Attachment 1 837 TRS Fundamentals of Cyber Networks Security Course SOO - Final 1.pdf

502 CONS/JBKAE FA301623U0304

STATEMENT OF OBJECTIVES (SOO)

837 TRS Fundamentals of Cyber Networks/Security Equipment

1 Aug 23

1. Introduction: The objectives of the portable networking solution will provide an immersive and practical hands-on learning environment for teaching the Fundamentals of Cyber Networks and Security Course. It will empower students to deploy and manage mobile network solutions, handle virtual machine networks, detect and defend against cyber threats, and develop a solid understanding of cybersecurity principles and practices.

2. Mission/Background: The Inter-American Air Forces Academy (IAAFA) provides military education and training to military personnel of the Americas and other eligible Partner Nations. The Fundamentals of Cyber Networks and Security Course initial projected student load is thirty-six (36) international students per year with that number increasing as the need for cyber security continues to grow. This course is designed for students to develop cyber networking skills and cyber security knowledge. The course instruction includes Standards and Evaluation, Infrastructure and Connectivity, Threat and Vulnerability Detection, Network Fundamentals including Operations and Configurations, Wireless Networks, Identity and Access Control, Educating and Protecting the User, Hardening of Operating Systems, Physical Security, and finally, Security-related Directives and Procedures. Students learn to identify user problems, such as data access needs, security violations, and changes in programming. Areas of training focus on how to create training programs for users and foster security consciousness to ensure system integrity and improve server/net efficiency.

Students also learn to supervise data use and regulate its access in order to safeguard file information. The course finalizes in a team-based CAPSTONE event where students utilize the processes and procedures learned throughout the course and implement them in a real-world tactical scenario.

3. Objectives:

3.1. Objective 1: Comprehensive Teaching of Fundamentals: The primary objective of the portable networking solution is to provide comprehensive teaching of the fundamentals of cyber networks and security. The solution should cover a wide range of topics, including network architecture, protocols, network design principles, cybersecurity concepts, and best practices. It should equip students with a strong foundation in understanding the components, principles, and challenges of cyber networks and security. The portable network solution must have the ability to be customized to meet specific educational requirements and adapt to evolving needs will be evaluated. It should be flexible enough to accommodate changes and updates over time. Overall, the proposed solution should have the capability of upgrades and retrofits in the future should the need arise. All equipment proposed for this requirement must be approved according to the DODIN/APL (https://aplits.disa.mil/).

3.2. Objective 2: Mobile Network Deployment and Management: The portable networking solution should enable students to learn and practice deploying and managing mobile network solutions in the field. It should provide a simulated or physical mobile network environment that allows students to configure and optimize network components such as routers, switches, access points, and mobile devices. The solution should offer hands-on experience in setting up and managing mobile networks, addressing connectivity, performance, and security considerations.

3.3. Objective 3: Virtual Machine Management and Networking: Another key objective is to teach students how to deploy and manage a network of virtual machines (VMs). The portable networking solution should provide tools and interfaces for creating, configuring, and maintaining VM instances. Students should be able to customize VMs, allocate resources, and establish network connections between VMs.

The solution should enable students to practice essential skills in managing virtualized environments and networking components within the VM network.

https://aplits.disa.mil/

3.4. Objective 4: Detection and Defense against Cyber Threats: The portable networking solution should facilitate hands-on learning of detecting and defending against cyber threats. It should include built-in security features and simulations that allow students to identify and respond to various types of threats, such as malware, network attacks, and data breaches. The solution should provide practical exercises and scenarios where students can apply their knowledge of cybersecurity principles to detect, analyze, and mitigate potential threats.

3.5. Objective 5: Secure Communication and Encryption: A critical objective is to teach students about secure communication and encryption techniques. The portable networking solution should support secure networking protocols, such as virtual private networks (VPNs), encryption algorithms, and secure socket layers (SSL). It should allow students to configure and manage secure communication channels and apply encryption mechanisms to protect data in transit. The solution should emphasize the importance of confidentiality, integrity, and authentication in secure network communication.

