Secure communications - CDE themed call launch 18 June 2013.

Secure Communications
Centre for Defence Enterprise
Wing Commander Jim Pennycook

© Crown Copyright MOD 2011
The aim of CDE

Prove the value of novel, high-risk,
high-potential-benefit research

To enable development of cost-
effective military capability advantage

19 June 2013
Five key operating principles
underpin the CDE model

19 June 2013
Accessible opportunity

Minimising participation costs

Dstl is part of the
Ministry of Defence
Crown Copyright (c) 2012
www.science.mod.uk/enterprise cde@dstl.gov.uk
UNCLASSIFIED / FOR PUBLIC RELEASE
CDE themed call programme
Countering insider threat attacks Call closes 27 Jun 2013
Secure communications Call closes 22 Aug 2013
Innovation in drug development
processes
Call launch 25 June 2013
Enhancing military medical training
and support for the medic
Call launch 16 July 2013
Novel solutions for emulating ship
signatures
Call launch 23 July 2013
Register and further details at www.science.mod.uk under ‘Events and Calls’
All call close at 17:00 hrs

Effective proposals

Challenge, pace & exploitation

Introduction to CDE 1030
Military context 1050
Programme overview 1105
Call overview 1110
Technical challenges 1120
Submitting a CDE proposal 1200
Q&A 1210
Networking lunch
(Book surgery appointments)
1230
Surgery sessions 1400
Event close 1600
Agenda

01235 438445
cde@dstl.gov.uk
www.science.mod.uk/enterprise

Secure Communications
Military Context
Squadron Leader Mike Leaman
UNCLASSIFIED© Crown copyright 2013 Dstl
19 June 2013

© Crown copyright 2013 Dstl
19 June 2013
Military
communications
Usable
Reliable
Deployable

19 June 2013
Future operating
environment
Congested
Cluttered
Contested
Connected
Constrained

19 June 2013
Short-notice
overseas
deployments

19 June 2013
Coalition
multi-agency
operations

19 June 2013
Military „platforms‟
Networking makes the whole
more effective
but
• capacity is limited
• effective integration is
essential

19 June 2013
The user
Capacity is limited
Risk-based
approach

19 June 2013
The User
Capacity is limited

Information Superiority
Joint Forces Command
Dr David Massey MEng MIET
C4ISR Domain Lead
Programme and Delivery Directorate

The Joint Forces Command
Information Superiority account
19 June 2013
Information Superiority includes:-
– Command, Control, Information &
Intelligence
– Integrated Sensing
– Assured Information Infrastructure
– Decision Support for C4ISR (Command,
Control, Communications, Computing, Intelligence,
Surveillance and Reconnaissance)
– Cyber
– Defence Intelligence

Benefits delivered by the account
• Command & Control (C2) concepts
• Improve Information & Intelligence
• Provide knowledge and tools in
cyberspace
• Provide enhanced and affordable
sensor technologies
19 June 2013

Upcoming requirements
• Increased emphasis on information analysis
and intelligence production
• Continued emphasis on communications &
networks
• Reduced emphasis on sensors per se with
focus shifted to common sensor modalities
• Experimentation and Decision Support
remain key
• Cyber remains a priority© Crown copyright 2013 Dstl
19 June 2013

Challenges for the future
Support the provision of an
expeditionary command
and inform capability that
is sufficiently sustainable,
scalable and interoperable
19 June 2013

Appropriate combination of
sensors/platforms,
infrastructure and exploitation
capabilities to generate timely
situation awareness
– Eg common architectures
based on wideband multi-
function radio frequency (RF)
systems for manned and
unmanned combat air
systems.
19 June 2013

Cyber situational awareness, defence and
operations including effects delivered
through computers, networks,
electromagnetic (EM) spectrum and
human influence.
19 June 2013

Key elements of the account
• Supports Joint Forces Command (JFC) Information Superiority
science and technology needs. Incorporates:
– C4ISR (Command, Control, Communications, Computing,
Intelligence, Surveillance and Reconnaissance)
– Cyber
• Directly supports JFC Defence Authorities for C4ISR and Cyber,
Defence Intelligence & other government departments
• As a cross-cutting account, supports the needs of all Front Line
Commands
19 June 2013

