# Security Architecture for Cloud-Based Command and Control System in IoT Environment
## 2 Background
### Existing C4I System in Korea
#### 2.2.3 Related Works  
[PERSON] et al. [7] propose the visualizing of a military health service (MHS) platform, which is based on hierarchical IoT architecture and the semantic edge-based network model, which plays a significant role in communicating tactical and nontatical pieces of information over the network. They made the command and control center as the semantic edge component that correlates the events happening in real time. The center is entrusted with making vital decisions on the tactical arena ofthe battlefield, and the proposed architecture aims to provide a secured zone to monitor health and weapons conditions. They have introduced the semantic edge computing mechanism to deal with a large amount of health data in terms of processing, storing and sharing information. In addition, they give general requirements the impetus of military health services (MHS), based on the semantic Edge for the IoT architecture, and present remarks of the proposed scenario and challenges of security and privacy in edge computing-enabled IoT systems. [PERSON] et al. [8] analyze the importance of static and dynamic biometrics in IoMT or IoBT. In these environments, an increasing number of ubiquitous sensing and computing devices are worn by military personnel and embedded within military equipment (combat suit, instrumented helmets, weapon systems, etc.) are capable of acquiring a variety of biometrics (e.g., face, iris, periocular, fingerprints, heart-rate, gait, gestures, and facial expressions), and they also emphasize the importance of cloud computing and edge computing in managing the data collected by various sensors in these IoMT and IoBT environments. This edge computing can potentially play a crucial role in enabling user authentication and monitoring through context-aware biometrics in military/battlefield applications. [PERSON] et al. [9] propose and analyze an architecture that adopts cloud computing design methodologies and adapts existing cloud implementations to the tactical environment. They aim to develop technical approaches to mitigate the difficulties in a tactical environment and increase the effectiveness of the military. Because the military often operates in tactical environments with limited resources that reach back, their communications may be low bandwidth and intermittent. Additionally, in this work, they distinguished the layers, such as the application layer, cloud layer, network layer and the compute and energy layers. They also identify and analyze the key functions of each layer. There have been some projects related to the use of cloud computing technology in the military by a few countries. Traditionally, national defense forces operate using systems designed for using proprietary protocols. However, the researchers at the communications electronics research, development and engineering center (CERDEC) of the U.S. army are working on a cloud-based command and control platform. This platform enables soldiers to access crucial command control and intelligence services with a wide variety of military computers of variable link capacities located anywhere in the battlefield [10]. Another initiative is being carried out by the DoD, and it is called the rapid access computing environment (RACE), which is a private cloud providing IaaS and PaaS for the DoD, and is predominantly used for development and testing [11]. Currently, the Korean Ministry of the National Defense has been promoting various pilot projects and policies to adopt cloud computing. The \"National Defense Cloud Proliferation Policy Study\" analyzes international cloud-related policies and presents national defense cloud promotion strategies. Promotion strategies that propose the fourth industrial revolution and cloud application plans include the analysis of national defense cloud application cases, which suggests the need to improve laws, institutions and instructions to spread defense cloud adaption, and the need to establish application plans for each cloud type.