Following the author’s presentation “Securing the Open Source Software Supply Chain for Naval Warfare Systems” at the 6th NMIOTC Maritime Cybersecurity conference in the Maritime Domain, the US Department of Defense released a series of documents outlining Software Factory capability needs to be implemented in a timeline. In addition, the US Navy released public articles in February 2023 regarding software vulnerabilities on critical warfare assets.
This white paper is intended to be a part 3 in the context of the 2 previous. It will delve a bit deeper into the architectural and data flow space. Using industry best practices and “open source data” (ie. Not classified) , the reader will be walked through DoD definitions of impact levels and that of a “disconnected environment” (military) and SCIF (intelligence community).
The author will then re-address the capabilities outlined in his previous 2 papers published in the NMIOTC Journal. Architectural and Data Flow context will be addressed using public US Department of Defense & industry definitions.
Based on the author’s experience with these “dual use” technologies, a methodology will be presented on how to bring these cyber capabilities into the disconnected environment to create secure software for critical warfare assets. Simple use cases will be outlined in creating software in the disconnected environment, using the capabilities, for critical warfare assets that will thus be cyber ready when deployed to the tactical edge.
Presenter: Eric Hill (DIB SME, Director @ EMBCA)
Негізгі бет Ғылым және технология 240424 EMBCA - Securing the Software Supply Chain
Пікірлер