Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework
With the advancement of information technology (IT), the importance of cyber security is increasing because of the expansion of software utilization in the development of weapon systems. Civilian embedded systems and military weapon systems have cybersecurity-related symmetry that can increase vulne...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-11-01
|
| Series: | Symmetry |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2073-8994/14/11/2361 |
| _version_ | 1797466397887954944 |
|---|---|
| author | Ikjae Kim Sungjoong Kim Hansung Kim Dongkyoo Shin |
| author_facet | Ikjae Kim Sungjoong Kim Hansung Kim Dongkyoo Shin |
| author_sort | Ikjae Kim |
| collection | DOAJ |
| description | With the advancement of information technology (IT), the importance of cyber security is increasing because of the expansion of software utilization in the development of weapon systems. Civilian embedded systems and military weapon systems have cybersecurity-related symmetry that can increase vulnerabilities in the process of advanced information technology. Many countries, including the United States, are exploring ways to improve cybersecurity throughout the lifecycle of a weapon system. The South Korean military is applying the U.S. standard risk management framework (RMF) to some weapon systems to improve cybersecurity, but the need for a model that is more suitable for the South Korean military has been emphasized. This paper presents the results of a mission-based cybersecurity test, along with an evaluation model that can be applied to South Korean military weapon systems in parallel with the RMF. This study first examined the related international research trends, and proposed a test and evaluation method that could be utilized with the RMF throughout the entire life cycle of a weapon system. The weapon system was divided into asset, function, operational task, and mission layers based on the mission, and a mutually complementary model was proposed by linking the RMF and cybersecurity test and evaluation according to the domestic situation. In order to verify the proposed cybersecurity test and evaluation model, a simulation was developed and performed targeting the Close Air Support (CAS) mission support system, which is a virtual weapon system. In this simulation, the nodes performances by layer before and after a cyberattack were calculated, and the vulnerabilities and protection measures identified in the cyber security test and evaluation were quantified. This simulation made it possible to evaluate and derive protection measures in consideration of mission performance. It is believed that the proposed model could be used with some modifications, depending on the circumstances of each country developing weapon systems in the future. |
| first_indexed | 2024-03-09T18:35:24Z |
| format | Article |
| id | doaj.art-9b22a3a15a9c4ec48a5990e561fa26ac |
| institution | Directory Open Access Journal |
| issn | 2073-8994 |
| language | English |
| last_indexed | 2024-03-09T18:35:24Z |
| publishDate | 2022-11-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Symmetry |
| spelling | doaj.art-9b22a3a15a9c4ec48a5990e561fa26ac2023-11-24T07:09:05ZengMDPI AGSymmetry2073-89942022-11-011411236110.3390/sym14112361Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management FrameworkIkjae Kim0Sungjoong Kim1Hansung Kim2Dongkyoo Shin3Department of Computer Engineering, Sejong University, Seoul 05006, KoreaDepartment of Computer Engineering, Sejong University, Seoul 05006, KoreaR.O.K Cyber Operations CMD, Seoul 04383, KoreaDepartment of Computer Engineering, Sejong University, Seoul 05006, KoreaWith the advancement of information technology (IT), the importance of cyber security is increasing because of the expansion of software utilization in the development of weapon systems. Civilian embedded systems and military weapon systems have cybersecurity-related symmetry that can increase vulnerabilities in the process of advanced information technology. Many countries, including the United States, are exploring ways to improve cybersecurity throughout the lifecycle of a weapon system. The South Korean military is applying the U.S. standard risk management framework (RMF) to some weapon systems to improve cybersecurity, but the need for a model that is more suitable for the South Korean military has been emphasized. This paper presents the results of a mission-based cybersecurity test, along with an evaluation model that can be applied to South Korean military weapon systems in parallel with the RMF. This study first examined the related international research trends, and proposed a test and evaluation method that could be utilized with the RMF throughout the entire life cycle of a weapon system. The weapon system was divided into asset, function, operational task, and mission layers based on the mission, and a mutually complementary model was proposed by linking the RMF and cybersecurity test and evaluation according to the domestic situation. In order to verify the proposed cybersecurity test and evaluation model, a simulation was developed and performed targeting the Close Air Support (CAS) mission support system, which is a virtual weapon system. In this simulation, the nodes performances by layer before and after a cyberattack were calculated, and the vulnerabilities and protection measures identified in the cyber security test and evaluation were quantified. This simulation made it possible to evaluate and derive protection measures in consideration of mission performance. It is believed that the proposed model could be used with some modifications, depending on the circumstances of each country developing weapon systems in the future.https://www.mdpi.com/2073-8994/14/11/2361RMFcybersecurity test and evaluationcyber battle damage assessment |
| spellingShingle | Ikjae Kim Sungjoong Kim Hansung Kim Dongkyoo Shin Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework Symmetry RMF cybersecurity test and evaluation cyber battle damage assessment |
| title | Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework |
| title_full | Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework |
| title_fullStr | Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework |
| title_full_unstemmed | Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework |
| title_short | Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework |
| title_sort | mission based cybersecurity test and evaluation of weapon systems in association with risk management framework |
| topic | RMF cybersecurity test and evaluation cyber battle damage assessment |
| url | https://www.mdpi.com/2073-8994/14/11/2361 |
| work_keys_str_mv | AT ikjaekim missionbasedcybersecuritytestandevaluationofweaponsystemsinassociationwithriskmanagementframework AT sungjoongkim missionbasedcybersecuritytestandevaluationofweaponsystemsinassociationwithriskmanagementframework AT hansungkim missionbasedcybersecuritytestandevaluationofweaponsystemsinassociationwithriskmanagementframework AT dongkyooshin missionbasedcybersecuritytestandevaluationofweaponsystemsinassociationwithriskmanagementframework |