SOW_17T0011_redacted.pdf

RFQ No. FA5209-17-T-0011 Attachment

STATEMENT OF WORK

FOR

DEPARTMENT OF THE ARMY

RESEARCH, DEVELOPMENT AND ENGINEERING COMMAND

INTERNATIONAL TECHNOLOGY CENTER-PACIFIC

(ITC-PAC)

SECURITY ASSESSMENT OF THE ROBOT OPERATING SYSTEM

(Document No. W90GQZ-62100042)

1. DESCRIPTION OF SERVICE.

This requirement is to provide financing in support of the research project titled “Security assessment of the robot operating system” lead by Dr. Surya Nepal of the Commonwealth Scientific and Industrial Research Organisation (CSIRO) of Australia.

The goal of this project is two folds: (a) assess the security features of the Robot Operating System (ROS), which is an open source application that runs and simulates cyber physical systems (e.g., robots), and (b) identify the potential vulnerability using a third party vulnerability scanner and develop corresponding solutions for the identified vulnerabilities. The previously stated goal will be achieved through 3 stages: (1) constructing ROS security requirements from existing STIGs and SRGs, (2) testing and validating ROS against the developed security requirements and identifying vulnerabilities, and (3) implementing updates to address the security requirements and the vulnerabilities.

The duration of this Research and Development is 4 months with a 12-month option.

1.2. DELIVERABLES.

1.2.1. First Deliverable (Basic Period) - Project Proposal.

Prior to commencement of work, the contractor shall submit ITC-PAC a Project Proposal which is to measure the progress of the Project, for ITC-PAC’s acceptance.

Project Proposal shall include, at a minimum, the following information:

Project title Investigators

- Name

- Position title

- Organization name

- Address

- Telephone number

- Fax number

- Email address

Concise summary Abstract Objectives Relevance to DoD Background Summary of project plan, expected project result and expected project benefit Project duration Budget details (materials and supply, travel, etc.)

References

1.2.2. Second Deliverable (Basic Period) – Interim Report.

The contractor shall submit an interim report detailing the progress of the completed segments of the project to ITC-PAC at the end of the 2-month stage after commencement of work.

Interim Report shall include, at a minimum, the following information:

Status of project plan.

Progress made in the first 1.5 month.

Projected progress to be made in the next 1 month.

1.2.3. Third Deliverables (Basic Period)

1.2.3.1. Final Report of Basic Period

The contractor shall submit the Final Report of Basic Period to ITC-PAC with all the results, problems and/or discoveries encountered during the project phases within 30 days after the Basic Period ends.

The Final Report of Basic Period shall include, at a minimum, the following information;

- Name

- Position title

- Organization name

- Address

- Telephone number

- Fax number

- Email address

Summary (or Abstract) of the Project Introduction (or Background) Experiment Result & Discussion Conclusion

Acknowledgement Reference

1.2.3.2. Financial Report of Basic Period

Together with the Final Report of Basic Period, the contractor shall deliver the Financial Report of this Project to ITC-PAC.

The Financial Report of Basic Period shall include the cost spent for the Project in the following category:

Labor Cost, Overhead, and Direct Cost (Equipment, Travel, Material & Supply, Publication & Report, Computer Service).

1.2.4. Fourth Deliverables (Option 1 Period) – Project Proposal

Before the Option 1 Period starts, the contractor shall submit ITC-PAC a Project Proposal for Option 1 Period which is to measure the progress of the Project, for ITC-PAC’s acceptance.

Project Proposal shall include, at a minimum, the following information:

- Name

- Position title

- Organization name

- Address

- Telephone number

- Fax number

- Email address

Concise summary Abstract Objectives Relevance to DoD Background Summary of project plan, expected project result and expected project benefit Project duration Budget details (materials and supply, travel, etc.)

References

1.2.5. Fifth Deliverable (Option 1 Period) – Interim Report

The contractor shall submit an interim report detailing the progress of the completed segments of the project to ITC-PAC at the end of the 6-month stage after commencement of Option 1 Period.

Interim Report shall include, at a minimum, the following information:

Status of project plan.

Progress made in the first 6 months.

Projected progress to be made in the next 6 months.

1.2.6. Sixth Deliverables (Option 1 Period)

1.2.6.1. Final Report

The contractor shall submit the Final Report to ITC-PAC with all the results, problems and/or discoveries encountered during the project phases within 30 days after the performance period ends.

The Final Report shall include, at a minimum, the following information;

- Name

- Position title

- Organization name

- Address

- Telephone number

- Fax number

- Email address

Summary (or Abstract) of the Project Introduction (or Background) Experiment Result & Discussion Conclusion Acknowledgement Reference

1.2.6.2. Financial Report

Together with the Final Report, the contractor shall deliver the Financial Report of this Project to

ITC-PAC.

The Financial Report shall include the cost spent for the Project in the following category:

Labor Cost, Overhead, and Direct Cost (Equipment, Travel, Material & Supply, Publication & Report, Computer Service).

1.3. PAYMENTS.

1.3.1. First Payment (Basic Period).

After ITC-PAC’s acceptance of a Project Proposal mentioned above para 1.2.1, the contractor shall submit the first invoice to ITC-PAC. The first payment will be made upon ITC-PAC’s certification of the invoice.

1.3.2. Second Payment (Basic Period).

After ITC-PAC’s acceptance of an interim report mentioned above para 1.2.2, the contractor shall submit the second invoice to ITC-PAC. The second payment will be made upon ITC- PAC’s certification of the invoice.

1.3.3. Third Payment (Basic Period).

After ITC-PAC’s acceptance of the Third Deliverables mentioned above, the contractor shall submit the third invoice to ITC-PAC. The third payment will be made upon ITC-PAC’s certification of the invoice.

1.3.4. Fourth Payment (Option 1 Period).

After ITC-PAC’s acceptance of the Project Proposal for Option 1 Period mentioned above (Fourth Deliverable), the contractor shall submit the fourth invoice to ITC-PAC. The fourth payment will be made upon ITC-PAC’s certification of the invoice.

1.3.5. Fifth Payment (Option 1 Period).

After ITC-PAC’s acceptance of an interim report mentioned above (Fifth Deliverable), the contractor shall submit the fifth invoice to ITC-PAC. The fifth payment will be made upon ITC- PAC’s certification of the invoice.

1.3.6. Sixth Payment (Option 1 Period).

After ITC-PAC’s acceptance of the Sixth Deliverables mentioned above, the contractor shall submit the sixth invoice to ITC-PAC. The sixth payment will be made upon ITC-PAC’s certification of the invoice.

2. GOVERNMENT FURNISHED PROPERTY. No government furnished property shall be provided nor used in this project.

3. GENERAL INFORMATION.

3.1. Contractor Employees. Personnel shall meet or exceed the following requirement:

3.1.1. Contractor shall not hire employees of the United States Government and/or employees otherwise under contract for service to the United States Government if employing such persons would create a conflict of interest, or appearance of a conflict of interest as determined by the contractor. Contractor shall not employ any person who is an employee of DoD, unless such person seeks and receives approval according to DODR 5500.7, Standards of Conduct.