Unmanned Aircraft Systems Roadmap 2005-2030 - Federation of ...

UAS ROADMAP 2005
Information Security
Information Assurance is defined as measures taken to protect and defend our information and
information systems to ensure confidentiality, integrity, availability, and accountability, extended to
restoration with protect, detect, monitor, and react capabilities.
Secure Web Browsing
This service identifies the protocol used to provide communications privacy over a network. The protocol
allows applications to communicate in a way designed to prevent eavesdropping, tampering, or message
forgery in e-mail packages. World Wide Web (WWW) services provide abilities for navigation and data
transport across the Internet. The protocol encapsulates various higher-level protocols and is application
independent.
Web browsers and web servers must first attempt to use transport layer security (TLS), then use secure
socket layer (SSL) 3.0 if TLS is not supported. It is expected that SSL 3.0 will not be supported in the
future. The following standards are both mandated for securing the communications of web browsers and
web servers:
� SSL Protocol, Version 3.0, 18 November 1996. [SUNSET] This standard will be deleted when
commercial Web servers employed by DoD and the IC community support TLS.
� IETF RFC 2246, the TLS Protocol Version 1.0, January 1999.
Secure Messaging
This service applies to the use of security implementations for the defense message system (DMS), the
access control capabilities for communications with allied partners and for e-mail. For systems required to
interface with the DMS Release 3.0 for organizational messaging, the following standard is mandated:
� Fortezza Interface Control Document, Revision P1.5, 22 December 1994. [SUNSET] This standard
will be deleted when GIG enterprise services (GES) can provide secure messaging confirmation, to
include authentication, delivery and encryption. Allied communications publication (ACP) 120 was
developed to take advantage of X.509 version 3 certificates, in particular the subject Directory
Attribute extension that contains the clearance attribute or the security label. This security label
provides for access control based not only on hierarchical classification, but also for compartments,
categories, and citizenship.
� For DoD message systems required to process both unclassified and classified organizational
messages using DMS Release 3.0, the following messaging security protocol is mandated.
� ACP-120, Allied Communications Publication 120, Common Security Protocol (CSP), Rev A, 7 May
1998. [SUNSET] This standard will be deleted when GES can provide secure messaging
confirmation, to include authentication, delivery and encryption.
To support the access control capabilities of ACP 120, the following security label standards are
mandated:
� ITU-T Recommendation X.411 (1999)/ISO/IEC 10021-4:1999, Information Technology – Open
Systems Interconnection – Message Handling Systems (MHS) – Message Transfer System: Abstract
Service Definition Procedures. [SUNSET] This standard will be deleted when GES can provide
secure messaging confirmation, to include authentication, delivery and encryption.
� ITU-T Recommendation X.509 (2000)/ISO/IEC 9594-8:2001, Information Technology – Open
Systems Interconnection – The Directory: Public Key and Attribute Certificate Frameworks, 2001,
with Technical Corrigendum 1:2002, and Technical Corrigendum 2:2002.
� ITU-T Recommendation X.481 (2000)/ISO/IEC 15816-12:2000, Information Technology –Security
Techniques – Security Information Objects for Access Control. [SUNSET] This standard will be
deleted when GES can provide secure messaging confirmation, to include authentication, delivery
and encryption.
APPENDIX E – INTEROPERABILITY STANDARDS
Page E-12