The U.S. Army is searching for a cloud-based platform that it might probably use to simulate a real-world attacker hitting the Department of Defense Information Network (DoDIN).
In a request for data (RFI), the United States Army Contracting Command?Intelligence and Security Command (ACC?INSCOM) mentioned it’s within the strategy of figuring out the acquisition technique for a cloud-based platform that features a devoted host on the web that may simulate U.S. adversaries throughout operations by using industrial web addresses as a real-world attacker hitting the DoDIN.
The eventual contractor will want to present a devoted host that has a pool of 20 noncontiguous Internet Protocol (IP) addresses to conduct operations from a devoted digital industrial internet server. The RFI specifies that the devoted server can not host another group’s digital machines or information, and should present isolation of any information residing on the server. ACC?INSCOM will use the server as an IP proxy server, and mentioned it have to be ready to meet Impact Level 4 and 5 safety necessities. The server have to be at the least reasonable stage below National Institute of Standards and Technology 800-53, Committee on National Security System 1253, and Federal Risk and Authorization Management Program controls.
ACC-INSCOM explains that through the adversarial menace simulation, there’s a risk that personally identifiable data, medical information, and mission information might be assessed. As a end result, the server should defend information per Impact Level 4 safety necessities.
The RFI additionally notes that digital server entry from unauthorized entities may enable for entry to the 20 noncontiguous IPs, which would supply the opportunity of being spoofed for entry in opposition to the mission’s evaluation goal. However, ACC-INSCOM notes that no information will reside on the digital servers, as an alternative, all information will reside on the federal government’s machines.
ACC-INSCOM mentioned it anticipates awarding a single award, firm-fixed value, one 12 months contract with 4 one 12 months choice durations.
