By: 2d Lt Ethan Andrews, Cadet Scarlet Nation, Maj Kalyn Howard, PhD, and Lt Col John Miller

Cyberattack digital illustration. (Photo courtesy of Shutterstock contributor Elena Uve)

 Abstract

The ability to maintain supply lines under threat is fundamental to military operational effectiveness; however, the growing dependence on digital systems creates dangerous vulnerabilities. This article investigates the stakes involved in securing logistics infrastructure against cyberattacks, using real-world cases like NotPetya and exploring systemic risks from initiatives such as China’s Belt and Road Initiative (BRI). It proposes data-driven solutions, including blockchain technology, predictive analytics, and enhanced collaboration to safeguard logistics systems. With military operations heavily dependent on cyber-enabled logistics, this discussion emphasizes the urgent need for resilient systems to maintain operational superiority in contested environments.

Introduction

Military logistics faces two major challenges in today’s world. First, forces must maintain effective resupply operations even when in hostile environments. Second, and increasingly important, is the cybersecurity threat. Modern military logistics heavily relies on digital systems to manage everything from planning delivery routes to tracking inventory. This digital dependency creates vulnerabilities, as enemy forces can potentially disrupt military operations through cyberattacks on these logistics systems. As a result, developing supply chains that can withstand both physical and cyber threats have become crucial for military success.

This paper will examine historical lessons in logistics, highlight current cyber threats, and analyze strategic vulnerabilities. It will also discuss proposed solutions, including blockchain technology, Artificial Intelligence (AI) driven predictive analytics, cybersecurity training, and enhanced collaboration with allies. These approaches will enhance the survivability, sustainability, and responsiveness of logistics networks, aligning with the National Defense Strategy (NDS).

Historical Context

World War II emphatically demonstrated how logistics can determine the outcome of military operations. The Allied forces demonstrated remarkable ingenuity in establishing makeshift supply depots, redirecting convoys, and leveraging emerging technologies like radar to maintain supply lines despite constant threats from Axis forces. Key campaigns, such as the D-Day invasion, relied on the effective synchronization of logistics across air, land, and sea to ensure troops and equipment reached the front lines.[i]

These lessons remain relevant but are compounded by modern complexities. Logistics is no longer confined to physical domains; it is deeply intertwined with cyber infrastructure. Supply chains have evolved into vast, highly interconnected networks reliant on real-time data, automated systems, and global coordination. This dependency introduces new vulnerabilities: cyberattacks can disrupt critical systems, compromise sensitive data, and even paralyze operations without a single physical shot being fired.[ii] As technology continues to transform logistics, ensuring resilience against both physical and virtual threats is not just a challenge, rather it is an operational imperative.

U.S. Space Force Spc. 4 Blake Settoon, 62nd Cyberspace Squadron defensive cyber operator, carries a box to load onto a military container during the space logistics challenge at Peterson Space Force Base, Colorado, Jan. 25, 2025. (U.S. Space Force photo by Staff Sgt. Jaime Sanchez)

Current Challenges

Overreliance on Cyber Infrastructure

Today’s military logistics relies on advanced technologies – including the Internet of Things, machine learning, and cloud computing to enhance operational efficiency and decision-making. These advancements enable real-time tracking of assets, predictive maintenance, and optimized scheduling. However, they also create extensive attack surfaces, exposing critical systems to cyber threats. A single security breach can trigger devastating chain reactions – from corrupting scheduling algorithms to falsifying inventory data to paralyzed transportation networks. The RAND Corporation’s 2023 study reveals the severity of these risks: even a three-day delay in fuel resupply due to a cyberattack could derail an entire military campaign.[iii] This underscores the dual-edged nature of modern logistics innovations, where increased efficiency must be balanced with robust cybersecurity measures to mitigate risks in increasingly contested environments.

