The Combat Air Force (CAF) Distributed Mission Operations (DMO) Network uses cross domain solutions to interconnect networks operating at different security domains during scheduled training events. Implementation of cross domain solutions on the DMO Network helps achieve the CAF DMO vision of "train like we fight� to keep our air crews mission-ready. There is an increased risk that networked systems function with degraded security assurances caused by the system's continuous exposure to harmful actions such as inadvertent installation of malware (viruses, rootkits, spyware, worms), unauthorized changes made to the system security configurations, and unintended introduction of exploitable vulnerabilities caused by system users. Although cross domain solutions are designed to be resistant to attacks, it is prudent to ensure the system is operating in a known secure state to reduce the risk of exploitation of unidentified vulnerabilities. Maintaining a high level of security assurance is critical since cross domain solutions must be trusted to correctly and consistently adjudicate the release of data between two different security domains according to established security policies. A cross domain solution that consists of a read-only disk, no hard drive, and lacks writable non-volatile storage (stateless system) will provide an innovative and cost-effective approach to greatly reduce the risk of degraded security assurances.
This paper discusses the need for evolution to a stateless cross domain solution and explains how a stateless cross domain solution can be implemented to maintain the required security assurances throughout system operations. This paper provides the technical and accreditation challenges associated with implementing a stateless cross domain solution. Finally, this paper describes potential solutions for mitigating security risks associated with stateless system implementations.