Risk
2/23/2010
01:59 PM
50%
50%

Navy Soliciting Cybersecurity Bids

The Office of Naval Research plans to spend $16 million through 2015 to protect its data and secure operations in the event of a cyberattack.

The U.S. Navy is seeking proposals for security technologies to build a prototype system that would ensuring cyber operations aren't shut down in the event of a cyber war.

The Navy plans to spend $16 million through 2015 on the project, according to a notice on the Office of Naval Research Web site.

The notice calls for proposals for a "pro-active cyber network defense and information assurance" solution that can be adapted and integrated into an "advanced prototype."

The prototype "will ensure maximum continuity of cyber operations and availability of national assets and data during cyber conflict," according to the notice.

The Navy also hopes to use the prototype to develop new technologies to protect all data coming and going through the Department of the Navy (DON) networks.

Specifically, the Navy is interested in algorithms for the detection of malware that extend beyond conventional anti-virus detection algorithms, and techniques that discover malware entry points.

Other technologies of interest include: algorithms that can distinguish legitimate network traffic communications from malicious communications; data-mining methods and algorithms for correlating and fusing large-scale complex data sets; security-enabled protocols that ensure proper network functionality during cyber attacks; and protocols that provide network-based configuration and control of security components.

Additionally, proposals are welcome on techniques to map and track the activity of networks and be able to use that information to geo-locate the sources and target of suspicious activity.

The Navy plans to award up to five, and companies have until May 21 to submit proposals.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Latest Comment: nice one good
Current Issue
E-Commerce Security: What Every Enterprise Needs to Know
The mainstream use of EMV smartcards in the US has experts predicting an increase in online fraud. Organizations will need to look at new tools and processes for building better breach detection and response capabilities.
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
Join Dark Reading community editor Marilyn Cohodas in a thought-provoking discussion about the evolving role of the CISO.