In Class: CDRE O’Donovan.
BLUF: The Navy has begun to move toward a Zero Trust way of cyber security, as well
as encrypting any and all data and IPs that are sent from boats and setting up proper
redundancy to ensure its encrypted properly.
Moving Toward Zero Trust.
Zero trust is the way of the future for Cybersecurity, Captain O’Donovan mentioned
that If he does not use or log into his his government deceives for more than two weeks. It
could take 5-6 minuets to login and get all of his apps updated and working properly; in
order to access and update his apps and devices he must scan his UV key every single time
he tries to access a new app to confirm it is him.
Sending Data from the ships
When data is sent from a sailor from a naval ship, it is first sent to one of two
satellites. A high orbit one, or a low orbit, which then sends it to a Teleport which unpacks
the data and transfer is to nick-tams. The nick-tam with then use a combination of ISSR
and OSSR in order to encrypt the data and IP address. This is crucial so that outside
sources can not pinpoint what ship sent the data and where it is located. They also use
CND to further encrypt the data and IP and confirms that there is no new data that should
not be their.
Redundancy.
The navy has a number of systems for up to help move data safely, using
MILSATCOM teleports and Commercial teleports help ensure that the data is getting to
where it needs to. Most of the teleports the Navy will use are MILSATCOM, which is safer as
they are government controlled and cannot be accessed by the public or criminals.
Commercial teleports are used on occasion when they can not access the MILSATCOM
teleports. There is one in New Zealand, which is the most commonly used Commercial
teleport for the Navy. These are less safe as they can usually be accessed by the public and
anyone who wishes to steal data. Luckily the Navy. Using ADS, they mix all the data up into
one server and encrypts it in order to help it stay encrypted until it reaches its destination.
Conclusion
As the Navy begins to move towards a zero trust system for cyber security, it will
begin to get harder to access any government devices, taking upwards of 15 minutes to log in properly. As well as ensuring that the data sent from naval ships are properly encrypted
with redundancy’s in place so the location and ship name wont be stolen