To Harden Networks, Cybersecurity Must Be 'Baked In' From Start

As cyberthreats rise, and military budgets decline, the acquisition community needs to "bake in" computer security from the start, said members of industry.
Too often, cybersecurity is an afterthought for weapon systems designers, said Mike Papay, vice president and chief information security officer for Northrop Grumman. Adding software patches, or software after a system is fielded is an expensive proposition. Network security should be an integral part of the system during the early stages of development. In the long run, that can save companies and the government money, he added. 
"Cyber-hardened systems and platforms allow us to deliver on mission requirements … [and] provide affordability," Papay said May 21 at the National Press Club in Washington, D.C.
The acquisition community needs to place more emphasis on integrating cybersecurity software during the beginning of a development program, he said.
"This is one of those ideas that the acquisition community is just coming to grips with now. They realize that this is important… [But] a lot of people want to focus on the capabilities of the system and not necessarily on security. Well, they don't realize that if you don't pay attention at least to the embedded cybersecurity piece of it then you don’t get any of the capabilities," said Papay.
The government cannot wait until a system is completed to install network security software, said Randy Belote, vice president of strategic communications for Northrop Grumman.
"We promote embedding cyberprotection in … systems while they are in development phase. Clearly, it is the most affordable approach to combat the threat," said Belote. "If we build in cyberprotections after the system or platform is designed or fielded, it is simply too late."
In a time of tight budgets, cybersecurity cannot be an afterthought, said Pat Antkowiak, vice president and general manager of Northrop Grumman's advanced concepts and technologies division.
Already, Northrop Grumman has designed some of its products with cybersecurity software installed during the early phases of development. The Navy's Consolidated Afloat Networks and Enterprise Services program, an initiative intended to improve interoperability across the fleet, is one example, company officials said. The Air Force's Air and Space Operations Center is another.
Designing systems with open architectures is also another way to save money down the line when modifications or upgrades are needed, said Greg Schmidt, vice president and general manager of Northrop Grumman's training solutions division.
As for how much such initiatives could save a company or the government over the long run, Papay could not give a specific number.
Photo Credit: Thinkstock

Topics: Cyber, Cybersecurity, Infotech, Infotech, Architecture