NOT CLASSIFIED

ENCLOSURE 1 TO

…./tt…/Ser: NU

DATED: …

Modelling and Simulation as a Service (MSaaS) Concept

Modelling and Simulation as a Service (MSaaS) Concept

This concept is prepare by:

Concept Development Lead:

….

Please direct inquiries to:

EXECUTIVE SUMMARY

Modelling and Simulation (M&S) is a strategic enabler for improving current and future NATO operations, enhancing transformation, and fostering partnerships. In the context of NATO network enabled capabilities, the concept of M&S as a Service guides the development and implementation of future M&S solutions that will better support a broad range of operational capabilities and ambitions such as the Connective Forces Initiative or SMART defence.

This concept provides NATO with an approach on the use of modelling and simulation to support capabilities based in service oriented architectures. This approach is not only responsive to mid to long term operational needs but also reduces investment and maintenance costs while increasing interoperability both in the spirit of the Connective Forces Initiative and SMART Defence.

….

TABLE OF CONTENTS

Modelling and Simulation as a Service (MSaaS) Concept

Executive Summary

Table of Contents

References

Background

Aim

Objectives (TBD)

Scope

Rationale for the Concept

Conceptual Approach

MSaaS support to the NATO top tier capability areas

Operational Implications of MSaaS

Key Recommendations for Implementation

Summary

Annex A. Production Plan

Annex B. Bibliography

Annex C. Contributors

Annex D - Federation based cloud

Annex E - Vignette based cloud

Annex F - Composable cloud services

REFERENCES

A Headquarters Supreme Allied Command Transformation (SACT) NATO.Modelling & Simulation Vision. December 2008

B NATO C3 Classification Taxonomy.Baseline 0.95.Tuesday, 01 May 2012.

http://www.ncia.nato.int/Opportunities/Documents/C3_Classification_Taxonomy_V0.95_Report.pdf

BACKGROUND

Modelling and Simulation (M&S) is a strategic enabler for improving current and future NATO operations, enhancing transformation, and fostering partnerships. In the context of NATO network enabled capabilities, the concept of operations of M&S as a Service guides the development and implementation of future M&S solutions that will better support a broad range of operational capabilities and ambitions such as the Connective Forces Initiative or SMART defence.

This concept provides NATO with an approach on the use of modelling and simulation to support capabilities based in service oriented architectures. This approach is not only responsive to mid to long term operational needs but also reduces investment and maintenance costs while increasing interoperability both in the spirit of the Connective Forces Initiative and SMART Defence.

This concept guides M&S capability development by:

● Establishing a common framework for operational and M&S professionals

● Establishing a basis for subsequent national-level contributions towards this concept

● Identifying the capabilities required to achieve the development of MSaaS

● Invigorating interest and study in future approaches among government, academia, and industry in accord with the Framework For Collaborative Interaction (FFCI)

● Maximizing interoperability and effectiveness of simulation systems for operational use.

The Supreme Allied Commander Transformation (SACT) promulgated his M&S Vision in December 2008 that was engendered by the NATO Modelling and Simulation Master Plan. The vision is a high-level document that aligns with NATO and ACT M&S guidance. The stated purpose of the document is to establish guiding principles and enable an M&S roadmap to achieve the Vision’s overarching goals:

·  Enhance Capability

·  Increase Interoperability

·  Save Resources

·  Reduce Risks

In July 2012, NATO ACT drafted the ACT Modelling and Simulation Roadmap (not published). It seeks to exploit M&S to enable NATO transformation wherever it can enhance capability, increase interoperability, save resources or reduce risk. It establishes three Operational Goals with associated Outcomes, and these Outcomes serve as the catalyst for several M&S-focused initiatives. MSaaS is one of the initiatives of the ACT M&S Roadmap.

This ACT concept aligns M&S focused efforts with the C3 focused efforts by providing a common framework supporting operational needs for MSaaS while also addressing current solutions and future developments in related domains.

AIM

To deliver a concept which will provide the NATO warfigter simulation functionalities whenever it is desired, where it is needed, on any kind of device, and for any operational function is required.

OBJECTIVES

TBD

SCOPE

The scope of this concept is the operational use of M&S in federated NATO networks based on services.

