Abstract:Command, Control, Communication, and Intelligence (C3I) systems are increasingly used in critical civil and military domains for achieving information superiority, operational efficacy, and greater situational awareness. Unlike traditional systems facing widespread cyber-attacks, the sensitive nature of C3I tactical operations make their cybersecurity a critical concern. For instance, tampering or intercepting confidential information in military battlefields not only damages C3I operations, but also causes irreversible consequences such as loss of human lives and mission failures. Therefore, C3I systems have become a focal point for cyber adversaries. Moreover, technological advancements and modernization of C3I systems have significantly increased the potential risk of cyber-attacks on C3I systems. Consequently, cyber adversaries leverage highly sophisticated attack vectors to exploit security vulnerabilities in C3I systems. Despite the burgeoning significance of cybersecurity for C3I systems, the existing literature lacks a comprehensive review to systematize the body of knowledge on C3I systems' security. Therefore, in this paper, we have gathered, analyzed, and synthesized the state-of-the-art on the cybersecurity of C3I systems. In particular, this paper has identified security vulnerabilities, attack vectors, and countermeasures/defenses for C3I systems. Furthermore, our survey has enabled us to: (i) propose a taxonomy for security vulnerabilities, attack vectors and countermeasures; (ii) interrelate attack vectors with security vulnerabilities and countermeasures; and (iii) propose future research directions for advancing the state-of-the-art on the cybersecurity of C3I systems.

The CIA Strikes Back: Redefining Confidentiality, Integrity and Availability in Security

CIA Triad for Achieving Accountability in Cloud Computing Environment

Review on Confidentiality, Integrity and Availability in Information Security

A layered trust information security architecture

Hybrid Cryptosystem Ensuring CIA Triad

Confidential Consortium Framework: Secure Multiparty Applications with Confidentiality, Integrity, and High Availability

Information Availability: An Insight into the Most Important Attribute of Information Security

A Review on C3I Systems' Security: Vulnerabilities, Attacks, and Countermeasures

System Security Assurance: A Systematic Literature Review

Information Security Strategy in Organisations: Review, Discussion and Future Research Directions

A Cloud-Edge Based Data Security Architecture for Sharing and Analysing Cyber Threat Information.

SeCTIS: A Framework to Secure CTI Sharing

An Introduction of System-Scientific Approaches to Cognitive Security

Trust No AI: Prompt Injection Along The CIA Security Triad

IoT-based Application of Information Security Triad

Practitioners' Perspectives on Change Impact Analysis for Safety-Critical Software - A Preliminary Analysis

Trusted Autonomy and Cognitive Cyber Symbiosis: Open Challenges

Order and chaos: the CIA’s HYDRA database and the dawn of the information age

Vulnerabilities of Connectionist AI Applications: Evaluation and Defence

Rethinking Security Incident Response: The Integration of Agile Principles