Defense-In-Depth Revisited: Qualitative Risk Analysis Methodology for Complex Network-Centric Operations

Source:

IEEE MILCOM 2001, McLean, VA (2001)

URL:

http://www.silkroad-asia.com/papers/pdf/archives/defense-in-depth-revisited-original.pdf

Abstract:

Defense-In-Depth concepts for global information operations are physical boundary-centric. However, network-centric operations are multidimensional, layered and often virtual. The interconnection of defensive operational elements, including the fixed and deployed base, runways, fighter planes, bombers, bombs, tankers, tents and individuals are logically and virtually connected. For this reason, traditional physical boundaries are minimally effective and often constraining. This paper extends the Defense-In-Depth boundary protection construct to a uniform qualitative risk management perspective that is tightly coupled with network implementation, resources, mission criticality, security policies and network-centric mission operations. The suggested risk management framework is applied to an operational example.

Notes:

Original PDF Version (prepublication version, easier to read)
Single Column PDF Version(one column version, easiest to read)

Full Text:

Source:

IEEE MILCOM 2001, McLean, VA (2001)

URL:

http://www.silkroad-asia.com/papers/pdf/archives/defense-in-depth-revisited-original.pdf

Abstract:

Defense-In-Depth concepts for global information operations are physical boundary-centric. However, network-centric operations are multidimensional, layered and often virtual. The interconnection of defensive operational elements, including the fixed and deployed base, runways, fighter planes, bombers, bombs, tankers, tents and individuals are logically and virtually connected. For this reason, traditional physical boundaries are minimally effective and often constraining. This paper extends the Defense-In-Depth boundary protection construct to a uniform qualitative risk management perspective that is tightly coupled with network implementation, resources, mission criticality, security policies and network-centric mission operations. The suggested risk management framework is applied to an operational example.

Notes:

Original PDF Version (prepublication version, easier to read)
Single Column PDF Version(one column version, easiest to read)