Tactical Framework for Cyberspace Situational Awareness

摘要

We are increasingly dependent on computers, networks, and cyberspace resources to accomplish military missions. Manifested via email, the web, databases, applications, command and control messages, and myriad other forms, the health and status of cyberspace affects everyone. Information technology is a strategic asset driving the Air Force towards a culture change such that we are all 'operators' in cyberspace. As operators, each of us must maintain an appropriate level of situational awareness (SA) in cyberspace. In an airplane, the crew maintains SA through visual and instrument scan, radio, intercom and audible queues, and by operator interaction with mission systems. Unfortunately, cyberspace situational awareness tools are not as mature or clearly defined as those of an aircraft and its crew or other traditional weapons systems. Insight into confidentiality, integrity, and availability of information as well as what constitutes fully mission capable, partially mission capable, or non- mission capable for cyberspace highlight the need for improved situational awareness in cyberspace. This paper will explore situational awareness in the context of cyberspace, evaluate one existing implementation of a cyberspace situational awareness tool, and present an alternative scalable concept model for identifying and linking cyberspace resources to mission impacts at the tactical level.