The Host Based Security System (HBSS), which enables the Defense Department to detect and counter known cyber threats to the DoD enterprise in real-time through a collection of flexible commercial-off-the-shelf and government-off-the-shelf applications, will be combined with several other tools to provide an evolved, holistic approach to cybersecurity network defense, known as Endpoint Security Solutions (ESS).
The shift from HBSS to ESS represents an enhancement of existing capabilities through both product lifecycle evolution and the addition of specific endpoint capabilities, such as application whitelisting, visibility, and containment tools.
The HBSS to ESS enhancement will occur over the next few years and will leverage the added security of the Windows 10 Secure Host Baseline (SHB), with additional capabilities added through the acquisition process based on new requirements.
ESS is constantly reviewed via the Unclassified-but-Sensitive Internet Protocol Router Network (NIPRNET)/Secret Internet Protocol Router Network (SIPRNET) Cyber Security Architecture Review (NSCSAR) process to ensure appropriate endpoint protections are in place to meet the ever-changing threat.
Endpoint security is a DoD-wide effort that leverages the collaborative capabilities of the Defense Information Systems Agency, the National Security Agency, the DoD Cyber Range, and DoD red teams — groups that attempt to penetrate network defenses in order to identify vulnerabilities. The effort also involves continuous market research, conducted through DoD components, the Department of Homeland Security, and supporting contractors.
To learn more, visit the ESS page on DISA.mil.