Secure software approaches improve voice data segregation across domains
SoK: Secure Software-Based Multi-Domain Data Segregation
Cryptography and Security
Summary
Voice communication systems need to keep important information separated across different groups for security reasons. Traditionally, they use special hardware to do this, which is safe but can be complicated and hard to scale. The authors review how software methods might provide similar security while being more flexible and easier to manage. They look at how new networking and encryption techniques can help protect communication across multiple domains, even against future threats like quantum computing.
What this means in practice
- •For defense communication teams: Design secure, flexible voice systems that share data safely across multiple military domains using software-based segregation.
- •For emergency response coordinators: Build interoperable communication networks that segregate sensitive voice and data channels while adapting to dynamic disaster scenarios.
A survey. It maps existing work.
Authors
Quang Cao, Peter Vinci, Nick Georghiou, Shane Phillips, Mathieu Philippe, Nalin Arachchilage
Abstract
Modern mission-critical coordination demands seamless communication across multiple domains. Traditionally, Voice Communication Systems (VCS) have relied on physically separated Red/Black architectures to ensure voice and data segregation. While these hardware-based methods provide strong security assurances and remain foundational in high-security contexts, they can introduce significant complexity and scalability challenges as mission parameters expand into highly dynamic, multi-domain integrations. As defence, emergency response, and critical infrastructure operations increasingly require interoperable, flexible, and cost-efficient communication environments, there is a growing need to understand whether software-based approaches can provide comparable assurance while supporting modern operational requirements. This SoK characterises a transition to software-based Multi-Domain Data Segregation (MDDS) by integrating systems security, networking, and cryptography. Its goal is to consolidate existing research, identify shared architectural patterns, and address the security challenges facing next-generation high-assurance software-based VCS architectures. By assessing software-defined and virtualized approaches, this SoK supports the development of scalable, high-assurance VCS architectures that facilitate secure real-time coordination across diverse operational domains. Specifically, this SoK examines the security implications of Software-Defined Networking, Network Slicing, Separation Kernels, and Cross-Domain Solutions while addressing challenges posed by quantum computing through Post-Quantum Cryptography (PQC). This SoK provides a comprehensive analysis of the shift from hardware isolation to software segregation, serving as a crucial foundation for researchers and industry stakeholders aiming to enhance secure and adaptable VCS infrastructures for mission-critical operations.