U. S. Coast Guard’s Role in Port Security

– The Threat. What we can do individually to combat it – What we can do to mitigate the threat organizationally, teach/train, and know/do – Business is good!!! People with Cyber/IA/Intel skills continue in high demand – Port Security in/through/with USCG – AFCEA personal and career benefits to RADM Day’s career – Relationship between CG CYBERCOM and US CYBERCOM; how fits in CG structure – How CG CYBERCOM works w/ Marine Transportation System to complete missions

Young AFCEANs Southern New England (SNE) Chapter

Welcomes RADM Robert J. Day

USCG CIO & Chief CG-CYBERCOM March 25, 2014

Armed Forces Communications and Electronics Association

2

Schedule • 1300-1305 Welcome, Opening Remarks, Pledge of Allegiance, AFCEA Benefits • 1305-1310 Recognition YAC SNE Co-Leadership, Presentation to Mr. E Yester • 1310-1315 Cadet Cybersecurity Demonstration • 1315-1318 Introduce RADM Robert E. Day Jr, USCG CIO & Chief CG-CYBERCOM • 1318-1415 RADM Day – presentation • 1415-1455 Questions & Answers (floor microphones, 90 seconds per request) • 1455-1500 Presentation of Gratitude Certif’s: RADM Day, RADM Stosz • 1500-1505 Announcements

– 1555 Gather at McAllister Hall Front Lobby for a walking tour through USCGA (Cadet 2/c Campbell & 2/c Taylor escort)

– AFCEA SNE Chapter Meeting & Tour - GD Elect Boat New London, Late APR 2014, YAC hosted – AFCEA SNE Professional Development Series 02APR2014 Middletown RI 0830-1700 (Mr. Joe Loda or

Mr. Tim Cathcart)

• 1505-1555 Networking • 1555 Close meeting, Gather for Walking tour around USCGA

3

AFCEA Why It’s ‘Worth It’

4

AFCEA Why It’s ‘Worth It’

5

AFCEA Why It’s ‘Worth It’

6

7

Pg 56!

Val Arris – YAC Mentor • Ms. Valerie M. Arris Biography • Research General Engineer & COR – C4ISR Branch

U.S. Coast Guard – Research & Development Center • Val Arris’ RF-COMM/Intel/Cyber career began

with Advanced Micro Devices 4-32 bit aviation/GPS guidance systems, includes BSEE University of Texas 1994, Motorola/Freescale communication system design leadership roles, ARM Ltd. integrated circuit design program management, and General Dynamics intelligence community multi-level-secure systems engineering. While pursuing her M.S. Systems Engineering at SMU she came to USCG to help advance capabilities and vet system of systems that serve USCG’s 11 top-secret through unclassified missions. Val mentors mobile comm interoperability, is an ANSI delegate supporting N-AIS, led American Red Cross BOD during Katrina/Rita joint-response efforts, has 25+ years guiding young engineers to high-performance and joint-operation capabilities, and began volunteering at AFCEA 2008. Primarily a S Cali and Austin/Alamo TX resident, since 2012 she’s been exploring New England with her field dog Leia, and occasionally catching sight of her USCG CGC Mackinaw DWO Ensign triathlete.

LCDR Steve Myers - YAC • LCDR Steven Myers Biography • Assistant Professor

Engineering Department, Electrical Engineering Section U.S. Coast Guard Academy

• LCDR Steven Myers graduated from the Coast Guard Academy in 2003 with honors. Upon graduation, LCDR Myers served as Engineer Officer in Training (EOIT) and Damage Control Assistant onboard USCGC Forward (WMEC-911) in Portsmouth, Virginia. In 2005, he was selected for the CG Graduate Program and attended the University of Wisconsin - Madison where he earned a M.S. Degree in Electrical and Computer Engineering. Following his graduate studies, LCDR Myers was assigned to the Command, Control, and Communications Engineering Center (C3CEN) in Portsmouth, Virginia where he was the lead software integrator for the Shipboard Command and Control (C2) System (SCCS) and the new SEAWATCH C2 system. The SEAWATCH system will be installed on the new Fast Response Cutter (FRC) as well as all other Deepwater cutters. LCDR Myers is currently assigned to the Academy to teach in the Department of Engineering, Electrical Section. He resides in Ledyard, CT with his wife and two daughters.

