STRATEGIES FOR TRANSPORTING DATA BETWEEN CLASSIFIED AND ...

UNCLASSIFIED Technical Report ARWSE-TR-15037

AD AD-E403 744

STRATEGIES FOR TRANSPORTING DATA BETWEEN CLASSIFIED AND UNCLASSIFIED NETWORKS

Ross D. Arnold

March 2016

U.S. ARMY ARMAMENT RESEARCH, DEVELOPMENT AND ENGINEERING CENTER

Weapons and Software Engineering Center Picatinny Arsenal, New Jersey

Approved for public release; distribution is unlimited.

UNCLASSIFIED

UNCLASSIFIED

The views, opinions, and/or findings contained in this report are those of the author(s) and should not be construed as an official Department of the Army position, policy, or decision, unless so designated by other documentation. The citation in this report of the names of commercial firms or commercially available products or services does not constitute official endorsement by or approval of the U.S. Government. Destroy this report when no longer needed by any method that will prevent disclosure of its contents or reconstruction of the document. Do not return to the originator.

UNCLASSIFIED

UNCLASSIFIED

REPORT DOCUMENTATION PAGE

Form Approved OMB No. 0704-01-0188

The public reporting burden for this collection of information is estimated to average 1 hour per response, including the time for reviewing instructions, searching existing data sources,

gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection

of information, including suggestions for reducing the burden to Department of Defense, Washington Headquarters Services Directorate for Information Operations and Reports (0704-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any

penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

PLEASE DO NOT RETURN YOUR FORM TO THE ABOVE ADDRESS.

1. REPORT DATE (DD-MM-YYYY)

March 2016

4. TITLE AND SUBTITLE

2. REPORT TYPE

Final

3. DATES COVERED (From ? To) 5a. CONTRACT NUMBER

STRATEGIES FOR TRANSPORTING DATA BETWEEN CLASSIFIED AND UNCLASSIFIED NETWORKS

5b. GRANT NUMBER 5c. PROGRAM ELEMENT NUMBER

6. AUTHORS

5d. PROJECT NUMBER

Ross D. Arnold

5e. TASK NUMBER

5f. WORK UNIT NUMBER

7. PERFORMING ORGANIZATION NAME(S) AND ADDRESS(ES)

U.S. Army ARDEC, WSEC Fire Control Systems & Technology Directorate (RDAR-WSF-M) Picatinny Arsenal, NJ 07806-5000

8. PERFORMING ORGANIZATION REPORT NUMBER

9. SPONSORING/MONITORING AGENCY NAME(S) AND ADDRESS(ES)

U.S. Army ARDEC, ESIC Knowledge & Process Management (RDAR-EIK) Picatinny Arsenal, NJ 07806-5000

12. DISTRIBUTION/AVAILABILITY STATEMENT

Approved for public release; distribution is unlimited.

10. SPONSOR/MONITOR'S ACRONYM(S)

11. SPONSOR/MONITOR'S REPORT NUMBER(S)

Technical Report ARWSE-TR-15037

13. SUPPLEMENTARY NOTES

14. ABSTRACT

Transferring data between unclassified and classified networks is a critical concern of a potential future

effort to integrate logistics capability into the tactical applications (TacApps) program. Logistics data is often

provided by unclassified networks, while TacApps data will persist on classified networks. In order to mitigate

the risk that this obstacle imposes, a literature search was conducted with the goal of identifying methods and

technologies available to bridge classified and unclassified networks. Three clearly distinct methods were

identified: manual data transfer, the use of a data diode or unidirectional network bridge, and the use of a

hardware/software solution called an information security guard. Within these methods, a number of

technologies were researched and analyzed for their applicability to TacApps. Only government off-the-shelf

and commercial off-the-shelf solutions were examined. Among data diode solutions, the Tactical Army Cross

Domain Information Sharing is a good candidate for further research. Among guards, the trusted information

system Radiant Mercury appears promising. Further research is required in order to select an appropriate

system and quantify additional areas of concern such as bandwidth constraints and available field

configurations.

15. SUBJECT TERMS

Mission command Software Battle command Tactical applications (TacApps) BCS3

Command post computing environment Command post client Sustainment Logistics CPC

System mission command (S2MC)

16. SECURITY CLASSIFICATION OF:

17. LIMITATION OF 18. NUMBER 19a. NAME OF RESPONSIBLE PERSON

a. REPORT b. ABSTRACT

U

U

c. THIS PAGE

U

ABSTRACT

SAR

OF PAGES

15

Ross D. Arnold

19b. TELEPHONE NUMBER (Include area

code) (973) 724-8618

Standard Form 298 (Rev. 8/98)

Prescribed by ANSI Std. Z39.18

UNCLASSIFIED

UNCLASSIFIED

CONTENTS

Introduction Strategies

Manual (Swivel-Chair) Unidirectional Network Bridge (Data Diode) Guard Current Technology Solutions Data Diode (GOTS): Tactical Army Cross Domain Information Sharing Data Diode [Commercial Off-The-Shelf (COTS)]: Net Optics Tap Guard (GOTS): Radiant Mercury Guard (GOTS): Information Support Server Environment Guard Guard (COTS): Cross-Domain Enterprise All-Source User Repository Conclusions References Distribution List

Page

1

1

1 1 2

3

3 4 4 5 5

6

7

9

Approved for public release; distribution is unlimited.

UNCLASSIFIED i

 ................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download