Military Communications and Information Technology: A Trusted ...

Federated Cyber Defence System
– Applied Methods and Techniques 1
Bartosz Jasiul 1 , Rafał Piotrowski 1 , Przemysław Bereziński 1 ,
Michał Choraś 2, 3 , Rafał Kozik 2, 3 , Juliusz Brzostek 4
1 Military Communication Institute, Zegrze, Poland,
{b.jasiul, r.piotrowski, p.berezinski}@wil.waw.pl
2 ITTI Sp. z o.o., Poznań, michal.choras@itti.com.pl
3 University of Technology and Life Sciences, Bydgoszcz, Poland, chorasm@utp.edu.pl
4 NASK, Warszawa, Poland, juliusz.brzostek@nask.pl
Abstract: In this paper implementation details of the Federated Cyber Defence System (FCDS) are
presented. The main system components are described including their architecture, used protocols
and security mechanisms. Moreover the benefits of the system are highlighted as well as recommendations
and future work are proposed.
Keywords: Cyber defence, cyber security, attack detection, Federation of Systems, Intrusion Prevention
System, Intrusion Detection System
I. Introduction
Nowadays information exchange between companies as well as among common
network users is natural. Internet as a global communication medium is used for
business, social, personal but also criminal purposes. Cyber terrorism has become
one of the most significant threats to public institutions using the Internet in everyday
communication. Potential threats for a wide range of various networks and critical
public infrastructures may be generated by both domestic and foreign users. Harmful
activities cover broad spectrum of cyber threats and potential cyber attacks. They
can influence communication links, data resources, their integrity, confidentiality
and availability. According to the Open Web Application Project [1] nowadays top
ten security risks in the Internet are: 1) Injection, 2) Cross-Site Scripting (XSS),
3) Broken Authentication and Session Management, 4) Insecure Direct Object
References, 5) Cross-Site Request Forgery (CSRF), 6) Security Misconfiguration,
7) Insecure Cryptographic Storage, 8) Failure to Restrict URL Access, 9) Insufficient
Transport Layer Protection, 10) Unvalidated Redirects and Forwards.
Prototype of Federated Cyber Defence System (FCDS) is a developed to minimize
number of threats and attacks that may affect the domain connected to the open