LT Eleanor Garcia - YAC • LT Eleanor L. Garcia Biography • Instructor

Humanities Department Deputy Director, Strategic Intelligence Studies U.S. Coast Guard Academy

• Prior to arriving at the Academy in July 2013, Lieutenant Garcia was the Deputy Director of Operation Bahamas Turks & Caicos (OPBAT), a combined Coast Guard, DEA, CBP, State Dept., and Government of The Bahamas partnership to combat drug smuggling to and from The Bahamas, also responsible for prosecuting human smuggling and search and rescue cases throughout the area. Prior to OPBAT, she was an Atlantic Area Intelligence (LANT-2) maritime counterdrug intelligence analyst, networking with national level intelligence and collaborating counterdrug statistics for Coast Guard operational units and decision makers. While at LANT-2, she also provided statistical and editing support for the Interagency Assessment for Cocaine Movement, a national-level intelligence interagency publication. She received her Master of Arts in Intelligence Studies from American Military University while serving at LANT-2. From 2006 to 2008, she served as a Deck Watch Officer on the USCGC VIGILANT (WMEC-617) and held the collateral duties of Assistant Navigator, Electronic Materials Officer, and Command Intelligence Officer. She is a 2006 graduate the United States Coast Guard Academy, graduating with a Bachelor of Science in Marine and Environmental Science. As a member of AFCEA, Lieutenant Garcia hopes to increase her knowledge of intelligence through networking with AFCEA’s diverse members.

Kevin P. Smith – YAC

• Kevin P. Smith Biography • Senior Engineer – General Dynamics: Electric Boat

Submarine Warfare Federated Tactical Systems (SWFTS) Systems Engineer and Information Security Analyst

• Kevin Smith graduated with honors from Western New England College in 2008, receiving a Bachelors of Science in Electrical Engineering. Upon graduation, Kevin accepted an engineering position at General Dynamics: Electric Boat assisting in the development of the Propulsion Plant Monitoring and Control (PPMC) system, as well as the Propulsion Plant Manual (PPM), for the CVN-78 aircraft carrier. In December of 2008, Kevin enrolled in the Engineering technical rotation program where he began work in installation and test of the Common Submarine Radio Room (CSRR) for the Virginia platform. This rotation was a 6 month activity, and since that time he has supported the SWFTS program for Virginia and Ohio Replacement platforms. During this time he oversaw Certification and Accreditation activities of the Electric Boat developed subsystems. This information Assurance activity led him to start an independent research and development team focused on defensive penetration testing and vulnerability analysis. Kevin currently maintains two information security certifications, GIAC Security Essentials (GSEC) and GIAC Certified Incident Handler (GCIH) . These certifications are recognized in DoD 8570 as qualification for Information Assurance Technical Level III. Kevin hopes to make new contacts in the information security field, and to expand user knowledge pertaining to the existing and evolving threats affecting our information systems.

LT Mike Grochowski – YAC

• LT Michael J Grochowski Biography • RF Engineer and PM – C4ISR Branch

U.S. Coast Guard – Research & Development Center • LT Grochowski graduated U.S. Coast Guard Academy

2004 with a Bachelors of Science in Electrical Engineering. Upon graduation, Mike’s first tour was a Deck Watch Officer (DWO) aboard the Coast Guard Cutter ACACIA Charlevoix MI. The following four years he served as Program Manager (PM) for software applications (e.g. AAPS, IATONIS, SLDMB, NVMC). Rotating into North Carolina State University Mike received his MS Electrical Engineering 2012. As a member of AFCEA Lieutenant Grochowski hopes to glean novel leadership techniques from AFCEA experts and brainstorm with technologists that help him guide joint-agency RF-Communication systems, modeling and simulation.

Eric J. Yester - YAC

Eric J. Yester Biography Engineer II – General Dynamics: Electric Boat

OHIO Replacement Program (ORP) Strategic Weapon Systems Electronic Systems Engineer

` Eric Yester graduated from Western New England College in 2008, receiving a Bachelors of Science in Electrical Engineering with a Computer Concentration. Upon graduation, Eric accepted an engineering position at General Dynamics: Electric Boat assisting in the development of the Strategic Weapon Systems Electronic Systems for the OHIO Replacement Program (ORP). In 2012 Kevin Smith pulled him into the Information Assurance independent research and development team focused on defensive penetration testing and vulnerability analysis. Eric currently maintains two information security certifications, GIAC Security Essentials (GSEC) and GIAC Certified Incident Handler (GCIH). These certifications are recognized in DoD 8570 as qualification for Information Assurance Technical Level III. Eric hopes to make new contacts in the information security field, and to expand user knowledge pertaining to the existing and evolving threats affecting our information systems.

