Joyce Corell, an official at the Office of the Director of National Intelligence (ODNI), said the U.S. must execute risk-based supply chain security management strategies following the SolarWinds cyber attacks, Breaking Defense reported Thursday.

Corell, who serves as assistant director for supply chain and cyber directorate at ODNI’s National Counterintelligence and Security Center (NCSC), told attendees at an Institute for Critical Infrastructure Technology event that the private and public sectors must address vulnerabilities in the information and communications technology supply chain in the wake of aggressive Chinese and Russian cyberespionage activities.

Corell’s comments come after the Defense Advanced Research Projects Agency (DARPA) and Intel announced a partnership to produce Application Specific Integrated Circuit chips for commercial and military aviation systems.

Under the Structured Array Hardware for Automatically Realized Applications (SAHARA) partnership, DARPA and Intel will work with academic entities to optimize the semiconductor's use.

Jose Roberto Alvarez, senior director for the office of the chief technology officer at Intel's Programmable Solutions Group, noted that SAHARA’s goal is to promote U.S.-based semiconductor manufacturing “from beginning to end”.

SAHARA is also looking into potentially developing ASIC for zero-trust environments or applications such as countermeasures technologies for protecting intellectual property and data against counterfeiting and reverse engineering.

The Cybersecurity and Infrastructure Security Agency (CISA) has earmarked $650 million from its  American Rescue Plan Act funding to transition its EINSTEIN threat intelligence system to various programs, FedScoop reported Thursday.

Brandon Wales, acting director of CISA, said at a hearing with the Senate Homeland Security Committee that the agency is prioritizing efforts to detect suspicious activity on networks handling unencrypted data to enable faster response to supply chain attacks.

CISA is also partnering with the Office of Management and Budget (OMB) on streamlining the federal government's contracting process and allocating ARP funding for endpoint detection capabilities as well as other tools to rapidly prevent anomalous behavior from entering networks, noted Wales.

The agency is additionally working to complete the Continuous Diagnostics and Mitigation (CDM) effort’s phases one and two which are slated to conclude in 2021, according to Wales.

“There’s a lot that we need to do through the federal contracting process to ensure that the vendors providing IT products and services for the federal government have the appropriate level of cybersecurity in place, based upon the information and their place within the networks that they are supporting,” he said.

The Government Accountability Office (GAO) has recommended that the Department of Defense (DoD) update the F-35 fighter jet program's schedule for the Block 4 software and hardware modernization effort in order to reflect realistic time frames.

DOD should implement tools to automate collection of data on software development performance to help inform program decisions and establish software performance target values as it initiates steps to determine additional metrics for software development, GAO said in a report published Thursday.

GAO made the recommendations after it found that the Pentagon's F-35 program “routinely underestimated the amount of work” necessary to build Block 4 capabilities, leading to additional delays.

“Unless the F-35 program accounts for historical performance in the schedule estimates, the Block 4 schedule will continue to exceed estimated time frames and stakeholders will lack reliable information on when capabilities will be delivered,” the report reads.

Maj. Gen. Wally Rugen, director of the U.S. Army Future Vertical Lift Cross-Functional Team, said the branch's requirements oversight council is scheduled to review iterative designs of the Future Attack Reconnaissance Aircraft from Bell and Sikorsky next month, Defense News reported Thursday.

The two vendors won other transaction agreements in March 2020 to develop FARA prototypes and completed final design readiness assessments with the military branch in December.

“What we saw back on the final designs from industry were impressive to the government team. Industry really did more," Rugen told Defense News.

Army reviewers seek to determine whether the Bell 360 Invictus and Sikorsky Raider X offerings are ready to join a fly-off event planned for late 2022, according to the publication.

The branch said last year it structured the FARA program into three phases that would take place before the aircraft production phase and intends to select a winning builder after the competitive exhibition.

FARA is intended to fill a capability gap the service faced after its decision to retire the OH-58D Kiowa Warrior light observation and reconnaissance aircraft, the report noted.

The Federal Aviation Administration (FAA) has delayed the implementation of two new rules that will require operators of small unmanned aerial systems to register their UAS for remote identification tracking, and allow them to conduct drone operations over people and vehicles at certain times of the day, Nextgov reported Thursday.

Both Remote ID and Operations Over People and at Night rules were finalized in Dec. 2020 and are now scheduled to go into effect on April 21, more than a month later than their original implementation date. The rescheduling was due to a 60-day regulatory freeze enacted to give the new administration time to review rules before they take into effect.

The Remote ID rule is aimed at helping law enforcement and national security agencies ensure public safety by tracking drones while in-flight using emote ID capabilities while the Operations Over People regulation seeks to streamline Part 107 drone operations at night and over people by eliminating the need to secure a waiver.

“The new FAA regulations jointly provide increased flexibility to conduct certain small drone operations without obtaining a waiver,” according to the agency.

Amazon Web Services (AWS) and the University of Oxford in England have partnered to test proofs of concept for human-machine interaction in education and other research areas using artificial intelligence tools and cloud computing platforms. 

The partnership used the Oxford X-Reality Hub as a testbed to observe the potential of virtual reality tools to transform students' experience in the classroom and address an attainment gap for disadvantaged pupils as part of an educational technology project, according to an AWS blog entry posted Thursday.

Ninety pupils took part in the first phase of the study that simulated London in the Victorian era for an English literature lesson and researchers found that VR technology improved educational outcomes by 65 percent in less than four months.

“The AWS team supporting the EdTech in the Cloud project introduced us to technology we did not know at such short reach," said Mattia Montanari, an associate researcher for the Oxford X-Reality Hub project. He added that the team created databases and applied natural language processing algorithms during the effort.

AWS will also collaborate with the Oxford University's mathematical, physical and life sciences division in other projects through 2022 to incorporate AI and cloud technologies to engineer materials for space exploration, automate the case description process, review scientific literature and classify cultural artifacts.

To register for this virtual summit, visit the Potomac Officers Club Events page.

Five trade organizations in the security industry have created programs and materials designed to help organizations avoid sophisticated cyberattacks and protect sensitive data from threat actors.

The Security Industry Association said Wednesday it produced a report that recommends strategies for securing the product development life cycle and a beginner's guide to developing an enterprise cybersecurity risk management approach.

The Monitoring Association launched a certificate program that aims to educate monitoring center information technology personnel about managing insider and external threats, while the Electronic Security Association offers continuing education courses in cyber threat preparedness.

PSA Security Network published a white paper for the electronic security industry to learn about the Center for Internet Security controls. ASIS International offers insight on cybersecurity issues through the group's security management publication.

The U.S. Northern Command (USNORTHCOM) and the North American Aerospace Defense Command (NORAD) will hold a five-day demonstration to test artificial intelligence technologies that will be incorporated into various decision-making processes, FedScoop reported Wednesday.

The participants will test and evaluate three decision aid technologies during the course of the second Global Information Dominance Exercise event. The partnership also intends to transition the technologies to applicable users and units.

Nine combatant commands will join the five-day activity and implement the platforms into various military components.

"We are conducting these experiments to bring everyone together," said U.S. Air Force Gen. Glen VanHerck.

The demonstration is a part of the U.S. military's plans to transition to joint all-domain command and control technologies.