Cyber Sec Paper

System: Defense Travel System (DTS)

Style Guide: APA Format

 Minimum of 2 endnotes per page count

 Minimum of 2 references per page count

 10 or 12 font, Times New Roman, 1 inch margins, double spaced. 

Develop an analysis of the security of a cyber-system (DTS) utilizing the 1st five SANS Critical Security Controls methodology. During this research project we will perform a security analysis of the Defense Travel System (DTS) by utilizing the SANS first 5 Critical Security Controls methodology. Below is the list of controls that will be covered.

1. Inventory of Authorized and Unauthorized Devices

2. Inventory of Authorized and Unauthorized Software

3. Secure Configurations for Hardware and Software on Mobile Devices, Laptops, Workstations, and Servers

4. Continuous Vulnerability Assessment and Remediation

5. Malware Defenses

System Overview

DTS provides web-based, automated commercial and government temporary duty (TDY) travel support services to DoD agencies and military services. DTS is a network of interconnected systems that provide the necessary interfaces, data processing and storage, and security services to support secure automated TDY travel services. DTS uses a JAVA applet called the “DBsign Universal Web Signer (UWS)” for logging in to the system as well as signing documents. In order to install and run this applet, it is important that your JAVA installation is up-to-date. The DoD Public Key Infrastructure/Enabling (PKI) certificate is normally located in the chip on your Common Access Card (CAC). This certificate is used by the DBsign UWS applet mentioned above to verify your identity and authority to use DTS. Because of this, a CAC reader is required to access DTS. DTS is used by approximately 165,000 DoD personnel each weekday.

DTS supports the entire range of DoD travel activities, including:

• Travel planning

• Interfacing with travelers, Authorizing Officials (AOs), and Defense Travel Administrators (DTAs)

• Maintaining travel data, including receipts

• Monitoring the status of the travel process

• Enforcing compliance with DoD travel policies

• Supporting digital signature capability

• Performing financial computation and accounting

• Providing electronic interfaces to external automated systems

• Archiving official travel documents in accordance with regulatory and statutory requirements

DTS is web-based and travelers use the system to generate travel authorizations, make trip reservations, and route travel requests for approval, from anywhere that internet access is available. Users access the system via the DTS Web Portal.