DIR Young AFCEAN Affairs • Objectives and Plans: 100% success ramp up

– Spiral 1: CGA New London CT 20aug2013 DONE! – Spiral 2: CGA CG-RDC USN GD New London/Groton CT 25mar2014 DONE!

• Oct 25, 2013 Cyber & Intel Panel Luncheon, YAC + 2 CAPT, CGA Officers Club (110 HC) • Nov 20, 2013 Systems Engineering, YAC cadets + Doc Sweitzer (35 HC) • Dec 5, 2013 IBM Watson, VTC, YAC cadets and officers (6 HC) • Mar 18, 2014 Wireless Hacker 101 Demo, YAC cadets, officers, industry, CG-RDC (43 HC) • Late-April 2014 AFCEA SNE Chapter Meeting YAC hosted with GDEB tour • DISCUSSING: Nov 2014 Cyber/RF-Comms/Intel/Energy Symposium CGA (~1000 HC)

– Spiral 3: Southern RI or Cape Cod ME • Jan-Aug 2014

– Spiral 4: Entire SNE AFCEA Area of Responsibility • Sept-Nov 2014

• Culture and activities throughout YAC SNE: – CG/AFCEA VIP mentoring bi-weekly sessions

• (e.g. CAPT Arsenault, LCDR Sweeney, CAPT Hernandez, LCDR Carlson, CDR Carroll, RDML Marshall, AFCEA BOD, …)

– YAC USA mentoring sessions quarterly sessions • (YAC sites: Lexington, San Diego, C Springs, Alamo, Vandenberg…)

AFCEA 2014/2015 YAC SNE Co-Leadership Team

15

CGA LCDR Steven Myers/C4IT

CG LT Eleanor Garcia/Intel GDEB Eric Yester/IA Pen

GDEB Kevin Smith/IA Pen CG LT M Grochowski/RF

YAC Wireless Hacking 101 Demo

• Mar 18, 2014 USCG RDC – YAC cadets, officers, industry, CG-RDC

16

CGA CAPSTONE Cyber Project

• Cadet 1/C Monahan & Cadet 1/C Carts

• 1/c Monahan – EE Systems Track, FL

Native, 01 – Billet USCGC Morgenthau

• 1/c Carts – EE Computer Track, MD

Native, 01- Billet USCGC Active

• Capstone Design Project – Wireless Security and

Ethical Hacking – Sponsor TISCOM

17

USCG RADM Robert E. Day, Jr

18

Assistant Commandant for C4IT & Commander, CG Cyber Command

19

Rear Admiral Robert E. Day Jr. assumed the duties as the Assistant Commandant for Command, Control, Communications, Computers & Information Technology and the Commander, Coast Guard Cyber Command in July 2009. RADM Day holds a Bachelor of Science Degree in Electrical Engineering from the United States Coast Guard Academy and a Master of Science Degree in Telecommunications Systems Management from the Naval Postgraduate School in Monterey, California. Rear Admiral Day’s assignments include Coast Guard Cutter DUANE as the Damage Control Assistant until April 1982. U. S. Coast Guard Headquarters, Washington D.C. as the Electronics Project Officer for the construction of the 270 foot Medium Endurance Cutters and 110 foot Island Class Patrol Boats. Telecommunications Officer for the Thirteenth Coast Guard District in Seattle, Washington; during this tour, he performed extensive temporary duty including assignment as the Administrative Officer to the Federal On-Scene Coordinator for the Exxon Valdez disaster. Commanding Officer, Communications Station Boston, where he prepared the facility for remote operations under the Communication System 2000 project. Chief of Planning and Budget for the Electronics Systems Division at Maintenance and Logistics Command (MLC) Pacific. RADM Day commanded the Coast Guard's largest Electronic Systems Support Unit, ESU Boston where the command provided electronics and communications support to the John F. Kennedy Jr. aircraft crash, the Egypt Air 900 air disaster, and the response to the September 11th World Trade Center terrorist attack. From July 2002 until May 2007, RADM Day was assigned as the Chief of Pacific Area's Command, Control, and Communications Division in Alameda, California. Additionally, RADM Day traveled throughout the Pacific Rim as a key United States representative to the North Pacific Coast Guard Forum. From June 2007 until June 2009, he served as the Deputy and eventually the Commander of Maintenance and Logistics Command (MLC) Pacific. Rear Admiral Day's military awards include two Legion of Merit, three Coast Guard Meritorious Service Medals, the 9-11 medal, three Coast Guard Commendation Medals, Letter of Commendation, and six Meritorious Team Awards.

