HomeNewsArticle Display

Cyber operations Airmen 'Hack the Air Force'

1st Lt. Stephen Baker, 352nd Cyber Operations Squadron, watches as one of the Hack the Air Force 2.0 participants attempts to breach the security on a .mil website Dec. 9, 2017.

First Lt. Stephen Baker, 352nd Cyber Operations Squadron, watches as one of the Hack the Air Force 2.0 participants attempts to breach the security on a military website Dec. 9, 2017. HtAF2.0 is a Defense Digital Service sponsored event where civilian cyber security experts were invited to identify and report vulnerabilities in more than 300 Air Force sites. (Courtesy photo by HackerOne)

Capt. Katherine Lawall, 390th Cyber Operations Squadron, answers questions posed by local high school students during a “Hackers Panel” Dec. 9, 2017

Capt. Katherine Lawall, 390th Cyber Operations Squadron, answers questions posed by local high school students during a “Hackers Panel” Dec. 9, 2017. HackerOne coordinated with the non-profit organization Code.org, to invite a group of students to the Hack the Air Force 2.0 event to learn more about computer sciences. (U.S. Air Force photo by Trevor Tiernan)

NEW YORK (AFNS) -- Within 30 seconds of receiving the order to “start hacking,” researchers at the Hack the Air Force 2.0 event discovered two vulnerabilities—exactly the result the organizers were hoping for.

The researchers were cyber security specialists invited to the Dec. 9, 2017 event in New York to identify security gaps in Air Force websites.

Hack the Air Force 2.0 is a continuation of the Hack the Air Force event held in June 2017. Initiated by the Defense Digital Service, the event is a by-invitation opportunity for computer experts outside the Air Force to assist in strengthening the service’s defensive cyber posture, by discovering and reporting vulnerabilities in Air Force websites.

DDS contracted HackerOne, an internationally respected vulnerability disclosure and bug bounty company, to host and coordinate the event. Twenty Fourth Air Force sent a team of Airmen from the 90th, 315th, 352nd and 390th Cyber Operations Squadrons to work alongside their industry counterparts discovering bugs and weaknesses.

“This was a first to showcase our offensive capabilities in an official capacity alongside private and commercial sectors and international partners,” said Maj. Gen. Christopher Weggeman, 24th AF commander. “Not only does this program strengthen those partnerships, it allows the Air Force to both teach and learn from the best and brightest outside of the [Department of Defense].”

Even though HackerOne invited some of the world’s elite hackers to the event, they were surprised to find the Air Force sites were not that easy to crack.

“They were impressed,” said Lt. Col. Jonathan Joshua, 24th AF deputy chief of staff. “As a vulnerability was identified, shortly thereafter, hackers would be attempting to highlight the vulnerability to another team of hackers … but the vulnerability had already been patched. They’d be trying to grab screen shots to prepare a post-day brief, but they couldn't because the systems were already healthy.”

The non-Air Force researchers were able to receive cash rewards of up to $50,000 for each vulnerability they identified under a practice commonly used in private sector known as “Bug Bounties.” Under bounty programs, companies pay so-called “white hat” hackers a reward for pointing out holes in their security.

“Hack the Air Force allowed us to look outward and leverage the range of talent in our country and partner nations to secure our defenses,” said Peter Kim, Air Force chief information security officer. “We’re greatly expanding on the tremendous success of the first challenge by targeting approximately 300 public facing Air Force websites. The cost-benefit of this partnership in invaluable.”

For Maj. Barrett Darnell, 315th COS, the highlight of the day was the interaction between different groups participating.

“What stood out was seeing private sector, independent bounty hunters and the government all come together to find these vulnerabilities,” he said. “I was amazed at the creativity [of the researchers] with some of these issues that were found. So the best part was seeing all these resources come together to solve security problems.”

In a rapidly and perpetually evolving domain such as cyber, interacting with industry partners is essential for the Air Force to stay on top of its game.

“Our cyber warriors are in the fight every day,” said Weggeman. “Our Airmen operate within Air Force networks and employ offensive and defensive capabilities 24/7 in a highly contested environment where the adversary constantly changes tactics and techniques, creating complex vulnerabilities. Participating in the HackerOne hosted ‘hackathon’ allowed our cyber warriors to showcase their immense talent and skills while also learning and strengthening relationships with our partners in industry and other nations.”

At the close of the event, after 12 hours of hacking, participants had identified multiple vulnerabilities, protected 300 Air Force websites and forged immeasurable new partnerships.

