End-point input validation Need to secure the sensor (e.g., camera) to Data Provider prevent spoofing/stolen sensor streams. There Application → are new transceivers and protocols in the DOD Provider pipeline. Sensor streams will include smartphone and tablet sources. Real-time security monitoring Onboard and control station secondary sensor security monitoring. Data discovery and classification Varies from media-specific encoding to sophisticated situation-awareness enhancing fusion schemes. Secure data aggregation Fusion challenges range from simple to complex. Video streams may be used unsecured or unaggregated. Application Privacy-preserving data analytics Geospatial constraints: cannot surveil beyond Provider Universal Transverse Mercator (UTM). Military → Data Consumer secrecy: target and point of origin privacy. Compliance with regulations Numerous. There are also standards issues. Government access to data and For example, the Google lawsuit over Street freedom of expression concerns View. Data-centric security such as Policy-based encryption, often dictated by Data Provider identity/policy-based encryption legacy channel capacity/type. ↔ Framework Policy management for access Transformations tend to be made within Provider control DOD/contractor-devised system schemes. Computing on the encrypted data: Sometimes performed within vendor-supplied architectures, or by image-processing parallel homomorphic encryption architectures. Audits CSO and Inspector General (IG) audits. Framework Securing data storage and The usual, plus data center security levels are Provider transaction logs tightly managed (e.g., field vs. battalion vs. headquarters). Key management CSO—chain of command. Security best practices for Not handled differently at present; this is data stores changing in DOD. Security against DoS attacks DOD anti-jamming e-measures. Data provenance Must track to sensor point in time configuration and metadata. Analytics for security intelligence DOD develops specific field of battle security Fabric software intelligence—event driven and monitoring—that is often remote. Event detection For example, target identification in a video stream, infer height of target from shadow. Fuse data from satellite infrared with separate sensor stream. Forensics Used for after action review (AAR)—desirable to have full playback of sensor streams.
Data Provider → Application Provider End-point input validation Need to secure the sensor (e.g., camera) to prevent spoofing/stolen sensor streams. There are new transceivers and protocols in the DOD pipeline. Sensor streams will include smartphone and tablet sources. Real-time security monitoring Onboard and control station secondary sensor security monitoring. Data discovery and classification Varies from media-specific encoding to sophisticated situation-awareness enhancing fusion schemes. Secure data aggregation Fusion challenges range from simple to complex. Video streams may be used unsecured or unaggregated. Application Provider → Data Consumer Privacy-preserving data analytics Geospatial constraints: cannot surveil beyond Universal Transverse Mercator (UTM). Military secrecy: target and point of origin privacy. Compliance with regulations Numerous. There are also standards issues. Government access to data and freedom of expression concerns For example, the Google lawsuit over Street View. Data Provider ↔ Framework Provider Data-centric security such as identity/policy-based encryption Policy-based encryption, often dictated by legacy channel capacity/type. Policy management for access control Transformations tend to be made within DOD/contractor-devised system schemes. Computing on the encrypted data: homomorphic encryption Sometimes performed within vendor-supplied architectures, or by image-processing parallel architectures. Audits CSO and Inspector General (IG) audits. Framework Provider Securing data storage and transaction logs The usual, plus data center security levels are tightly managed (e.g., field vs. battalion vs. headquarters). Key management CSO—chain of command. Security best practices for data stores Not handled differently at present; this is changing in DOD. Security against DoS attacks DOD anti-jamming e-measures. Data provenance Must track to sensor point in time configuration and metadata. Fabric Analytics for security intelligence DOD develops specific field of battle security software intelligence—event driven and monitoring—that is often remote. Event detection For example, target identification in a video stream, infer height of target from shadow. Fuse data from satellite infrared with separate sensor stream. Forensics Used for after action review (AAR)—desirable to have full playback of sensor streams.