USCG RADM Robert E. Day, Jr

Homeland Security

UNCLASSIFIED//FOUO

United States Coast Guard Cyber Command

Young AFCEANs

Admiral Bob Day

CGCYBER Commander

March 25th, 2014

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

The Explosion of “Big Data” __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

The Explosion of “Big Data” __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

The Evolving Threat…Call to Action __________________________________________________

“Cybersecurity is one of the most serious economic and national security challenges we face as a nation…”

- President Obama, February 2013

“In addition to our own forces, the vast port and maritime Transportation system we protect are vulnerable to cyber attack. We will work with our partners to develop resiliency to cyber threats.”

- Admiral Papp, 2011

“All sectors of our country are at risk…the seriousness and the diversity of the threats that this country faces in the cyber domain are increasing on a daily basis.”

- DNI Director Clapper, March 2013

“The loss of industrial information and intellectual property through cyber espionage constitutes the greatest transfer of wealth in history.”

- General Alexander, August 2012

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

CGCYBER Vision & Mission __________________________________________________

VISION

“A safe, secure and resilient cyber operating environment that allows for the execution of Coast Guard missions and maritime transportation interests of the United States.“

MISSION

Coast Guard Cyber Command’s mission is to identify, protect against, enhance resiliency in the face of, and counter electromagnetic threats to the Coast Guard and maritime interests of the United States, provide cyber capabilities that foster excellence in the execution of Coast Guard operations, support DHS cyber missions, and serve as the Service Component Command to U.S. Cyber Command.

Computer Network Defense…Protecting MCIKR…Creating a Decision Advantage for the Service

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Mission Areas __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Armed Forces Cyber Components __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

• Hackers/Intrusion Sets

• Phishing • Social Engineering

or Elicitation • Malicious Code • Mirrored Websites • Insider Threat

27

Cyber Threats

Social Engineering

Phishing

Insider Threat

Hackers

Mirrored Websites

Malicious Code

Types of Cyber Threats We are Facing __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

• Networking • Professional Development • Leadership • Mentoring • Understanding the “big picture”

28

The Benefits of AFCEA __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

• Demand for Cyber security experts growing

• Signal demand 12 X the normal job growth rate

• Demand for “big data” specialists rose 122% in 2013

• Cyber security engineers command an average salary >$100K

29

The Business of Cyber…Business is Good __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Malware Detected by Means of Propagation Ability __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Threat Actors __________________________________________________

Self-inflicted

Nation-states

Hacktivists

Criminals

Insiders

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

We Have Things They Want __________________________________________________

“The loss of industrial information and intellectual property through cyber espionage constitutes the greatest transfer of wealth in history.”

- General Keith Alexander, USCYBERCOM

Joint Strike Fighter plans compromised, saving China

billions in engineering & planning costs

Intrusion of CG HOMEPORT, nearly cost $2M in privacy/credit monitoring

for over 90K users.

Major U.S. banks have financial records compromised, putting at risk over 30K

banking customers account info.

What does your company or organization have that someone may want?

INTELLECTUAL PROPERTY

PERSONAL INFORMATION

FINANCIAL DATA & ACQUISITION PLANS

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Protect Ports and Waterways __________________________________________________

The Coast Guard is the Sector Specific Agency (SSA) for the Maritime component of the Transportation Sector

• 1 of the 16 Critical Sectors

• Collaboration with our partners in TSA and DOT

• Protect maritime sector from all threats (physical, personnel, and cyber)

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Intermodal Touch-points __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

U.S. National Transportation System __________________________________________________

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Importance of Cyber Security to Maritime Domain __________________________________________________

• 95% of all U.S. foreign trade through 361 ports

• $800 billion/year in freight

• $2 billion/day trade with Canada

• 7,000 oceangoing vessels made 55,560 port calls annually

(Source MARAD & RITA)

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Maritime Disruptions on MTS have proven costly

• These incidents reflect cost of a maritime disruptions. • These may not have been caused by a cyber-based

failure, cyber incidents can have similar or greater consequences

o1989: Exxon Valdez, $7+ billion dollars o 2002: West Coast port shutdown, $11 billion dollars ($1 billion/day) o 2007: I-35W bridge collapse, $300 million dollars o 2010: Deepwater Horizon, $37+ billion dollars o 2013: USS Guardian, $300 million dollars Volpe, 2013

