Pentagon pauses $2 billion cyber security project

Security system not ready for classified networks says watchdog

The Pentagon

The US Department of Defense (DoD) has reportedly frozen a $2 billion cyber security project designed to consolidate local network security following poor test results.

The DoD hit pause on the system, called the Joint Regional Security Stacks (JRSS), after a report from its director of operational test and evaluation Robert Behler, said Bloomberg.

The JRSS project is a partnership between the Army, Air Force, and Navy to consolidate their networking in secure hubs. Each stack is a suite of equipment serving multiple military bases in a single region handling firewalls, intrusion prevention systems, and other security operations over MPLS networks. The JRSS project also virtualizes network routing and upgrades the military's security from around 1,000 local security stacks worldwide to 50 across 11 JRSS sites in the US and five elsewhere, standardizing security operations.

The DoD began running traffic across JRSS installations as far back as 2014 and was supposed to have fully migrated to JRSS by the end of 2019, but problems have dogged the system.

According to Bloomberg, Behler's latest evaluation states the system is “unable to help network defenders protect DoD component networks against operationally realistic cyber attacks.”

Previous reports from the DoD's director of operational test and evaluation explained the system was inadequate, using the same wording. Behler warned in 2019 that "Despite its complexity, the DOD has treated JRSS as a “technology refresh” and has not funded the personnel and training typically associated with DoD acquisition programs of record." 

Related Resource

Channel Pro Insight: A fast guide to central network management

How to stay connected and secure with central network management

A fast guide to central network management - whitepaperDownload now

That report, which also detailed a red team attack organized to test system security, advised the DoD to stop migrating new users to the system until it was operationally secure.

According to Bloomberg, the decision to pause the system follows a classified February 2020 report that also highlighted inadequate cyber security. As a result, Behler's latest report said that the Pentagon would reduce funding for the project next year, effectively pausing the expansion of the JRSS into classified networks until 2023.

The report also suggested the Pentagon continue developing alternatives to the JRSS.

In a 2019 report, the US Government Accountability Office (GAO) warned the DoD had not fully completed several key initiatives to improve its cyber security hygiene, including cyber education and training, removing vulnerabilities from its networks, and integrating cyber security into its exercises.

Featured Resources

How virtual desktop infrastructure enables digital transformation

Challenges and benefits of VDI

Free download

The Okta digital trust index

Exploring the human edge of trust

Free download

Optimising workload placement in your hybrid cloud

Deliver increased IT agility with the cloud

Free Download

Modernise endpoint protection and leave your legacy challenges behind

The risk of keeping your legacy endpoint security tools

Download now

Recommended

Biden nominates Meg Whitman for ambassador role in Kenya
Policy & legislation

Biden nominates Meg Whitman for ambassador role in Kenya

10 Dec 2021
UK and US agree deeper data-sharing partnership
Policy & legislation

UK and US agree deeper data-sharing partnership

9 Dec 2021
ID.me and Sterling Check partner on in-person identity verification
identity and access management (IAM)

ID.me and Sterling Check partner on in-person identity verification

19 Nov 2021
Podcast transcript: Can the US take on big tech?
Policy & legislation

Podcast transcript: Can the US take on big tech?

19 Nov 2021

Most Popular

How to move Microsoft's Windows 11 from a hard drive to an SSD
Microsoft Windows

How to move Microsoft's Windows 11 from a hard drive to an SSD

4 Jan 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

6 Jan 2022
Microsoft Exchange servers break thanks to 'Y2K22' bug
email delivery

Microsoft Exchange servers break thanks to 'Y2K22' bug

4 Jan 2022