Subscribe
About 25 North Carolina National Guard cyber and computer security specialists are honing their skills, June 5-17, as part of Cyber Shield 2022, the Department of Defense’s largest unclassified cyber defense exercise involving approximately 800 National Guard cyber specialists as well as law enforcement, legal, government and corporate partners from across the country.
This year the exercise is being conducted at the Army National Guard’s Professional Education Center on Camp Joseph T. Robinson in North Little Rock, Arkansas. Service members and civilian experts from 20 states and the U.S. territory of Guam have gathered for the exercise.
The North Carolina National Guard members are part of the state’s Defensive Cyber Operations Element, state headquarters, and the 295th Signal Network Support Company based in Mooresville, NC. It has been a busy year for the 295th SNSC, which also supported a Warfighter Exercise on Fort Stewart, Georgia, from March 23 to April 14.
“We have Soldiers and NCOs who are playing vital roles in a major cyber security exercise,” said North Carolina Army National Guard Lt. Col. Seth Barun, the exercise’s deputy officer-in-charge.
Spc. Gabe Lucero of Salisbury, NC, was the primary Joint Nodal Network operator during the Warfighter Exercise at Fort Stewart and is on the North Carolina National Guard’s penetration testing team. He is on Cyber Shield’s assessment team.
“Participating in an exercise that is dedicated to cyber defense is a great experience,” Lucero said. “It is a great opportunity to stretch and expand your skills.”
Army Sgt. Azaria Christian, also a member of the 295th SNSC, is the North Carolina National Guard’s lead cyber incident responder and has taken the role of lead Incident Responder for the North Carolina Cyber Security Response Force. She coordinates with state and federal agencies to provide incident response capability and has led more than 30 response missions, a role previously performed by captains or higher.
She is also the subject matter expert on digital forensics for the Joint Cyber Task Force, providing guidance, oversight, and analysis. In Cyber Shield 2022, she is the lead forensic analyst, serving in that role for the exercise as well as teaching a class on digital forensics for attendees.
Sergeant Major of the Army Michael A. Grinston has invited Sgt. Christian to participate in a future Twitter Spaces interview where she will discuss her leadership experiences as an NCO involved in cyber defense.
“Cyber Shield has been a great opportunity to network with cybersecurity experts from across the country and share lessons learned,” Christian said. “It has been a lot of fun.”
North Carolina Army National Guard Maj. David Nemecek is the operations officer for Cyber Shield and has been on orders for the past year planning the exercise. “There are only two of us on orders to plan Cyber Shield. The rest of the staff are volunteers who take time out of their full-time jobs or family time to ensure this exercise remains the DoD’s premiere unclassified cyber defense exercise,” Nemecek said.
The exercise started about 15 years ago with a small group of National Guard cyber experts who wanted to fill some gaps in their Soldiers and Airmen’s training. From this grassroots beginning, it has grown into a national exercise involving multiple agencies and military services.
“It is truly extraordinary what a small group of dedicated people can do,” Nemecek said.
The annual exercise, led by the Army National Guard and assisted by the Air National Guard, is a concentrated effort to develop, train and exercise cyber forces in the areas of computer network internal defensive measures and cyber incident response, according to the National Guard Bureau.
These cyber defensive measures can be employed to defend and protect critical cyber infrastructure including industry, utilities, schools, health care, food suppliers as well as military networks.
“Cyber warfare is not just our future — it is our contemporary reality,” said Gen. Daniel Hokanson, Chief of the National Guard Bureau, during an April U.S. Cyber Command summit. “The National Guard is positioned to be leaders in the digital domain and continues to enhance our nation’s cyber capabilities in combat and in the homeland.
“With 4,000 National Guard cyber operators across 40 states, many working for leading tech companies, the National Guard has the knowledge, skills and abilities to play a critical role in the DOD’s cyber enterprise,” he added.