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

The Vulnerabilities…the things we know

INDUSTRIAL CONTROL SYSTEMS

WIRELESS NETWORKS & SMARTPHONES

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Hackers Used to Facilitate Drug Smuggling By breaking into the offices of a harbor

company, the criminals could install key-loggers to take control of computers

MODUS OPERANDI Computers of container terminal were hacked so the containers that

contained drugs could be monitored

By means of false papers and a hacked pin code, the drivers were

able to pick up the container at a location and time of their choosing

1044 kilos cocaine/1099 kilos heroin

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Shipboard ICS/SCADA Systems

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Port Facility ICS/SCADA System

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Types and Impacts of Exploiting ICS

• Direct physical damage to affected equipment and systems…

• Small-scale, local disruptions…

• Injury or death to operators, passengers or the general public.

• Catastrophic disruptions to the transportation system.

Volpe, 2013

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Provide Decision Advantage __________________________________________________ Leverage intelligence community (IC) and

law enforcement (LE) authorities to understand adversaries intentions and capabilities in cyberspace

• Capitalize on cyber and SIGINT capabilities

• Exploit the cyber networks (communications, computers) of our adversaries

• Drive tactical cyber intelligence to the front-line operator

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

It’s the Simple Things __________________________________________________

• Keep anti-virus software updated

• Keep software patched and updated

• Change default passwords/rotate user passwords

• Minimize number of “admin” accounts

• Educate and train your workforce

• Separate business and production systems

“Some organizations will be a target regardless of what they do, but most become a target because of what they do.

• Eliminate unnecessary data

• Study the threat landscape

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

(CM) Patching vs. Updating AV Signatures

45

Patching SW and OS is like locking your doors

Updating AV Signatures is like tuning your alarm system

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

What can you do? __________________________________________________

Have a Cybersecurity Strategy

• Few currently have even a basic plan…develop one

• Test and exercise the plan…it should be a living document

Conduct a Cybersecurity Assessment

• Identify your weaknesses…plug the holes

Train and Educate Your Workforce

Exercise good configuration management

• Whitelisting, blocking executables, minimize “admins”

As the DHS saying goes “If you see something, say something”

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

47

Vision for Coast Guard Cyber in 2025 __________________________________________________ • Active defense and resiliency of

Coast Guard information and networks

• Cyber exploitative capabilities for decision advantage

• Extensive sharing among maritime stakeholders

• Professionalizing Coast Guard Cyber personnel

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

Final Thought...Saudi Aramco __________________________________________________ • National oil company of Saudi Arabia

• One of the largest producers of oil in the world

• Targeted cyber attack

• Data destroying malware

• 30,000 computers turned into paperweights

What would the Coast Guard do if all of our computers stopped working?

UNCLASSIFIED//FOUO

UNCLASSIFIED//FOUO

Homeland Security

ACT Achieving Cybersecurity Together

“It’s our Shared Responsibility”.

Questions? __________________________________________________

Questions & Answers

• UNCLASSIFIED CONTENT ONLY !!!

• Please queue behind one of 3 floor microphones

• Alternating lines will have 90-seconds each to ask a question • Speak slowly and clearly (session is recorded)

• Please return to the back of the line for additional questions

50

SNE Chapter Announcements (p.1)

• Coast Guard Academy – Walking Tour - 1555 • Gather at McAllister Hall Front Lobby • Cadet 2/c Campbell & 2/c Taylor Tour Guide

• AFCEA Southern New England (SNE) Chapter Meeting • Hosted by Young AFCEANs (YAC SNE) • Late APR 2014 – Meeting Location: TBD(meal?) • Tour at General Dynamics Electric Boat • Contact LT Eleanor Garcia USCG or Val Arris USCG-RDC

51

SNE Chapter Announcements (p.2)

• Director of Professional Development (Joe Loda) – C4I Systems Engineering Certification Program

• Systems Engineering: Requirements Development and Management (April 2, 2014 0830-1700, Middletown RI)

• Systems Engineering Principles and Practices for C4I Systems (April-June 2014, 1600-1800, online & Middletown RI)

• Systems Engineering Processes and Methods for C4I Systems (Sept-Oct 2014, online & Middletown RI)

– Workshops • INCOSE Certified Systems Engineering Professional (CSEP) Exam

Application and Preparation

52

Dismissed

• 1555++

• Thank you for coming !!!

53