Host Based Security System: Difference between revisions

Revision as of 04:42, 22 December 2013

Revision as of 20:57, 26 February 2014

Line 1:

{{Orphan|date=June 2011}}

The '''Host Based Security System''' ('''HBSS''') is the official name given to the [[United States Department of Defense|Department of Defense]] (DOD) [[Commercial off-the-shelf|commercial-off-the-shelf]] (COTS) suite of software applications used within the DOD to monitor, detect, and counter attackscounterattacks against the DOD computer networks and systems. The [[Enterprise-wide Information Assurance and computer Network Defense Solutions Steering Group]] (ESSG) sponsored the acquisition of the HBSS System for use within the DOD Enterprise Network. HBSS is deployed on both the [[NIPRNet|Non-Classified Internet Protocol Routed Network]] (NIPRNet) and [[SIPRNet|Secret Internet Protocol Routed Network]] (SIPRNet) networks, with priority given to installing it on the NIPRNet. HBSS is based on [[McAfee|McAfee, Inc]]'s [[ePolicy Orchestrator]] (ePO) and other McAfee point product security applications such as [[Host Intrusion Prevention System]] (HIPS).

== History ==

Seeing the need to supply a comprehensive, department-wide security suite of tools for DOD System Administrators, the ESSG started to gather requirements for the formation of a host-based security system in the summer of 2005. In March 2006, [[BAE Systems]] and McAfee were awarded a contract to supply an automated host-based security system to the department. After the award, 22 pilot sites were identified to receive the first deployments of HBSS.<ref>''Host Based Security System'', http://www.disa.mil/hbss/index.html, 3/13/2010</ref> During the pilot roll out, DOD System Administrators around the world were identified and trained on using the HBSS software in preparation for software deployment across DOD.

On October 9, 2007, the [[Joint Task Force for Global Network Operations]] (JTF-GNO) released [[Communications Tasking Order]] (CTO) 07-12 (''Deployment of Host Based Security System (HBSS)'') mandating the deployment of HBSS on all Combatant Command, Service and Agency (CC/S/A) networks within DOD with the completion date by the 3rd quarter of 2008.<ref>''Host Based Security System HBSS)'',http://www.afcea.org/events/landwarnet/08/infoexchange.asp, 3/13/2010</ref> The release of this CTO brought HBSS to the attention of all major department heads and CC/S/A's, providing the ESSG with the necessary authority to enforce its deployment. Agencies not willing to comply with the CTO now risked being disconnected from the DOD [[Global Information Grid]] (GIG) for any lack of compliance.