Denver Security Intelligence Center Enhances Lockheed Martin’s Ability to Counter Cyber Threats

Lockheed Martin has opened a second Security Intelligence Center (SIC) in Denver to enhance its ability to detect and respond to attacks launched on its cyber networks.

The first SIC center was opened in May 2008 in Gaithersburg, Md.

These two centers are operated by the Lockheed Martin Computer Incident Response Team (CIRT). The centers have completely integrated facilities and function as the hub of Lockheed Martin’s computer network security function, and involve detecting, identifying, and responding to information security threats. This process is accomplished by integrating pervasive sensors, analyst collaboration, and data management capabilities.

According to Anne Mullins, chief information security officer of Lockheed Martin, customary operation centers usually respond to cyber attacks at micro levels to reduce the effect of a particular threat at a specific time. But Lockheed’s SICs have intelligence analysts who analyze attacks at a macro level and break down these attacks into phases known as the ‘kill chain.’ The analysts examine this data to make out patterns followed during continuous cyber attack campaigns that encompass multiple attacks, and apply new measures to further reduce the damage caused by these cyber threats.

Mullins said that intelligence depends on timely and complete data. To cater to this requirement, Lockheed Martin combines information gathered by its different sensor grids consisting of custom-developed and off-the-shelf technologies, into its two SICs. This offers Lockheed with complete vantage points from where various cyber attacks can be observed, including reconnaissance, lateral movement, intrusion, compromise, and command and control.

The two centers at Denver and Gaithersburg, which cover an area of 5000 sq. ft. and 8000 sq. ft., respectively, have been opened to protect DoD and other government systems linked to networks such as DIBNet, from cyber threats. The major features of the facilities include a digital forensics area, an executive conference room, and a secure evidence storage room.