# Trustworthiness of Situational Awareness: Significance and Quantification
## 4 Quantifying Trustworthiness of SA
### Model for Quantifying the Trustworthiness of COP  
Information sources providing SA and making up COP have metrics of precision, quality, and usability; however, these measures are not adequate for quantifying the integrity of SA. The SA system in charge of producing COP can apply information security principles along with hardware security primitives to the information and communicationstechnology (ICT) links and information sources. These information security principles include confidentiality, integrity, availability, authentication, and non-repudiation [16]. These information security principles can be incorporated either through traditional cryptography, hardware-based security primitives, or AI security primitives [3]. The trustworthiness of an information source or link can be assessed through information security principles, such as confidentiality, integrity, availability, authenticity, and non-repudiation. We briefly discuss these principles in the context of COP. The _confidentiality_ of COP means that the information displayed on the COP is private and the red forces are not privy to the same information. The confidentiality of COP can be determined by inspecting the way in which information was received, that is, whether the information was received over insecure public network infrastructure or through private encrypted networks or through word-of-mouth or intelligence agencies. Hence, a relative confidentiality measure can be assigned based on the way information was received into the COP, which can then be used in the calculation of the integrity of the COP. The _integrity_ of the information pertains to how intact the information is. For example, if the information is transmitted via a digital medium that included error checking and/or message authentication codes, the integrity can be regarded as high. The _availability_ of the information means that the information source is available and not down. If the information is received at the required rate as and when expected, the availability of the source can be regarded as high. The _authenticity_ pertains to the legitimacy of the information source. If the information source is authenticated by appropriate authentication mechanisms [16], its authenticity can be regarded as high. _Non-repudiation_ refers to the security property where the sender of the information cannot deny the creation of the message. Since the commander makes decisions based on the information displayed on COP, the commander needs to know if the information sources will stand by the information they have provided, and the sources have provided the information after due diligence. Non-repudiation can have real implications in life and death situations. For instance, if the commander orders an air strike with the assurance that no friendly forces are present in the strike zone, he/she must have the confidence that the information source will not repudiate the supplied information. The compliance with the above-mentioned information security principles combined with precision, quality, and usability metrics can be used to estimate the trustworthiness value of the SA and COP. Each information source, link, device, and computing system involved in providing SA and generating the COP can be assigned a trustworthiness value based on the level of security primitives incorporated in its design and operation. Security analysis can be performed on the incorporated security primitives and their resilience to adversarial attacks can be analyzed for different threat models based upon which an appropriate trustworthiness value for a given source, link, device, or computing system can be determined. A COP obtains SA and information from a set of sources \(S=\{S_{1},S_{2},S_{3},\ldots,S_{N}\}\).