The Navy Still Suffers from Cybersecurity Complacency

Abstract: 

Midshipman Second Class Jessica A. Burrell, U.S. Navy examines the factors that are driving a lack of readiness in the U.S Navy's Cyber readiness, the implications of poor cyber readiness, and potential remedies to the cyber readiness crisis. The U.S has historically maintained itself as a leader of global order with a hegemony on global power projection. However, the status quo has been disrupted by a "turbulent geopolitical environment". China, today's most prominent adversary to the U.S, are executing large scale overhauls to their Navy, including mass production of ships that will see them outnumber the U.S. fleet size and the "superior means to employ cyber warfare". Midshipman Second Class Burrell agues that "... the next naval conflict will have a greater focus on cyber warfare dominance, rather than ship numbers. Given this, the U.S. Navy must reevaluate its stance in preparation for the next great power conflict." Examples of how global maritime cyber warfare can have an effect on future conflicts include the ability for cyber attacks to cut off logistical support, hinder firepower capabilities, disrupt navigation equipment, and even cause ships to sink. This is a result of "outdated security measures and equipment" and the permeability between the IP/Ethernet network and serial network, which manages the ships critical systems. To reach these critical systems, one must only infiltrate the day-to-day internet. The Navy today faces many systems within surface ships and critical naval infrastructure that ""need to be upgraded or replaced with superior ones". Such examples include developing IT networks without a secure, joint umbrella of cybersecurity protocols, "old warfare systems kept in service without updates or added cybersecurity", and even some ships continuing to use outdated operating systems such as Windows XP. This is a result of a poor security and complacent culture within the Navy's cyber community that Burrell describes can be characterized by "distrust, a lack of knowledge or accountability, a willingness to accept unknown risks to mission, a lack of unity of effort, and an inability to fully leverage lessons learned at scale." To solve this issue, Burrell believes that the Navy should hold themselves to standards common in the private sector or higher, overhaul training pipelines such as adding cyber or computer science instruction to boot camp, NROTC, OTS, or other pipelines, and overhaul the chain of command within the Navy to achieve unity of effort.

Author: 

Jessica A. Burrell

Year: 

2023

Domain: 

Dimension: 

Region: 

Country: 

United States

Data Type: 

Keywords: