Future of Information-Technology Enabled Systems in the Military Forces and Their Impacts on National Security: A Case Study of the Sri Lanka AIr Force

This paper, published in the INSS Defence Review, investigates the implications of Information Technology (IT) enabled systems—specifically Cyber Physical Systems (CPS), Artificial Intelligence (AI), Internet of Things (IoT), and Big Data—within the Sri Lanka Air Force (SLAF) and their adverse impacts on national security. Adopting a deductive, qualitative approach grounded in the Parkerian Hexad information security model (confidentiality, possession, integrity, authenticity, availability, and utility), the study draws on semi-structured and focus group interviews with 27 SLAF personnel, including IT engineers, senior officers, and airmen. Key findings reveal that information leakage occurs primarily through four vectors: insecure email/intranet mail systems, web attacks, vulnerabilities in automated systems, and unethical social media practices by employees. The study identifies insider threats and inadequate accessibility restrictions as major contributing causes. Notably, the research highlights that even with firewalls and segregated intranets, human factors such as password sharing, smartphone usage in secure areas, and weak disciplinary enforcement remain critical vulnerabilities. The paper concludes with strategic, operational, and tactical recommendations, including mandatory bi-annual INFOSEC/OPSEC training, a formal "SLAF Social Media Guide," physical security upgrades (biometric access, CCTV), continuous security vetting, and the establishment of a Cyber Warfare Emergency Response Team (CWERT).