Military Communications and Information Technology: A Trusted ...

382 Military Communications and Information Technology...
IV. Evolutionary approach
The phased approach has been proposed to implementation and deployment
of the HAAG in order to address both urgent operational requirements and provide
a robust and flexible solution to cross-domain information sharing for the NNEC
and FMN infrastructure.
The approach consists of 3 phases that incrementally improve information
sharing capability. Phase 0 is a cascading design that provides an immediate response
to the urgent requirements for information sharing between NATO and international
organizations / non-NATO nations. Phase 1 uses the HAAG as a gateway
that enforces authentication, authorization, and accountability of all end-users.
Phase 2 uses the HAAG to provide a service where information is released based
on security and protection requirements derived from a dynamic policy.
A. Phase 0: Cascading design using XLG
Phase 0 represents an incremental development path for the existing NCIA medium
assurance XML-Labelling Guard (XLG). The proposed solution, applicability
of which shall be confirmed case by case through an extensive security risk assessment,
attempts to partially compensate lower security assurance level of the XLG
by introducing an intermediate, NATO Restricted (NR), security domain between
IO/NNN and the NATO Secret (NS) system. The XLG is located between the NR
and the NS domain. Several reactive security services, such as intrusion detection
and malware protection are redundantly deployed in the NR and NS domains
in order to provide increased security assurance via a cascading architecture.
Figure 3. Example of a cascading design for IEG-D Phase 0 implementation