New NSA cyber directorate to focus on industrial base

One of the early tasks the National Security Agency’s new cybersecurity directorate will have is helping to secure the defense industrial base and defense weapons systems, the agency’s director said Oct. 9 at the FireEye Cyber Defense Summit in Washington.

Gen. Paul Nakasone, NSA director, said he gave the agency and the directorate, which opened last week, an initial task as it addresses the demanding challenge of preventing and eradicating cyberthreats to national security systems and critical infrastructure.

“We must better protect our nation’s advantage and the defense sector from intellectual property theft,” he said. “This means working closely with the defense industries and those who provide cybersecurity solutions to them.”

Senior national security officials have said the United States finds itself in a strategic competition against actors such as Russia and China, and these nations have sought to exfiltrate the data of defense contractors, especially smaller companies at the lowest levels.

Several Navy breaches — largely attributed to China — targeted contractors that were determined to have information that wasn’t itself classified, but in aggregate disclosed sensitive capabilities. Adversaries have realized they can target small to medium-sized manufacturing companies with crippling cyberattacks because, in many cases, these companies provide the Department of Defense with critical services but often are so small that they don’t have the wherewithal to institute enough cyber defenses against intrusions.

The 2018 Department of Defense cyber strategy notes that the department “must be prepared to defend non-DoD-owned Defense Critical Infrastructure (DCI) and Defense Industrial Base (DIB) networks and systems.” The chief goal with respect to critical infrastructure is in “maintaining an ability to defend DCI to ensure the infrastructure’s continued functionality and ability to support DoD objectives in a contested cyber environment,” while the goal pertaining to the DIB is ensuring it is protected to avoid sensitive systems exposure resulting in the erosion of any potential advantages.

DoD is already working on a tiered cybersecurity framework, the Cybersecurity Maturity Model Certification, contractors will have to abide by depending on the sensitivity of systems they’re charged with protecting.

Where NSA can help, Nakasone said, is offering its assistance in keys, codes and cryptographic materials that secure sensitive government data.

“The new cybersecurity directorate will improve this aspect of NSA’s unique mission with a threat-driven, forward-looking mindset. We’ll be able to harden our defenses, resolve vulnerabilities,” he said.

“Our patches will be informed by exquisite insight in adversary’s plans, intentions and capabilities. These are insights generated by NSA’s signals intelligence systems. These insights will help us to achieve the second part of the vision, the charge to eradicate cyberthreats.”

More In

South Korea to deploy laser weapons to intercept North Korean drones

The Defense Acquisition Program Administration said it will deploy at least one anti-air laser weapons system — called “Block-I” — this year.

US to send Tomahawks, hypersonics, other long-range fires to Germany

The move is in-line with the Army's plan to provide such capability to its Multidomain Task Force there.

Beavers takes reins from Sherman as acting DOD information officer

As the most senior IT advisor to the secretary of defense, Beavers is taking over from former CIO John Sherman.

Quieting Discord: A new frontier in military leaks and extremism

From secret Pentagon leaks to radicalization in the military community, Discord is continuing to grapple with keeping bad actors off the popular platform.

Astronauts say Boeing space capsule can safely return them to Earth

NASA test pilots Butch Wilmore and Suni Williams launched aboard Starliner capsule early last month.