Security of embedded systems

Trade Agreement: Canadian Free Trade Agreement (CFTA) Tendering Procedures: The bidder must supply Canadian goods and/or services Competitive Procurement Strategy: Best Overall Proposal Comprehensive Land Claim Agreement: No Nature of Requirements:

(a) Title: Security of embedded systems (b) Description of Work

Embedded systems are now part of billions of everyday consumer and industrial devices. For example, Internet-of-things devices rely extensively on embedded systems. The security of these systems is different from traditional information technology systems. They often do not use an operating system and rely on embedded communication protocols for which few tools exist. Studying the security of embedded system hardware and software requires a different set of knowledge and expertise. It also requires tailored methodologies and tools, many of which do not exist yet. Also, the problem of security of embedded systems is not fully understood. This Work aims at developing security tools and methodology, use them to better understand the security posture and to test various mitigation solutions.

Task 1 - Characterize an embedded system Task 2 - Find vulnerabilities and security measures Task 3 - Test vulnerabilities and assess their impact Task 4 - Identify potential mitigation solution(s) that would reduce the risk Task 5 - Develop new mitigation solutions Task 6 - Develop testbed to study the embedded system in a laboratory environment Task 7 - Develop testing procedures and conduct field trials Task 8 - Assess security standards and protocols

(c) Client Department

The organization for which the services are to be rendered is Defence Research and Development Canada - Valcartier Research Centre.

(d) Period of the Contract

The period of the Contract is from Contract award to 5 years after Contract award.

(e) Important Information

i. There are security requirements associated with this requirement. For additional information, consult Part 6 - Security, Financial and Other Requirements, and Part 7 - Resulting Contract Clauses. For more information on personnel and organization security screening or security clauses, Bidders should refer to the Contract Security Program of Public Works and Government Services Canada (http://www.tpsgc-pwgsc.gc.ca/esc-src/introduction-eng.html) website.

ii. Defence Research and Development Canada - Valcartier Research Centre has determined that any intellectual property rights arising from the performance of the Work under the resulting contract will belong to Canada.

iii. Work Location: At least 85% of the Work must be executed at Defence Research and Development Canada - Valcartier Research Centre (2459, de la Bravoure Rd., Québec, QC, G3J 1X5, CANADA).

iv. The requirement is limited to Canadian services.

v. The requirement is subject to the provisions of the Canadian Free Trade Agreement (CFTA).

vi. This procurement is subject to the Controlled Goods Program. The Defence production Act defines Canadian Controlled Goods as certain goods listed in Canada’s Export Control List, a regulation made pursuant to the Export and Import Permits Act (EIPA).

vii. The estimated amount of available funding is $5 000 000.00 Applicable Taxes extra.

viii. All or parts of the Work will be performed on an "as and when requested basis", using a Task Authorization (TA). A contract with Task Authorizations (TAs) is a method of supply for services under which all of the work or a portion of the work will be performed on an "as and when requested basis". Under contracts with TAs, the work to be carried out can be defined but the exact nature and timeframes of the required services, activities and deliverables will only be known as and when the service(s) will be required during the period of the contract. A TA is a structured administrative tool enabling the Crown to authorize work by a contractor on an "as and when requested" basis in accordance with the conditions of the contract. TAs are not individual contracts.

ix. The Federal Contractors Program (FCP) for employment equity applies to this procurement; refer to Part 5 - Certifications and Additional Information, Part 7 - Resulting Contract Clauses and the Attachment titled Federal Contractors Program for Employment Equity - Certification.

For additional information : Josee.Roy@tpsgc-pwgsc.gc.ca

This PWGSC office provides procurement services to the public in both official languages.

Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any procurement.

Documents may be submitted in either official language of Canada.