{"id":28405,"date":"2022-08-05T15:01:10","date_gmt":"2022-08-05T15:01:10","guid":{"rendered":"https:\/\/one.sightlinemg.com\/federaltimes\/uncategorized\/2022\/08\/05\/operation-cyber-dragon-turning-us-navy-reservists-into-digital-defenders\/"},"modified":"2026-08-08T18:34:11","modified_gmt":"2026-08-08T18:34:11","slug":"operation-cyber-dragon-turning-us-navy-reservists-into-digital-defenders","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/federaltimes\/your-career\/2022\/08\/05\/operation-cyber-dragon-turning-us-navy-reservists-into-digital-defenders\/","title":{"rendered":"Operation Cyber Dragon turning US Navy reservists into digital defenders"},"content":{"rendered":"\n

JESSUP, Md. \u2014 On the borderlands of Fort Meade, the U.S. Navy is taking a tandem approach to cyber defense and talent development.<\/p>\n\n\n\n

Inside an unassuming office building, a few floors up and tucked into a spread of austere rooms, is Operation Cyber Dragon. The brainchild of Chief Warrant Officer Scott Bryson, the hands-on endeavor authorized by U.S. Fleet Cyber Command<\/a> aims to fix virtual vulnerabilities \u2014 shoring up systems bit by bit \u2014 while also fostering a new wave of cybersecurity expertise.<\/p>\n\n\n\n

\u201cWe\u2019re doing it so that we can continue to mitigate and fortify our attack vectors and secure our networks even better,\u201d Bryson told reporters July 22, while standing among computers, cubicles and colleagues.<\/p>\n\n\n\n

Cyber Dragon kicked off in March, with the second phase of the program now underway. In its current form, the operation<\/a> is focused on fortifying unclassified networks and rooting out common, widespread digital weaknesses: lax security settings, easily guessed credentials, unpatched software and more.<\/p>\n\n\n\n

Doing so, officials said, makes its more difficult for hackers to break in and wreak havoc. According to the Navy, some 14,500 issues were initially identified on service networks as in need of addressing. Each could be a foothold for an adversary, especially at a time of heightened cyber conflict. Deputy Chief of Naval Operations for Information Warfare Vice Adm. Jeffrey Trussler in a February memo warned sailors that \u201ccyberattacks against businesses and U.S. infrastructure are increasing in frequency and complexity.\u201d<\/p>\n\n\n\n

\"\"
(Colin Demarest\/C4ISRNET)<\/figcaption><\/figure>\n\n\n\n

To tackle such a large and evolving workload, manpower was needed. So Bryson turned to the reserves<\/a>, including to people not necessarily cyber fluent.<\/p>\n\n\n\n

\u201cI went to the reserve forces that we have at 10th Fleet, and I requested some bodies, and I came up with a training plan. And I said, \u2018Well, if you give me X amount of sailors for X amount of days, I think that we can get after a percentage of our vulnerabilities, patching and scanning.\u2019 The reserve force came through with the manning, they came through with the space,\u201d Bryson said.<\/p>\n\n\n\n

\u201cWhen we did the posting, it wasn\u2019t limited,\u201d he added. \u201cI said I\u2019ll take anybody.\u201d<\/p>\n\n\n\n

Among the dozens of participants were, by day, a long-haul truck driver, a banker and a small-business owner<\/a>. The operation offers reservists the chance to fulfill annual training requirements while also making a tangible difference.<\/p>\n\n\n\n

Cyber Dragon teams have thus far identified and remediated thousands of issues \u2014 everything from several \u201chigh-profile exposures\u201d to default usernames and passwords <\/b>to discovering \u201cdata where we didn\u2019t want data to be,\u201d according to officials involved with the effort.<\/p>\n\n\n\n

\u201cA default username and password means that anybody could could log in and execute on here, on these particular machines. Now, they weren\u2019t national security-related. There was no major issue directly to national security,\u201d said Rear Adm. Steve Donald<\/a>, the deputy commander of Fleet Cyber Command\/U.S. 10th Fleet. \u201cBut in some cases, it could have caused harm to individuals, identity theft or something of that nature. We were able to shut that down.\u201d<\/p>\n\n\n\n

Teams have also zeroed in on potential spoofing certificates, risky software use and cloud management hiccups. Some 50 sailors have been trained on state-of-the-art attack surface management software, used to discover, classify and assess the security of an organization\u2019s assets, with 100 more expected to undergo the same education in the coming months.<\/p>\n\n\n\n

Lt. Blake Blaze, a reservist with a cyber and tech background, said the operation has improved both his understanding of the field and the cybersecurity of the Navy<\/a>.<\/p>\n\n\n\n

\u201cMy biggest motivation for staying in the reserves was I wanted to be close to the fight in case things get interesting with some of our near-peer adversaries,\u201d Blaze said. \u201cWe\u2019re not directly engaging with the enemy, so to speak, but we are trying to prevent their avenues of access to our networks.\u201d<\/p>\n\n\n\t