Defending the Virtual Walls: Active Cyber Defense of Weapons Systems

摘要

The only way to effectively defend our weapons systems in cyberspace is through an active and maneuvering defense built on solid passive defenses. Active defense is an emotionally loaded term that sometimes refers to offensive operations outside a defender's systems. However, what I am discussing here aligns with internal defensive measures defined in Joint Pub 3-12 and remains within the defender's system boundaries. Defensive Cyberspace Operations Response Actions (DCO-RA), or defensive actions taken outside the defender's system are important, but not part of this discussion. It is also important to note that active defense does not always imply real-time monitoring and maneuver, but it may rely on periodic checks for some types of systems where real-time monitoring is not practical or desirable. Currently, we primarily rely on static defense in depth for most of our mission and weapons systems.