Secure Communications CDE Themed
Call
Introduction
Helen Carlton
19 June 2013

Assured Information Infrastructure
• Objective
– provide science and technology support to MOD to enable the
realisation of a continuously evolving single, logical,
reconfigurable, resilient information infrastructure across UK
and deployed, fixed and mobile elements
19 June 2013

Assured Information Infrastructure
• The right information, to the right person, in the right
form, at the right time, to support the best decision to
initiate effective action
19 June 2013

Military vs commercial
19 June 2013
Time
TechnologyProgress
UNCLASSIFIED

The challenge
• How can MOD harness civilian advances
– reduced size, weight, power
– open standards
– increased bandwidth, data rate
• In areas such as
– personal communications
– personal computing
– non radio frequency (RF) communications
– automotive communications
19 June 2013
UNCLASSIFIED

The challenge
• Against military constraints
– security
– assurance
– integration
– interoperability
19 June 2013

What we want
• Innovative exploitation of commercial-off-the-shelf
(COTS) technology
• Novel approaches to securing information
infrastructures
• Technology that is inherently small, lightweight and low
power
• Proposals that show how improvements will be
measured and demonstrated
• Practical demonstrations set in a military context
19 June 2013
UNCLASSIFIED

What we don‟t want
• Solutions that offer no significant defence and security
benefit
• Technology watch / horizon scanning
• Paper-based studies, roadmaps or technology
prediction
• Impractical solutions or ones requiring internal
changes to COTS
• New encryption algorithms
19 June 2013
UNCLASSIFIED

Exploitation
• Planned route for exploitation next financial year is via
research programme
• Ideally an exploitation route to military equipment
19 June 2013
UNCLASSIFIED

C4ISR Secure Information
Infrastructure Services (CSIIS)
• Framework through which aII research is conducted
• Flexible and fluid consortium led by a Prime
• Duration three years
• Research areas
– Communications and Networks
– Information Assurance
– Knowledge and Information Management
• Start date November 2013
19 June 2013

Image is public sector information licensed under the Open Government Licence v1.0
19 June 2013
Challenge 1
Securing Commercial-off-the-shelf
(COTS) Technology
Trevor Benjamin

Scope
• Networks and Information Infrastructure
– wireless, wired, optical
– networking components
– user terminal devices
– server systems and
cloud technology
19 June 2013

Issues
• Major problem – SECURITY
• Mismatch - civil and military security risks and requirements
• Issues
– implementation standards and quality
– strength of security functionality
– assurance levels
– accreditation
19 June 2013

Constraints
• Commercial off the shelf (COTS)
• Enhanced and strengthened security
• Unmodified COTS
• Capable of evaluation and accreditation
• Solutions might include:
– separate and novel security devices
– add-on security enhancements
– wrap-around security barriers
19 June 2013
UNCLASSIFIED

Example 1 – Bring your own device
• Benefits of BYOD for MOD
• Work with MOD infrastructure
• Strategic, deployed
and coalition systems
• BYOD that:
– hinder malicious attack
– protect information from compromise
19 June 2013
UNCLASSIFIED

Example 2 – Novel cryptography
• Greater MOD use of civil & plain-text communications
• Cryptography close to edge
• Seeking cryptography solutions
– at user device
– embedded in applications
• Device and system issues
– key management
– identity management
– how to do cyber defence
19 June 2013
UNCLASSIFIED
Do not propose new encryption algorithms
solutions should use standards-based or government-defined algorithms

Example 3 – Mobile wireless systems
• Wireless is a key enabler for military operations
– currently bespoke radio devices
• COTS could provide:
– ease of use
– smaller size, weight and power
– cheaper solutions
– training savings
– simpler logistics
• Need to enhance security, robustness, ruggedness
19 June 2013
UNCLASSIFIED

Example 4 – Host-based protection
• Paradigm shift
– move security away from supporting infrastructure
– host based and information based security
• Infrastructure more generic
• Users more responsible for security
• Need novel concepts:
– to enable this change based on COTS
– in security functionality and placement
19 June 2013
UNCLASSIFIED

Human factors
• The biggest security threat is people!
– work-around security functionality
– undermine original purpose
• Consider the people issues
• Need novel approaches to
– human factors of security solutions
– people, culture and information security
– improved socio-technical systems
– human-computer interactions for system security components
19 June 2013
UNCLASSIFIED

