THUNDERSTORM AND STILETTO TECHNOLOGY DEMONSTRATION PROGRAM Request for Information Pursuant to FAR Part 15.201(e) RAPID REACTION TECHNOLOGY OFFICE (RRTO) Demonstration and Experimentation Event 20-4: Unmanned Surface Vessel (USV) Cyber Resiliency Capability Demonstration (CD) DISTRIBUTION A. Approved for public release: distribution unlimited SYNOPSIS: Technology Demonstration and Experimentation Collaboration A. INTRODUCTION: The purpose of this request for information (RFI) is to solicit technologies from privatee industry, government research and development (R&D) organizations, and academia for inclusion in Demonstration and Experimentatioon Event 20-4, Unmanned Surface Vessel (USV) Cyber Reliliency Capability Demonstration (CD). The CD will focus on demonstrating technologies, and tactics, techniques and procedures (TTP) that detect, contain, and correct the adverse effects of cyber attacks against USVs. This effort is sponsored by the Under Secretary of Defense for Research & Engineering, Rapid Reaction Technology Office (RRTO) and executed by the Stiletto Maritime Demonstration Program, the Thunderstorm Demonstration and Experimentation Program and the Joint Vulnerability Assessment Branch (JVAB). The intent is to accelerate the delivery of innovative capabilities and technologies to the warfighter by demonstrating and experimenting in an operationally relevant environment. The results of this effort will be used to inform decision makers of emerging and available technology solutions that enhance or improve operational capabilities. To participate in Demonstration and Experimentation event 20-4, USV Cyber Resiliency CD, interested parties are invited to submit a white paper describing their technology and the capability to detect, contain (prevent spreading) and make corrections (resume normal pre-attack operations) to cyber attacks. This event is planned for 14-25 September 2020 off the coast of the Hampton Roads Naval Complex in Virginia. The deadline for submitting white papers is 5:00 PM EDT on 21 March 2020. This RFI is NOT a solicitation for procurement or other acquisition proposals, proposal abstracts, or quotations. The government does not intend to award a contract on the basis of this RFI or to otherwise pay for the information solicited. B. BACKGROUND: Thunderstorm and Stiletto Capability Demonstrations provide an opportunity for technology developers to demonstrate and experiment with new and evolving technological capabilities in an operationally relevant environment, as well as to obtain insight into technology gaps and emerging needs. The demonstration and experimentation environment enables a collaborative working relationship between government organizations, academia, and industry. This promotes the identification of emerging needs and an assessment of maturing technologies with the primary goal of accelerating the delivery of technology discoveries to the Department of Defense and interagency partners. Technologies to be demonstrated during this event must be at a technology readiness level (TRL) of 6 or greater ( http://www.acqnotes.com/acqnote/tasks/technolo gy- r eadin ess -level ). For a CD, system developers provide the technology capability for demonstration and experimentation, the personnel for installation, integration, and operation of the system during the event, as well as uninstall the system upon completion. The Thunderstorm and Stiletto staff plans, coordinates, and assists with the associated logistics of the CD. This will be an underway demonstration on Stiletto and a designated USV. The Stiletto staff will assist with integration of equipment into the craft. During the event, developers are encouraged to share use and operation of their technology with government observers. Participation is limited to US based capability developers only. C. DESCRIPTION: This USV Cyber Resiliency CD (Demonstration and Experimentation Event 20-4) will use the Joint Vulnerability Assessment Branch (JVAB) embarked in Stiletto to perform red team cyber-attacks against a representative USV (”Lab Afloat”). Selected system developers will demonstrate their technologies, tactics, techniques and procedures (TTPs) on the USV to detect, contain, and correct the adverse effects of the cyber attacks. The CD premise is that a cyber-attack will occur so the focus is on detection, containment (prevent spreading) and correction (resume normal pre-attack operations). For the purpose of this event a cyber-attack can include: network penetration attack, network remote access, enumeration of systems, data manipulation, jamming, spoofing, electronic warfare and denial of service. Near peer and open source tactics and methodologies will be used by JVAB to accurately emulate adversarial threats. Respondents are invited to propose technologies and tactics, technology and procedures (TTP) related to the following capabilities as they apply to the support of defensive cyber operations: - Command and control - Wireless communications - Positioning, Navigation and Timing (PNT) (including Automatic Identification System (AIS) - Sensing - Intrusion detection - Tamper-evident technologies The following outlines planned milestone dates and objectives (subject to change). 21 March 2020 – White Paper Responses to this RFI due. 28 March 2020 – Government sponsors will select and notify organizations that will be invited to an USV Cyber Resiliency CD Industry Day briefing on 15 April 2020 in the Hampton Roads, VA area 15 April 2020 – Unmanned Surface Vessel Cyber Resiliency Demonstration Industry Day Selected invitees will brief their technology to government sponsors. Following the Industry Day, some organizations will be asked to revise / amend their white paper to include integration and installation requirements. 1 May 2020 – Revised / amended white papers due to TS and Stilleto. 15 May 2020 – Government sponsors will select and notify organizations to participate in the USV Cyber Resiliency CD. 14-25 Sep 2020 – Integration of technologies and at-sea demonstration of capabilities. D. SUBMISSION INSTRUCTIONS: Submit a 2-5 page white paper to the Thunderstorm and Stiletto Demonstration and Experimentation program electronically via
