• CURRENT ISSUE:
      DIGITAL EDITION

Volume 15, Issue 11
December 2011



 

KMI MEDIA GROUP
WEBSITES


SUBSCRIPTION SERVICES

 

 

Editor's Perspective

Attention: open in a new window. PDFPrintE-mail

Editor's Perspective


A recently closed request for information by the Defense Information Systems Agency (DISA) is underscoring the military need for a defensible barrier against e-mail attacks from the Internet.

In the request, the agency was seeking information from industry, academia and government on the availability and functionality of a NIPRNet e-mail security gateway. The ultimate goal is to create a defensible border against e-mail borne threats based on automatic defense as well as configurable quick-reaction capabilities.

The solution envisioned will scan every e-mail entering the Department of Defense via the Internet/NIPRNet gateways. It will be the logical first e-mail hop into the network and must integrate with existing individual enclave e-mail systems. The solution must include sensor technologies that detect attacks, characterize the type of attack, and offer mitigating responses to the attack.

The task will be a huge one. The solution must provide the capability to support an estimated 5 million users with some 700 NIPRNet e-mail domains, handling an estimated 50 million messages per day.

The information request also made clear how formidable the task will be. At a minimum, for inbound e-mail security protection, the solution should provide anti-virus, anti-spam, anti-phishing and content filtering capabilities. The system will also have to provide complete monitoring, with centralized logging, alerting and reporting capabilities. It must also provide for message quarantining, which will require substantial storage capacity given the expected message volume; for processing outbound e-mail; and for integrating with the DoD public key infrastructure.

Clearly, the border between NIPRNet and the Internet is one of those critical points that will determine the outcome of the battle against cyberthreats. The DISA request doesn’t specify what the agency has in mind, but I’m guessing that there will be a host of companies eager to offer their services for increased security. 



Harrison Donnelly, Editor
This e-mail address is being protected from spambots. You need JavaScript enabled to view it

301.670.5700 x114
harrison donnelly

 

 


Back to Top

 


Upcoming Industry Events