TOP SECRET/SITKINOFORN (U) COMPUTER NETWORK OPERATIONS (U) SIGINT ENABLING [Ths Exnibits SOCRETINOFORN A FY 2012 Bracied FY 2013 Request Fy 202 — FY 2005 Fy 2011 a actual | Base | 0cO | Tout | Base | CO | Totat | Change | Crrnge Funding (SMD. wae] asa] — | 2a] rao] — | mao] mal 7 Chilian FTE 1a | yen amu 2 T Civilian Positions | a4] 1 = [8 se 2 7 Military Positions [| _ — = S S 5 = = = = Tinto nated OCO Funding “Toa may naa due ronan (U) Project Description (TSHSWNF) The SIGINT Enabling Project actively engages the US and foreign IT industries to covertly influence and/or overtly leverage their commercial products” designs. These design changes make the systems in question exploitable through SIGINT collection (¢.g., Endpoint, MidPoint, ctc.) with foreknowledge of the modification. To the consumer and other adversaries, however, the systems’ security remains intact. In this ‘way, the SIGINT Enabling approach uses commercial technology and insight to manage the increasing cost and lechnical challenges of discovering and successfully exploiting systems of interest within the ever-more integrated ‘and seeurity-focused global communications environment (TSVSUREL TO USA, FVEY) This Project supports the Comprehensive National Cybersecurity Initiative (CNCD by investing in corporate partnerships and providing new access to intelligence sources, reducing collection and exploitation costs of existing sources’, and enabling expanded network operation and intelligence exploitation to support nctwork defense and cyber situational awareness. This Project contains the SIGINT Enabling Sub-Project. (U) Base resources in this project are used to: + (TS/SU/REL TO USA, FVEY) Insert vulnerabilities into commercial encryption systems, IT systems, networks, and endpoint communications devices used by targets. (TSI/SU/REL TO USA, FVEY) Collect target network data and metadata via cooperative network carriers ‘and/or increased control over core networks. + (TS/SU/RELTO USA, FVEY) Leverage commercial capabilities to remotely deliver or receive information to and from target endpoints. + (TS/SW/REL TO USA, FVEY) Exploit foreign trusted computing platforms and technologies. + (TS//SVIREL TO USA, FVEY) Influence policies, standards and specification for commercial public key technologies. + (TS/#SU/REL TO USA, FVEY) Make specific and aggressive investments to facilitate the development of a robust exploitation capability against Next-Generation Wireless (NGW) communications. + (U//FOUO) Maintain understanding of commercial business and technology trends. + (UHPOUO) Procure products for internal evaluation. ‘+ (U/FOUO) Partner with industry and/or government agencies in developing technologies of strategic interest 10 NSA/CSS. ‘TOP SECRETI/SI/TK/NOFORN 15‘TOP SECRETISUTKINOFORN + (TSI/SWIREL TO USA, FVEY) Support the SIGINT exploitation of NGW, a MIPINIP collective investment. This request reflects only the NIP portion ofthe program. Refer to MIP NSA volume for details fon MIP related activities. + (TS/ISWREL TO USA, FVEY) Provide for continued partnerships with major telecommunications carriers to shape the global network to benefit other collection accesses and allow the continuation of partnering with commercial Managed Security Service Providers and threat researchers, doing threat/vulnerability analysis, «+ (TS/SU/REL TO USA, FVEY) Continue relationships with commercial TT partners and capilize on new sresmcaite,inelucing the enesing of erypograpty used by ¢ a rr Soro: ent enemigos nie sli gel WAG Devs Woe we fommunicaion Being eared on a commercial satelite provide, (U) There ar no now setvtes inthis Project for FY 2013 (U) The CCP expects this Project to accomplish the following in FY 2013: + (SIISHINE) Reach an intl operating capability for SIGINT acess to data lowing trough commercial ‘abi lngunge/Midle Enstriened anonymous internet service (CCP. 00009] + (ISISUIREL TO USA, FVEY) Reach ful operating copoly for SIGINT aces to dts owing through {hu fora major commercial communications provider end ases its long tem benefits {S/SUIREL TO USA, PVEY) Reach fl operating eaptiliy for SIGINT aces toa major Internet Pet- tc-Pear ronan text eraadoaions em + (TS/SUIREL TO USA, FVEY) Complete enabling for EEE ncryption chips used in Virtual Private Network and Web encryption devices. {CCP_00009} + (TSJ/SU/REL TO USA, FVEY) Make gains in enabling decryption and Computer Network Exploitation (CNB) access to fourth generation/Long Term Evolution (4G/LTE) networks via enabling. [CCP_00009] + (TSISW/REL TO USA, FVEY) Assess existing wireless calling metadata accesses and balance flow of this data into NSA/CSS with the ability to ingest and utilize this information. [CO_00047] + (TSI/SU/REL TO USA, FVEY) Assess existing commercial cyber information flows and balance the flow of this data into NSAJCSS with the ability (o ingest and analyze chs information to support eyber situational awareness, (CO_00047] + (TSISLINF) Shape the worldwide commercial eryptography marketplace to make it more tractable to advanced cryptanalytic capabilities being developed by NSA/CSS. {CCP_00090] (U) Changes From FY 2012 to FY 2013: (SINE) SIGINT Enabling: -§20.4 million (-$20.4 Base), -2 the result of: lian positions, The aggregate decrease is + (U) Increase — (CTSISW/NF) $5.6 million reflects additional level of investment in enabling exploitation capabilities against NGW mobile and data networks. — (TS//SVINF) $4.1 million enables additional support to Endpoint operations. Support to this mission area requires SIGINT Enabling to invest in new infrastructure and capabilities with commercial partners. — (S//NF) $0.4 million in civilian pay and benefits, 18 ‘TOP SECRETISUTKINOFORNTOP SECRETISITKINOFORN — (S/INF) $0.3 million due to revised economic assumptions. + (U) Decreases: = (TS/ISUINF) $20.8 million of contractor reductions to fund priority Community investments, which impacts the ability to sustain and expand activities directly supporting cyber informational needs. — (TSI/SUINF) Decrease of $10.0 million in support of deficit reduction efforts, which reduces effectiveness of accesses supporting intelligence collection and Endpoint operations. — (TS/ISVINF) Two civilian positions reduces development of strategic capabilities enabling ‘cryptographic exploitation of target communications to advance NSA/CSS' missions [SIGINT Enabling Project Budget Chart lev 2013 Budget Request by Appropriation Account it is SECRET/NOFORN [Funds — Dollars in Milions rs Ex Subproject Description Resourcing] Fe a0 | FV 2012 | FYI Sasi canon Fund [F953] _toane| 11852 : ‘Positions: 137 132 a ‘Communications and Uites | Base om] = = Contrast Seniees Bie Tear] Tss3| sa Eauipmene Bae Taf 1090] 119 SIGINT Enabling ay and Benet Base Teer] v7se| amr Supplies and Mates Bae dos] asp 0 “Travel and Transport Bae tar] asst 180 Postions | a7 [192 va Research, Development, Test, and Evaluation, Defense-Wide pee Le Baa ee Potion | 7 [tt a Communications and Unies] Bate os 7 ‘Conrar Serves Bae ise] _Te675| 190 Exviament Base 6c 2 SIGINT Enabling Pay and Bewei Ba rc a) Supplies nd Matera Ene ao] ow} 01 Travel and Transporation Base ozo] = Postions [7 7 5 "Tuas nay pa deo Young ‘TOP SECRETISITKINOFORN a