For most of the twentieth century, a radio receiver or transmitter was built for a specific purpose: a particular frequency band, modulation scheme, and data rate. Changing the radio's function meant replacing hardware. Software-defined radio (SDR) inverts this model — the radio's behavior is determined primarily by software running on a general-purpose digital processor, with the hardware providing only wideband analog front-end functions: amplification, filtering, and analog-to-digital conversion. The result is a single hardware platform that can be reconfigured through software updates to perform surveillance across a wide range of frequencies and waveforms.

For defense SIGINT applications, this flexibility is strategically significant. An adversary can change frequencies, modulation types, and communication protocols faster than hardware procurement cycles allow. SDR-based collection platforms can be updated via software to track these changes — sometimes within hours of a new waveform being observed in the field.

How SDR Changed Signal Intelligence Collection

Traditional SIGINT collection relied on banks of purpose-built receivers, each tuned to a specific frequency range and capable of handling only the signal types it was designed for. A SIGINT van might carry dozens of independent receivers covering different portions of the HF, VHF, UHF, and microwave spectrum. Expanding collection coverage required buying more hardware. Adapting to new waveforms required engineering new hardware or firmware, a process measured in months.

An SDR front-end digitizes a wide swath of spectrum — often tens or hundreds of megahertz — and passes the resulting IQ (in-phase/quadrature) data stream to software. The software performs all subsequent processing: channelization, modulation detection, demodulation, decoding, and protocol analysis. A single SDR hardware platform can thus simultaneously cover a wide spectrum, running multiple software processing pipelines in parallel for different signal types.

This shift has profound operational implications. A SIGINT analyst can task a new collection requirement — "monitor this frequency range for frequency-hopping signals" — and the software reconfigures the processing pipeline immediately, without hardware changes or crew retraining on new equipment.

Hardware Platforms: Defense vs Research Use

The SDR hardware ecosystem spans a wide range, from consumer-grade devices used for research and training to military-grade platforms designed for operational deployment.

USRP (Universal Software Radio Peripheral). The Ettus Research USRP family — now part of NI (National Instruments) — represents the dominant platform in research, development, and some operational defense applications. USRP devices cover frequency ranges from DC to 6 GHz (with appropriate daughterboards) and support instantaneous bandwidths from tens of MHz up to several hundred MHz on higher-end models. The X410, for instance, offers 400 MHz of instantaneous bandwidth per channel. USRP devices connect to the host processor via 10 GbE or PCIe, use the open UHD (USRP Hardware Driver) software interface, and are supported by all major SDR frameworks. Defense use cases include prototyping of new collection capabilities, laboratory SIGINT system development, and — in rugged-cased configurations — some field deployments.

HackRF One. The HackRF, developed by Great Scott Gadgets, covers 1 MHz to 6 GHz with 20 MHz instantaneous bandwidth and is USB-connected. At sub-$400 price points, it is a research and education platform rather than an operational defense device. Its value for defense organizations is in training — analysts and developers learning SDR concepts, testing processing algorithms, and evaluating new software before deploying on higher-performance hardware.

KiwiSDR. The KiwiSDR covers 0–30 MHz (HF band) with 32 MHz instantaneous bandwidth — an unusually wide HF coverage for a compact device. Its primary use in defense-adjacent contexts is HF monitoring: HFDF (high-frequency direction finding), monitoring shortwave broadcasts, and intercepting HF communications during exercises. It is not an operational tactical device but serves well as a networked HF monitoring node in semi-permissive environments.

Military-grade SDR platforms. Platforms such as the L3Harris Falcon III series, Elbit Systems EW platforms, and various classified hardware integrate SDR front-ends with ruggedized enclosures, MIL-SPEC environmental ratings, and EMI shielding. These are designed for vehicle mounting, dismounted portable use, or fixed installations, and interface with classified software processing frameworks. The hardware-software interface is the same conceptually as with commercial SDRs — IQ data flowing from front-end to processing software — but the hardware is qualified for operational environments that would destroy commercial units.

The SDR Software Stack

The software stack sitting above the SDR hardware consists of several distinct layers, each performing a well-defined role.

