Over the last several months, new and iterative threats have emerged from the cyber domain. As the cyber environment evolves, the government faces increasing threats from state and non-state adversaries. Together with industry, the government\u2060\u2014and the military in particular\u2060\u2014are working to field solutions that work strategically and technologically.<\/p>\n\n\n\n
Increasingly sophisticated cyber attacks, including those that take advantage of artificial intelligence, malware and denial of service, mean the government must make a more proactive effort to protect the United States from losing critical infrastructure or information vital to national security.<\/p>\n\n\n\n
C4ISRNET sat down with Todd Hicks, chief technology officer of Leonardo DRS Land Electronics, to discuss the challenges in the cyber domain, and how industry is working to combat them.<\/p>\n\n\n\n
C4ISRNET: <\/b><\/i>How does the military have to think differently about cyber threats?<\/b><\/p>\n\n\n\n
Hicks:<\/b><\/i> Right now, a lot of the government focus is on risk management framework, as a tool for making sure cybersecurity is applied to a system or a subsystem. I think that translates to more of a paper drill and as opposed to government looking at the real vulnerabilities with its requirements. A subset of that is supply-chain risk management. If an adversary can get into the supply system, that\u2019s a lot less of a protected environment. The government has to become more technically aware of its vulnerabilities and start applying requirements to plug the holes.<\/p>\n\n\n\n
C4ISRNET:<\/b><\/i> How are threats different now than they were 18 to 24 months ago?<\/b><\/p>\n\n\n\n
Hicks: <\/b><\/i>The threats in the past have been more overt, more front-door. Now, we\u2019re seeing a shift in the landscape where we have adversaries that are willing to spend months to years planning a low-level cyber attack. They\u2019re willing to think that far ahead and invest a lot of time and money planning and coordinating. When they\u2019re ready, the physical attack is much more successful. It requires a very different way of thinking about things. It\u2019s almost a completely different discipline.<\/p>\n\n\n\n
C4ISRNET: <\/b><\/i>What are some interesting and unexpected phenomena you\u2019re seeing in the cyber domain?<\/b><\/p>\n\n\n\n
Hicks: <\/b><\/i>The trends we\u2019re seeing that are worrisome are related to embedded systems. A lot of attention in cyber goes to the operating system and anti-malware, but what we\u2019re seeing at the embedded level, whether it\u2019s a sensor or a tactical computer, is a lot of vulnerabilities and exploits where the adversaries are not attacking the operating system in the classical sense, but they\u2019re actually attacking the embedded controllers. Unfortunately, the government requirements are not responding as quickly as they should.<\/p>\n\n\n\n
C4ISRNET:<\/b><\/i> How is industry uniquely positioned to address the critical issues within the cyber domain?<\/b><\/p>\n\n\n\n
Hicks:<\/b><\/i> Industry has to carry a lot of the responsibility. For a lot of these products, they\u2019re the subject matter experts; they have the design authority We have concerns about the warfighter, and based on the products we\u2019ve been putting in the field for years, we\u2019re cognizant of what the actual threat is and don\u2019t want to see them materialize.<\/p>\n\n\n\n
C4ISRNET: <\/b><\/i>Which areas of technology are most important for industry to invest in, and how are you carrying out those investments?<\/b><\/p>\n\n\n\n
Hicks:<\/b><\/i> Strategically, we\u2019re working with the Pentagon to write requirements, to help drive them from the top so that they\u2019re able to give teeth to policies that are flowing down to the procurement offices. Tactically, with the products, we\u2019re leaning forward with industry-cutting-edge technologies, baking them into our offerings, regardless of the shortcomings with the government requirements. We\u2019re still applying the hardening measures to hardware and adding integrity measures.<\/p>\n","protected":false},"excerpt":{"rendered":"
C4ISRNET sat down with Todd Hicks, Leonardo DRS\u2019 chief technology officer to discuss the challenges in the cyber domain, and how industry is working to combat them.<\/p>\n","protected":false},"author":7,"featured_media":63608,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":29,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[29],"tags":[],"coauthors":[1618],"class_list":["post-31557","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-home"],"acf":{"subheadline":"","legacy_arc_id":"6KG5BMRZKNENXIW2OBPU7A2V6M","arc_canonical_url":"\/show-reporter\/2019\/08\/19\/can-government-hasten-requirements-to-meet-cyber-challenges\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n