Case Study: NotPetya Cyberattack

The 2017 NotPetya cyberattack demonstrates how devastating cyber vulnerabilities can be to modern logistics. Though originally aimed at Ukrainian systems, the malware quickly spiraled out of control, spreading across the globe and crippling the operations of numerous organizations, including Maersk, one of the world’s largest shipping and logistics companies. The attack rendered Maersk’s digital infrastructure inoperable, halting operations at 76 ports worldwide for 10 days. This disruption resulted in financial losses exceeding $300M and sent shockwaves through global supply chains, delaying shipments and straining dependent industries.[iv] The incident laid bare the fragility of logistics systems heavily reliant on interconnected digital platforms.

For military operations, these vulnerabilities pose extreme risks. In an era where mission-critical supplies—from fuel and ammunition to medical resources—depend on precise and timely logistics, a cyberattack delaying or disabling these systems could cripple operational readiness. Beyond the immediate effects, such delays undermine strategic deterrence, eroding confidence in a force’s ability to project power effectively. The NotPetya attack demonstrates the urgent need for robust cybersecurity measures to safeguard logistics networks, which are now as critical to military success as tanks and aircraft.

Reach and severity of the NotPetya cyberattack [v]

The Strategic Implications of China’s Belt and Road Initiative

China’s BRI poses significant risks to global logistics and security through its far-reaching control of vital infrastructure. By strategically investing in and gaining control over critical infrastructure across Asia, Africa, and Europe—such as ports, railways, and communication networks—China has established a strategic foothold in the arteries of global trade. This expanding influence provides China with significant leverage to influence or potentially disrupt the flow of goods and resources to advance its geopolitical objectives.

Sample of China’s reach through the Belt and Road Initiative [vi]

For the United States, the BRI’s cyber vulnerabilities present a strategic opportunity to counter China’s growing influence. Many BRI-related projects prioritize rapid deployment and cost efficiency, often at the expense of robust cybersecurity measures. These systems—ranging from port operations software to telecommunications networks—frequently rely on outdated technology, weak encryption, or minimal safeguards.[vii] These vulnerabilities could allow adversaries to disrupt operations, gather intelligence, or compromise critical infrastructure, potentially transforming China’s global network ambitions into liabilities. This situation highlights the need for the US to offer secure alternatives and build partnerships with nations impacted by the BRI, establishing American security standards as the global benchmark for global trade infrastructure and connectivity.

What Is at Stake?

Cyber disruptions to logistics pose an existential threat to military operations, with cascading effects that could cripple US readiness and strategic capabilities. The Department of Defense processes over 50,000 shipments daily, relying on vast, interconnected supply chains to sustain global operations. A single compromised network could trigger far-reaching consequences:

  • Operational Delays: The failure to deliver mission-critical equipment, ammunition, or fuel at the right time and place could result in missed opportunities and compromised objectives
  • Security Breaches: Cyber breaches exposing troop movements, supply line vulnerabilities, or classified logistical plans could provide adversaries with a tactical edge, endangering personnel and assets
  • Financial Impact: A major cyberattack on military logistics systems could cost up to $1B in combined direct and indirect damages [viii]

The risks extend beyond military networks. The heavy integration of military logistics with civilian infrastructure—such as commercial shipping, aviation, and rail systems—amplifies vulnerabilities. Civilian systems often lack the stringent security protocols of military networks, providing adversaries with a backdoor to disrupt operations indirectly. For example, a cyberattack on a civilian shipping network could delay the transportation of essential military supplies, creating bottlenecks that ripple through the entire supply chain. This interdependence highlights the critical need for robust cybersecurity measures across both military and civilian sectors to ensure the resilience of US logistics in contested environments.

Senior leaders and staff from over 35 commands converged on Fort Meade June 11 and 12 to participate in the Global Logistics Cyber Resiliency Summit hosted by U.S. Transportation Command, U.S. Cyber Command and Joint Force Headquarters Department of Defense Information Network. (Department of Defense photo by MCC (SW/AW) Thomas Miller/Released)

Proposed Solutions

  1. Blockchain Technology for Secure Data Tracking

Employing permissioned blockchain systems with strict access controls can protect sensitive data while enabling secure collaboration with civilian logistics partners.

Blockchain offers a decentralized method to track shipments securely. By encrypting and distributing data across multiple nodes, blockchain minimizes the risk of tampering. For example, NATO’s pilot blockchain projects in logistics have demonstrated increased transparency and reduced fraud risk.[ix]

  1. Predictive Logistics Using AI

AI-powered supply chain management can optimize inventory and rapidly adapt resupply operations to dynamic battlefield conditions.