Cyber Shield 22 brings together the nation’s top cyber defense professionals from National Guard Soldiers and Airmen to various governmental, nongovernmental and high-tech partners. This year’s exercise also involves teams from the U.S. Navy and the U.S. Coast Guard.
Effective cyber defense requires unclassified collaboration across multiple partners, said Maj. Gen. Rich Neely, the adjutant general of the Illinois National Guard and a master cyberspace officer. “We all need to be talking about these attacks and where they are coming from. To do that requires effective relationships and communications across all levels of government as well as the private sector.”
Neely said that many of those professional relationships the National Guard shares with its partners in cyber defense “all began at a Cyber Shield.”
The first week of the exercise involves training classes and hands-on exercises for participants. During this part of the exercise, service members have the opportunity to take top-notch information technology classes and earn industry-standard certifications that can be used both in the military and in civilian careers. These 15 different classes and certifications typically cost hundreds of dollars outside the exercise and are provided to participants at no cost.
On June 12, the second phase of the exercise begins. This second week puts the cybersecurity service members’ skills to the test pitting them against an opposing force of hackers. The cyber defenders will work on identifying an intrusion into a computer network and then countering the hacker’s actions, said George Battistelli, Cyber Shield 2022 exercise director and the deputy chief information officer for the Army National Guard.
“It is important for us to continue to train our Soldiers using real-world events, so they are able to cut down the noise and focus on the mission,” Battistelli said. “In the exercise, and in the real world, we strive to achieve and maintain information advantage over our adversaries.”
This year the exercise is focusing on responding to a “supply chain” attack similar to the SolarWinds attack that effected many corporate and government networks, Battistelli said. A supply chain attack is when the hackers insert malicious code into third-party software such as IT monitoring software. When the software, or updates to the software, are installed, the malicious software is also installed allowing the hackers access to the corporate and government networks. The SolarWinds attack infiltrated a wide array of corporate and government networks. The exercise also infuses social media “noise” into the scenario, making the exercise as realistic as possible.
This year the Blue Teams – the “good guys” – will work to defend the military’s own computer networks. In the past, the exercise scenario has had the Blue Teams responding under the authority of a state governor. This year, they are responding under federal authority. This changes the policy and regulatory bounds as well as the legal authorities of the response.
The exercise is also helping to train National Guard lawyers on assisting cyber service members in staying within those bounds and authorities, said Minnesota Army National Guard Capt. Cumah Blake, the lead staff judge advocate for the exercise.
“The Cyber Shield exercise is a great model,” Blake said. “The exercise pulls together an integrated team of experts, not just cyberspace experts. It addresses not just cyberspace operations in a vacuum, but how do you pull together other members of your team and make those missions successful.”
The Red Team – the “bad guys” – includes some of the best cyber experts in the industry, said Illinois Army National Guard Lt. Col. Jeff Fleming, the exercise officer-in-charge. Fleming said that members of the Red Team last year wrote their own malicious code and a bug bounty hunter brought proof of concept code to test a zero day vulnerability he discovered to train the Blue Teams with very sophisticated and challenging situations.
This year the exercise will have a “Purple Day” when the Red Team will meet with the Blue Teams to discuss the attacks, what was done, and where and when it could have been caught. This will help train the cyber service members to defend against real-world attacks.
The training cyber service members receive at Cyber Shield is vitally important to the ongoing effort to protect the nation in cyberspace.
“We have to be right 100 percent of the time,” Battistelli said. “Our adversaries only need to be right once to get into our networks.”
| Date Taken: | 06.14.2022 |
| Date Posted: | 06.14.2022 12:16 |
| Story ID: | 422927 |
| Location: | NORTH LITTLE ROCK, ARKANSAS, US |
| Web Views: | 569 |
| Downloads: | 0 |
This work, North Carolina National Guard Helps Lead Cyber Shield 2022, the DoD’s Largest Unclassified Cyber Defense Exercise, by CPT Clarissa Estrada, identified by DVIDS, must comply with the restrictions shown on https://www.dvidshub.net/about/copyright.