3.6. Objective 6: Realistic Cyber Network Simulations: The portable networking solution should enable realistic cyber network simulations to enhance the learning experience. It should provide features and tools for creating simulated network environments, including virtual routers, firewalls, intrusion detection systems, and other relevant security components. The solution should support network traffic generation, capture, and analysis, allowing students to practice detecting and mitigating cyber threats in a controlled and immersive environment.

3.7. Objective 7: Documentation and Support - The portable networking solution should be accompanied by comprehensive documentation, including installation guides, user manuals, and troubleshooting resources. It should also provide access to technical support channels, such as online forums, knowledge bases, and customer service representatives, to assist users in resolving any issues or inquiries related to the solution. On-site support must be available within 24 hours.

3.8. Objective 8: Scalability: Another key objective is to establish reliable and secure interconnection to provide a seamless networking infrastructure that enables efficient communication and data transfer among the VMs. It should support various networking protocols, including virtual LANs (VLANs), virtual private networks (VPNs), and software-defined networking (SDN) technologies. The interconnection should be scalable, allowing for easy expansion or reduction of the VM network as needed. It should be able to handle increased workloads and traffic demands without compromising performance. The solution should include performance optimization features, such as load balancing, traffic shaping, and quality of service (QoS) controls, to ensure efficient resource utilization and optimal network performance for the VMs.

3.9. Objective 9: Portability: The solution should be designed with portability in mind, allowing it to be easily deployed and operated across different hardware and software environments. It should be compatible with popular virtualization platforms, such as VMware, Hyper-V, or other platforms, ensuring interoperability and flexibility. The portable networking solution should support different deployment models, including on-premises or in the field environments. The solution should be contained in a rugged, portable enclosure/s small enough to be transported in common government vehicles such as Chevrolet Express/Ford Transit 15-passenger vans or any pick-up truck bed. Solution must contain at least one (1) router, one (1) switch, one (1) server, and one (1) hardware firewall.

3.10. Objective 10: Ease of Use and Management - A user-friendly interface and intuitive management tools are essential for the portable networking solution. It should provide a centralized management console or dashboard that allows administrators to easily configure, monitor, and troubleshoot the at least fifteen VMs and their networking components. The solution should support automation and orchestration capabilities to simplify administrative tasks, reducing manual effort and increasing operational efficiency.

4. Upon Contract Award the following Contract Data Requirements List (CDRL) will be required: The Contract Data Requirements List (CDRL) outlines the specific data deliverables and documentation that the vendor or provider is required to submit to the educational institution as part of the contract. The Contract Data Requirements List (CDRL) provides a structured approach to deliver essential data and documentation, enabling the educational institution to effectively implement and utilize the portable networking solution for teaching the fundamentals of cyber networks and security. The vendor's compliance with the CDRL will be a critical factor in ensuring the successful delivery and deployment of the solution. The CDRL serves as a roadmap for organizing and delivering essential information and materials related to the portable networking solution. The following CDRL items are to be included:

4.1. CDRL Item 001 - Technical Documentation: The vendor shall provide comprehensive technical documentation, including user manuals, installation guides, configuration guides, and system administration documentation. The documentation should cover all aspects of the portable networking solution, enabling educators and administrators to effectively use and manage the system.

4.2. CDRL Item 002 - Security Compliance Report: The vendor shall submit a security compliance report that details the solution's adherence to industry best practices and standards. It should outline the security features, encryption methods, and measures taken to protect sensitive data and ensure the integrity of the portable networking solution.

4.3. CDRL Item 003 - System Configuration Templates: The vendor shall include system configuration templates that expedite the initial setup of the portable networking solution. These templates should serve as a starting point for educators and administrators to configure the system based on their specific requirements.

4.4. CDRL Item 004 - Collaboration and Support Resources: The vendor shall provide collaborative resources, such as guides on promoting teamwork and interactive learning within the solution.

Additionally, they should offer support resources, such as online forums, knowledge bases, and customer service contact details, to assist users in resolving queries or issues.

4.5. CDRL Item 005 - Source Code and Licensing Documentation: If applicable, the vendor shall provide the necessary source code and licensing documentation for any open-source components or custom developments incorporated within the portable networking solution. This will ensure compliance with licensing requirements and intellectual property considerations.

5. Appendixes:

5.1. Syllabus for Fundamentals of Cyber Network and Security Course

5.2. Example Network Diagram