海角大神

Air Force upgrade: gigantic Sentinel missile to replace Cold War tech

The United States Air Force is overhauling its nuclear missiles with the most major upgrade since the Cold War era. But the 21st-century technology brings 21st-century challenges, including how to protect the missiles from cybersecurity attacks. 

First Look

The control stations for America鈥檚 nuclear intercontinental ballistic missiles have a sort of 1980s retro look, with computing panels in sea foam green, bad lighting, and chunky control switches, including a critical one that says 鈥渓aunch.鈥�

Those underground capsules are about to be demolished and the missile silos they control will be completely overhauled. A new nuclear missile is coming, a gigantic intercontinental ballistic missile called the Sentinel. It鈥檚 the largest cultural shift聽in the land leg of the Air Force鈥檚 nuclear missile mission in 60 years.

But there are questions as to whether some of the Cold War-era aspects of the Minuteman missiles that the Sentinel will replace should be changed.

Making the silo-launched missile more modern, with complex software and 21st-century connectivity across a vast network, may also mean it鈥檚 more vulnerable. The Sentinel will need to be well protected from cyberattacks, while its technology will have to cope with frigid winter temperatures in the Western states where the silos are located.

The $96 billion Sentinel overhaul involves 450 silos across five states, their control centers, three nuclear missile bases, and several other testing facilities. The project is so ambitious it has raised questions as to whether the Air Force can get it all done at once.

An overhaul is needed.

The silos lose power. Their 60-year old massive mechanical parts break down often.聽Air Force crews guard them using helicopters that can be traced back to the Vietnam War. Commanders hope the modernization of the Sentinel, and of the trucks, gear, and living quarters, will help attract and retain young technology-minded service members who are now asked each day to find ways to keep a very old system running.

Nuclear modernization was delayed for years because the United States deferred spending on new missiles, bombers, and submarines in order to support the post 9/11 wars overseas. Now everything is getting modernized at once. The Sentinel work is one leg of a larger, nuclear weapons enterprise-wide $750 billion overhaul that is replacing almost every component of U.S. nuclear defenses, including new stealth bombers,聽submarines, and ICBMs in the country鈥檚 largest nuclear weapons program since the Manhattan Project.

For the Sentinel, silo work could be underway by lead contractor Northrop Grumman as soon as 2025. That is 80 years after the U.S. last used nuclear weapons in war, the bombs dropped on Hiroshima and Nagasaki in Japan, which killed an estimated 100,000 in an instant and likely tens of thousands more over time.

For the Pentagon, there are expectations the modern Sentinel will meet threats from rapidly evolving Chinese and Russian聽missile systems. The Sentinel is expected to stay in service through 2075, so designers are taking an approach that will make it easier to upgrade with new technologies in the coming years. But that鈥檚 not without risk.

鈥淪entinel is a software-intensive program with a compressed schedule,鈥� the Government Accountability Office聽reported this summer. 鈥淪oftware development is a high risk due to its scale and complexity and unique requirements of the nuclear deterrence mission.鈥�

Air Force Secretary Frank Kendall has acknowledged the challenges the program is facing.

鈥淚t鈥檚 been a long time since we did an ICBM,鈥� Mr. Kendall said in November at a Center for New American Security event in Washington. It鈥檚 鈥渢he biggest thing, in some ways, that the Air Force has ever taken on.鈥�

鈥淪entinel, I think quite honestly, is struggling a little bit,鈥� he said.

New connections聽

By far, the biggest cultural shift the Sentinel will bring is the connectivity for all those who secure, maintain, operate, and support the system. The overhaul touches almost everything, even including new equipment for military chefs who cook for the missile teams. The changes could improve efficiency and quality of life on the bases but may also create vulnerabilities that the analog Minuteman missiles have never faced.

Since the first silo-based Minuteman went on alert at Montana鈥檚 Malmstrom Air Force Base on Oct. 27, 1962 鈥� the day Cuba shot down a U-2 spy plane at the height of the Cuban missile crisis 鈥� the missile has 鈥渢alked鈥� to its operators through thousands of miles of hard-wiring in cables buried underground.

Those Hardened Intersite Cable Systems, or HICS, cables carry messages back and forth from the missile to the missileer, who receives those messages through a relatively new part of the capsule 鈥� a firing control console called REACT, for Rapid Execution and Combat Targeting, that was installed in the mid-1990s.

It鈥檚 a closed communication loop, and a very secure one that brings its own headaches. Any time the Air Force wants to test one of the missiles, it literally has to dig up the cables and splice them, to isolate that test missile鈥檚 wiring from the rest. Over decades of testing, there are now hundreds of splices in those critical loops.

But it鈥檚 also one of the Minuteman鈥檚 best features. You would need a shovel 鈥� and a lot more 鈥� to try to hack the system. Even when missile crews update targeting codes, it is a mechanical, manual process.

Minuteman is 鈥渁 very cyber-resilient platform,鈥� said Col. Charles Clegg, the Sentinel system program manager.

Mr. Clegg said cybersecurity for the software-driven Sentinel has been a top focus of the program, one that has all of their attention.

鈥淟ike Minuteman, Sentinel will still operate within a closed network. However, to provide defense in depth, we will have additional security measures at the boundary and inside the network, enabling our weapon system to operate effectively in a cyber-contested environment,鈥� Mr. Clegg said.

Frigid fields

Those who maintain the Minuteman III have tried over the years to bring in new technology to make maintenance more efficient, but they have found that sometimes the old manual way of tracking things 鈥� sometimes literally with a binder and pen 鈥� is better, especially in frigid temperatures.

Nuclear missile fields are located in Colorado, Montana, Nebraska, North Dakota, and Wyoming. Those missiles need maintenance even in the winter, and crews spend hours outside in sub-zero field conditions,

鈥淎n iPad won鈥檛 survive a Montana winter鈥� at the launch sites, where maintenance crews have worked outdoors in temperatures of minus 20 degrees or even minus 40 degrees, said Chief Master Sgt. Virgil Castro, the 741st missile maintenance squadron鈥檚 senior enlisted leader.

Also, when maintenance crews at Malmstrom tested some radio frequency identification, or RFID, technology 鈥� think of how seaports track items inside cargo containers 鈥� it created security vulnerabilities.

鈥淭oday, everything is connected to the internet of things. And you might have a back door in there you don鈥檛 even know鈥� said Lt. Col. Todd Yehle, the 741st maintenance squadron commander. 鈥淲ith the old analog systems, you鈥檙e not hacking those systems.鈥�

What it means is that even though technology could automate the whole operations process, one critical aspect of missile launch will remain the same. If the day comes that another nuclear weapon must be fired, it will still be teams of missileers validating the orders and activating a launch.

鈥淚t鈥檚 the human in the loop,鈥� said Col. Johnny Galbert, commander of the 90th Missile Wing at F.E. Warren. 鈥淚 think what it comes down to is we want to rely on our airmen, our young officers out there, to make that decision, to be able to interpret what higher headquarters is telling them or directing them to do.鈥�

This story was reported by The Associated Press. The AP receives support for nuclear security coverage from the Carnegie Corporation of New York and Outrider Foundation.聽