The Secret Internet Protocol Router Network (SIPRNet) is a secure router network or system of interconnected computer networks used by the Department of Defense (DoD) and the Department of State to transmit sensitive information. It also provides hypertext document access and email services to the departments.

Think of the network as the DoD’s classified version of the civilian Internet.

Read More about SIPRNet

The network plays a crucial role in how various U.S. departments communicate sensitive data. Learn more about the network here.

When Was SIPRNet Created and Why?

The network was created in 2005. It was meant to replace Defense Secure Network 1 (DSNET1) as the “secret” portion of the Defense Information Systems Network (DISN).

Who Manages SIPRNet ?

Four DoD agencies are responsible for managing the network—Joint Staff J6 or the Directorate for Command, Control, Communications, and Computers, the National Security Agency (NSA), the Defense Intelligence Agency (DIA), and the Defense Information Systems Agency (DISA).

Any information transmitted over the network is automatically classified as a secret and becomes the property of the DISA.

Apart from maintaining the network, DISA is also tasked to secure it. Note that DISA is a division of the DoD that functions as a combat and security support agency. It provides real-time IT and communications services to the U.S. president, vice president, secretary of defense, military, and combatant commands.

How Does SIPRNet Work?

Any computer that accesses the network is marked and tracked by the DISA.

To access the network, users must connect their computers to a secure line to an SIPRNet server.

The secure line negotiates an encrypted connection that meets predesignated standards. If the standards are not met, the communication is dropped.

The process does not only apply to landline and wireless connections but also voice over Internet Protocol (VoIP) delivery systems.

DISA utilizes encryption to audit all of the network’s users and transmissions.

What Services Does the SIPRNet Provide?

The network provides various benefits to U.S. government department users. Here are some of them.

  • Hypertext document access
  • Email service
  • Data, video, and phone services
  • Communication services between remote stakeholders worldwide
  • Hotline service between the White House and the Kremlin
  • Root name server management for top-level domains (TLDs)

What Are the Requirements for Accessing SIPRNet ?

The network, like any government agency or system, needs top-notch security given the number of attacks targeting them. So, new and rigorous access requirements exist to counteract insider threats and other vulnerabilities. Let us take a look at some of them.

First, users need to obtain approval for access, known as “circuit approval,” from the office of the DoD’s CIO. They must also complete the connection request process if they do not belong to a DoD agency.

Next, they must obtain the appropriate hardware and software for SIRPNet connection. These tools include workstations, mobile devices, networking equipment, firewall capabilities, router configurations, user access switches, and virtualization host servers.

They must also complete and provide proper documentation through the Enterprise Mission Assurance Support Service (eMASS) and prepare for onsite audits for DoD authorization to operate (ATO).

Finally, given the multitude of threats targeting the government sector, they must implement a host-based security system (HBSS) and an assured compliance assessment solution (ACAS) to ensure host intrusion prevention, satisfy policy audits, scan for vulnerabilities, and assess risks. Compliance with OPORD 16-0080 and TASKORD 20-0020 is also mandatory. In addition, they must have DoD Root Certificate Authority (RCA) certificates.

Note that the requirements for SIPRNet connectivity may be updated at least once a year or each time regulations are updated and upgraded. That said, users must implement and maintain several layers of network and application security solutions at all times to protect against attacks like the Wikileaks exposure in June 2024. 

NIPRNet and SIPRNet , What’s the Difference?

SIPRNet is not the only network component of DISN. There are at least two more—the Non-Classified Internet Protocol (IP) Router Network (NIPRNet) and the Joint Worldwide Intelligence Communications System (JWICS).

JWICS is a secure intranet system that protects classified information designated as “top secret.” 

While SIPRNet is meant for transmitting classified as “secret,” defense agencies and contractors use NIPRNet to share unclassified but sensitive information to maintain privacy.

Apart from the type of information transmitted over the networks, NIPRNet and SIPRNet also differ regarding user access restrictions.

SIPRNet versus NIPRNet

Has SIPRNet Ever Been Attacked?

The network has, in fact, been targeted a couple of times.

Diplomatic Messages Leaked on Wikileaks

In 2010, several diplomatic cables downloaded from the network were posted on Wikileaks, revealing classified information to the public. While no one was charged with passing the diplomatic files to Wikileaks, suspicion fell on a U.S. Army Private First Class Officer who served as an intelligence analyst. He was arrested in Iraq and charged for an earlier leak of classified U.S. documents.

Airstrikes Gone Wrong

The network at Creech Air Force Base crashed in early September of 2016, impacting its critical services. Within weeks of the incident, a series of airstrikes went terribly wrong, resulting in deaths in several countries, according to reports.

Given these and other incidents, the network has undergone several security enhancements over time.

Trivia

Did you know that SIPRNet users colloquially call it “Sipper”? NIPRNet, meanwhile, goes by the moniker “Nipper.”

Key Takeaways

  • SIPRNet is a secure router network or system of interconnected computer networks used by the U.S. DoD and the Department of State to transmit sensitive information.
  • It is the DoD’s classified version of the civilian Internet.
  • It was created in 2005 to take the place of DSNET1.
  • It provides hypertext document access and email, data, video, and phone services, among others.
  • All users must fulfill specific requirements before they can access the network.

Sources

  • https://www.theguardian.com/world/2010/nov/28/siprnet-america-stores-secret-cables
  • https://www.bbc.com/news/world-us-canada-11863618
  • https://christianbaghai.medium.com/the-evolving-dynamics-of-siprnet-a-deep-dive-into-the-classified-virtual-world-e32679e4f2eb