WASHINGTON \u2014 An Air Force cyber squadron recently lent its expertise in cloud defense to improve the skills of international partners and the other services, conducting a cyber exercise in a cloud-based simulation where operators had to protect the medical data of fictional citizens from malicious attacks.<\/p>\n\n\n\n
Cloud services, while not entirely new, are an increasingly important component of networks and therefore prime targets for malicious cyber actors. The military is beginning to transition much of its infrastructure into cloud environments and must be adept at fending off intrusions and understanding this terrain.<\/p>\n\n\n\n
Cyber Dome, a joint U.S. Cyber Command and Israel Defense Forces exercise in December, sought to game cloud defense in an effort to strengthen the cyber partnership between the two nations and share tactics.<\/p>\n\n\n\n
\u201cAs we both look at problem sets of emerging technology and more and more of our government systems transition to cloud infrastructures like Amazon Web Services, how do we work together to partner off of each other\u2019s strengths and capabilities and help each other work with the industry and grow our skills,\u201d Lt. Col. Steven Payne, commander of the 837th Cyberspace Operations Squadron, said in an interview.<\/p>\n\n\n\n
The 837th was specifically chosen to participate in the exercise\u2019s sixth iteration because it has developed expertise in the tradecraft for defending clouds, he said, adding the squadron has worked with industry and built up training material for cyber defenders in cloud technologies.<\/p>\n\n\n\n
Exercises such as Cyber Dome allow the squadron to share these insights across the military with other units as well. Payne said they shared their knowledge with a U.S. Army cyber team participating in the exercise to help them become better cloud defenders. The squadron is working with higher headquarters on how to continue such partnerships both within the military and internationally.<\/p>\n\n\n\n
\u201cWe partnered with Israel on this one. Are there other partners out there also looking to get into the space of cloud tradecraft learning and development? It\u2019s a question we\u2019re looking at,\u201d Payne said.<\/p>\n\n\n\n
The squadron itself does not work directly with the Israeli government in an operational sense. Yet exercises like this allow it to share its expertise with units that do to improve collective cyber defense. Moreover, lessons are shared between the Israeli defenders, who have a different vantage point and can provide unique approaches to defending critical networks.<\/p>\n\n\n\n
\u201cThese exercises give us a chance to really rehearse and practice things that we don\u2019t necessarily get a chance to do day to day,\u201d Payne said. \u201cWe get to work with partners and others who have experienced different kinds of situations or scenarios in their cyber defense mission \u2026 The Israelis, for example, specifically, they of course bring in a different mindset. They have different geopolitical scenarios or situations that affect them day to day [and] different threats.\u201d<\/p>\n\n\n\n
Exercise participants described this sharing of tactics and experiences as a key takeaway from the event.<\/p>\n\n\n\n
Teams operated in a custom built range based in Amazon Web Services along with on-premise infrastructure valued at roughly $80,000. They created a fictional ministry of health with a public facing portal for fictional citizens to register their COVID-19 statuses.<\/p>\n\n\n\n
\u201cWhen you have personal data and health statuses \u2026 that is very relevant information that any malicious cyber actor would be looking to gather,\u201d Tech. Sgt. William Hopkins, range team lead for the exercise, said.<\/p>\n\n\n\n
The AWS infrastructure was connected to fake Internet of Things devices simulating vaccine storage warehouses responding to and providing updates to local defenders on how many vaccines were there, storage temperatures and other important information. Teams had to defend against ransomware attacks, data exfiltration, website defacements and other types of malicious cyber activity.<\/p>\n\n\n\n
Despite being more of a civilian example, the key tenets of cyber and cloud defense still apply.<\/p>\n\n\n\n
\u201cProtecting data is one of the biggest functions of cybersecurity, is protecting everyone\u2019s data,\u201d Hopkins said. \u201cIt doesn\u2019t matter whether it\u2019s a commercial entity, a government entity or an exercise entity. Data protection is always key.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
Air Force cyber teams exercised alongside Israeli cyber forces in the sixth iteration of Cyber Dome.<\/p>\n","protected":false},"author":7,"featured_media":63095,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":160,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[160,33,36],"tags":[],"coauthors":[3336],"class_list":["post-28722","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-news-roundup","category-home","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"LYQ5UAZMEJEX5LIKVJ6JLTZ7OA","arc_canonical_url":"\/cyber\/2022\/01\/27\/us-cyber-teams-work-with-israel-on-cloud-defense\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n