Simulating Threats to Ensure Mission Continuity
Preventing cyberattacks and ensuring operational continuity in the event of a security breach affecting a vehicle on a mission are essential. A wide range of potential risks must be anticipated and mitigated.
To address these challenges, COMCYBER (the French Cyber Defence Command) organises full-scale cyberattack simulation exercises. These annual exercises, known as DEFNET, enable the armed forces and defence industry companies to train using realistic scenarios.
The DEFNET exercise assesses:
- How the vehicle alerts its occupants in the event of a cyberattack.
- How the vehicle responds to a denial-of-service attack.
- The effectiveness of its degraded operating mode. In the event of an attack, the vehicle must remain fully capable of moving and braking, with the engine running at full power.
Thanks to the cybersecurity features integrated into onboard systems, when a soldier starts an Arquus vehicle during an operation, green, amber or red indicators display the vehicle's level of vulnerability. If a cyberattack is suspected, a military cyber response team can intervene in the field.
GRIFFON armoured vehicle during the DEFNET exercise in 2024.
From Vehicles to Workstations: Securing the Entire Ecosystem
Arquus oversees all cybersecurity aspects of its new vehicle development projects, including their security accreditation documentation.This approach is based on a comprehensive vehicle risk assessment designed to identify potential attackers, possible attack paths and existing vulnerabilities, before defining the technical, organisational and human measures required to prevent and mitigate these risks.However, vulnerabilities are not limited to the vehicle itself. Its development environment and associated equipment, such as displays and data loggers, can also be targeted.
The entire vehicle production chain, along with software update tools, may also serve as potential attack vectors.This connection between embedded cybersecurity and IT security is essential: workstations, networks and the tools used to design, manufacture and maintain vehicles are equally critical areas that must be protected.
On board Arquus armoured vehicles, embedded systems highlight the growing importance of cybersecurity in military operations.
Training and Engagement: People at the Heart of Cybersecurity
Arquus continuously adapts to emerging cyber threats, notably by raising cybersecurity awareness among its employees.Technology alone is not enough: every employee plays a vital role in the security chain. Clicking on a malicious link, using a weak password or connecting an unknown USB drive can be enough to create a security breach. Understanding how cyber threats evolve, as well as the latest techniques and best practices for preventing them, is essential to designing vetronics architectures that are as resilient as possible to cyberattacks. Raising awareness and helping people recognise these risks are therefore among the most effective ways to reduce them.
Cybersecurity is everyone's responsibility, from engineering and design teams to personnel in the field, and extends to all companies involved in the ecosystem, including suppliers, partners and customers.To support this approach, Arquus organises several interactive conferences, particularly in October as part of Cybersecurity Awareness Month. Employees can also take part in engaging, immersive investigation-based activities through digital platforms.