HomeNewsArticle Display

Cyber operations Airmen 'Hack the Air Force'

1st Lt. Stephen Baker, 352nd Cyber Operations Squadron, watches as one of the Hack the Air Force 2.0 participants attempts to breach the security on a .mil website Dec. 9, 2017.

First Lt. Stephen Baker, 352nd Cyber Operations Squadron, watches as one of the Hack the Air Force 2.0 participants attempts to breach the security on a military website Dec. 9, 2017. HtAF2.0 is a Defense Digital Service sponsored event where civilian cyber security experts were invited to identify and report vulnerabilities in more than 300 Air Force sites. (Courtesy photo by HackerOne)

Capt. Katherine Lawall, 390th Cyber Operations Squadron, answers questions posed by local high school students during a “Hackers Panel” Dec. 9, 2017

Capt. Katherine Lawall, 390th Cyber Operations Squadron, answers questions posed by local high school students during a “Hackers Panel” Dec. 9, 2017. HackerOne coordinated with the non-profit organization Code.org, to invite a group of students to the Hack the Air Force 2.0 event to learn more about computer sciences. (U.S. Air Force photo by Trevor Tiernan)

NEW YORK (AFNS) -- Within 30 seconds of receiving the order to “start hacking,” researchers at the Hack the Air Force 2.0 event discovered two vulnerabilities—exactly the result the organizers were hoping for.

The researchers were cyber security specialists invited to the Dec. 9, 2017 event in New York to identify security gaps in Air Force websites.

Hack the Air Force 2.0 is a continuation of the Hack the Air Force event held in June 2017. Initiated by the Defense Digital Service, the event is a by-invitation opportunity for computer experts outside the Air Force to assist in strengthening the service’s defensive cyber posture, by discovering and reporting vulnerabilities in Air Force websites.

DDS contracted HackerOne, an internationally respected vulnerability disclosure and bug bounty company, to host and coordinate the event. Twenty Fourth Air Force sent a team of Airmen from the 90th, 315th, 352nd and 390th Cyber Operations Squadrons to work alongside their industry counterparts discovering bugs and weaknesses.

“This was a first to showcase our offensive capabilities in an official capacity alongside private and commercial sectors and international partners,” said Maj. Gen. Christopher Weggeman, 24th AF commander. “Not only does this program strengthen those partnerships, it allows the Air Force to both teach and learn from the best and brightest outside of the [Department of Defense].”

Even though HackerOne invited some of the world’s elite hackers to the event, they were surprised to find the Air Force sites were not that easy to crack.

“They were impressed,” said Lt. Col. Jonathan Joshua, 24th AF deputy chief of staff. “As a vulnerability was identified, shortly thereafter, hackers would be attempting to highlight the vulnerability to another team of hackers … but the vulnerability had already been patched. They’d be trying to grab screen shots to prepare a post-day brief, but they couldn't because the systems were already healthy.”

The non-Air Force researchers were able to receive cash rewards of up to $50,000 for each vulnerability they identified under a practice commonly used in private sector known as “Bug Bounties.” Under bounty programs, companies pay so-called “white hat” hackers a reward for pointing out holes in their security.

“Hack the Air Force allowed us to look outward and leverage the range of talent in our country and partner nations to secure our defenses,” said Peter Kim, Air Force chief information security officer. “We’re greatly expanding on the tremendous success of the first challenge by targeting approximately 300 public facing Air Force websites. The cost-benefit of this partnership in invaluable.”

For Maj. Barrett Darnell, 315th COS, the highlight of the day was the interaction between different groups participating.

“What stood out was seeing private sector, independent bounty hunters and the government all come together to find these vulnerabilities,” he said. “I was amazed at the creativity [of the researchers] with some of these issues that were found. So the best part was seeing all these resources come together to solve security problems.”

In a rapidly and perpetually evolving domain such as cyber, interacting with industry partners is essential for the Air Force to stay on top of its game.

“Our cyber warriors are in the fight every day,” said Weggeman. “Our Airmen operate within Air Force networks and employ offensive and defensive capabilities 24/7 in a highly contested environment where the adversary constantly changes tactics and techniques, creating complex vulnerabilities. Participating in the HackerOne hosted ‘hackathon’ allowed our cyber warriors to showcase their immense talent and skills while also learning and strengthening relationships with our partners in industry and other nations.”

At the close of the event, after 12 hours of hacking, participants had identified multiple vulnerabilities, protected 300 Air Force websites and forged immeasurable new partnerships.

