Estonia, U.S. Conduct Joint Defensive Cyber Operation
(Source: US Department of Defense; issued Dec. 3, 2020)
A U.S. soldier and an Estonian soldier work in the tactical operation center during an exercise in Tapa, Estonia. The US Army and the Estonian MoD have established a cyber domain working group to identify opportunities for interoperability. (DoD photo)
U.S. Cyber Command conducted a joint defensive cyber operation with the Estonian Defense Forces' cyber command on EDF networks, Sept. 23-Nov. 6. The operation was designed to counter malicious cyber actors and strengthened the cyber defense capability of both nations' critical assets.

"Combined operations with our closest allies like [the] U.S. are vital for ensuring [the] security of our services," Mihkel Tikk, the deputy commander of EDF's cyber command, said.

"These kind[s] of operations provide our operators an opportunity to exchange best practices as well as give us objective feedback on our current defense posture in [the] cyber domain. This operation is another successful milestone in our cooperation with U.S. partners," he said.

U.S. cyber specialists, referred to as "Hunt Forward" teams, and Estonian cyber personnel from Defense Forces Cyber Command, hunted for malicious cyber actors on critical networks and platforms. The U.S. has partnered with various countries throughout Europe, but this defensive cyber operation marked the first of its kind between the U.S. and Estonia.

"Despite the challenges of a global pandemic, we safely deployed to Estonia and other European countries for several weeks to gain unique insight into our adversaries’ activities that may impact the U.S.," Army Brig. Gen. Joe Hartman, the commander of the Cyber National Mission Force, said.

"Our teams proactively hunt, identify and mitigate adversary malware and indicators," he said. "We then share that malware broadly, not just with the U.S. government but with private cybersecurity industry and allies, which directly increases the overall security of U.S. critical infrastructure and related networks."

For the U.S., the Hunt Forward teams play a crucial role in Cybercom’s "persistent engagement," an effort aimed at countering malicious cyber activity below the level of warfare. Cybercom personnel are specially trained to secure and defend government networks and platforms against adversaries. The U.S. military’s "defend forward" strategy leverages key partnerships to address malicious cyber activity that could be used against U.S. critical infrastructure.

"Estonia is a digital society, and we depend on cyber everywhere, as well as in defense," Margus Matt, Estonia's undersecretary of defense for cyber defense, said. "For us, it's really important to be one of the first allies with whom the U.S. has initiated this kind of joint operation, which enabled us to obtain an independent assessment on our networks. As a leader in cyber, it also provided Estonia an opportunity to share best practices to better protect our networks."

Both nations benefit from such partnerships as they provide opportunities to improve cyber defense by assessing potential threats while contributing to global cybersecurity. Disclosing malware enables greater protections for users both in public and private sectors around the world.

"Cyber is a team sport — when it comes to halting threats from cyberspace, no one can go it alone," Thomas Wingfield, deputy assistant defense secretary for cyber policy, said. "Our strategy hinges on collaborating with our allies and partners with the private sector and academia and with state and local governments to ensure cyberspace remains a safe, secure and open engine of innovation and prosperity."

U.S. Cyber Command, in cooperation with U.S. European Command and NATO allies, continuously works to deter malicious cyber activity in the region.

Spotlight: NATO

The two countries have ongoing cooperation at various levels within Cybercom, U.S. European Command, the Maryland National Guard and the Sixteenth Air Force — U.S. Air Forces Cyber.

The logos of the Estonian Defense Forces' Cyber Command, U.S. European Command and U.S. Cyber Command.

"U.S. European Command’s robust Cyber Security Cooperation program is focused on building allied and partner cyberspace operational capabilities, which strengthens trust and cultivates strong ties with our cyber partners throughout Europe," Army Brig. Gen. Maria Biank, director of Eucom’s command, control communications, and computers, or C4, and cyberspace directorate, said.

"Through bilateral and regional security cooperation efforts and information sharing initiatives, we are able to further enhance our collective cybersecurity posture as well as enable Hunt Forward operations in our area of responsibility," she said.

Estonian Cyber Command provides command support to the governance area of the Estonian Defense Ministry. The command was established in 2018 as part of the effort to strengthen Estonian cyber defense posture and contribute to ensuring the security of Estonia in general.

