BAA-RQKS-2015-0008-IndustryDayBriefing.pdf

20 May 2015

Air Force Research Laboratory

Integrity Service Excellence

DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

AFRL/RYWA

Avionics Vulnerability Mitigation Branch

Sensors Directorate

Air Force Research Laboratory

Avionics Vulnerability

Assessment, Mitigation and

Protection (AVAMP)

BAA-RQKS-2015-0008

21 MAY 2015

DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

Program Objective

Investigate and develop methodologies, tools, techniques, and capabilities to identify susceptibilities and mitigate vulnerabilities in avionics systems and to protect the avionics against cyber-attack.

Acquisition Strategy

• Period of Performance

– 60 months ordering period

– 84 months total performance

• Value: $47.9M

• Anticipated Number of Awards: Two or more

– IDIQ

– C-type contracts

• Anticipated Award Date: November 2015

• Is this a follow-on?

– No

Intellectual Property

• Associate contractors agreements may be required

• AFRL expects unlimited rights with this effort

Security

• Work up to TS/SCI, SAP

• No classified proposals

• Export control restrictions apply

• No Foreign participation

Performance Location

• Research and development can occur either onsite at AFRL or at appropriately equipped contractor facilities

• RYWA will strive for a strong onsite R&D program, leveraging offsite R&D specialists as needed to maximize productivity

• Integration and test must be performed on-site

– Integration is expected to occur throughout the performance of the research, not just at the end of the effort

– Developed technology must be integrated with other products and technologies in the AVAMP laboratory

– Incremental developments will be delivered and integrated for test, demonstration, experimentation purposes

– The goal is demonstration of the capabilities, test of developed technology, and experimentation with developed technology

Facilities and Resources

• Lab space

– Approx. 3100 sq. ft.

– Full commercial avionics suite

– Military avionics research platform

– Future avionics test bed

• Office space

– 30 in-house contractors

8 DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

Scope

• Advance cyber security of manned and unmanned aircraft, ISR platforms, and other future weapon systems to achieve mission assurance

• Attack vectors to be prevented or mitigated include physical, remote, and supply chain access

• Threats include nation-state adversaries with skills and resources on par with the U.S.

9 DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

Goals

• Reduce likelihood of system compromise (try to keep the threat out) and develop a “fight through the attack” capability (to have a recourse if/when they get in)

– Reduce susceptibilities; reduce threat access to critical software, firmware, and data; and detect, respond, and adapt to never-before-seen attacks offline and during mission operations

– Prevent or mitigate physical, remote, and supply chain attacks

– Prevent exploitation, tampering and exfiltration of critical software, firmware and data by nation-state adversaries

– Prevent unintended cyber-physical effects

10 DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

Objectives

• Research & develop processes, methods, and tools to discover weaknesses and vulnerabilities

• Research and develop methods to characterize weaknesses and vulnerabilities

• Research and develop methods to mitigate cyber weaknesses and vulnerabilities

• Research & develop software-only and hardware-assisted technologies that protect against cyber threats, offline and in real-time to provide mission assurance

• Research and develop processes, methods, and tools to design-in and build-in cyber resilience

• Develop, operate, and support the appropriate test-bed(s) to verify and validate the processes, methods, and tools created in this research effort

11 DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

Technical Areas of Interest (1 of 2)

• Avionics Cyber Vulnerability Characterization

• Avionics Cyber Vulnerability Mitigation Techniques

• Automated Software Analysis and Assurance Techniques

• Real-time Cyber Threat Detection and Response for Avionics Systems

12 DISTRIBUTION A - Approved for Public Release - 88ABW 11-1212 / 2015-2119

• Dynamic Learning and Adaptation for Avionics Protections

• Cyber-Resilient Avionics Systems

• Test and Integration

• Application, Exercise and Field Test Support

Technical Areas of Interest (2 of 2)