4 JUNE 2024

CYBERSECURITY

& Information Systems Digest

CSIAC collects and publishes articles related to our technical focus areas on the web to share with the DoD community.

Software Transparency in SaaS Environments

Acknowledging key differences between SaaS and non-SaaS software, this paper discusses the value of SBOM-driven transparency for SaaS and offers recommendations for advancing transparency in SaaS software.

Click HERE for more information.

FEATURED ARTICLE

NIST Finalizes Updated Guidelines for Protecting Sensitive Information

Contractors and other organizations that do business with the federal government now have clearer, more straightforward guidance for protecting the sensitive data they handle. The National Institute of Standards and Technology (NIST) has finalized its updated guidelines for protecting this data, known as controlled unclassified information (CUI), in two publications: Protecting Controlled Unclassified Information in Nonfederal…

Featured Notable Technical Inquiry

Current Landscape and Technologies of Binary Code Scanning Tools

This technical inquiry report provides information on the current landscape and technologies used to scan firmware samples for detection of cyber vulnerabilities. The aim of this research is to identify and describe what binary code scanning (also called binary code analysis [BCA]) tools exist to scan firmware samples for the detection of cybervulnerabilities. The Cybersecurity & Information Systems Information Analysis Center subject matter experts researched…

Learn More

FUTURE WEBINARS

CSIAC hosts live online technical presentations featuring a DoD research and engineering topic within our technical focus areas.

Staying Ahead of the Curve: Planning for the Migration to Post-Quantum Cryptography

Hosted by: Bill Newhouse

June 18, 2024 12:00 pm

Improving Security, Privacy, and Authentication With a Quantum-Enhanced TCP/IP Protocol

Hosted by: Dr. Paul Wang

July 16, 2024 12:00 pm

DID YOU MISS OUR LAST WEBINAR?

WATCH NOW

or download the slides

UPCOMING WEBINAR

Staying Ahead of the Curve: Planning for the Migration to Post-Quantum Cryptography

Hosted by: Bill Newhouse

June 18, 2024 12:00 pm

This webinar will explore cryptographic discovery (inventory) and interoperability and performance of the post-quantum cryptographic (PQC) algorithms being standardized by the National Institute of Standards and Technology (NIST) as framed by the following two publications drafted with industry experts in NIST’s National Cybersecurity Center of Excellence Migration to PQC project: NIST SP 1800-38B, Migration to…

UPCOMING EVENTS

GridSecCon 2024

October 22, 2024 - October 25, 2024

NERC, the E-ISAC, and the Midwest Reliability Organization (MRO) are co-hosting the 13th annual grid security conference, GridSecCon 2024, on October 22 – 25 in Minneapolis, Minnesota at the Hyatt Regency. Join industry and government…

2024 Defense Logistics & Support Conference

October 29, 2024 - October 30, 2024

With the expertise of thought leaders from the US Department of Defense, industry, academia and allied nations, this conference dives deeper into contested logistics, assessing current challenges and strategies. The discussions will encompass technology shaping…

Voice From the Community

Dr. Donna Ann Dulo

Computer Scientist, Aerospace Software Safety Engineer

Dr. Donna A. Dulo is the Chief of Cyber & Software Testing and a Test Director at the US Air Force Air Mobility Command Test & Evaluation Squadron. She provides cyber security and software safety analysis for Air Force aircraft and weapon systems. Her focus is to ensure the cyber security, safety, reliability, and resilience of avionics systems to fulfill her squadron’s mission “To determine and communicate the operational impact of fielding mobility air forces capabilities, ensuring proven solutions in warfighter’s hands”.