Engineering Papers⌕ Search

SEARCH · Engineering Papers

Results for “tactical planning”

Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.

Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.

21 records · Page 2

Defending the Homeland: Growing Foreign Challenges to the U.S. Missile Defense Posture

The Office of the Secretary of Defense (OSD) for Policy requested that Lawrence Livermore National Laboratory conduct a Congressionally directed study on homeland missile defense, pursuant to Section 1692 of the fiscal year 2020 National Defense Authorization Act. In accordance with the statutory language, this study considers whether the security benefits obtained by deployment of homeland missile defenses of the United States are undermined or counterbalanced by adverse reactions of potential adversaries, and considers the effectiveness of homeland missile defense efforts of the United States to deter the development of ballistic missiles. Almost a half-century has elapsed since the United States and the Soviet Union signed the Anti-Ballistic Missile (ABM) Treaty, and almost two decades since the former withdrew. Since withdrawing, the United States has sought to develop and deploy a layered missile defense system to defend against regional threats to U.S. and allied interests abroad and to counter limited threats to the U.S. homeland. As such, missile defense supports key national defense policy objectives. Protecting the U.S. homeland, forces abroad, allies, and partners. Deterring attacks against the United States, its allies, and partners. Assuring allies an strengthening U.S. diplomatic activities in peacetime and crisis. We offer five key findings: 1. The primary benefit of the Ground-based Midcourse Defense (GMD) system is the protection it provides the U.S. homeland against a limited but evolving rogue-state missile threat. While this system has never been tested in combat, it appears thus far to have effectively paced North Korea’s development and deployment of intercontinental ballistic missiles (ICBMs). In the absence of such a defensive capability, the United States would likely have been more heavily exposed to North Korean actions, would have operated at a much higher-risk posture, and would have had less negotiating room with which to navigate coercive tactics and crises. Its allies would have been more concerned about U.S. willingness in time of crisis and war to run the risks of protecting them. The GMD system also serves as a hedge against Iranian breakout. 2. Potential adversaries continue to develop long-range ballistic missiles despite deployment of a U.S. homeland missile defense system. This includes both rogue states and major power rivals whose long-range missile programs predated the deployment of U.S. missile defenses. While North Korea has continued its long-range missile developments and achieved an intercontinental capability, Iran has not yet reached this threshold. The broader proliferation of long-range missiles anticipated in the late 1990s has not materialized. 3. While Russia has used the existence of a U.S. homeland missile defense system as a justification for its substantial and continuing weapon modernization program, neither Russian force modernization nor the limited U.S. homeland missile defense system has altered the strategic balance. Russia has long considered U.S. missile defenses—both theater and homeland—as directed against its strategic forces and as a capability that could rapidly advance, thereby eroding Russian confidence in its nuclear deterrent. Russia’s political and military actions appear excessive and negatively impact areas such as arms control, but they do not undermine the primary benefit of the U.S. system cited in Key Finding 1. 4. China’s expansion and diversification of nuclear and missile forces has been influenced by its concerns about U.S. homeland missile defense, but those concerns are only one of many factors in China’s force planning. Although China’s actions to preserve and expand its assured retaliation prospects have not fundamentally altered the strategic balance, its buildup and lack of transparency about its force modernization goals are troubling. Taken together, the aggregate pattern of China’s modernization activities over the past two decades strongly suggests a concerted effort to develop a modern military force commensurate with its intended geopolitical status. Whatever China’s legacy concerns over the survivability of its strategic nuclear forces, its ability to overwhelm the GMD system appears intact today and will be further strengthened in the years ahead as it continues its long-term modernization program. China’s political and military actions negatively affect U.S. security interests but do not undermine the primary benefit of the U.S. system cited in Key Finding 1. 5. The basic finding that benefits have not so far been undermined by adverse reactions is a function of circumstances that are increasingly in flux. The existing GMD-centered system is under increasing pressure from the pace and scope of North Korean missile deployments. The proposed “layered” system seeks to mitigate this impending capability gap in the near term and to complement future capabilities, such as the Next Generation Interceptor, when they come online. Given the pace of U.S. missile defense developments since 2000, it is possible that adversary advances in capability will outpace the U.S. system’s ability to adapt. Additionally, because this layered system is in principle more readily scaled, it will almost certainly be viewed skeptically by China and Russia. In a context of growing great-power security competition, the Department of Defense (DoD) should consider undertaking a broader net assessment of the U.S., Russian, and Chinese force balance.

