Resilience in future cyber command and control

Ghasemi  Tadavani, Mohammad; Ali Mohammadi, Sajad; HAJI  ALIAKBARI, MOHAMMAD

doi:10.22034/dfsr.2025.2046026.1852

Resilience in future cyber command and control

Document Type : Original Article

Authors

Mohammad Ghasemi Tadavani ¹

Sajad Ali Mohammadi ¹

MOHAMMAD HAJI ALIAKBARI ²

¹ Instructor of Cyber and Electronic Warfare, IRI Military Command and Staff University, Tehran, Iran

² Instructor of Crisis Management, IRI Military Command and Staff University, Tehran, Iran

10.22034/dfsr.2025.2046026.1852

Abstract

Objective: This research has been done with the aim of providing resilience features in future cyber command and control(C2).
Methodology: The research method is descriptive with a qualitative and quantitative approach. In the qualitative part, data was collected by reviewing relevant and valid documents and interviewing experts familiar with the subject. These data were analyzed with the help of TI Atlas software and content analysis method. The index was calculated in two dimensions: adaptive resilience and resilient responsiveness. Indicators with a CVI greater than 0.79 were confirmed. In the quantitative part of these indicators, they were ranked using SPSS software and calculating the Friedman test, and the priority of features was determined to achieve resilience in future cyber C2.
Findings: Resilience in future cyber C2 is divided into two dimensions: adaptive resilience and resilient intelligence. 54 indicators were counted in two dimensions of adaptive resilience and the dimension of resilient response.
Conclusion: It is necessary to use automatic systems and artificial intelligence to achieve correct forecasting and updating the state of cyber resources. Actions such as monitoring threats, creating cyber mobility, not depending on a single system, and creating diversity in systems, will strengthen adaptive resilience. In the dimension of resilient response, it is important to isolate vulnerable resources, maintain operational continuity, analyze events, and divide responsibilities. Also, rapid repair and recovery using fallback, rebuild, or replacement strategies, and leveraging survivability engineering are essential to deal with cyber incidents.

