SOLICITATION NOTICE
U -- Combined Chip-Off & JTAG Forensic Course - Package #1
- Notice Date
- 8/6/2014
- Notice Type
- Combined Synopsis/Solicitation
- NAICS
- 541519
— Other Computer Related Services
- Contracting Office
- Department of the Navy, Naval Sea Systems Command, NSWC Explosive Ordnance Disposal Technology Division, 2008 Stump Neck Rd, Indian Head, Maryland, 20640-5070, United States
- ZIP Code
- 20640-5070
- Solicitation Number
- 14-1300444078
- Archive Date
- 9/5/2014
- Point of Contact
- Amy C. Anderson, Phone: 3017446883, Robyn Moore, Phone: 3017446843
- E-Mail Address
-
amy.c.anderson2@navy.mil, robyn.moore@navy.mil
(amy.c.anderson2@navy.mil, robyn.moore@navy.mil)
- Small Business Set-Aside
- Total Small Business
- Description
- J&A - Sole Source RFQ- Sole Source STATEMENT OF WORK JOINT TEST ACTION GROUP (JTAG) AND CHIP-OFF ELECTRONICS TRAINING 1.0 INTRODUCTION The Naval Surface Warfare Center, Indian Head Explosive Ordnance Disposal Technology Division (NSWC IHEODTECHD) has a requirement to provide Joint Test Action Group (JTAG) and Chip-Off electronics training to personnel in expeditionary and laboratory settings. Joint Test Action Group (JT AG) and Chip-Off training will allow for a more thorough mobile device forensics capability. These techniques are extremely useful with locked and damaged devices, allowing the examiner to gain access to stored data that would otherwise be unattainable, providing highly valuable data to further intelligence and operations. 1.1 SCOPE The Contractor shall provide course curriculum and instruction for an eight (8) day JT AG and Chip-Off training session for six (6) students. Training materials shall be designed to train students that have previous electronics training. Students will utilize Contractor provided equipment which will replicate the equipment available to them in expeditionary and laboratory settings. Training shall include both classroom and practical training exercises in a laboratorylike environment. This course of instruction shall cover all the requisite material to enable personnel to perform these advanced level digital data extractions which involve connecting to Test Access Ports (TAPs) on a device and instructing the processor to transfer the raw data stored on connected memory chips, and analysis techniques which involve physically removing flash memory chip(s) from a subject device and acquiring the raw data using specialized equipment. The practical exercises shall utilize devices that are damaged or locked with an encryption scheme that is beyond today's tools' abilities to bypass or crack, for which the chipoff and JT AG methods are among the alternative solutions for examiners looking to gain access to the memory. 2.0 REQUIREMENTS The Contractor shall provide classroom instruction followed by a combination of hands-on technical practical exercises and full mission profile scenarios that both inform the students and afford them an opportunity to practice techniques. The training curriculum shall be designed to support an eight day course of instruction with a minimum of 8 hours and maximum of 10 hours of instruction per training day for 6 students. The Contractor must provide both classroom and practical training that provides a focus in the following areas: 1) In-classroom JTAG and Chip-Off training 1 2) Practical exercise performing JT AG data acquisition 3) Practical exercise performing Chip-Off data acquisition processes on damaged and encrypted devices 2.1 IN CLASSROOM JTAG AND CHIP-OFF TRAINING Instruction should be applicable to a multitude of environments from desert, to urban, to the cold weather encountered at high altitude and everywhere in between ensuring that the student is trained for all environments. The Contractor shall provide course instruction to address the following: Properly Removing a BGA Chip from a Device Handling and Preparing the Chip to be Read Reading the Chip to Acquire the Data Applying Tools and Techniques to Decode the Data Device Disassembly Applying the JTAG Technique Properly to Acquire Data Obtaining a physical dump from a locked/USB Debugging disabled Android phone Determine passwords and recovering the user data Riff Box utilization Phone Image Carver Software Fundamentals of Memory Structure Infrared Rework Tools and Infrared Reflow Wave Ovens 2.2 PRACTICAL EXERCISE PERFORMING JTAG DATA ACQUISITION The Contractor shall conduct training exercises using functioning mobile devices to perform disassembly of the devices, in order to gain access to the JT AG connectors. Students will obtain the Test Access Points using a manual process to identify unknown TAP configurations. Training exercises will include advanced Python scripting processes for recovering pattern/pin locks from dumps, as well as introductory information and scripts. Advanced HashCat processing to recover pattern/pin/password locks from the new Nexus/Galaxy phones and newer Android OS will be introduced. Students shall use the knowledge gained through in-classroom instruction to make their own coherent and informed decisions about the selection and application of equipment and processes to utilize during the training in realistic scenarios. 2.3 PRACTICAL EXERCISE PERFORMING CHIP-OFF DATA ACQUISITION ON DAMAGED AND ENCRYPTED DEVICES The Contractor shall conduct training exercises using mobile devices that have been damaged by blunt force as well as by water. Students learn how to use the tools and techniques at their disposal to remove chips in the safest fashion using Infrared rework tools and Infrared reflow wave ovens. Students get a complete hands-on experience beginning with intact and damaged, password-protected, and in some cases encrypted, Black-Berry devices loaded with data, and end 2 with the raw data acquired from the removed chip. Once the data is acquired, an education on how to best apply today's tools and other techniques to decode the data follows. 3.0 DELIVERABLES I) The Contractor shall provide detailed unclassified student handouts and student guides to complement academic lessons per class. Each student guide shall at a minimum provide a paper copy of the slides used to teach each lesson (2 per page maximum). This package is a deliverable to each participant upon completion of the training. 2) The Contractor shall deliver participant certificates upon completion of the course that state at a minimum the name and rank of each participant, hours of instruction, and course title. 3) The Contractor shall provide one each per student: Riff Box, JTAG Molex Jig Pack, Phone Image Carver Software, and 90-day Trial to UFED P~ysical Analyzer 4.0 PERIOD AND PLACE OF PERFORMANCE The Contractor shall have a curriculum ready to deliver training for the anticipated dates and locations as follows: Training Location Fredericksburg, VA September 15 to 19 I September 22 to 26 6. 0 CONTRACTOR CERTIFICATIONS I QUALIFICATIONS Instruction team should be composed of digital forensics experts with in-depth industry experience and digital forensics certification. Each instructor shall have hands on knowledge and be a qualified professional Subject Matter Experts with strong communication skills. 7.0 CONTRACTOR PERSONNEL SECURITY Instructors are required to be U.S. Citizens. Security clearance data is not required by the class provider. 8.0 GOVERNMENT TECHNICAL REPRESENTATIVES The assigned technical representative for this contract is as follows: a. Naval Surface Warfare Center, Indian Head Explosive Or¢1nance Disposal Technology Division (NSWC IHEODTECHD) Technical Program M{lnager: Marc R. Lavoie, ph (301) 744-4091 e-mail marc.lavoie@navy.mil
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/DON/NAVSEA/N42794/14-1300444078/listing.html)
- Place of Performance
- Address: NSWC IHEODTD, 2008 Stump Neck Rd, Indian Head, Maryland, 20640, United States
- Zip Code: 20640
- Zip Code: 20640
- Record
- SN03454542-W 20140808/140807023105-21c497f85aac437fe677f94a915a1159 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |