HightJ6 000

Protecting the Network: 

Protecting the Network AFCEA TechNet 2005 J6 Panel RDML Betsy Hight 19 MAY 05

Context – Primary Navy Network Domains: 

Context – Primary Navy Network Domains CONUS - NMCI Firewall contractual agreements Stopped ~60,000 viruses Operational Agent: NETWARCOM OCONUS – ONEnet Single Worldwide Security Domain Govt Owned/Govt Operated Operational Agent: NETWARCOM Tactical – Ship-to-Shore-to-Ship links Intra-Strike Group Intra-Platform Operational Agent: NETWARCOM

CND & IA protect the Kill Chain: 

Theater Comms Theater Sensors Weapons Airborne Sensors Weapons Platforms Airborne C2 Nodes JTF JFACC REACHBACK CAOC Detect ID Track Decide Engage Assess Platforms CDL -N SATCOM Data Links Shipboard Sensors Tactical Network CND & IA protect the Kill Chain

Real World Statistics & Activities: 

Real World Statistics & Activities NAVCIRT Reports Over 60,000 Incidents: Over 800 Category I through V incidents Vast Majority are probes of the network CND Activities: Cyber Condition Zebra – Enforcing UTN Protection Policy $1.5B being spent on Information Assurance and CND over the FYDP Tactical ship-to-shore nets protected behind Network Operations Centers and ship CND capabilities

CND Direction: 

CND Direction Fixed Networking on Mobile Platforms Ship-to-Shore-to-Ship Networking A single platform can participate in multiple networks, in multiple roles Routing and firewall policy between these networks must be addressed Mobile Ad-hoc Networking (MANET)

CND Direction: 

CND Direction Fixed Networking on Mobile Platforms Ship-to-Shore-to-Ship Networking A single platform can participate in multiple networks, in multiple roles Routing and firewall policy between these networks must be addressed Black Core Routing Network Resource Intensive? Multiple Crypto? Mobile Ad-hoc Networking (MANET)

CND Direction: 

CND Direction Fixed Networking on Mobile Platforms Ship-to-Shore-to-Ship Networking A single platform can participate in multiple networks, in multiple roles Routing and firewall policy between these networks must be addressed Black Core Routing Directory Intensive? Multiple Crypto? Light Enough for Tactical? Mobile Ad-hoc Networking (MANET)

CND Direction: 

CND Direction Mobile Ad-hoc Networking (MANET) Fixed Networking on Mobile Platforms Ship-to-Shore-to-Ship Networking A single platform can participate in multiple networks, in multiple roles Routing and firewall policy between these networks must be addressed Even possible as MANET units are far forward of the Strike Group? Black Core Routing Directory Intensive? Multiple Crypto? Light Enough for Tactical?

Way Ahead – Decisions We Need to Make: 

Consensus from all players with respect to authorities COCOM, Services, Agencies Classification or not? Geographic or not? Centralized vs. decentralized acquisition authority Right technical solution for all domains: strategic, operational, tactical Way Ahead – Decisions We Need to Make

Way Ahead – Actions We Need to Take : 

Way Ahead – Actions We Need to Take Update/Elevate Threat Assessment / Awareness Expand Network Battlespace Awareness Ensure Integrity through the Cloud Drive Research Initiatives Formalize our Human Capital Strategy Institutionalize our Education Objectives Improve Network Instrumentation