Keywords

command and control

adaptive resilience

Responsive response

Adam S. Morgan, Steve W. Stone, 2019, Command and Control for Cyberspace Operations - A Call for Research, Military Cyber Affairs, Vol. 4, Iss. 1, Art. 4, DOI: https://doi.org/10.5038/2378-0789.4.1.1051
Apruzzese, Giovanni and others, (2018), ‘On the Effectiveness of Machine and Deep Learning for Cyber Security’ in Tomáš Minárik, Raik Jakschis and Lauri Lindström (eds), 10th International Conference on Cyber Conflict, CyCon X: Maximising Effects (NATO CCDCOE). https://doi.org/10.23919/CYCON.2018.8405026
Department of Defense Instruction, (2019) Cybersecurity, NO 8500.01, Incorporating Change 1. URL: https://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/850001_2014.pdf
Department Of Defense, (2015), Task Force Report: Resilient Military Systems And The Advanced Cyber Threat, Office Of The Secretary Of Defense 3140 Defense Pentagon Washington, DC. https://defenseinnovationmarketplace.dtic.mil/wpcontent/uploads/2018/04/Resilient_Military_Systems_Cyber_Threat.pdf
Department of Defense, 2018, Joint Publication 3-0, P; XXii. https://www.moore.army.mil/mssp/security%20topics/Potential%20Adversaries/content/pdf/JP%203-0.pdf
Ghasemi, Mohammad, Azar, Davoud and Sajjadi Asil, Vahid. (2019). Model for evaluating the cyber offensive power of the Islamic Republic of Iran Army. Military Sciences and Technologies, 35-61, 19(64).. [in persian]. https://doi.org/22034/qjmst.2023.550347.1678
Ghasemi, Mohammad, Mohammad Zahraei, Sepehr and Khakpour Fariborz, (2020), Generalities of Cyber Warfare (Based on C4I), Second Edition, Dafoos AJA Publications, Tehran. [in persian]
Kott, Alexander, and others, (2018), Approaches to Enhancing Cyber Resilience: Report of the North Atlantic Treaty Organization (NATO) Workshop IST-153, US Army Research Laboratory, ARL-SR-0396. https://doi.org/10.48550/arXiv.1804.07651
MacKinnon, Marc, Fernandes, Mark, 2018, Take the lead on cyber risk How to move from now to next-level security, Deloitte, UK. deloitte.com
Nosratabadi, Jamshid, Lashkarian, Hamid Reza, Mardani Shahr Babak, Mohammad and Movahedi Sefat, Mohammad Reza. (2018). Presenting a model for evaluating the cyber power of the Islamic Republic of Iran Army, National Security Quarterly, National Defense University, 173-198. [in persian]. DOI; https://dor.isc.ac/dor/20.1001.1.33292538.1398.9.31.7.1
Parend, Pierre, and others, (2018), Foundations and Applications of Artificial Intelligence for Zero-Day and Multi-Step Attack Detection, 4 EURASIP Journal on Information Security. DOI:10.1186/s13635-018-0074-y
Perkins, D. G. & Holmes, J. M. 2018. “Multi-Domain Battle, Converging Concepts Toward a Joint Solution”, in Joint Forces Quarterly, 88, (1st Quarter 2018): 54-57, 55. URL: https://jis-eurasipjournals.springeropen.com/counter/pdf/10.1186/s13635-018-0074-y.pdf
Pomerleau, M. (2018, March). Cyber Command granted new, expanded authorities. C4ISRNet. https://www.c4isrnet.com/dod/cybercom/2018/02/28/cyber-command-granted-new-and-expanded-authorities/
‌The White House. (2016, July 26). Presidential Policy Directive -- United States Cyber Incident Coordination. Whitehouse.gov; Whitehouse. URL: https://obamawhitehouse.archives.gov/the-press-office/2016/07/26/presidential-policy-directive-united-states-cyber-incident
‌Ross, R. Pillitteri, V. Graubart, R. Bodeau, D. & McQuaid, R. (2019). Developing cyber resilient systems: a systems security engineering approach (No. NIST Special Publication (SP) 800-160 Vol. 2 (Draft)). National Institute of Standards and Technology. DOI: https://doi.org/10.6028/NIST.SP.800-160v2r1
Stone, S. 2016. “Factors related to agility in allocating decision-making rights for cyberspace ” Doctoral dissertation, Robert Morris University. URL: https://static1.squarespace.com/static/53bad224e4b013a11d687e40/t/54da5be5e4b0e9d26e577151/1423596517506/096.pdf
Taghipour, Reza, (2018), Designing a conceptual model of the cyber defense model of the Islamic Republic of Iran, National Security Quarterly, Year 8, Issue 30, 182-202. [in persian]. URL: https://ns.sndu.ac.ir/article_349_8f9a149f221098a0ef97f71f6e9aa523.pdf
Tammet, Tanel, (2021) Autonomous Cyber Defence Capabilities, Autonomous Cyber Capabilities under International Law, NATO CCDCOE Publications, Chapter 3. URL: https://ccdcoe.org/uploads/2021/05/Autonomous-Cyber-Capabilities-under-International-Law.pdf
Thomas H, Hedgecock, Daniel A, and Pendergrass, J. Aaron, (2021) The State of Cyber Resilience: Now and in the Future, Johns Hopkins APL Technical Digest, Volume 35, No 4. URL: https://www.jhuapl.edu/Content/techdigest/pdf/V35-N04/35-04-Llanso.pdf
Joint Chiefs of Staff. (2016, January 14). Cross-domain synergy: Overview. United States Department of Defense. URL: https://www.jcs.mil/Portals/36/Documents/Doctrine/concepts/cross_domain_planning_guide.pdf?ver=2017-12-28-161956-230
S. Department of Defense. 2014. Joint Publication 1-02: Department of Defense Dictionary of Military and Associated Terms. URL: http://www.dtic.mil/doctrine/new_pubs/jp1_02.pdf
US Department of Homeland Security, 2018, Cyber Resilience and Response, Public-Private Analytic Exchange Program, PP 8-10. https://www.dhs.gov/publication/aep-overview-and-documents
Van Kessel, Paul, (2017), Path to cyber resilience: Sense, resist, react, EY’s 19th Global Information Security Survey. https://www.swisstreasurer.ch/wp-content/uploads/2015/11/GISS_2016_Report_Final.pdf