Quanterion Solutions Incorporated (QSI) offers this Small Business Innovative Research Phase I proposal titled Internet of Things Onboarding Capability (IoTOC) in response to topic AF22.2-0003. QSI will develop a Developmental Test & Evaluation (DT&E) capability addressing IoT testing for Air Force systems integration. QSI will leverage available cloud technology and apply the firms knowledge of zero trust principles, software development, data architectures, command & control, cloud computing, and Cyber Physical Systems (CPS). Many installations and bases throughout the DoD are launching IoT efforts, but in an ad hoc manner without the ability to conduct DT&E. Projects often move directly from concept to implementation without quantitatively assessing security risks. These situations obscure the systems attack surface and place sensitive military systems and critical infrastructure at great risk of being penetrated and exploited. Provision of design tools and technical expertise in IoT testing and evaluation during DT&E are needed to harden existing and future IoT/IIoT efforts. One anticipated technology that QSI may employ is Infrastructure-as-Code (IaC), an existing and widely used DevSecOps methodology used for automated provisioning of IT infrastructure and configuration management within cloud environments. IaC can enable a Testing as a Service (TaaS) solution.
