CYBERQUEST 2019

1. Background. Headquarters Department of the Army (HQDA) Executive Order (EXORD) 057-14 (U) established the U.S. Army Cyber Center of Excellence (CCoE) and designated the CCoE Commanding General (CG) as the Force Modernization Proponent for Cyberspace Operations, Signal Communications Networks and Information Services (Signal), and Electronic Warfare (EW); and established the Signal and Cyber Schools. The EXORD further directed the CCoE to partner with the Intelligence Center of Excellence (ICoE) for institutional intelligence support to Cyberspace Operations. To that end, the CG directed the establishment of an annual Prototyping Experiment to identify innovative solutions that can close critical capability gaps relating to Army Warfighting Challenge # 7: Conduct Space and Cyber Electromagnetic Operations and Maintain Communications - How to assure uninterrupted access to critical communications and information links (satellite communications [SATCOM], positioning, navigation, and timing [PNT], and intelligence, surveillance, and reconnaissance [ISR]) across a multi-domain architecture when operating in a contested, congested, and competitive operating environment? 2. Intent. The CCoE will conduct an annual Cyberspace Operations, Signal, and EW Prototyping Experiment called Cyber Quest (CQ) to assess emerging technologies against associated Army capability requirements. This assessment will inform current capability development efforts by validating concepts and determining their doctrine, organization, training, materiel, leadership and education, personnel, and facilities (DOTMLPF) impacts. Cyber Quest will also serve as a venue to inform rapid acquisition capability requirements and technical risk mitigation. Army acquisition and capability development proponents can leverage Cyber Quest outcomes to validate selected candidate solutions for future participation in other Army/Joint exercises and experiments (i.e. Cyber Blitz, Army Capabilities Integration Center (ARCIC) Live Prototype Assessments (ALPA), Army/Joint Warfighting Assessments (AWA/JWA), the Joint Users Interoperability Communications Exercise (JUICE), etc.). 3. Cyber Quest 2019 (CQ 19). The CCoE seeks government, industry, and academic organizations that would be interested in demonstrating Cyberspace Operations, Signal, and/or EW solutions during Cyber Quest 2019, in order to address experiment objectives and focus areas listed below. Each focus area is aligned with the TRADOC Capability Manager (TCM) who is responsible for developing capability requirements that ultimately yield materiel solutions to the Warfighter. 4. Experiment Objective #1. Evaluate how Cyber Electromagnetic Activities (CEMA) capabilities can enhance Mission Command in support of Multi-Domain Operations. Supporting Focus Areas are listed below. a. Cyberspace Situational Understanding (SU) Capability Requirements - TCM Cyber i. Ingest, analyze, correlate, and display relevant cyberspace data from multiple Joint, Army, and non-DOD sources into useful, actionable information for the Warfighter. Focus areas for data sources are: Network topology Network configuration Network health/status Threat intelligence Indications and Warnings Network Incidents Anomalous Network Activity Mission Impact Force Status. ii. Cyberspace SU supporting Army CEMA should correlate and fuse existing and future cyber, movement and maneuver, command and control, intelligence, protection, and fires data to create a depiction, perception, and understanding of cyberspace that enables the delivery of operational effects. b. Unified Network Operations (NETOPS) Capability Requirements - TCM Networks and Services i. Integrate enterprise and tactical NETOPS capabilities into a comprehensive, single, tailorable view that includes tactical radio networks. System attributes should include network planning, modeling/simulations, traffic prioritization, and user troubleshooting assistance. ii. Assess automated threat detection and alert capabilities that provide a damage assessment of affected systems and remediation strategies. iii. Identify capabilities that automate the movement of tactical network nodes from one organizational network to another. iv. Provide LAN and WAN monitoring and management of multiple networks that include status and health of network components, servers, services, and cybersecurity. Provide predictive analysis and alerts of potential failures, network optimization, and recommend solutions. Provide roll-ups of NetOps data to higher echelons for consolidation. c. Electronic Warfare Planning and Management Capability Requirements - TCM EW i. Facilitate the planning and coordination of EW missions to include electronic warfare attack (EA), electronic warfare protection (EP), and electronic warfare support (ES) during all phases of the operation. ii. Ingest, correlate, and filter friendly, threat, and neutral emitter data to make viewing and management of the electronic magnetic spectrum easier. iii. Incorporate an integrated Common Operational Picture (COP). 