Risk
8/23/2012
09:59 AM
50%
50%

DARPA Seeks 'Plan X' Cyber Warfare Tools

Defense Department looks for hardened operating systems and other new technologies for managing cyber warfare in real time on a large scale.

Defense Tech: 20 War-Fighting Innovations
Military Transformers: 20 Innovative Defense Technologies
(click image for larger view and for slideshow)
The Department of Defense is looking to develop new technologies, including hardened operating systems and other platforms, for managing cyber warfare in real time on a large scale.

The Defense Advanced Research Projects Agency has scheduled a workshop for September 27 where it will lay out requirements for the envisioned system and invite technology vendors to demonstrate capabilities that might be part of it.

Plan X, as the program is known, aims to help the Pentagon understand, plan, and manage cyber warfare "in real-time, large-scale, and dynamic network environments," according to DARPA. The program also encompasses cyber warfare strategies and tactics.

DARPA also wants to identify a system architecture team, which would oversee development of application programming interfaces, specifications for data formats, and acquisition of the required computer hardware and other infrastructure.

[ DARPA has a lot of irons in the fire. Read DARPA Demos Inexpensive, Moldable Robots. ]

Plan X entails research in four primary areas. First, DARPA is looking to develop analytics capabilities to help the military understand the "cyber battlespace" through analysis of large scale networks.

Second, DARPA wants the ability to create a mission plan and "script" that can be used by cyber personnel. That would include quantifying potential damages associated with those plans. The agency compares the sought-after capability to the auto-pilot function on an airplane.

DARPA also seeks operating systems and platforms that can operate in "dynamic, contested, and hostile network environments." It describes those components as hardened "battle units" that perform functions such as damage monitoring, communications, and weapon deployment.

Finally, the agency wants the ability to visualize what's happening in a virtual battlefield for use in planning, operations, and war gaming.

While those selected to work on Plan X are expected to have off-site development facilities, the program will be based at an on-site DARPA cyberwar facility with key contractor personnel. The program will use agile development principles, DARPA's announcement said.

Plan X is not focused on development of vulnerability analysis capabilities or cyber weapons, according to DARPA. The workshop is closed to the public and some sessions are only open to individuals with DOD "secret" clearance or higher. Following the workshop, DARPA plans to issue an industry solicitation in the form a "broad agency announcement."

Cybersecurity, continuity planning, and data records management top the list in our latest Federal IT Priorities Survey. Also in the new, all-digital Focus On The Foundation issue of InformationWeek Government: The FBI's next-gen digital case management system, Sentinel, is finally up and running.. (Free registration required.)

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
trentondel
50%
50%
trentondel,
User Rank: Apprentice
8/30/2012 | 9:42:07 PM
re: DARPA Seeks 'Plan X' Cyber Warfare Tools
"Hello and welcome to the United States Air Force's Cyber Security attack hot-line. We appreciate your continued loyalty to the United States Government. If your power plant is currently experiencing a melt down please press 1. If your Water Treatment plant is now producing a form of nerve gas please press 2. If your air traffic control system is now routing all flights through Tehran please press 3. If your toaster has managed to gain sentience and is building a nuclear weapon please press 4.

For all other inquiries please wait patiently on the line and a service representative will be with you shortly.

Thank You and God Bless America."

God help us all if Microsoft is there.
Andrew Hornback
50%
50%
Andrew Hornback,
User Rank: Apprentice
8/28/2012 | 2:10:39 AM
re: DARPA Seeks 'Plan X' Cyber Warfare Tools
Ahh, it's a closed workshop - that's too bad, this sounds like it could be a LOT of fun.

Although, I do have to wonder about the idea of an auto-pilot mentality for those responding to cyber-attacks. We all know how scripted responses work - ever call large hardware manufacturer for support?

Andrew Hornback
InformationWeek Contributor
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-2977
Published: 2015-07-29
Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors.

CVE-2015-2978
Published: 2015-07-29
Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."

CVE-2015-2979
Published: 2015-07-29
Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVE-2015-4286
Published: 2015-07-29
The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuu41377.

CVE-2015-4290
Published: 2015-07-29
The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) via vectors involving contiguous memory locations, aka Bug ID CSCut12255.

Dark Reading Radio
Archived Dark Reading Radio
What’s the future of the venerable firewall? We’ve invited two security industry leaders to make their case: Join us and bring your questions and opinions!