Internet of Things (IoT) technology has a huge potential for the military domain. Smart devices could help better protect NATO Member Nations, detecting threats more quickly, providing critical services to soldiers on the ground or even replacing them.
However, IoT was never envisaged for defence use. IoT security is a particular area where standard IoT devices don't meet typical defence security needs.
Rather than add military security to these small, cheap, off-the-shelf devices – turning them into large, expensive, custom-built devices – experts from the NCI Agency recently tested available IoT security mechanisms in their most robust modes. The demonstration took place at the *International Conference on Military CIS (ICMICS) which brought together national research labs, NATO subject matter experts and Industry representatives in May 2017.
Michael Street, the NCI Agency's Service Strategy Innovation Manager said: "Our aim was to show ways of exploiting the IoT to support military functions, while at the same time addressing technology challenges in the military use of IoT."
"The 'Things' in the Internet of Things typically use small microcontrollers with limited power consumption, limited processing and restrictions on their communication to the internet. This poses some challenges if you want to rely on them for something more critical than an IoT fridge ordering more milk. So we coupled traditional IoT security mechanisms with a number of other functions to increase resilience."
Hybrid situational awareness
The Agency team used IoT devices to which they added attribute-based encryption to protect data across the network, data analytics to determine whether the security of the device could still be trusted, as well as directional receivers to determine if the IoT devices had been moved or tampered with. They also worked with multiple sensor types and multiple networks to remove single points of vulnerability, and homomorphic encryption to allow partners to query encrypted data. The demonstration used a number of possible scenarios to explore the limits and potential of IoT in the military domain.
As part of these scenarios, IoT devices collected a combination of data from NATO, national and civilian sources. The data was then analyzed to improve hybrid situational awareness, using intelligence at the edge to fuse inputs from disparate cheap, consumer-grade sensors to form an accurate, resilient picture, and using big data analytics techniques to separate trustworthy and non-trustworthy sensor data.
"Information was harvested from both military and civil government IoT sensors. The former came from NATO and national military sensors, the latter coming from a number of local 'smart city' initiatives," Dr Street explained.
"Tapping into the data from smart cities provided additional situational awareness of the urban area, for example checking environmental monitors or traffic cameras. Using civil sources requires careful filtering to prevent information overload, and analysis for signs of interference or manipulation."