Research on an Integrated RMF-AT Security Framework for Weapon Systems Development: Effective Integration Strategies of Cybersecurity and Technology Protection

Modern weapon systems have evolved into complex systems with advanced software and network technologies, facing dual security challenges of cyber threats and technology leakage. In the Republic of Korea’s defense sector, K-RMF (Risk Management Framework) and Anti-Tamper technologies have been separately implemented, but this segregated application causes process redundancy, requirement conflicts, and security gaps in the development field. This research proposes an integrated security framework that organically combines as research methods, we identified the characteristics of both systems through literature review and comparative analysis, and validated the effectiveness of the proposed framework through simulation. We applied core principles to the integrated framework including unified risk management, integrated requirements traceability, and security embedded throughout the entire lifecycle. We also ensured practicality through MITRE ATT&CK-based integrated threat modeling and DevSecOps pipeline integration. Through validation, the integrated framework demonstrated simultaneous improvements in development efficiency and security compared to existing approaches.