What is so surprising here? The DOD is the largest funder of research grants in the US. 
Pretty much every university is doing research for a US agency from cyber security to lasers for missile defense.
I find it very hard to believe that this is the firs time a university was conducting computer security research on live targets.