unclassified - Air Force Financial Management & Comptroller

BUDGET ITEM JUSTIFICATION (EXHIBIT P-40)
UNCLASSIFIED
DATE:
FEBRUARY 2002
APPROP CODE/BA:
OPAF/ELECTRONICS & TELECOMMUNICATION EQUIPMENT
P-1 NOMENCLATURE:
COMSEC EQUIPMENT
Description (continued):
b. CSAP COUNTERMEASURES: The Countermeasures Engineering Team (CMET) provides technical support for CSAP. The team
designs, develops, tests and deploys information protection tools, products and services as countermeasures for use by the AFCERT and the
CSAP Assessments Teams, as well as AF, DoD, and authorized national agencies. Data collected by the AFCERT and Assessments Teams
directly influence development of countermeasure tools and drive the near real-time implementation of countermeasures in the field. FY01-03
funding procures hardware/software necessary for vulnerability analysis, vulnerability identification and countermeasure development and tool
prototyping and testing in an environment simulating the real-world operational environment.
c. CSAP ASSESSMENTS: Responsibility for system vulnerability assessments falls to the Computer Security Engineering Teams
(CSET) and the Security Technology and Test Team (STIT). The CSET, a deployable response force, technically assesses and identifies
existing vulnerabilities in AF systems and helps units recover from intruder or virus incidents in AF systems. The CSET attempts to
electronically penetrate AF computer systems and networks to assess their security posture and provide training and countermeasures to correct
identified problems. The STIT performs product assessments; develops, tests and integrates solutions for security deficiencies in AF systems;
performs Security Test and Evaluation; and participates with the System Program Office (SPO) in the acquisition of new systems to eliminate
known vulnerabilities prior to system deployment. The team enhances the security posture of AF networks through assessment of known risks
and application of the best available technologies. The STIT also provides technical oversight and performs emissions security (EMSEC)
testing to control all compromising emanations to afford protection to facilities, systems and equipment that process classified information.
FY01-03 funding purchases equipment used to assist MAJCOMs, SPOs, and field units in identifying security flaws and requirements;
performing security engineering tasks; testing products in an effort to provide security product compatibility across the AF and DoD;
performing analysis and reporting on the AF security posture; and conducting EMSEC testing.
d. SENSOR SHADOW: Provides intelligence support to the CSAP as well as strategic and tactical commanders for protection of USAF
information systems. The program provides a phased implementation of automated tools and analytical capabilities leading to IW threat
prediction, as well as threat tracking and analysis. This analytical product supports the war fighting community via electrical message and via
intelligence communities’ secure compartmented information (SCI) network and secret Internet protocol router network (SIPRNet) web sites
P-1 ITEM NO PAGE NO:
32
4
UNCLASSIFIED
Page 4 of 5