of the Third Brigade/25th Infantry division at the Joint Readiness Training Center at Fort Polk, Louisiana, in May. The Army also did an exercise with the Ranger regiment and has an upcoming rotation at the National Training Center in January.

    "We don't just deliver a capability without having a good foundation, so Army Cyber, with the operational force, is actually spending significant effort working with that brigade before they leave home station," said MG Stephen Fogarty, commanding general of the Army Cyber Center of Excellence and Fort Gordon, Georgia. "I think what was really important is in the [brigade combat team], for the first time, they had the capability to defend their network. It's a defense in depth."

    The Army will conduct "five or six" of these experiments over a 15-month period, then incorporate findings into the service's Doctrine, Organization, Training, Materiel, Leadership & Education, Personnel, and Facilities (DOTMILPF), Pontius said.

    What emerges from the exercises is subject to evolve over time — and that's something the Army really needs to get ahead of the curve and take advantage of emerging technologies and strategies, including open-source, according to Army Cyber Command Sgt. Maj. Rodney Harris.

    "Ultimately we're doing the pilots, trying to figure out what the team needs to look like, what kind of capabilities they need," Harris said. "The end state, the goal, is the same as it is for any other offensive capabilities: to deny, destroy, degrade, disrupt and deceive. And we have those capabilities that are out there, open source, right now. The fact that we're not using them is because we've [inhibited] ourselves while we try to figure out how to build our force."
     
    Admin likes this.
Loading...