Owing to the expansion of network-centric operating concepts across the Department of Defense (DOD) and the growing threat to information and cybersecurity from lone actors, groups of like-minded actors, nation-states, and malicious insiders, information assurance is an area of significant and growing importance and concern. Because of the forward positioning of both the Navy's afloat and the Marine Corps expeditionary forces, IA issues for naval forces are exacerbated, and are tightly linked to operational success. Broad-based IA success is viewed by the NRC's Committee on Information Assurance for Network-Centric Naval Forces as providing a central underpinning to the DOD's network-centric operational concept and the Department of the Navy's (DON's) FORCEnet operational vision. Accordingly, this report provides a view and analysis of information assurance in the context of naval 'mission assurance'.
Author(s): Committee on Information Assurance for Network-Centric Naval Forces, National Research Council
Year: 2010
Language: English
Pages: 198
FrontMatter......Page 2
Preface......Page 8
Acknowledgment of Reviewers......Page 14
Contents......Page 16
Summary......Page 18
1 Background—Naval Network-Centric Operations, Information Assurance, and Current Cyberthreats......Page 29
2 The Immediate Response—Current Information Assurance and Cyberdefense Initiatives......Page 50
3 Mission Resilience—Viewing the Threat in Operational Terms......Page 68
4 A Suggested Technical Response to Cyberthreats and Information Assurance Needs......Page 89
5 Application of Risk Analysis as a Basis for Prioritizing Needs......Page 114
6 Organizational Considerations......Page 127
Appendixes......Page 156
Appendix A: Acronyms and Abbreviations......Page 158
Appendix B: Terms of Reference......Page 166
Appendix C: Biographies of Committee Members......Page 168
Appendix D: Summary of Recent Naval Operations and Department of Defense Reports Related to Information Assurance......Page 174
Appendix E: Naval Information Assurance Architectural Considerations......Page 182
Appendix F: Suggested Elements of a Naval Information Assurance Research and Development Program......Page 191
