Cyberspace Protection and Theory

This paper provides Air Force Space Command (AFSPC) suggestions on cyber protection and theory. First, AFSPC must instill a sense of cybermindedness to all network-based resource users. This includes daily actions and in-processing/out-processing events. Secondly, AFSPC must lead the charge to establish a common naming convention for all cyber resources, thus promoting a familiarity with capabilities as in the air, land, sea, and space environments. Next, AFSPC must conduct a study leading to the formation of a cyber standard model, similar to the standard atmosphere model used in aviation. Specifically, AFSPC needs to study the establishment of a test and evaluation standard model for cyber networks. Finally, AFSPC must use enterprise wide network traffic generation as a means of tactical deception for cyber protection. This concept will hide true network traffic in the midst of scheduled, characterized, realistic, and random network data, and is analogous to the concept of chaff's effect on radar cross section. These recommendations are based on years of experience in network operations, flight and information operations systems test, and the thoughts of flight test and network security engineers. Adherence to these recommendations will provide AFSPC a decisive edge in cyber operations.