5. Experiment Objective #2. Assess emerging CEMA capabilities that provide the commander non-kinetic, non-lethal options in support of Multi-Domain Operations. Supporting Focus Areas are listed below. a. Offensive Cyberspace Operations (OCO) Capability Requirements - TCM Cyber i. Provide a tailorable survey platform of the electromagnetic spectrum with a focus on 802.11, cellular, and Bluetooth. The survey platform should generate Packet Capture (PCAP) files and a network map of the physical, logical, and cyber persona layers. ii. Identify capabilities that can deny, degrade, disrupt, destroy, and manipulate secure networks, devices, and applications through the delivery of radio frequency enabled effects. Capabilities should provide the means to rapidly deliver lightweight (small packet size) effects in a tactical environment. b. Electronic Warfare Capability Requirements - TCM EW i. Electronic Attack (EA): As a form of fires, EA involves the use of electromagnetic energy, directed energy, or anti-radiation weapons to attack personnel, facilities, or equipment with the intent of degrading, neutralizing, or destroying enemy combat capability. Capability Requirement: The system must be able to jam radio signals that leverage multiple frequency bands (High Frequency (HF) through Super High Frequency (SHF)), frequency hopping technology, and various waveforms. ii. Electronic Warfare Support (ES): The Army needs a capability to search, intercept, identify, and locate sources of intentional and unintentional radiated electromagnetic energy to enable immediate threat recognition, targeting, and planning in support of future operations. Capability Requirement: The capability must identify, categorize, Direction Find (DF), and geo-locate radio frequency signals across multiple bands, (HF through SHF). EW sensors should be remotely managed by the planning and management tool. 6. Experiment Objective #3. Identify emerging cyberspace and EW capabilities and procedures that will protect and defend the force in support of Multi-Domain Operations. a. Defensive Cyberspace Operations (DCO) Capability Requirements - TCM Cyber. i. Identify capabilities that dynamically reshape cyberspace based on mission and threat - to include obfuscation, deception, and evasion. Characteristics of the capability include dynamic networks, platforms, runtime environments, software, and data. ii. Assess technologies that have autonomous active cyber defense. The primary measure of effectiveness is the ability to orchestrate and automate functions utilizing a playbook to execute actions. These actions are based on intelligence using existing and future DOD capabilities. Automated functions could include a myriad of tailored response actions such as block, neutralize, deceive, redirect, etc., upon the real-time discovery of specific advanced or sophisticated cyber threats tactics, techniques, and procedures. This capability includes sensor-based artificial intelligence that learns the network architecture and associated behaviors. b. Electronic Protection (EP) - TCM EW. Capability Requirement: Conduct spectrum management, spectrum analysis, and Assured Positioning, Navigation and Timing (APNT). c. Protect the Network Capability Requirement - TCM N&S. i. Tactical network Line of Sight (LoS), Beyond Line of Sight, (BLoS), and SATCOM transport systems that have embedded Low Probability of Intercept/Low Probability of Detection (LPI/LPD), and Low Probability of Exploitation (LPE) characteristics. Solutions must come in a variety of Size, Weight, and Power (SWaP) configurations that can easily support mounted, dismounted or fixed station operations without loss of capability. ii. Improved tactical LoS and BLoS solutions that incorporate scalable mesh capabilities, spectrum awareness/agility, and advanced antenna technologies capable of supporting large amounts of spectrum within a small form…