Engage

Twitter
“Together we have been able to reinforce our strong partnership with the #AirForce by going out and visiting these… https://t.co/SfZNCwryKb
Twitter
RT @cmsaf_official: Where do I sign up, TSgt Munoz Case? I’m ready to change the world with you! #bettertogether https://t.co/6BLHH5GZKB
Twitter
RT @SecAFOfficial: “We, the @USAirForce & @SpaceForceDoD, have a terrific story to tell...meeting #Airmen & #Guardians to see where they li…
Twitter
“This award reflects the wing’s culture of critical self-assessment and significant investment in full-spectrum rea… https://t.co/csZpCTa8tH
Twitter
Service members assigned to Andersen Air Force Base and @USMC Base @MCBcampblaz have partnered with the @StateDepthttps://t.co/FSMB2xGuXU
Twitter
Beginning April 19th, the @DeptofDefense will make COVID-19 Vaccine appointments available to all who are authorize… https://t.co/7bofo3TmnQ
Twitter
The @DeptofDefense’s desired outcome for the Arctic is a secure and stable region. @HQAirUniversity is seeking jour… https://t.co/fyflQtyHtj
Twitter
RT @SecAFOfficial: Collecting, processing & sharing data faster than a competitor provides a decisive advantage. The Advanced Battle Manage…
Twitter
Purple Up! Today, everyone is encouraged to wear purple to show support for military children who overcome so many… https://t.co/ibXSWprtai
Twitter
.@Team_Tinker, @HillAFBUtah and @366FW #Airmen participated in the Exercise Agile Thunder 21-02, designed to sharpe… https://t.co/kvRhWgb1Ig
Twitter
Happy Birthday Air Force Reserve! The @usafreserve's mission is to provide combat-ready forces to fly, fight and… https://t.co/S0gU4oBfaO
Twitter
RT @HQ_AFMC: In honor of #NationalWeldingMonth we salute our experts across the command who keep our platforms and systems #mission ready!…
Twitter
“This change will improve @Andrews_JBA’s ability to build multi-capable Airmen now and into the future as we work t… https://t.co/YfXlpIiY20
Twitter
“Everything AFCENT does starts and ends with the coalition.” - Lt. Gen. Greg Guillot, commander of 9th Air Force… https://t.co/zT7pORj54Z
Twitter
“Mobility is increasingly playing an integral role in executing Agile Combat Employment, ensuring the Joint Force c… https://t.co/uZ4Jgy9soG
Twitter
We help our Airmen reach their full potential by putting #SafetyFirst. Congratulations and great job, all! #AimHigh https://t.co/5uLCs8dbBC
Twitter
Our military families experience a lot of changes, especially the children, and in April we celebrate the Month of… https://t.co/JrlVxzEbRB
Facebook
The newest Air Force Podcast recently dropped. Listen to a small snippet of CMSAF Kaleth O. Wright talk with Staff Sgt. New about resiliency. Listen to the entire podcast on Youtube: https://go.usa.gov/xpnAD or Subscribe to The Air Force Podcast on iTunes: https://podcasts.apple.com/podcast/the-air-force-podcast/id1264107694?mt=2
Facebook
Our mantra, "Always ready!" It's the spirit we fly by! #B2Tuesday
Facebook
Need some motivation to get your week started off right? Listen as CMSAF Kaleth O. Wright weighs in...
Facebook
The U.S. Air Force Academy gives its cadets some unique opportunities. Ride along one of this opportunities.
Facebook
A United States Air Force KC-135 Stratotanker refuels an F-22 Raptor over northern Iraq, Nov. 6, 2019. U.S. Central Command operations deter adversaries and demonstrate support for allies and partners in the region. (Video by Staff Sgt. Daniel Snider)
Facebook
Although the Silver Star is the third-highest military medal, it's not given often. Today, TSgt Cody Smith was the 49th Special Tactics Airman to receive this medal since Sept. 11th, 2001. Read more of TSgt Smith's amazing story: https://www.airforcespecialtactics.af.mil/News/Article-Display/Article/2024815/special-tactics-airman-battled-through-injuries-awarded-silver-star/fbclid/IwAR2LZWwx1VHdTnQe39rIEBOuJS_0JvMQBBGt7I-E6zsxxn-Lx9387yu43Bc/ Cannon Air Force Base Air Force Special Operations Command United States Special Operations Command (USSOCOM) U.S. Department of Defense (DoD)
Facebook
Tune in as our Air Force musicians along with other military musicians are awarded the National Medal of Arts.
Facebook
Like Us
Twitter
1,342,443
Follow Us