BAA-RQKS-2015-0008.pdf

Avionics Vulnerability Assessment Mitigation and Protection (AVAMP) BAA Distribution A

FedBizOpps Notification of Contract Action (NOCA)

BROAD AGENCY ANNOUNCEMENT

BAA-RQKS-2015-0008

1. NAICS CODE: 541712

2. FEDERAL AGENCY NAME: United States Air Force (USAF) Air Force Research

Laboratory (AFRL)

3. BROAD AGENCY ANOUNCEMENT TITLE: Avionics Vulnerability Assessment

Mitigation and Protection (AVAMP)

4. BROAD AGENCY ANNOUNCEMENT TYPE: One-Step Closed Broad Agency

Announcement

5. PROPOSAL DUE DATE AND TIME: A call requesting proposals for this topic is anticipated to be published within approximately sixty (60) days. This is not a call for proposals. Do not submit proposals at this time. Any proposals received at this time will be disregarded. The anticipated funding listed below reflects estimated funding only. This estimate is not a promise of funding. Funding is uncertain and is subject to change. Changes in availability may occur at the discretion of the Government.

6. PROGRAM DESCRIPTION:

STATEMENT OF OBJECTIVE/NEEDS: The objective of this research program is to investigate and develop methodologies, tools, techniques, and capabilities to identify susceptibilities and mitigate vulnerabilities in avionics systems and to protect the avionics against cyber-attack. Responsive research will explore new and emerging concepts related to development, integration, assessment, evaluation, and demonstration of embedded system cyber security technologies. Attack vectors of interest include physical, remote, and supply chain access. For this solicitation, avionics is defined to include both manned and remotely piloted vehicles, on-board Intelligence, Surveillance, and Reconnaissance (ISR) systems, munitions, and any equipment, component, or subsystem that could compromise mission assurance of the Air Force weapon system.

Mitigation and protection techniques and solutions developed under this program are expected to interface and interoperate with anti-tamper and open avionics system architectures and be applied to a wide-range of associated platforms and in contested environments including but not limited to, electronic warfare systems, space systems, and mobile devices.

Identified technical challenges to accomplish objectives include, but are not limited to,

(1) developing automated tools to support avionics vulnerability assessments, (2) developing automated reverse engineering, program understanding and software assurance tools to identify and detect weaknesses in avionics software/firmware/hardware, (3) developing malware detection tools and countermeasures, and (4) developing techniques to detect, respond and adapt to never-before-seen attacks in operationally relevant time scales.

The AVAMP program will develop, mature, and demonstrate avionics cyber vulnerability mitigation and protection technologies to achieve mission assurance. The effort will develop technology plans for research and development to meet the requirements as identified in specific task areas. The program will integrate, test and evaluate these technologies. The program will support research and development in the following areas: (1) Avionics Cyber Vulnerability Characterization, (2) Avionics Cyber

Vulnerability Mitigation Techniques, (3) Automated Software Analysis and Assurance

Techniques, (4) Real-time Cyber Threat Detection and Response for Avionics Systems,

(5) Dynamic Learning and Adaptation for Avionics Protections, and (6) Cyber-Resilient

Avionics Systems, each with specific objectives defined within task orders.

DELIVERABLE ITEMS:

Monthly Funds and Man-hour Expenditure Reports

Monthly R & D Status Reports

Quarterly Contract Funds Status Reports

Project Planning Chart

Test/Inspection Reports as required

Presentation Material as required

Draft and reproducible Final Report

Software

Source Code

Software Document Deliverables

Software User Manual

Software Test Plan

Software Test Report

Hardware

Hardware Test Plan

Hardware User Manual

SCHEDULE: The Air Force anticipates awarding two (2) IDIQ contracts with a technical period of performance of 84 months and a 60 month ordering period.

7. AWARD INFORMATION:

ANTICIPATED FUNDING: It is estimated that the total value of the contracts will be

$47.9 million.

ANTICIPATED NUMBER OF AWARDS: Two or more.

ANTICIPATED AWARD DATE: November 2015

8. OTHER:

General OPSEC procedures, policies and awareness are required in an effort to reduce program vulnerability from successful adversary collection and exploitation of critical information. OPSEC will be applied throughout the lifecycle of the contract. The

Critical Information List will be provided upon request by the RYOY Information

Protection Office. While working on the government installation OPSEC will be provided by the “RYOY Information Protection Office”.

The contractor shall be required to deliver all hardware, software, and associated data developed and utilized in the development of any resulting contract. It is anticipated that a BAA providing details into this program will be released in next 60 days timeframe; the

BAA will be made available at www.fbo.gov. Other business opportunities for AFRL are also available at www.fbo.gov. Any questions may be directed to the contracting or technical points of contact listed in the announcement.

9. TECHNICAL POC: Ms. Lisa J. Jones, AFRL/RYWA

Project Engineer/Program Manager

Phone: 937-528-8018

Email: lisa.jones.6@us.af.mil

Address: 2241 Avionics Circle

WPAFB, OH 45433

10. CONTRACTING POC: Ms. Maureen Grandon, AFRL/RQKSE

Contract Specialist

Phone: 937-713-9959

Email: maureen.grandon@us.af.mil

Address: 2130 8th Street, Bldg. 45

WPAFB, OH 45433

THIS IS NOT A CALL FOR PROPOSALS.

DO NOT SUBMIT PROPOSALS AT THIS TIME.

ANY PROPOSALS RECEIVED WILL BE DISREGARDED.

http://www.fbo.gov/ http://www.fbo.gov/