R&D Embedded Systems Security

Trade Agreement: Canadian Free Trade Agreement (CFTA) Tendering Procedures: The bidder must supply Canadian goods and/or services Competitive Procurement Strategy: Best Overall Proposal Comprehensive Land Claim Agreement: No Nature of Requirements:

Closing date for the above mentioned project has been postponed until April 4th, 2022, 2:00pm _____________

Embedded systems security, Defence Research and Development Canada - Valcartier Research Centre

Description Embedded systems represent a growing part of consumer and industrial devices. The Internet-of-things devices, wireless sensors, cyber-physical and industrial control systems all rely extensively on embedded systems. Embedded systems security differs from traditional systems security and present unique challenges as they often have no operating system and rely on embedded communication protocols for which few investigation tools exist.

Studying the security of embedded systems hardware and software requires a different set of knowledge and expertise than traditional computer systems’ security. It also requires tailored methodologies and tools, many of which are not mature yet. In addition, the domain of embedded systems security is not fully understood. This Work aims at developing security tools and methodologies, and using them to better understand the security posture and to test mitigation solutions.

Task 1 - Characterize an embedded system

Task 2 - Find vulnerabilities and security measures

Task 3 - Test vulnerabilities and assess their impact

Task 4 - Identify and test potential mitigation solution(s) that would reduce the risk

Task 5 - Develop new mitigation solutions

Task 6 - Develop testbed and tools to study the embedded systems

Task 7 - Develop and conduct tests

Task 8 - Assess security standards, protocols, methods and tools

Task 9 - Manage knowledge on security of embedded systems

Period of Contract It is intended to result in the award of one contract of a duration of 5 years from award date, inclusive.

Security Requirements There are security requirements associated with this requirements.

Trade agreements This requirement is subject to the provisions of the Canadian Free Trade Agreement (CFTA).

Controlled Goods Program This requirement is subject to the controlled goods program

Canadian Content The requirement is limited to Canadian services

COVID-19 vaccination requirement This requirement is subject to the COVID-19 Vaccination Policy for Supplier Personnel. Failure to complete and provide the COVID-19 Vaccination Requirement Certification as part of the bid will render the bid non-responsive.

Epost Connect IMPORTANT NOTICE TO SUPPLIERS SUBMISSION REQUIREMENTS

Due to the impacts from the COVID-19 pandemic, temporary measures are being taken on-site at the Quebec Region Bid Receiving Unit to encourage social distancing. The health and safety of staff and suppliers remains our top priority.

Suppliers are required to submit bids electronically using the Canada Post epost Connect application for the subject bid solicitation. This service allows suppliers to submit bids, offers and arrangements electronically to PWGSC Bid Receiving Units. This online service enables the electronic transfer of large files up to Protected B level.

Faxed and hard copy (submitted in person or via mail/courier) bids will not be accepted for the subject bid solicitation.

Given current circumstances and network limitations, some active procurements may be delayed. To stay up to date on the status of specific procurements, please consult Buysandsell.gc.ca.

Enquiries during the solicitation period Enquiries regarding this bid must be submitted in writing to the Contracting Authority named on the Invitation to Tender - Page 1 at e-mail address Julie.desforges@tpsgc-pwgsc.gc.ca. All enquiries must be submitted in writing to the Contracting Authority no later than five (5) calendar days before the bid closing date. Enquiries received after that time may not be answered.

The Crown reserves the right to negotiate with suppliers on any procurement. Documents may be submitted in either official language of Canada. Standard terms and conditions for this procurement are incorporated by reference into, and form part of, the tender and contract documents.

Tender documents Firms intending to submit tenders on this project should obtain tender documents through the website https://buyandsell.gc.ca service provider. Addenda, when issued, will be available from the service provider. Firms that elect to base their bids on tender documents obtained from other sources do so at their own risk and will be solely responsible to inform the tender calling authority of their intention to bid.

Submission of Bids Bids must be submitted only to the Public Works and Government Services Canada (PWGSC) Bid Receiving Unit via e-post Connect by the date and time indicated on page one of the bid solicitation. Note: For bidders needing to register with epost Connect the email address is:

TPSGC.RQReceptionSoumissions-QRSupplyTendersReception.PWGSC@tpsgc-pwgsc.gc.ca

Interested Bidders must register a few days prior to solicitation closing date.

Note: Bids will not be accepted if emailed directly to this email address. This email address is to be used to open an epost Connect conversation, as detailed in Standard Instructions 2003, or to send bids through an epost Connect message if the bidder is using its own licensing agreement for epost Connect.

Due to the nature of the bid solicitation, bids transmitted by facsimile or electronic mail to PWGSC will not be accepted.

This PWGSC office provides acquisition services to the public in both official languages.

Delivery Date: Above-mentioned

The Crown retains the right to negotiate with suppliers on any procurement.

Documents may be submitted in either official language of Canada.