Some Basic Radio System OPSEC Considerations

Radio Frequency (RF) channels and networks are often used to carry information whose existence may be necessary for organizational operation, or whose content must remain inaccessible to third parties. Cryptographic solutions are commonly employed to render the information on RF links unintelligible to unauthorized recipients, though the existence and nature of the links themselves may assist an adversary in conducting attacks on the system, such as behavioral analysis or denial of service. So, it is prudent that radio system administrators implement RF security plans that are broad in scope, not being limited to only cryptographic solutions, but also including means of foiling other forms of analysis (e.g. open-source, visual). As in other arenas, Operations Security (OPSEC) is integral to the security of the system as a whole. Here we will consider a few ways in which an adversary may gather information about our RF systems and resources. Some techniques are universally applicable, perhaps with minor modifications, and some are applicable only to certain types of systems. The information here should be used in conjunction with other security practices to approach total system security. This is an unscientific introduction to basic radio frequency system OPSEC aspects that I have found to be overlooked and lacking in high security system deployments that may have benefited from them. Please email me at the address above with any comments, corrections, or suggested additions.