45 MILITARY TECHNOLOGY, WEAPONRY, AND NATIONAL DEF↗

Improving Cyber Situational Understanding

Effective cybersecurity operations require the ability to analyze large amounts of information to assess security risks and formulate defensive strategies against adversaries. This has become more complex in recent years as the sprawl and interconnectivity of devices grows through implementation of virtualization, cloud computing, and Internet of Things (IoT). The amount of data and analysis required for effective cybersecurity command and control decisions far exceeds humans’ capacity to perform manually. We characterize the analysis problem as cyber situational understanding. The research presented to improve cyber situational understanding focuses on vulnerability analysis and threat intelligence. Regarding vulnerabilities, entities must analyze and plan work for between thousands and tens of thousands of software vulnerabilities annually. Entities heavily use network firewalls to limit vulnerability exposure. As a result, some of these vulnerabilities permit exposure to adversarial exploitation, whereas others are inaccessible and therefore present negligible risk of exploitation. Distinguishing between high and low risk software vulnerabilities requires a deep understanding of the vulnerability, network firewall protection, and characteristics of the targeted device. This problem is solved by extracting network service features from vulnerability data features using both machine-learning and natural language processing. Then, the network firewall topology is parsed to determine which vulnerabilities are reachable by adversaries. Ultimately, a state-based safety analysis ascertains which vulnerabilities are unsafe. A related vulnerability analysis problem occurs in cybersecurity operations when associating an entity’s hardware and software assets to public vulnerability databases. Assets often reveal hardware and software through installation artifacts and network service identification, and entities store these artifacts in inventory databases. However, software and hardware vendors apply a standard Common Platform Enumeration (CPE) naming convention when publicly reporting vulnerabilities. Associating these two datasets often requires many hours to days of manual inspection. The proposed solution automates the mapping approach of human analysts using fuzzy matching techniques, natural language processing, and, ultimately, machine learning to present a small set of recommendations for mapping the two datasets. The result significantly reduces human analysis time and reduces the occurrence of false positives in vulnerability notifications. Finally, cyber threat intelligence (CTI) requires associating cyber observable artifacts, such as IP addresses, URIs, and file hashes, with cyber threat tactics, techniques, and procedures. Unfortunately, most CTI data is compartmentalized across multiple organizations and cannot be shared due to the legal and reputational risk with cyber threat being associated with the entity. The approach to solving this problem inovlves using a distributed ledger with anonymous token spending and authentication. This allows a consortium of semi-trusted entities to share the workload of curating CTI for a threat sharing community’s cooperative benefit.

Huff, Philip↗

Comparison of Socio-Technical Threat Models

Given the adoption of emerging technologies and the increasing complexity of managing such systems with a lifecycle much shorter than that of critical infrastructure systems, there is a practical need to be able to analyze sociotechnical dependencies and their associated evolving risks. Threat models based on social influence techniques can be used to implement adversarial tactics analogous to the cyber kill chain and attested to within the MITRE ATT&CK for ICS framework including Initial Access, Persistence, Collection, and Impact. Furthermore, as with cyber disruptions, the impact of social influence threat models can have an asymmetric impact that is not spatially-localized. Finally, unlike cyber attacks with a reasonably short duration (ransomware takes days to months), social influence based attacks have the potential to persist for much longer as they are based on long-term strategic infrastructure investments within the private sector. Given the increased importance of electric vehicle charging stations as a long-term, strategic infrastructure investment within the Energy and Transportation Sectors, we provide initial results that compare the impact of a Loss of Availability (T0826) realized through cyber and social influence based threat models. The analysis employs techniques from automated reasoning and measures of network complexity to understand evolving dominance of EV payment and charging networks within geographic region of interest. Within this context, we compare the impact of a loss of availability due to ransomware versus that of loss of support due to a merger and acquisition. Results across several different metro areas will be provided.

29 ENERGY PLANNING, POLICY, AND ECONOMY↗