AI enables military logistics to predict supply needs and optimize resupply missions in real-time. Predictive analytics can anticipate disruptions, allowing for proactive rerouting or resourcing. The USAF’s Predictive Analytics and Decision Assistant initiative, which serves as the system of record for Condition-Based Maintenance Plus, leverages AI to predict aircraft part failures, exemplifies the potential of such technologies to reduce downtime, and enhances readiness by reducing downtime.[x]

  1. Backup and Redundant Systems

Integrating offline operational capabilities as a fallback ensures supply chain resilience even in the event of extended network outages.

Building robust backup systems protects operations against cyberattacks and network disruptions. This requires creating redundant communication networks, data storage, and operational procedures. Such redundancy ensures military logistics can continue even in heavily contested environments where digital systems may be compromised.

  1. Cybersecurity Training for Logistics Personnel

Including scenario-based exercises and phishing simulations in training programs prepares logistics personnel to recognize and counter real-world cyber threats.

Human error causes 90% of cybersecurity breaches.[xi] Comprehensive training programs for logistics personnel can significantly mitigate this risk by teaching them to recognize and properly respond to potential threats in their daily operations.

  1. Enhanced Collaboration with Allies

Establishing shared cybersecurity protocols and conducting joint risk assessments enhances collective resilience to cyberattacks on logistics networks.

Strengthening partnerships with allied nations enables data sharing, joint scenario planning, and coordinated responses to cyber threats. Exercise DEFENDER EUROPE 23, demonstrated this approach’s effectiveness by testing joint logistical planning under cyber-contested conditions.[xii]

Joe Sciabica and Maj. Gen. J. Kevin McLaughlin sign the Air Force Civil Engineer Center-Air Forces Cyber nexus collaboration during a meeting June 12, 2014 at Joint Base San Antonio-Lackland, Texas. The initiative is designed to increase collaboration between the agencies in order to enhance the security of industrial control systems supporting critical Air Force infrastructures around the world. (U.S. Air Force photo by Shannon Carabajal)

Anticipated Impacts

  • Increased Resilience (Survivability): Secure systems, such as blockchain and redundancy measures, protect critical supply chains from cyber threats, ensuring operational continuity even in contested environments.
  • Operational Superiority (Agility and Responsiveness): Predictive logistics and AI-driven adaptability enhance the military’s ability to respond to dynamic battlefield needs, enabling faster resupply and strategic flexibility.
  • Cost Savings (Sustainability): Predictive analytics and optimized resource allocation streamline operations, reducing waste and conserving resources for long-term mission effectiveness.
  • Stronger Alliances (Agility and Responsiveness): Strengthened collaboration with allies through joint planning and shared cybersecurity protocols bolsters collective defense strategies, deterring adversaries and enhancing coordinated responses.

Conclusion

Protecting military logistics in contested environments requires securing our increasingly digital and interconnected supply chains. Solutions like blockchain, predictive analytics, and redundancy systems offer pathways to enhance survivability, sustainability, agility, and responsiveness—key pillars of the NDS. By integrating these innovations with robust cybersecurity training and stronger alliances, the US can mitigate the risks of cyberattacks while reinforcing operational superiority. Resilient logistics isn’t just about preventing disruptions—it’s essential for maintaining strategic deterrence and projecting military power globally.

A Call to Action: The challenge of contested logistics demands immediate action—fortify supply chains, advance cybersecurity, and innovate to ensure our military forces can operate effectively against any threat.

The views expressed in this article are those of the author and do not necessarily reflect the official policy or position of the Air Force, the Department of Defense, or the US Government. 

About the Authors

2d Lt Ethan Andrews is a recently commissioned Logistics Readiness Officer in the United States Air Force. He is a 2025 graduate of the United States Air Force Academy, where he received honors in the top 10% of the Management major and as the Global Logistics Management minor’s Outstanding Cadet for 2025. His first assignment will be as Graduate Student, Logistics and Supply Chain Management, at the Air Force Institute of Technology.