Hardware Abstraction: SoapySDR. SoapySDR, maintained by the Pothosware project, provides a vendor-neutral C++ API for controlling SDR hardware and exchanging IQ samples. Any application written to the SoapySDR interface can work with any supported hardware — USRP, RTL-SDR, HackRF, Airspy, and many others — without modification. This abstraction is critical for defense development: processing software can be written and tested on inexpensive hardware and then deployed on production hardware without code changes. The SoapySDR ecosystem includes driver modules for dozens of hardware platforms.

Signal Processing Framework: GNU Radio. GNU Radio is the de facto open-source framework for SDR signal processing. It provides a graphical flow graph editor (GNU Radio Companion) for constructing processing pipelines by connecting signal processing blocks, as well as a Python/C++ API for programmatic construction of processing graphs. GNU Radio includes a comprehensive library of signal processing blocks: filters, channelizers, demodulators for AM/FM/SSB/FSK/PSK/QAM and more, error correction decoders, protocol decoders, and visualization tools. For defense development, GNU Radio serves as the primary rapid prototyping environment — a new signal type observed in the field can be modeled and a demodulation chain tested within hours.

Defense Framework: REDHAWK. REDHAWK is a software framework developed originally for US government SIGINT applications and subsequently open-sourced. Where GNU Radio is oriented toward individual signal processing pipelines, REDHAWK provides infrastructure for large-scale, multi-channel, distributed SIGINT processing systems: component management, inter-process communication, resource allocation, and system management. A REDHAWK system can coordinate processing across multiple processing nodes, managing thousands of simultaneous signal processing channels. REDHAWK uses a CORBA-based middleware for component communication, which adds overhead but provides the strict interface contracts required for certified defense systems. Signal processing components (called "waveforms" in REDHAWK terminology) can be written in C++, Python, or Java and plugged into the framework.

Key architectural principle: Defense SDR deployments typically layer SoapySDR (hardware abstraction) under GNU Radio or REDHAWK (signal processing) under a mission application (collection management, analyst interface, geolocation). Each layer is replaceable independently — upgrading the collection hardware does not require rewriting the signal processing software.

Deployment Configurations

Defense SDR systems are deployed in three primary physical configurations, each with distinct software architecture implications.

Stationary installations. Fixed SIGINT collection sites — positioned for long-duration coverage of known areas of interest — have access to mains power, climate control, and high-bandwidth data connectivity. This enables the use of high-performance server hardware for signal processing, with correspondingly high channel counts and processing throughput. A fixed site running a REDHAWK system might manage hundreds of simultaneous receive channels across multiple SDR front-ends, with signal processing distributed across a small server cluster. Data is archived for later analysis alongside real-time processing, and the site can connect to remote analyst workstations over classified networks.

Portable systems. Man-portable or vehicle-transportable systems trade channel count and processing capacity for mobility. The processing hardware is typically a ruggedized laptop or small-form-factor computing unit. Software frameworks are GNU Radio-based rather than full REDHAWK deployments — the complexity overhead of REDHAWK's distributed architecture is not warranted for single-node operation. Portable systems prioritize rapid deployment, battery or vehicle power operation, and simplified operator interfaces — a single analyst must manage collection, monitoring, and reporting tasks simultaneously.

Vehicle-mounted systems. SIGINT vans and armored vehicle installations sit between fixed and portable in capability. Vehicle power provides adequate energy for multiple SDR front-ends and mid-tier server hardware. Vehicle-mounted antennas — including direction-finding arrays — enable geolocation capabilities not practical for dismounted operation. The software stack typically includes a dedicated geolocation module alongside the collection and processing components. Vehicle-mounted systems are often networked via tactical data links to share collection with fixed sites or other mobile nodes, requiring the signal processing software to interface with tactical communication protocols (Link 16, SADL, or classified equivalents).

Software Update and Waveform Management

One of the operational advantages of SDR platforms is the ability to push new signal processing capabilities ("waveforms" or "modes") to deployed hardware remotely. A new adversary signal type observed and characterized by technical exploitation personnel can be encoded as a new GNU Radio or REDHAWK processing component and pushed to deployed collection systems via secure update channels — without hardware maintenance or personnel retraining.

Effective waveform management requires a software library system: a repository of signal processing components, version-controlled, tested, and certifiable for operational deployment. Building and maintaining this library is a significant software engineering effort that is often underestimated in SDR program planning. The hardware is only as capable as the processing software available for it, and keeping the waveform library current with the evolving signal environment is an ongoing operational requirement.