Defense stalwarts see cash in cybersecurity

As the U.S. government goes on a cyberdefense spending spree, major government contractors are beefing up their network security expertise so they can get in on the action.

Slideshow: Technology from the federal government

Lockheed, Boeing, Raytheon, SAIC and other big government contractors have been creating their own cybersecurity divisions, hiring network security staff or buying up smaller security firms to augment their own credentials.

"Everybody smells money here," says Stephen Kent, chief scientist at BBN Communications, who has worked on government network security for more than 30 years. "The size of the business could be enormous."

Click to see: Defense contractors cyber-up

Market Research Media recently issued a report that projects government cybersecurity spending growing at 6.2% per year to a total of $55 billion over the next six years. Other published estimates put that spending at $11 billion to $13 billion in 2013 alone, setting off a rush among providers to bid for their share.

Some defense contractors have extensive network security experience under their belts, Kent says, and others are trying to acquire it. There will likely be projects for both kinds of firms, he says.

Contractors that have worked on classified security projects before are familiar with the unique threats that states pose to the U.S. government that differ from the kinds of threats that corporations generally face. These contractors have expertise that is a natural fit for protecting the government networks most likely to be targeted, such as those in military and intelligence agencies, he says.

Other segments of the government that are involved in more mundane activities face the same mainstream challenges as corporate America. "Many parts of government networks are analogous to commercial networks, others are not," he says.
It is unlikely that corporations will be soon tapping these government and military contractors for their services or new technologies, say John Pironti, the president of network security consulting firm IP Architects.

The cultures of private industry and government are vastly different, Pironti says. Private firms want speed in their security projects -- looking to hire consultants, plan the work and execute the plan quickly.

In government the process generally takes longer, projects tend to be on the largest scale and one goal is to wind up with systems that can be readily replicated over and over, he says.

"In commercial it's all about efficiency. In government it's about structure and consistency," Pironti says. Large agencies want to be able to build the same defenses everywhere, and simple enough to be run by relatively low-level staff. "They want the most efficient, cost effective, lowest-common-denominator operations" he says.

One longtime government contractor, Lockheed, has rolled cybersecurity components into its government contracts for years. Securing the data involved in government projects has become a component of each contract, says Eric Cole, Lockheed's chief scientist and a senior fellow at the firm. "Implementing cybersecurity is ingrained," he says.