[email protected] and
[email protected] The white paper should be clearly marked with RFI number: RRTO-20-4-RFI-01. The application shall be formatted to print as typewritten on single-sided paper with one-inch margins on all sides and 1.5-spaced text. 10-point font or larger with normal (uncondensed) spacing shall be used. All white papers shall be submitted in the portable document format (PDF) file format and shall be less than two MB in size. White papers shall include the following information: Subject: RRTO Demonstration and Experimentation Event 20-4 Company name/business Division/address: Capability / Technology name: Primary POC info for the application: name, email & phone number You will receive an email within two business days verifying your white paper was received. Each white paper must address only one technology solution; multiple white papers addressing multiple systems may be submitted. Costs specific to running the technology developer’s equipment, as well as the technology developer’s travel costs will be at the technology developer’s expense. If you have questions regarding the submittal, please contact:
[email protected]. DO NOT SUBMIT CLASSIFIED INFORMATION in the application. Thunderstorm 20-4 is planned to be held at the unclassified level. Capabilities may be For Official Use Only (FOUO) and may be subject to International Traffic in Arms Regulations (ITAR) restrictions. If the technology is chosen for the CD arrangements can then be made for subsequent discussions at the appropriate level. It is incumbent on the demonstrators to ensure that these restrictions are outlined in their application. DO NOT SUBMIT ACQUISITION PROPOSALS. White Papers must be submitted no later than 5:00 PM EDT on 21 March 2020 . No contracts will be awarded based solely on this announcement. Submission of an application does not guarantee an invitation to participate in the demonstration and experimentation event. E. BASIS FOR SELECTION TO PARTICIPATE: Submissions will be reviewed by the RRTO and appropriate supporting government organizations and support contractors. The RRTO will determine whether a submission will be accepted for invitation at the demonstration. Selection of respondents to participate shall be based on the extent to which the technology represents a particular class or level of capability that can be provided to interested commands or interagency partners. Other considerations include: Relevance to event focus area Technical maturity (TRL 6 or above) Relevance of or adaptability to Department of Defense or interagency partner operations/missions Relevance to current operational needs F. ADDITIONAL INFORMATION: Technology developers shall assure that all proprietary information, documentation, and equipment are appropriately and clearly marked. Be advised that lessons learned from these demonstrations may be broadly disseminated through official channels within the Federal government and partner government agencies.If selected for participation, technology developers may be requested to provide additional information that will be used in preparation for the event. G. USE OF INFORMATION: The purpose of this notice is to gain information for potential future use and/or collaboration for development of technology capabilities. All proprietary information contained in the response shall be clearly marked. Any proprietary information contained in response to this request will be properly protected from any unauthorized disclosure. The government will not use proprietary information submitted from any one firm to establish future capability requirements. H. SPECIAL NOTICE: University affiliated research centers (UARCs), federally funded research and development centers (FFRDCs), and/or contractor consultant/advisors to the government will review and provide support during evaluation of submittals. When appropriate, non-government advisors may be used to objectively review a particular functional area and provide comments and recommendations to the government. All advisors shall comply with procurement integrity laws and shall sign non-disclosure and rules of conduct/conflict of interest statements. The government shall take into consideration requirements for avoiding conflicts of interest and ensure advisors comply with safeguarding proprietary data. Submission in response to this RFI constitutes approval to release the submittal to government support contractors. I. FEDERAL ACQUISITION REGULATION (FAR) 52.215-3: Per FAR 52.215-3 Request for Information or Solicitation for Planning Purposes (Oct 1997): The government does not intend to award a contract on the basis of this RFI notice or to otherwise pay for the information. Although "proposal" and "technology developer" are used in this RFI, your responses will be treated as information only. It shall not be used as a proposal. In accordance with FAR Clause 52.209(c), the purpose of this RFI is to solicit technology demonstration candidates from R&D organizations, private industry and academia for inclusion in future Thunderstorm technology demonstration and experimentation events sponsored by RRTO.