RATIONALE FOR THE CONCEP

(What is the problem + Why this concept fix it)

M&S is a key enabler for NATO capabilities. All future NATO capabilities, including Federated Mission Network implementations, are being designed using a Service Oriented Architecture (SOA) approach based on the NNEC concept and the C3 Classification Taxonomy.

NATO does not have a strategy to integrate M&S seemingly with the rest of common and national networked services to enhance capability ensuring interoperability and reusability while reducing cost and risk.

For example,NATO has not fully exploited M&S to:

·  develop and share capabilities among nations;

·  collaborate on problem solving among government, industry, and academic partners;

·  prioritise challenges and issues for senior-level decision makers.

​M&S has predominantly been used to support training needs without expanding its utility into operational and strategic dimensions.

CONCEPTUAL APPROACH

This ACT concept outlines an approach enabling technological innovations to integrate M&S solutions from various sources into a distributed M&S architecture. A robust management and governance structure will manage the service by orchestrating M&S certification, setup, and delivery of warfighter-oriented solutions. These solutions will come from a diverse set of sources to deliver capability to a wide range of operators and missions. A primary element of the conceptual approach focuses on interoperability and materiel aspects, though MSaaS has implications across the spectrum of the DOTMLPFI and numerous capability areas. At the heart of the services lies correlated operational data streaming from authoritative sources to authorized users.

SOA and Cloud Computing capabilities provide the conceptual underpinnings of management, setup, delivery, diversity, interoperability, and security. IBM, one of the leaders of cloud development, notes “Cloud computing, often referred to as simply ‘the cloud,’ is the delivery of on-demand computing resources—everything from applications to data centers—over the Internet.”[2] Some find the concept of Cloud Computing nebulous because of the many permutations of technology architectures that have arisen simply to capitalize on market segmentation. It is appropriate to note that despite the apparent complexity of the technology, Cloud Computing is a stable and understood means to run operations, and it is secure and scalable. These advantages enable a gradual adaption of the MSaaS structure through time without losses due to shifts in solutions.

Nonetheless, the technology is not the key focus of this concept. The pivotal elements must ultimately focus on operationally-oriented standards, architectures, networks and environments that: (a) Promote the sharing of tools, data, and information across operations and capability areas; (b) Foster common formats such as security protocols and; (c) Provide accessible and reliable services for users. Consider these qualities in light of the structural approaches provided in this concept. This concept presents a three phase structure focused on a Federated Cloud, Vignette-based/Role-based Cloud, and Composable Services and Data Cloud. An overview of the three phase structure follows and appendices provide complete descriptions of the phases that support the technical approach.

Federated Cloud(Appendix D). Uses current M&S infrastructure but develops it within a cloud interface that allows users with different devices to access the service and connect to a common network structure. Operationally, this limits the amount of training to use the services and business structures to manage the operational content in terms of scope or cost. Cloud technology readiness is very high and is ready for use - creating a near seamless transition.

Vignette-based/Role-based Cloud(Appendix E). This structure integrates common elements applicable to multiple users to leverage resources through matured service standards and data elements. Operationally, more applications can pull from MSaaS saving development costs for individual solutions among warfighters. This reuse of data elements aids in the increased preparedness and posture of operations.

Composable Services and Data Cloud(Appendix F). The fully matured concept relies on standardization and composability of simulated elements based on an operationally oriented taxonomy. Technology readiness levels are still relatively low for this structure, but they are rising as the operational need for highly interoperable solutions continues to drive industry. This third structural approach most fully supports the integration of MSaaS into operational environments – improving on the former two by providing access to services via common interfaces and protocols in a manner to flexibly choose and compose the best services to provide the operationally relevant functionality as needed.

This conceptual approach supports the three phases of the technical approach. All three phases rely on a cloud-based access to enable the subscription to and provision of M&S service solutions. The envisioned end state is a NATO-wide accessible Education, Training, Exercise, and Evaluation (ETEE) cloud including access to operational C3 systems. A distributed simulation service shall offer these unique qualities to NATO:

·  Scalability: the ability for scalable, on-demand resources and platforms in order to provide efficient and cost-effective execution of M&S applications.

