Security considerations for network-centric weapon systems

Abstract

This thesis describes the security risks for network-centric weapon systems as a combination of different aspects of security, each with its own threats and mitigation strategies. Computer and network security deals with cryptography, authentication, and attacks on software. Information security deals with the ability of the system to process information of different classifications but prevent disclosure to unauthorized users. Physical security ranges from hardware destruction to reverse engineering of captured hardware. Operational security covers the inability of covert units to transmit to the network without compromising their positions. Personnel security discusses the ways that people can intentionally or accidentally weaken the system during development or operations. Security of network-centric weapon systems is now a System of Systems (SoS) engineering problem and system developers must therefore embrace a systems engineering approach to security and consider all the threats and vulnerabilities facing the system. This examination must include not only the technical characteristics of the components but also the people who operate and maintain the system and the requirements of the mission. Only by mitigating the most efficient attacks on the system, regardless of the type of attack, can developers maximize the overall security of the system.