首页> 外文会议>International Conference on Cyber Warfare and Security >The Military Cyber-Maturity Model: Preparing Modern Cyber-Enabled Military Forces for Future Conflicts
【24h】

The Military Cyber-Maturity Model: Preparing Modern Cyber-Enabled Military Forces for Future Conflicts

机译:军事网络成熟度模型:为未来的冲突制定现代网络的军队

获取原文

摘要

Military operations require the support of flexible, responsive and resilient cyber-capabilities. Information system security models and information assurance constructs seek to achieve information assurance, a high degree of certainty in the confidentiality, integrity and availability of cyber-systems supporting combat operations. This paper argues that the information assurance approach, whilst a worthy goal, is not reflective of the lessons of history or warfare. Historically, nations have consistently assumed that their wartime communications systems were secure, whilst their adversaries were reading important diplomatic cables, strategic and tactical messages. Mayfield's paradox mathematically demonstrates the futility of attempting to make any information or command and control system completely assured against every attack. The Military Cyber-Maturity Model presented within this paper adopts a pragmatic view, assuming that the adversary is technically capable and intelligent. This model embraces the possibility of an adversary utilizing an unknown vulnerability to attack the system, and expends resources to deal with the result of the successful attack rather than relying entirely on an impregnable defense. This approach extends beyond the assumption that a cyber-attack immediately causes mission failure, by recognizing that each cyber-attack has different requirements and outcomes and will affect different assets and processes. The Military Cyber-Maturity Model seeks to model business continuity through a high degree of cultural change, embedded work practices that parallel analogue and digital work practices with deceptive counterintelligence behavior. The Military Cyber-Maturity Model incorporates the concepts of behavioral defense and mission assurance to provide agility and increase the likelihood of success in combat. Information deception provides a behavioral defense, creating uncertainty and doubt in the adversary's mind and reducing the degree of trust they have in the information available. Degeneracy leads to mission assurance, by providing the ability to absorb shock and catastrophic system attacks. In the same manner that modern physical battlefields have been transformed by hybrid and asymmetric threats, the cyber-environment has the capacity to evolve further through the employment of integrated information deception and organisational degeneracy. The Military Cyber-Maturity Model embraces this approach. The Military Cyber-Maturity Model provides a methodology for preparing modern, cyber-enabled military forces for future conflicts against technologically capable adversaries. This paper introduces the model, outlines its aims, components and justifications. This work also outlines the need for simulation and testing to validate the model's effectiveness, and introduces a number of potential use-cases.
机译:军事行动需要支持灵活,响应性和有弹性的网络能力。信息系统安全模型和信息保证构建设施寻求实现信息保证,在支持战斗运营的网络系统的机密性,完整性和可用性方面,高度确定性。本文认为,信息保证方法,同时有价值的目标,并不反映历史或战争的教训。从历史上看,国家一直认为他们的战时通信系统是安全的,而他们的对手正在阅读重要的外交电缆,战略和战术信息。 Mayfield的Paradox数学展示了试图使任何信息或指挥和控制系统完全放心的徒劳无功。本文中提出的军事网络到期模型采用了务实的观点,假设对手在技术上能力和智能化。这种型号拥有对手的可能性,利用未知的脆弱性攻击该系统,并消耗资源来处理成功攻击的结果,而不是完全依赖坚定的防御。这种方法延伸超出了网络攻击立即导致特派团失败的假设,通过认识到每个网络攻击具有不同的要求和结果,并将影响不同的资产和流程。军事网络到期日模型通过高度的文化变化来旨在模拟业务连续性,嵌入式工作实践,即平行的模拟和数字工作实践,具有欺骗性的反感行为。军事网络成熟度模型包括行为防御和使命保证的概念,以提供灵活性,并增加战斗成功的可能性。信息欺骗提供行为防御,在对手的思想中创造不确定性和怀疑,并降低他们在可用信息中的信任程度。通过提供吸收休克和灾难性系统攻击的能力,退化导致任务保证。以同样的方式,现代物理战场被混合和不对称威胁转化,网络环境具有通过综合信息欺骗和组织退化的就业能力进一步发展。军事网络成熟度模型包含这种方法。军事网络成熟度模型提供了制定现代网络的军事部队的方法,以便将来对技术能力的对手发生冲突。本文介绍了该模型,概述了其目标,组件和理由。这项工作还概述了仿真和测试的需要,以验证模型的有效性,并引入了许多潜在用例。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号