Tobyhanna Army Depot, the Department of Defense’s leading provider in C4ISR systems, is undertaking a new mission: software sustainment.
Tobyhanna is taking the IAVA messages provided to them from Cyber Command to develop a corrective process, taking action for the current supporter software baseline, packaging it up and sending it back to the Software Engineering Center to disseminate to the larger force.<\/p>\n\n\n\n
What this component of Tobyhanna\u2019s new software support undertaking does is twofold: It releases the burden on engineers so they can focus on other aspects of software support. They are also accelerating the effort, which typically was released on a quarterly basis. These vulnerability alerts come out as often as every month to every week, and if it takes a quarter to develop the update. Meanwhile, those assets are vulnerable in the field, which is a big risk. Tobyhanna is shortening that time to one month.<\/p>\n\n\n\n
Another big effort Tobyhanna is undertaking involves automated testing of software fixes. They have automated systems capable of conducting tests of software systems in less than an hour, meaning these can be released in the same day to the Software Engineering Center. The center will then replicate that how it sees fit and release it to the field. This capability is huge, officials said, especially in terms of shrinking the time it takes to get these updates to the field.<\/p>\n\n\n\n
While from a technical standpoint, patches can be implemented in a matter of hours to fix critical vulnerabilities, the difficulty in disseminating software vulnerability patches in mission systems or other systems used by war fighters is that some systems are not interconnected, some systems are tactical and injecting software patches into a larger system might adversely affect the larger system.<\/p>\n\n\n Software patches must somehow be delivered to the system, either through a connected system or a USB drive. For some tactical systems\u00a0\u2014\u00a0which might be in extremely austere environments that are hard to get to \u2014\u00a0delivering a software patch to them is a challenge. Additionally, for larger mission systems, the patch that fixes a small, isolated portion must be tested to ensure it does not break the larger system or connected systems. By virtue of the disparate nature of some of these networked systems, Soderberg said a zero-day vulnerability exploited tomorrow won\u2019t hit all the systems in the force.<\/p>\n\n\n\n These collective efforts at Tobyhanna will also contribute to reducing support costs. “As we get more dependent on software in our systems, the costs are growing exponentially and we have to find ways to do things efficiently to reduce those costs,” Soderberg said. “If you just look at the software cost\u00a0\u2014\u00a0so you\u2019ve had this growth in software, now there is a growth in software costs that accompany this. The cost to provide that software support is growing at a rate we can\u2019t support.” This can be in the way of manpower, software licensing costs or labor costs, among others, he said.<\/p>\n\n\n\n\n\n In addition to work being done at the depot in northern Pennsylvania, it’s beneficial to provide field software engineers in person at posts stretching from Korea to Germany as well as Iraq, Afghanistan and Kuwait, Tobyhanna\u2019s commander, Col. Gregory Peterson, told C4ISRNET.<\/p>\n\n\n\n “As a part of that, too, we have a worldwide footprint that provides software support to the field stretching all the way from Korea across the Pacific \u2026 over into Europe, and we have folks deployed to Iraq, Afghanistan and Kuwait to help provide that support as well,” he said. “So that is an area example that the technology is changing with cyber concerns about cyber and patching and making sure software is current and able to not be modified and messed with. That is an opportunity for the depot that we are beginning to provide that support-to-support readiness.”<\/p>\n","protected":false},"excerpt":{"rendered":" One of the problems befalling the Army\u2019s software sustainment community is maintaining information assurance vulnerability alert compliance.<\/p>\n","protected":false},"author":7,"featured_media":16509,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":84,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10,29,26,84],"tags":[],"coauthors":[3268],"class_list":["post-14254","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-home","category-special-reports","category-tobyhanna"],"acf":{"subheadline":"","legacy_arc_id":"354VA7ZWBNFODKV6A4A7GBCFLA","arc_canonical_url":"\/special-reports\/tobyhanna\/2016\/12\/06\/software-sustainment-a-new-mission-at-tobyhanna-army-depot\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n