{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T01:28:25Z","timestamp":1760232505000,"version":"build-2065373602"},"reference-count":17,"publisher":"MDPI AG","issue":"11","license":[{"start":{"date-parts":[[2022,11,9]],"date-time":"2022-11-09T00:00:00Z","timestamp":1667952000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003725","name":"the National Research Foundation of Korea (NRF) grant funded by the Korea government (MSIT)","doi-asserted-by":"publisher","award":["2022R1F1A1074773"],"award-info":[{"award-number":["2022R1F1A1074773"]}],"id":[{"id":"10.13039\/501100003725","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>With the advancement of information technology (IT), the importance of cyber security is increasing because of the expansion of software utilization in the development of weapon systems. Civilian embedded systems and military weapon systems have cybersecurity-related symmetry that can increase vulnerabilities in the process of advanced information technology. Many countries, including the United States, are exploring ways to improve cybersecurity throughout the lifecycle of a weapon system. The South Korean military is applying the U.S. standard risk management framework (RMF) to some weapon systems to improve cybersecurity, but the need for a model that is more suitable for the South Korean military has been emphasized. This paper presents the results of a mission-based cybersecurity test, along with an evaluation model that can be applied to South Korean military weapon systems in parallel with the RMF. This study first examined the related international research trends, and proposed a test and evaluation method that could be utilized with the RMF throughout the entire life cycle of a weapon system. The weapon system was divided into asset, function, operational task, and mission layers based on the mission, and a mutually complementary model was proposed by linking the RMF and cybersecurity test and evaluation according to the domestic situation. In order to verify the proposed cybersecurity test and evaluation model, a simulation was developed and performed targeting the Close Air Support (CAS) mission support system, which is a virtual weapon system. In this simulation, the nodes performances by layer before and after a cyberattack were calculated, and the vulnerabilities and protection measures identified in the cyber security test and evaluation were quantified. This simulation made it possible to evaluate and derive protection measures in consideration of mission performance. It is believed that the proposed model could be used with some modifications, depending on the circumstances of each country developing weapon systems in the future.<\/jats:p>","DOI":"10.3390\/sym14112361","type":"journal-article","created":{"date-parts":[[2022,11,10]],"date-time":"2022-11-10T02:03:58Z","timestamp":1668045838000},"page":"2361","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["Mission-Based Cybersecurity Test and Evaluation of Weapon Systems in Association with Risk Management Framework"],"prefix":"10.3390","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1436-3024","authenticated-orcid":false,"given":"Ikjae","family":"Kim","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Sejong University, Seoul 05006, Korea"},{"name":"R.O.K Cyber Operations CMD, Seoul 04383, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sungjoong","family":"Kim","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hansung","family":"Kim","sequence":"additional","affiliation":[{"name":"R.O.K Cyber Operations CMD, Seoul 04383, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2665-3339","authenticated-orcid":false,"given":"Dongkyoo","family":"Shin","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Sejong University, Seoul 05006, Korea"},{"name":"Department of Convergence Engineering for Intelligent Drones, Sejong University, Seoul 05006, Korea"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2022,11,9]]},"reference":[{"key":"ref_1","unstructured":"(2018). Risk Management Framework for Information Systems and Organizations (Standard No. SP 800-37 Rev.2)."