The DOD Architecture SKS has Referred To...
On two CC's now, SKS has referred to the DoD (Department of Defense) architecture. Specifically, in the last call he said that the DoD had settled upon an architecture.
I gather that this non-classified document is, in fact, the agreed-upon architecture:
www.acq.osd.mil/dsb/reports/2007-04-IM_Vol_I.pdf
It's a very interesting document. I suspect that the CLASSIFIED attachment (which, obviously, I can't get my hands on) was even more interesting.
In general, the DoD is quite concerned about an enemy conducting cyber-warfare. And while non-DoD networks do not fall under the purview of this extensive set of recommendations, the DoD certainly recognizes how the insecurity of other networks can directly impact their own.
"Trusted platform models" (yes, models not modules) are mentioned (actually, just listed) around page 99 or thereabouts as an area requiring more R & D. However, as noted, there is a classified section of the document that (drawing inferences here) discusses how to use COTS (commercial off-the-shelf technologies) in ways that make them somewhat proprietary (which is reminiscent of Haseltine's reference to "got slice")... new technologies... and the threats posed by foreign sources of hardware and software... as well as concerns about endpoints that fall into an adversary's hands.
Overall, the document is encouraging... in that the Defense Science Board is (as one would hope) VERY aware of information assurance issues AND the threat posed by an assymetric foe. Further, there is an emphasis on an ENTERPRISE-wide approach to acquisition and design... and leveraging COTS technologies.
Best Regards,
c m
