{"id":33195,"date":"2023-01-20T19:18:24","date_gmt":"2023-01-20T19:18:24","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2023\/01\/20\/amazon-other-pentagon-cloud-service-providers-face-zero-trust-test\/"},"modified":"2026-08-08T18:19:50","modified_gmt":"2026-08-08T18:19:50","slug":"amazon-other-pentagon-cloud-service-providers-face-zero-trust-test","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2023\/01\/20\/amazon-other-pentagon-cloud-service-providers-face-zero-trust-test\/","title":{"rendered":"Amazon, other Pentagon cloud service providers face zero-trust test"},"content":{"rendered":"\n

WASHINGTON \u2014 Hackers backed by the U.S. Department of Defense will attack networks run by Amazon, Google, Microsoft and Oracle to better understand zero-trust cybersecurity in commercial cloud environments.<\/p>\n\n\n\n

So-called red teams of ethical hackers from the National Security Agency will test the digital strength of the four cloud service providers, or CSPs, starting in the spring. The Defense Department in December selected the companies for its $9 billion Joint Warfighting Cloud Capability<\/a>, a follow-up to the failed $10 billion Joint Enterprise Defense Infrastructure arrangement.<\/p>\n\n\n\n

\u201cWe\u2019re going to have the NSA red team, and perhaps even service red teams, attack,\u201d Zero Trust Portfolio Management Office Director Randy Resnick said at a Jan. 19 event hosted by Billington Cybersecurity. \u201cThat would be a realistic adversary attack, a controlled attack, and we would determine whether or not the red teams could get and exploit data.\u201d<\/p>\n\n\n\n

The operation \u2014 of mutual agreement and not a requirement tied to the JWCC deal \u2014 will inform how the Defense Department proceeds with zero trust<\/a>. It could also prove the vigor of the cloud providers and lay the foundation for future zero-trust-enabled storage and computing.<\/p>\n\n\n\n

Unlike older cybersecurity models, zero trust assumes networks are always at risk or are already comprised. The new paradigm, as a result, is inherently distrustful and requires constant validation of users, devices and general access.<\/p>\n\n\n\n

Resnick previously described the concept<\/a> as enhanced home security: \u201cWe have identified the items of value within the house, and we\u2019ve placed guards and locks with each one of those items inside the house, as well.\u201d<\/p>\n\n\n\n

Amazon, Google, Microsoft and Oracle each told the Defense Department they could instate at least basic levels of zero trust, according to Resnick.<\/p>\n\n\n\t