Summary
• Securing COTS
– in MOD communications and information infrastructures
– match protection mechanisms to military risks
• Novel approaches to military security
– using COTS without internal modification
– capable of high assurance and being part of accredited systems
• Examples might include:
– “Bring your own device” security
– edge cryptographic protection
– secure mobile wireless systems
– host and information based protection
• Consider human factors
– relationship between people and information security
– improved socio-technical security systems
– better human-security interfacing
19 June 2013
UNCLASSIFIED

Challenge 2
Mission-Configurable Systems
Simon Baker
19 June 2013

19 June 2013
Introduction
• Military C4ISR (Command, Control,
Communications, Computing, Intelligence,
Surveillance and Reconnaissance) systems
– tend to be stove-piped
– making changes is complicated, time consuming
and expensive

19 June 2013
Revised needs
Courtesy of ISAF Media

19 June 2013
• Rapidly support changing operational
requirements
• Work effectively within the Combined, Joint,
Intergovernmental, Inter-agency, Multi-national
(CJIIM) context
• Front Line Commands have some flexibility to
establish their “fight tonight” initial capabilities

19 June 2013
The challenge
• Innovative solutions to help MOD address the adoption
of a flexible and open systems approach across the
C4ISR Domain
• Demonstrate potential impact of different approaches to
the delivery of mission-configurable C4ISR capability,
including the applications and information services

Example 1 – Cloud computing
• Cloud computing, open information services,
virtualisation
• Demonstrate how new systems could manage
– the loss of information services/communications bearers
• provision of a useful level of local services to the affected
users
– reconfiguration of services for new tasks and network
changes
19 June 2013
UNCLASSIFIED

Example 2 – Access management
• Management and monitoring of access to information
services at different levels of trust
19 June 2013
UNCLASSIFIED

Example 3 – Operating pictures
• Users want to define their operating pictures, but
mission-critical information must not be masked or
omitted
19 June 2013
UNCLASSIFIED

19 June 2013
Information sharing
• Information needs to be shared across
organisational boundaries
• Need to share information services with
partners at different levels of trust

19 June 2013
Summary
• adaptable solutions
• management of applications and services
• federate with other MOD systems and with external
organisations' systems
• achieve improved resilience, security and
interoperability
• exhibit graceful degradation

Submitting a Successful Proposal
Jono Byrne
Centre for Defence Enterprise (CDE)

Dstl is part of the
Ministry of Defence
UNCLASSIFIED / For Public Release
Crown Copyright Dstl 2012
Know what is available

Dstl is part of the
Ministry of Defence
Read available
information
Start with –
Quick Start Guide
plus other CDE manuals –
Account Manual, User
Manual, Technology
Application Manual
Know what is available

Dstl is part of the
Ministry of Defence
Developing a CDE proposal

Dstl is part of the
Ministry of Defence
Value from technology
Innovative
concept
Future
capability
Proof of
concept Incremental development

MOD Performance Assessment Framework
Five criteria:
Operational relevance
Likelihood of exploitation
Builds critical S&T capability to meet UK
needs
Scientific quality/innovation
Science, innovation and technology risk

Dstl is part of the
Ministry of Defence
Government-furnished X

Proposal health check

Contribution to future benefit

Based on a claim of future benefit
Contribution to realisation of future benefit
Logical programme of work
Evidential outcomes
Demonstration of progress towards goal
Health check

Dstl is part of the
Ministry of Defence
This call closes:
Thursday 22 August 2013
At
17:00 hrs
Deadline

cde@dstl.gov.uk
www.science.mod.uk/enterprise
Call process queries

Dstl is part of the
Ministry of Defence
dstlsecurecommscde@dstl.gov.uk
Call technical queries

Dstl is part of the
Ministry of Defence
www.science.mod.uk
Events and Calls > Current calls for proposals
> Secure communications
Webinar: 20 June 12:30-13:30
Register online
Further information

15-minute slots
Encourage those who have not worked
with us before
Book at registration desk over lunch
Name, organisation, which challenge
Surgery sessions

Secure communications - CDE themed call launch 18 June 2013.

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Andere mochten auch

Andere mochten auch (9)

Ähnlich wie Secure communications - CDE themed call launch 18 June 2013.

Ähnlich wie Secure communications - CDE themed call launch 18 June 2013. (20)

Mehr von Defence and Security Accelerator

Mehr von Defence and Security Accelerator (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Secure communications - CDE themed call launch 18 June 2013.