Engage

Facebook Twitter
DYK: Aircraft have lifespans! Like humans, they require check-ups in the form of maintenance inspections to prolong their ability to fly. These "checks" prevent in-flight system failures which ultimately protects aircrew and passengers. Learn more from the 86th Maintenance Squadron at Ramstein Air Base, Germany on what it takes to correct issues so aircraft can stay airborne.
WATCH: United States Air Force pilots talk about the importance of Exercise Saber Strike 18 as they refuel over the Baltic Sea on June 18, 2018. Saber Strike 18 is a long-standing training exercise designed to enhance interoperability between the U.S. and our allies. The training focused on improving land and air operational capabilities between the U.S. and our NATO allies. (U.S. Air National Guard video by: Master Sgt. Wolfram M. Stumpf)
Check out some shots from yesterday's All-Star Armed Services Classic Championship softball game in Washington, D.C. This event, part of MLB’s All-Star Week, pays tribute to the men and women of the Armed Forces. Washington Nationals U.S. Army
Air Force and U.S. Army coed softball teams render military honors during the playing of the National Anthem during the All-Star Armed Services Classic Championship softball game, Washington, D.C., July 13, 2018. This event, part of MLB’s All-Star Week, pays tribute to the men and women of the Armed Forces. Washington Nationals
Great way to lead by example!
The United States Air Force is facing a pilot shortage. To help solve the challenge, the Aircrew Crisis Task Force was recently created to provide strategic direction and actionable recommendations to senior leaders on how to solve the aircrew manning crisis. FULL STORY: https://go.usa.gov/xUb3z
Your United States Air Force news: ✓ A B-52 crew assists in a search and rescue operation off the coast of Guam ✓ An Afghan pilot class graduates in the Czech Republic ✓ The Air Force is using innovative approaches to training pilots to make the process faster and more efficient
Now that’s how weathermen work! Air Force Reserve Hurricane Hunters fly weather reconnaissance missions into Tropical Storm Chris and Tropical Storm Beryl. http://www.af.mil/News/Article-Display/Article/1569944/hurricane-hunters-fly-tropical-storms-beryl-chris/
The F-22 Raptor's combination of stealth, supercruise, maneuverability, and integrated avionics, coupled with improved supportability, represents an exponential leap in warfighting capabilities. The F-22 cannot be matched by any known or projected fighter aircraft. Maintaining these aircraft can involve a bit of a learning curve. Airmen at KadenaAirBase use past technology to help learn how to work with the undefeated Raptor. FULL STORY: http://www.kadena.af.mil/News/Article-Display/Article/1567295/hard-to-raptor-head-around/
Help us out! Can you caption this photo?
The B-52 Stratofortress has sniper pods that provide improved long-range target detection/identification and continuous stabilize surveillance for all missions, including close air support of ground forces. Air Force Global Strike Command crew members on a B-52 were able to spot a historic Pacific Island style canoe so that the U.S. Coast Guard could rescue the six passengers!
For the past 60 years, the Defense Advanced Research Projects Agency, or DARPA, has continually helped us maintain a technological edge against our advarsaries. Together with the Air Force Research Laboratory - AFRL, a fusion of ideas is leading to newly highlighted innovations.
SOUND ON! Celebrate freedom with the sound of freedom! Happy Independence Day!
After toggling with the idea of joining the #military for years, she promised herself to stop waiting for life to f… https://t.co/7Gt22iqNlD
It's #NationalAviationDay & new aviation opportunities are here! We're partnering with @CivilAirPatrol to groom tom… https://t.co/Fe9b4jlmGw
These supply #Airmen work 24/7 to ensure there is no break in the mission @RAFMildenhall because #NKAWTGhttps://t.co/biE2BPXVe1
Every #Airman has their reason for serving. Read on as these #Airmen explain what putting on the uniform everyday m… https://t.co/ubeDmY1liq
For the first time in the 63-year history of Operation Deep Freeze, #Airmen from the 304th Expeditionary Airlift Sq… https://t.co/CdeyI4HjHT
#DYK, the #MedalofHonor is the highest award for bravery that can be awarded to members of the United States Armed… https://t.co/qei2LbbD1I
.@388fw’s 4th Fighter Squadron became the first operational unit to fire the F-35A’s the #aircraft’s 25mm cannon on… https://t.co/J7hbXrCSCv
#DYK: The @22ARW is the host unit of McConnell AFB! Its mission is to conduct air refueling & airlift operations su… https://t.co/12bR9cwIuG
RT @71FTW: An aircraft crash has occurred approximately 50 miles west of Vance AFB. Pilot is conscious and with emergency responders. Follo…
.@HQUSAFEPA #Airmen & seven African partner nations strengthened relationships through the African Partnership Flig… https://t.co/FsvAK4n3i3
.@20FighterWing #Airmen learned how to be resilient by taking a leap of faith. https://t.co/WCgebfzEmj https://t.co/5JHPF7P1Px
RT @USAFHealth: A new transition cell was recently stood-up to coordinate and support ongoing transition efforts related to the NDAA and tr…
.@Travis60AMW #Airmen helped the Advanced Extremely High Frequency-4 program complete a major milestone by ensuring… https://t.co/yut12HK3M5
The School of Air Evacuation honored the history, present and future of aeromedical evacuation during their 75th an… https://t.co/5uYoyUwy9z
.@PANationalGuard #Airmen have new and improved parachutes. Read more about the lifesaving equipment:… https://t.co/QC1BGX8Fbl
At the @20FighterWing, munitions #Airmen train and work as a team to load 'em up & move 'em out.… https://t.co/9leaqRS8vI
Imagine trying to use a stethoscope on a plane. The noise makes the tool essentially useless. A new #technology aim… https://t.co/AYMf42Q0Wf
Read about this #Airman's experiences as he serves with the @Aus_AirForce through the Military Personnel Exchange P… https://t.co/6Td7p8u3ZO
RT @HQUSAFEPA: We. Are. NATO. U.S. Air Force F-22s and Royal Norwegian Air Force F-35s conducted training ops over Norwegian airspace toget…
Tune into this edition of Around the #AirForce https://t.co/SFdrh7AIIY