SSJ_17T0011_redacted.pdf

Single Source Justification (Simplified Acquisition)

Section A: General Contract Information

Contracting Activity: U.S. Army International Technology Center Pacific (ITC-PAC)

Purchase Request/Identification Number: W90GQZ-62100042

Project/Program Name: Security assessment of the robot operating system

Estimated Contract Cost (including Options): $144,000

Section B: Description of the Supplies/Services Required

This requirement is to provide financing in support of the research project titled “Security assessment of the robot operating system (ROS)” lead by Dr. Surya Nepal of the Commonwealth Scientific and Industrial Research Organisation (CSIRO) of Australia. The goal of this project is two folds: (a) assess the security features of the Robot Operating System (ROS), which is an open source application that runs and simulates cyber physical systems (e.g., robots), and (b) identify the potential vulnerability using a third party vulnerability scanner and develop corresponding solutions for the identified vulnerabilities. The previously stated goal will be achieved through 3 stages: (1) constructing ROS security requirements from existing STIGs and SRGs, (2) testing and validating ROS against the developed security requirements and identifying vulnerabilities, and (3) implementing updates to address the security requirements and the vulnerabilities.

The duration of this Research and Development is 4 months with an option for an additional 12 months. This acquisition will be a firm-fixed price purchase order in the amount of $48,000 for the basic period and $96,000 for the option 1 period, the total amount of $144,000.

The proposed contractor is: (the principal investigator (PI)) Dr. Surya Nepal Commonwealth Scientific and Industrial Research Organisation (CSIRO) Corner Vimiera & Pembroke Roads, Marsfield, NSW 2122, Australia Tel: +61 2 9372 4256 Fax: +61 2 9372 4545 Email: surya.nepal@data61.csiro.au mailto:surya.nepal@data61.csiro.au

Section C: Justification for Soliciting from a Single Source

ITC-PAC program manager Dr. Robert Kania, found this project from a lead given to him at a meeting hosted by ONR-G at the University of Sydney while he was searching areas of his expertise for potential sources of basic and applied research. Dr. Surya Nepal and his group have exceptional expertise in Hardware and Software Security assessment. This research is the only source directly relevant and related to the current efforts being worked by the Tank-Automotive Research, Development, and Engineering Command (TARDEC) as identified by TARDEC’s SME Calvin Cheung. Dr. Nepal, and his outstanding capability in the area of Hardware and Software Security assessment as it is applied to ROS are of great interest to the TARDEC.

This funding is for research and development project titled “Security assessment of the robot operating system”. Because this project will feature the latest scientific innovation in this field, there is no parallel value to be found in the commercial sector.

ITC-PAC certifies the price of $48,000 for the first period, with an additional $96,000 for the option, as a fair and reasonable for this type of project. This certification is based on the following facts:

The funds will be used to support research and development efforts at CSRIO, by Dr. Nepal with collaborate work with Tank- Automotive Research, Development, and Engineering Command (TARDEC) in Warren, MI. The cost estimates are as follows:

Basic Period Material and supplies $0 Equip. & Facility $0 PI/Co-PI Labor $20,000 Post Doc./Researcher Labor $26,000 Travel cost: $2000 Publication cost: $0 Total: $48, 000

Option 1 Period Material and supplies $0 Equip. & Facility $0 PI/Co-PI Labor $40,000 Post Doc./Researcher Labor $52,000 Travel cost: $4000 Publication cost: $0 Total: $96, 000

The above mentioned cost is based on the following and considered to be fair and reasonable.

• PI/Co-PI Labor are for:

[Details provided in attachment: US Army Budget Details_ROS_20160727.docx]

Total expenses PI/Co-PI Labor = $20,000 These expenses for PI/Co-PI Labor are fair and reasonable.

• Post-Doctoral / Research Assistant Labor are for:

[Details provided in attachment: US Army Budget Details_ROS_20160727.docx]

Total expenses Post-Doctoral / Research Assistant Labor = $46,000 These expenses Post-Doctoral / Research Assistant Labor are fair and reasonable.

• Travel costs are for:

[Details provided in attachment: US Army Budget Details_ROS_20160727.docx]

Total cost for travel = $2000 This travel expense is fair and reasonable.

The Government will receive deliverables such as:

• Project Proposal

• Project Interim Report

• Project Final Report

Section D: Efforts to Obtain Competition

ITC-PAC program manager Dr. Robert Kania, found this project from a lead given to him at a meeting hosted by ONR-G at the University of Sydney while he was searching areas of his expertise for potential sources of basic and applied research. He searched for all sources that he identifies as technically capable. He found that the primary/lead organizations for this project are Dr. Surya Nepal of the Commonwealth Scientific and Industrial Research Organisation (CSIRO) of Australia, who are considered the leading research scientists in the area of in Hardware and Software Security assessment. This was concurred by the TARDEC SME back in the states, Calvin Cheung. Dr. Surya Nepal is the only source identified expressing interest in developing proof of concept studies on this research and development project.

Section E: Steps to Preclude Future Single Source Awards

This is a one-time purchase action, but ITC-PAC keeps searching areas of expertise for potential sources of basic research.

Section F: Determination

Technical/Requirements Personnel’s Certification:

As evidenced by signature below, the technical and/or requirements personnel have certified that any supporting data contained herein which is their responsibility is both accurate and complete.

Date Typed Name and Rank/Grade of Contracting Officer

KENNETH EVENSEN

Director, US ARMY ITC-PAC

Signature of Contracting Officer

Contracting Officer's Determination: I have determined, in accordance with FAR 13.106-1(b)(1), that the circumstances of this contract action deem only a single source is reasonably available.

Date Typed Name and Rank/Grade of Contracting Officer Signature of Contracting Officer

Ken.Evensen Typewritten Text 25 Aug 2016