Table of Contents

• 1. Overview
• 1.1 Government Reports and Documents
• 1.1.1 U.S. Government Reports and Documents
• 1.1.2 Non-U.S. Government Reports and Documents
• 1.2 Independent Reports
• 1.3 Industry Reports
• 1.4 Books
• 2. Threats and Actors
• 2.1 The Threat and Skeptics
• 2.2 Actors and Incentives
• 2.2.1 States
• 2.2.2 Groups
• 2.2.3 Hacktivists
• 2.2.4 Terrorists
• 2.3 Security Targets
• 2.3.1 Public Critical Infrastructure
• 2.3.1.1 Government Networks (.gov)
• 2.3.1.2 Military Networks (.mil)
• 2.3.2 Private Critical Infrastructure
• 2.3.2.1 Electricity, Oil and Natural Gas
• 2.3.2.2 Financial Institutions and Networks
• 2.3.2.3 Transportation
• 2.3.2.4 Water, Sewer, etc.
• 2.3.3 Communications
• 2.3.3.1 Telephone
• 2.3.3.2 Public Data Networks
• 2.3.3.3 Cloud Computing
• 3. Issues
• 3.1 Metrics
• 3.2 Economics of Cybersecurity
• 3.2.1 Risk Management and Investment
• 3.2.2 Incentives
• 3.2.3 Insurance
• 3.2.4 Behavioral Economics
• 3.2.5 Market Failure
• 3.3 Supply Chain Issues
• 3.4 Usability/Human Factors
• 3.5 Information Sharing/Disclosure
• 3.6 Public-Private Cooperation
• 3.7 Attribution
• 3.8 Identity Management
• 3.9 Privacy
• 3.10 Security Components of Classic Cyberissues (e.g. IP)
• 3.11 Cybercrime
• 3.12 Cyberwar
• 3.13 Espionage
• 3.13.1 Government to Government
• 3.13.2 Industrial
• 3.13.3 Media Perceptions
• 4. Approaches
• 4.1 Regulation/Liability
• 4.2 Government Organizations
• 4.3 International Cooperation
• 4.4 International Law (including Laws of War)
• 4.5 Deterrence