The Defense Information Systems Agency wants to improve the military\u2019s cybersecurity posture in 2020 and that focus is evident in the agency\u2019s top priorities for emerging technologies.<\/p>\n\n\n\n
Stephen Wallace, systems innovation scientist at the agency\u2019s emerging technology directorate, outlined 10 technologies for the upcoming year during DISA\u2019s annual Forecast to Industry event Nov. 4.<\/p>\n\n\n\n
The priorities include:<\/p>\n\n\n\n
Assured identity. <\/b>DISA is taking another look at how the Common Access Card, which currently operates as a point in time authentication, is used today. Over the next year, DISA wants to apply assured identity to its mobile and desktop devices. In addition, officials want to know how they can continuously monitor the user\u2019s identity “in the background. \u201cHow can we build a profile of that user\u2019s identity and their day-to-day actions,\u201d Wallace said. \u201cWe\u2019ve had a few successful prototypes so far and we expect to do more as time progresses.\u201d<\/p>\n\n\n\n
Automation. <\/b>Wallace stressed that the agency has to apply automation to more workloads. He pointed specifically to data centers, where automation would allow him to increase efficiency on workloads.<\/p>\n\n\n\n
Browser isolation. <\/b>DISA wants to take a new approach to how it defends the Department of Defense Information Network (DoDIN) by taking a browser and operating it in a commercial provider, which then provides a \u201cvideo stream\u201d back to the user, Wallace said. DISA is evaluating two vendors for the capability in a test that includes 15,000 users, he said. The browser isolation project marked the first two times DISA used its Other Transaction Authority. DISA has rolled this capability out to all agency users, but has eight other partners testing the offering. The goal is to reach 100,000 more users in the next three to six months, Wallace told reporters at a round table. \u201cThis is just a test of technology and then we\u2019ll go from there,\u201d Wallace said.<\/p>\n\n\n\n
DevSecOps. <\/b>DISA wants to take the principles of DevSecOps, an approach to secure software development, and apply it to how it deploys products. Wallace said that with similar devices across the agency, it makes sense for DISA to treat the devices as code. By doing so, DISA can easily share information across its programs and be better prepared for re-accreditation of its devices.<\/p>\n\n\n\n
Distributed ledger. <\/b>Though Wallace said that DISA is on the \u201cbackside of that hype curve\u201d on blockchain, he told reporters that the agency is testing distributed ledger in one of its data centers to \u201cexplore the technology.\u201d Wallace said DISA has found some areas where the product is useful in the logistics realm with data set sharing, simplifying database management by removing the need for a centralized database access.<\/p>\n\n\n\n
Artificial intelligence and machine learning. <\/b>DISA doesn\u2019t have a dedicated AI\/ML office, but the agency is interested in the technology and has several use cases for the technology, Wallace said. The agency is using machine learning on some shared identity projects that are constantly validating user identity. \u201cIt\u2019s a technology enabler,\u201d Wallace said. \u201cYou will see it pop up in a number of things.\u201d<\/p>\n\n\n\n
Mobile\/desktop convergence. <\/b>With users spending so much time on mobile devices like tablets and laptops, DISA wants to allow employees to bring these devices into the office and work on them as a desktop. \u201cThe idea is that I can have that mobile device that I\u2019m off working with, come into my office, drop it into a cradle [and] I get a full desktop experience and pick it up, walk away and get a full desktop again,\u201d Wallace said. In the future, DISA wants to provide this service across classification levels.<\/p>\n\n\n\n
Security orchestration, automation and response (SOAR). <\/b>SOAR is an automated approach to cybersecurity and incident response and Wallace said DISA has several projects in this realm. \u201cOur adversaries are better leveraging automation, ML\/AI,\u201d Wallace said. \u201cWe need to get more in the game of automating our response.\u201d<\/p>\n\n\n\n
Wireless transport. <\/b>The emergence of 5G technology will provide DISA with the ability to provide faster network capabilities to the warfighter, Wallace said. DISA is exploring peer-to-peer communication capabilities brought on by 5G that will provide the warfighter to communicate better at the tactical edge. DISA is also looking at network splicing, in which network operators can designate specific parts of their networks for specific activities. Network splicing will allow DISA to \u201cchange the way that we basically ship traffic across the carriers\u2019 networks,” Wallace said. DISA want to use the technology to harness the faster compute capabilities at the edge that will come with 5G.<\/p>\n\n\n\n
Zero trust. <\/b>Under DISA\u2019s current approach to network security, Wallace said, the agency uses the user credential to identify the user and then places them in the network depending on where they are coming from, like the internet or the DoD\u2019s internal unclassified network. Under a zero trust framework, DISA would add new indicators to verify user identity, like the device the user is using, the time of day and the credential. \u201cWe think that we can take many of those concepts … and apply [them] to what we do for the department,\u201d Wallace said.<\/p>\n","protected":false},"excerpt":{"rendered":"
Cybersecurity sits squarely in the Defense Information Systems Agency’s priorities.<\/p>\n","protected":false},"author":7,"featured_media":55692,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":29,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[106,29,32],"tags":[],"coauthors":[3252],"class_list":["post-25953","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"LIEJSZCD5JAGJFGF2EUWHUE65Q","arc_canonical_url":"\/show-reporter\/disa-forecast-industry\/2019\/11\/04\/disas-10-tech-focuses-for-2020\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n