Cadet Scarlet Nation is a cadet at the United States Air Force Academy, majoring in Management with a minor in Global Logistics Management. She is expected to graduate and commission in May 2026, and hopes to be selected to serve as an Intelligence Officer. She has contributed to several collaborative research projects through the Cadet Summer Research Program. In summer 2024 she conducted research at the Boulder TAP Lab, specializing in space and missile launch analysis and trends, and in summer 2025 she was working with Syracuse University on a project to support Veteran Entrepreneurship and needs in the community.

Maj Kalyn Howard, PhD, is a Logistics Readiness Officer, currently serving as Assistant Professor in the Department of Management, United States Air Force Academy (USAFA). After commissioning in 2013, she served in several base-level positions before earning a Doctorate in Logistics from the Air Force Institute of Technology in 2020. Her research has explored performance management and humanitarian operations, as well as the challenges of remote and contested environments. Maj Howard has led award-winning cross-functional teams, addressing complex problem sets in Air Force supply chains, humanitarian response, and most recently as Commander, Pacific Air Forces Regional Support Center Detachment 1, Wake Island Airfield.

Lt Col John Miller is an Associate Professor in the Department of Management, United States Air Force Academy, CO.  He is currently the Deputy Department Head. Previously, Lt Col Miller served at the Headquarters Air Staff and Air Combat Command staff, and in the Space Vehicles directorate of the Air Force Research Laboratory. Prior to USAFA, he most recently served as the Deputy Chief of the Joint All-Domain Command and Control Analysis Division in the Studies, Analyses, and Assessment Directorate of the Air Staff. He has multiple publications in the areas of transportation, logistics, and applied optimization. He holds a Doctorate from Northwestern University, a Master of Science from the Massachusetts Institute of Technology, a Bachelor of Science from the U.S. Air Force Academy, and a certificate in Financial Planning from Boston University.

Works Cited

[i] RAND Corporation. (2023). Cybersecurity and supply chain risk management are not separate issues. RAND Corporation. https://www.rand.org/content/dam/rand/pubs/research_reports/RRA500/RRA532-1/RAND_RRA532-1.pdf

[ii]  Defense Logistics Agency. (2023). DLA Annual Report 2023. Defense Logistics Agency. https://www.dla.mil/Portals/104/Documents/Headquarters/AnnualReport/DLAAnnualReport2023-2-7-A.pdf

[iii] RAND Corporation. (2023).

[iv] Greenberg, A. (2018, Aug 22). The Untold Story of NotPetya, the Most Devastating Cyberattack in History. Wired. https://www.wired.com/story/notpetya-cyberattack-ukraine-russia-code-crashed-the-world/

[v] Moscaritolo, A. (2017, June 28). Petya ransomware: What you need to know. PC Mag. https://www.pcmag.com/news/petya-ransomware-what-you-need-to-know

[vi] MERICS (2025). Mapping the Belt and Road initiative: this is where we stand. Mercator Institute for China Studies’ China Global Competition Tracker. https://merics.org/en/tracker/mapping-belt-and-road-initiative-where-we-stand

[vii] Sanger, D. (2023, May 24). Chinese Malware Hits Systems on Guam. Is Taiwan the Real Target? The New York Times. https://www.nytimes.com/2023/05/24/us/politics/china-guam-malware-cyber-microsoft.html

[viii] Defense Logistics Agency. (2023).

[ix] NATO Allied Command Transformation (n.d.). https://www.act.nato.int/our-work/innovation/

[x] Hardin, D. (2023, May 2). Rapid Sustainment Office’s Condition Based Maintenance Plus artificial intelligence toolkit earns Air Force ‘System of Record’ designation. Air Force Materiel Command.

[xi] IBM. (2024). Cost of a Data Breach Report 2024. https://www.ibm.com/reports/data-breach

[xii] Lopez, Todd. (2023, 7 Apr). Multinational exercise Defender 23 kicks off this month in Europe. United States European Command. https://www.eucom.mil/article/42335/multinational-exercise-defender-23-kicks-off-this-month-in-europe