Here’s one way DISA wants to improve cybersecurity

The Defense Information Systems Agency is looking to improve the cybersecurity posture of the Department of Defense by reducing attack vectors to the network.

Adversaries are becoming more sophisticated, with threats becoming more complex and the number of cyberattacks increasing, Vice Adm. Nancy Norton, director of DISA, said Nov. 5 during DISA’s annual Forecast to Industry day in Linthicum, Maryland.

She said DISA executes roughly 1 billion defensive cyber operations events in a given month, automatically blocking most attempts while intervening in nearly 1,000 incidents and conducting over 2,000 countermeasures.

One way DISA is seeking to reduce these attack vectors to the network is implementing a cloud-based internet isolation solution to protect from browser-born threats.

RELATED

When is the network not really the network?

The Defense Information Systems Agency is looking for internet browsing to take place on a commercial cloud and away from Department of Defense servers.

By Adam Stone

“By taking the internet browser off the work station and placing it in a remote cloud-based server outside of the DoD [Information Network], we can review traffic from afar and protect the network while preventing malware and cyberattacks,” she said, noting DISA is interested in hearing about industry’s solutions in this space.

Reducing the attack vector and the architecture itself reduces the amount of cybersecurity attacks that DISA has to manually respond to and ultimately ensures resiliency to support mission accomplishment, Norton said.

“Cybersecurity needs to be at the forefront of our operations. Cyber is our battlespace and resiliency in that battlespace is key for our networks, applications and systems,” she said.

Norton also described efforts to automate and orchestrate key defensive processes that will help the team expedite actions that historically were performed manually.

This includes exploring the use of enterprise tools, machine learning, robotics and artificial intelligence to expand the effectiveness of analysis with existing staff, Norton said. These capabilities will use sensor data to help the agency readily identify long-term cybersecurity trends, uncover changes in adversary behavior and develop algorithms to identify suspicious activity.

“We must do this across cybersecurity in order to pace the threat inside cyberspace,” she said.

More In DISA Forecast to Industry

Opinion

How the government came to embrace good-faith hacking of its networks

Federal agencies are inoculating public IT infrastructure by not only listening to the Internet’s Immune System, but proactively inviting healthy input.

French missile double punch adds new naval capability for Europe

Two cruise missiles, timed to hit the same target at the same time from different angles, could help overwhelm enemy air defenses, according to analysts.

Saab unveils technology incubator using Enforcer 3 as test bed

“We are trying to get capability to the fleet in months,” said Erik Smith, the chief executive of Saab's U.S. branch.

Opinion

Lidar: Another emerging technology brought to you by China

More must be done to safeguard U.S. data and prevent dependence on geopolitical adversaries for a critical, emerging technology.

Here are the two companies creating drone wingmen for the US Air Force

The decision marks the service’s most significant step yet as it aims to create a series of drones using autonomous software to fly alongside piloted jets.