Executive Summary
This technical report from the Naval Postgraduate School examines the feasibility of implementing Zero Trust Architecture (ZTA) in U.S. Navy afloat networks. It concludes that ZTA poses significant challenges for naval operations due to network limitations, potential for increased latency, and the unique demands of warfighting environments. The research recommends further lab testing and a potential waiver for the Navy from ZTA mandates until these issues are addressed.
Why It Matters
This research directly impacts the cybersecurity posture and operational effectiveness of U.S. Navy vessels by evaluating the practical challenges of implementing a critical security framework in a unique and demanding environment.
Key Takeaways
- Implementing Zero Trust Architecture (ZTA) on U.S. Navy afloat networks presents significant challenges due to the brittle, bandwidth-limited, and high-latency nature of satellite communications and existing network infrastructure.
Source evidence · PDF page 8
Afloat Navy networks and associated connections do not share these characteristics. They are brittle, poorly supported, and archaic. They depend on satellite communications, which are not only complicated and challenged by the environment, but they also possess the unwanted characteristics of limited bandwidth, extreme latencies, and jitter. Thus, they do not lend themselves to obvious ZTA implementation.
- The overhead introduced by ZTA's continuous authentication and verification processes could critically impede time-sensitive information exchanges during warfighting events, potentially reducing operational effectiveness.
Source evidence · PDF page 13
The additional overhead of ZTA is significant, since it may stifle critical communications and data availability during critical warfighting events.
- The report recommends that the Navy conduct extensive lab testing of ZTA in simulated afloat environments and consider requesting a waiver from ZTA mandates until these operational and technical hurdles are resolved.
Source evidence · PDF page 32
Before implementing ZTA afloat, the recommendations below should be considered. Moreover, the Navy should request a waiver from meeting the ZTA mandate until these recommendations are achieved.
Strategic Relevance
The strategic relevance lies in ensuring the cybersecurity and operational resilience of naval forces. Effective implementation of ZTA is crucial for protecting sensitive information and maintaining command and control in contested environments, directly impacting national security and military readiness.