NATO Core Services profiling for Hybrid Tactical Networks — Results and Recommendations

Jansen, Norman; Manso, Marco; Toth, Andrew; Chan, Kevin; Bloebaum, Trude H.; Johnsen, Frank T.

doi:10.1109/icmcis52405.2021.9486415

Cited by 5 publications

(5 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…At the same time, we can freely transfer devices between organizations that are part of the federation, where these devices can use elements of another organization's infrastructure for secure data exchange. The works of [4], and [5] only address the issue of efficient data exchange and do not consider how to secure data streams. Additionally, these works did not consider the evaluation of Kafka, which also enables the handling of MQTT protocol messages.…”

Section: Discussionmentioning

confidence: 99%

“…Moreover, within the proposed framework, we took into account interoperability between military and civilian systems and the limited nature of such environments. Hence, for the proposed system, we have considered the recommendations made by the NATO IST-150 working group [4], which studied disconnected, intermittent, and limited (DIL) tactical networks. Our system uses a publish-subscribe model and Commercial Off-The-Shelf elements that are generally available.…”

Section: Discussionmentioning

confidence: 99%

“…For mentioned environment, NATO countries have regularly defined and revised requirements for years [2] and established research groups to identify the optimal solution for coalition data processing systems. Jansen et al [4] presented an experimental environment consisting of four organizations between which data is distributed in two configurations. The first configuration uses two MQTT broker types (Mosquitto, VerneMQ), while the second configuration is broker-less and disseminates MQTT messages via broadcast and UDP protocol.…”

Section: Zero-day Interoperability Ensuring For Heterogeneous Militar...mentioning

confidence: 99%

“…Taking into consideration the aforementioned requirements for federated IoT environments and presented sub-questions, it is necessary to use and integrate multiple technologies, e.g., a data authentication mechanism where a unique identity image (fingerprint) is used, distributed ledger, 5G technology, and data distribution and processing systems. A point worth noting is that data distribution systems are often based on the MQTT protocol [4], [5]. The main disadvantage of this type of solution is the need for additional components to acquire and distribute streaming data, such as video data from daylight or infrared cameras.…”

Section: Introductionmentioning

confidence: 99%

See 3 more Smart Citations

An Experimental Framework for Secure and Reliable Data Streams Distribution in Federated IoT Environments

Sychowiec,

Zielinski

2023

Annals of Computer Science and Information Systems

View full text Add to dashboard Cite

An increasing number of Internet of Things (IoT) applications are based on a federated environment. Examples include the creation of federations of NATO countries and non-NATO entities participating in missions (Federated Mission Networking) or the interaction of civilian services and the military when providing Humanitarian Assistance And Disaster Relief. Federations are often formed on an ad hoc basis, with the primary goal of combining forces in a federated mission environment at any time, on short notice, and with optimization of the resources involved. One of the leading security challenges in a federated environment of separate IoT administrative domains is effective identity and access management, which is the basis for establishing a relationship of trust and secure communication between IoT devices belonging to different partners. When carrying out missions involving the military and ensuring security, meeting requirements for immediate interoperability is important. In the paper, an attempt has been made to develop a system architecture framework for secure and reliable data streams distribution in a multi-organizational federation environment, where data authentication is based on IoT device identity (fingerprint). Moreover, a hardware-software IoT gateway has been proposed for the verification process and the integration of Hyperledger Fabric's distributed ledger technology, the Apache Kafka message broker, and data-processing microservices implemented using the Kafka Streams API library. The performance tests conducted confirm the suitability of the developed system framework for processing and distributing audiovideo data in a federation IoT environment. Also, a high-level security and reliability assessment was conducted in the paper.

show abstract

Section: Discussionmentioning

confidence: 99%

Section: Discussionmentioning

confidence: 99%

Section: Zero-day Interoperability Ensuring For Heterogeneous Militar...mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Experimental Framework for Secure and Reliable Data Streams Distribution in Federated IoT Environments

Sychowiec,

Zielinski

2023

Annals of Computer Science and Information Systems

View full text Add to dashboard Cite

show abstract

“…En el estado del arte actual se pueden encontrar gran variedad de protocolos a emplear, de los que se destacarían los siguientes [114,197]:…”

Section: Protocolos De Intercambio De Informaciónunclassified

Threat Hunting basado en técnicas de Inteligencia Artificial

Aragonés Lozano

View full text Add to dashboard Cite

Me gustaría empezar estas líneas de agradecimientos con dos frases las cuáles considero que es importante recordar día a día, que son, en primer lugar, "Nada que valga la pena en la vida se consigue de forma fácil" y, en segundo lugar, "Como no estás experimentado en las cosas del mundo, todas las cosas que tienen dificultad te parecen imposibles; confía en el tiempo, que suele dar dulces salidas a muchas amargas dificultades", esta última de Miguel de Cervantes Saavedra en su libro Don Quijote de la Mancha.Las primeras personas a las que me gustaría dirigir estos agradecimientos son mis directores de tesis, el catedrático Dr. Manuel Esteve Domingo y el Dr. Israel Pérez Llopis. No tengo forma de agradecer todo lo que habéis hecho por mi desde que os conozco, empezando por lo profesional, por marcarme un objetivo acerca de lo que me gustaría llegar a ser algún día y, en cuanto a lo personal, por el bienestar que generáis en la gente que tenéis a vuestro alrededor. Sin duda alguna, ha sido todo un privilegio el haber coincidido con vosotros y haber podido contar con vosotros durante la realización de este trabajo.Las segundas personas a las que me gustaría dirigir estos agradecimientos son mis padres, Manuel Aragonés García y Angelina Lozano Fuentes, a los cuáles está dedicado este trabajo. Puedo asegurar, sin miedo a equivocarme, que vosotros sois el motivo por el que este trabajo y, en general, cualquier aspecto de mi vida es como es. Siempre habéis estado en los momentos de alegría, pero más importante, en los momentos difíciles y, sin duda alguna, nunca tendré forma suficiente de agradeceros todo lo que hacéis por mi. IIIAquestos ciberespecialistes han d'analitzar grans quantitats de dades (majoritàriament benignes, repetitives i amb patrons predictibles) en curts períodes de temps per a detectar els ciberatacs, amb la sobrecàrrega cognitiva associada. L'ús de AI, específicament ML i DL, pot impactar de manera notable en l'anàlisi en temps real d'aquestes dades. A més, si els ciberespecialistes són capaços de visualitzar les dades de manera correcta, aquestos poden ser capaços d'obtindre una major consciència situacional del problema al qual s'enfronten.Aquest treball busca definir una arquitectura que contemple des de l'adquisició de dades fins a la visualització d'aquestes, passant pel processament de la informació recol•lectada i la generació d'hipòtesis sobre el que està succeint en la infraestructura monitoritzada. A més, en la definició de la mateixa s'haurà de tindre en consideració aspectes tan importants com la disponibilitat, integritat i confidencialitat de les dades, així com la HA dels diferents components que conformen aquesta. Una volta s'hatja definit l'arquitectura, aquest treball busca validarla fent ús d'un prototip que la implemente íntegrament. Durant aquesta fase d'avaluació, és important que quede demostrada la versatilitat de l'arquitectura proposada per a treballar en diferents casos d'ús, així com la seua capacitat per a adaptar-se als canvis que es produïxen en les diferents tècniques...

show abstract