(ends)



Hunt Forward: Estonia, US Strengthen Partnership in Cyber Domain with Joint Operation
(Source: Estonia Ministry of Defence; issued Dec 03, 2020)
Estonian and U.S. cyber commands jointly conducted a defensive cyber-operation on Estonian Defence Forces’ networks from September 23 to November 6. The operation, designed to counter malicious cyber actors, strengthened the cyber defense capability of both nation’s critical assets.

“Combined operations with our closest allies like U.S. are vital for ensuring security of our services. These kinds of operations provide our operators an opportunity to exchange best practices as well as give us objective feedback on our current defense posture in cyber domain. This operation is another successful milestone in our cooperation with U.S. partners,” said Mihkel Tikk, Deputy Commander of Estonian Defense Forces Cyber Command.

Working together, cyber specialists from the U.S., referred to as “Hunt Forward” teams, and Estonian cyber personnel from Defense Forces Cyber Command, hunted for malicious cyber actors on critical networks and platforms. The U.S. had previously partnered with various countries throughout Europe, however, this defensive cyber operation marked the first of its kind between the U.S. and Estonia.

“Despite the challenges of a global pandemic, we safely deployed to Estonia, and other European countries, for several weeks to gain unique insight into our adversaries’ activities that may impact the U.S.,” said U.S. Army Brig. Gen. Joe Hartman, Commander, Cyber National Mission Force. “Our teams proactively hunt, identify and mitigate adversary malware and indicators. We then share that malware broadly, not just with the U.S. government but with private cybersecurity industry and allies, which directly increases the overall security of U.S. critical infrastructure and related networks.”

For the U.S., Hunt Forward teams play a crucial role in U.S. Cyber Command’s “persistent engagement”, an effort aimed at countering malicious cyber activity below the level of warfare. USCYBERCOM personnel are specially trained to secure and defend government networks and platforms against adversaries. The U.S. military’s Defend Forward strategy leverages key partnerships to address malicious cyber activity that could be used against U.S. critical infrastructure.

“Estonia is a digital society and we depend on cyber everywhere, as well as in defense. For us it´s really important to be one of the first Allies with whom the US has initiated this kind of joint operation, which enabled us to obtain an independent assessment on our networks. As a leader in cyber, it also provided Estonia an opportunity to share best practices to better protect our networks,” said Margus Matt, Undersecretary responsible for cyber defense at the Ministry of Defense of Estonia.

Both nations benefit from such partnerships as it provides an opportunity to improve cyber defense by assessing potential threats, while also contributing to global cybersecurity. Disclosing malware enables greater protections for users both in public and private sectors around the world.

“Cyber is a team sport – when it comes to halting threats from cyberspace, no one can go it alone,” said Thomas Wingfield, Deputy Assistant Secretary of Defense for Cyber Policy. “Our strategy hinges on collaborating with our allies and partners, with the private sector and academia, and with state and local governments to ensure cyberspace remains a safe, secure, and open engine of innovation and prosperity.” U.S. Cyber Command, in cooperation with U.S. European Command and NATO allies, continuously work to deter malicious cyber activity in the region.

“U.S European Command’s robust Cyber Security Cooperation program is focused on building Allied and partner cyberspace operational capabilities, which strengthens trust and cultivates strong ties with our cyber partners throughout Europe. Through bilateral and regional security cooperation efforts and information sharing initiatives, we are able to further enhance our collective cybersecurity posture as well as enable Hunt Forward operations in our area of responsibility,” said U.S. Army Brig. Gen. Maria Biank, director of USEUCOM’s C4 and cyberspace directorate.

The main mission of the Estonian Cyber Command is to provide command support to the governance area of the Estonian Ministry of Defense. The establishment of the Command in 2018 has been part of the efforts to strengthen Estonian cyber defense posture and thereby contribute to ensuring the security of Estonia in general.

The two countries have ongoing cooperation at various levels within USCYBERCOM, U.S. European Command, Maryland National Guard, and Sixteenth Air Force (U.S. Air Forces Cyber).

-ends-





prev next

Breaking News from AFP See all

Official reports See all