},{"key":"ref_2","unstructured":"Department of Defense (2022, November 08). Cybersecurity Test and Evaluation Guidebook, Available online: https:\/\/daytonaero.com\/wp-content\/uploads\/DOD_Cybersecurity-Test-and-Evaluation-Guidebook-Version2-C1_10-Feb-2020.pdf."},{"key":"ref_3","first-page":"83","article-title":"The direction of application of the RMF-based risk management system considering interoperability","volume":"22","author":"Kwon","year":"2021","journal-title":"J. Internet Comput. Serv. (JICS)"},{"key":"ref_4","unstructured":"Bryan, S. (2016). The Absence of Risk Management Framework in Small Defense Forces. [Ph.D. Thesis, Utica College]."},{"key":"ref_5","unstructured":"Keith, F.J., Simon, R.A., and Elena, S. (2017, January 13\u201316). Cybersecurity Challenges and Processes for Australia\u2019s Future Submarine. Proceedings of the 4th Submarine Science, Technology and Engineering Conference 2017 (SubSTEC4), Adelaide, Australia."},{"key":"ref_6","first-page":"871","article-title":"Cybersecurity Risk Management Frameworks in the Oil and Gas Sector: A Systematic Literature Review","volume":"439","author":"Huma","year":"2022","journal-title":"Adv. Inf. Commun."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"15241","DOI":"10.1007\/s00521-022-06959-2","article-title":"An integrated cyber security risk management framework and risk predication for the critical infrastructure protection","volume":"34","author":"Halima","year":"2022","journal-title":"Neural Comput. Appl."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"233","DOI":"10.1108\/ICS-03-2018-0031","article-title":"Socio-technical systems cybersecurity framework","volume":"27","author":"Masike","year":"2019","journal-title":"Inf. Comput. Secur."},{"key":"ref_9","unstructured":"Ahn, B.O. (2022, September 30). Mid- & Long-Term Developments in Joint Command and Control, Communication Systems, KIDA Brief NO.2021-1. Available online: https:\/\/www.kida.re.kr\/frt\/board\/frtNormalBoardDetail.do?sidx=2326&idx=19&depth=3&lang=kr."},{"key":"ref_10","unstructured":"NIST (2022). AI Risk Management Framework: Initial Draft, NIST."},{"key":"ref_11","unstructured":"(2022, September 30). National Defense Power Generation Business Instruction, Ordinance of the Ministry of National Defense. Available online: https:\/\/www.law.go.kr\/%ED%96%89%EC%A0%95%EA%B7%9C%EC%B9%99\/%EA%B5%AD%EB%B0%A9%EC%A0%84%EB%A0%A5%EB%B0%9C%EC%A0%84%EC%97%85%EB%AC%B4%ED%9B%88%EB%A0%B9."},{"key":"ref_12","unstructured":"(2022, September 30). Defense Interoperability Management Guidelines, Defense Acquisition Program Administration. Available online: https:\/\/law.go.kr\/admRulLsInfoP.do?admRulId=38163&efYd=&admRulNm=%EC%83%81%ED%98%B8%EC%9A%B4%EC%9A%A9%EC%84%B1%EA%B4%80%EB%A6%AC%EC%A7%80%EC%B9%A8."},{"key":"ref_13","unstructured":"(2022, November 08). Joint Chiefs of Staff, Joint Publication 3-09, Joint Fire Support. Available online: https:\/\/www.jcs.mil\/Portals\/36\/Documents\/Doctrine\/pubs\/jp3_09.pdf?ver=2019-05-14-081632-887."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"59270","DOI":"10.1109\/ACCESS.2022.3179977","article-title":"Study on Cyber Attack Damage Assessment Framework","volume":"10","author":"Kim","year":"2022","journal-title":"IEEE Access J."},{"key":"ref_15","first-page":"154","article-title":"Cyber mission asset importance assessment algorithm using K-Means","volume":"2","author":"Kim","year":"2020","journal-title":"Def. Secur. J. Dec."},{"key":"ref_16","unstructured":"(2008). Guide for Mapping Types of Information and Information Systems to Security Categories (Standard No. SP 800-60 Rev.1)."},{"key":"ref_17","unstructured":"(2013). Security & Privacy Controls for Federal Information Systems and Organizations (Standard No. SP 800-53 Rev.4)."}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/14\/11\/2361\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T01:13:01Z","timestamp":1760145181000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/14\/11\/2361"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,11,9]]},"references-count":17,"journal-issue":{"issue":"11","published-online":{"date-parts":[[2022,11]]}},"alternative-id":["sym14112361"],"URL":"https:\/\/doi.org\/10.3390\/sym14112361","relation":{},"ISSN":["2073-8994"],"issn-type":[{"type":"electronic","value":"2073-8994"}],"subject":[],"published":{"date-parts":[[2022,11,9]]}}}