Modeling and Simulation for Information Assurance

The subject of Information Assurance (IA) has received increased attention over the last several years in the military modeling and simulation (M&S) community and, even more so, in the public domain. In the public domain, organizations are concerned with their ability to ensure the sanctity of their data and associated transactions across networks both public and private. In the military M&S domain, as our warfare paradigm moves from attrition-based to network-centric, organizations need to ensure that their analytic and training tools adequately reflect how this new environment behaves. To help understand the current state-of-the-art in the IA M&S, the U.S. Department of Defense (DoD) Information Assurance Technical Analysis Center (CSIAC) and the U.S. DoD Modeling and Simulation Information Analysis Center (MSIAC) have co-sponsored the development of a report that makes such an assessment. Over the last quarter of the calendar year 2000, a survey was conducted of U.S. government, public, and private organizations to collect information that describes tools, data, and other research activities that support IA M&S for purposes as diverse as penetration testing; network performance analyses; course of action planning and analysis; warfighter training and exercise support; and mission rehearsal. Responses have been incorporated in a State-of-the-Art Report (SOAR) on Modeling and Simulation for Information Assurance that is available in its entirety from both the CSIAC and MSIAC. This report assesses the degree to which a robust set of tools and associated databases and research exist today to support the various Information Assurance M&S application areas described above. The report concludes by summarizing needed areas for further investment and research.