A recent report released by the US Department of Defense Office of the Director of Test and Evaluation (DOT&E) has issued a report detailing vulnerabilities in the Stryker Dragoon war-fighting platform. Recommendations from the DOT&E are to ‘Correct or mitigate cyber vulnerabilities for the platform and government-furnished equipment.’
My Recommendation: Immediately pull all affected rolling stock from active utility until any contemplated investigation is completed along with full remediation and/or mitigation. Thoroughly investigate all systems with or without connectivity, and test for any form of vulnerability from standalone sabotage to suspected electronic warfare perspectives (including ‘cyberattacks’, network attacks, radio-telephony and coherent light attacks, or stand-alone one-off opportunistic aggressor-delivered attacks) utilizing both automated and non-automated code review, network packet analysis, operating system examination, etcetera. All of this accomplished with the full rigor that can be brought to bear on this problematic deployment by the most powerful defense organization on Earth. Time to get this platform squared-away before letting or most valueable assets (our warfighters) loose on these lethal machines.”
Apparently, the platform, which includes the much anticipated 30mm canon was hacked during a recent NATO exercise. It is most likely that the hack was directed at the Stryker’s data-sharing, navigation, or digital communications capabilities. Affecting any of these systems, or adding false or confusing information into the networks, could greatly affect US forces in combat. These vehicles use GPS, as well as a GPS-enabled systems referred to as Blue Force Trackers that provide their relative position to hostile forces, but more importantly when they are in proximity to friendly forces, which can help prevent blue-on-blue or friendly fire incidents.