# Security Architecture for Cloud-Based Command and Control System in IoT Environment
## 1 Introduction  
Recently, the entry into a hyperconnected society, in which everything caused by the Internet of Things (IoT), big data and cloud technology are connected to the Internet, is progressing rapidly. Research is being conducted to implement everything as a service (EaaS) by combining the IoT and the cloud. EaaS easily integrates technologies, such as databases and distributed caches, on top of an infrastructure as a service (IaaS), which can be used by many government departments. Accordingly, major countries such as the U.S. have released standards and policies related to the IoT and the cloud. For example, they are developing guidelines and standards for managing and operating major IoT issues, such as safety, security, privacy and interoperability. Furthermore, they are rapidly expanding the use of cloud in government and corporations based on the \"Cloud First\" policy, and building infrastructures to improve national defense and public sector efficiency, to promote national innovation, and to improve the environment of cloud computing. The department of defense (DoD) predicts that the future battlefield will be defined by the Internet of Battlefield Things (IoBT) and the Internet of Military Things (IoMT) that continually spill data such as smart devices, soldier wearable sensors, and drones. IoBT and IoMT involve the full realization of pervasive sensing, pervasive computing, andpervasive communication, resulting in an unprecedented scale of information produced by networked sensors and computing units. Additionally, they are transitioning to cloud computing through a joint information environment (JIE) to physically and logically integrate data centers across regions. In Korea, according to the \"Basic Plan of the Internet of Things ('14)\", the \"Cloud Computing Activation Plan ('09)\", and the \"Cloud Computing and Competitiveness Reinforcement Strategy ('11)\", their government departments are adapting the IoT technologies and transitioning to a cloud computing environment. The Korean military recognized the necessity of adapting cloud computing to efficiently manage national defense resource information, and therefore established a defense integrated data center (DIDC) that integrates the computer centers of the army, navy and air force. Moreover, the DIDC provides cloud computing services for systems that are common to all military units. However, the informatization policy of the Korean Defense Ministry is aimed at cloud computing and the introduction of the IoT; however, the policy is still in its infancy, and no detailed policies and systems exist on the cloud to manage the information collected from IoT devices. In addition, because the security platform, security communication protocol and security solution used by each system of the Korean military are different, it is difficult to comprehensively and enterprise-wide control the command and control system (C4I; command, control, communication, computers and intelligence). Particularly, it is difficult to respond simultaneously at the military level, because each system operates different identity and access managements (IdAMs) that provide different methods of authentication, authorization, and access control. For example, even if the IdAM for each system uses a cryptographic module as the common authentication method, the authentication process may be different for each IdAM, and requires separate maintenance. In addition, it is necessary to unify the use of authentication factors, such as identity information, credentials, and attributes when interworking between systems. The current cloud computing environment is similar to the existing computer system environment; however, other new security vulnerabilities are occurring, and the existing security system cannot respond properly. Therefore, additional security requirements should be derived and applied for a secure national defense information system based on cloud computing.