·  Flexibility: distributed services are flexible in the sense that multiple organizations have access to the infrastructure to perform EETE as well as other functions.

·  Security: distributed simulation services will not result in data integrity issues or grant access to data or services to non-authorized organizations.

·  Efficiency:distributed simulation services will be reliable and efficient.

Distributed services support the objectives of the ACT M&S Vision and easily adapt to new priorities, enable collaboration, and support the specialization. Distributed services are as readily available as adapting existing resources into a cloud environment. This type of approach is well understood and has a high technology readiness level associated with it. As the technical approach evolves towards a Vignette-based/Role-based cloud, a number of benefits manifest themselves:

·  greater fidelity and sophistication for advanced utility

·  explicit multi-dimensional battle space

·  effects of terrain and weather

·  constrained force performance

·  explicit representation of key data and information flows

·  perception-based command and control scenario management

RISKS AND CHALENGES ASSOCIATED WITH THIS CONCEPT

This conceptual approach is intent on beginning a dialogue among a broad and diverse group of users and suppliers. This dialogue must account for risk inherent in certain implementation strategies as they emerge from the collaborative development. Adopting this approach to develop a multi-national, cloud-based, cross-domain M&S capability is not without risks. The best risk mitigation strategies work elementally through identification of risk factors, their severity, and likelihood. An assessment of the three technical approaches found in the appendices yielded these risk factors. The next steps would benefit from a full dialogue on the severity and likelihood dimensions of these factors:

The United States has developed and launched their strategy for future M&S services in their concept calledJLVC 2020. Should ACT fail to implement a cloud-based approach, they run the risk of not being able to provide M&S capabilities in the future. The cloud-based infrastructure is quite possibly afait accomplifrom a technical services perspective. NATO should seek to collaborate and leverage national solutions (e.g., United States) to the greatest extent possible, but NATO must also retain the ability to address Alliance-specific needs in a manner which maintains responsiveness to nations and partners. Additionally, without the leadership of NATO and this MSaaS initiative, individual nations may employ differing taxonomies to classify M&S application areas. Therefore, it is beneficial for NATO to integrate a cloud-based approach to M&S and sponsor M&S-related NATO Standardization Agreements.

MSaaS requires that ACT share resources and collaborate on development of M&S solutions through reuse of existing technologies. This increases the need for all participating countries to aid in the decisions and development of common practices for the advancement of M&S capabilities. Participants will adhere to the strategic plan for implementation of a cloud-based simulation environment with a pool of shared resources. Perhaps, a board composed of different nation’s members to govern the product should be instituted.

As more data is stored and shared in a cloud-based infrastructure, security becomes an increasingly larger risk factor for consideration and mitigation. Agreed upon security practices based on standards and countermeasures are an obvious mitigation strategy. The challenge is that within a multi-national environment, which standard or standards will or can be utilized. For example, the Federal Information Processing Standard (FIPS) are a standardized and widely used risk management strategy for United States governmental bodies. They are easy to interpret and offer best practices that are not nation-centric. Might that be one of a number of alternatives for the NATO bodies to consider? What are the limitations of using a small number of security standards? Likewise, what are the implications in relying on so many different standards that there is essentially no standard? Finally, other dimensions of the security risk is cross-domain information sharing, national policies guiding the subscribers, and establishing permission sets which are understood at the conceptual level.

Relying on an Internet connection means it transfers data to and from an MSaaS firm at internet speeds, rather than the potentially higher speeds of an organization’s internal network. While this is a factor, one can assume two things with regard to this risk. First, the reliance for web-based solutions will continue to increase - somewhat minimizing the risk because taking this approach is understandable among the user community and leadership. Secondly, as greater demand is made on internet and mobile bandwidth, one may reasonably assume telecommunications techniques will adapt to satisfy the increasing data transfer requirements. Neither of these potential future states obviates the risk; therefore, it is presented as a factor for consideration.

This conceptual approach envisions an ACT enabled by advanced technologies in global communications and cloud technologies. Such technologies, especially in times of austerity, may prove prohibitively expensive to develop and deploy the full technical approach to the composable level. However, the approach ensures the backward compatibility and availability of the capabilities by gradually improving them over time.