The wiki is currently closed to external editors as we finalize the content and underlying structure of the Literature Review. However, the materials featured in this wiki are just a starting point for our inquiry and we look forward to building upon them with more recent publications. The wiki's approach to [[Cybersecurity Overview|defining Cybersecurity]] remains open and inclusive, therefore we would welcome suggestions from various related fields.

If you have suggestions for inclusion in the wiki we request that you send them to [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu], following the format outline below.

==Information to Include==
Each suggestion must include the following information:

* Full citation, including at a minimum:
** Full title
** Author (or publishing Agency)
** Year
* Link to document (or to where a document can be purchased in case access is restricted)

==Formatting==
All entries on the wiki follow a certain format. It would be helpful if your submission will include the following sections:

* Full title of reference
* Full citation
* Categorization
** Please consult the [[Table of Contents]] for a list of existing categories.
** Please limit yourself to three categories per entry.
* Type
** Please consult the [[Table of Contents]] for a list of existing document types.
* Keywords
** If available, pull a list of keywords from your a publication (e.g. "cybersecurity, public goods, and security goods" are potential keywords from [http://papers.ssrn.com/sol3/papers.cfm?abstract_id=708562 this article]).
* Synopsis
** the purpose of the synopsis is to provide a concise overview of the main arguments presented in the article, and highlight its relevance to the understanding of cybersecurity issues.
** If available, please attach an abstract.

==Additional Notes==
This section refers to any further context that you could provide for the submission such as book reviews, conference reports, key articles referenced in footnotes, or a table of contents.

Main Page

2012-06-05T18:18:24Z

David: /* About the Project */

{{TOCright}}

==Start at the [[Table of Contents]]==

To get started immediately, visit the '''[[Table of Contents]]''' and click on a topic of interest.

==Introduction==

This Cybersecurity wiki provides a set of evolving resources on cybersecurity, broadly defined, and includes an '''[[Table of Contents | annotated list]]''' of relevant articles and literature, which can be searched in a number of ways. Please see below.

This wiki is intended as a tool/resource for researchers, technologists, students, policy-makers and others who are interested in cybersecurity issues more broadly. For more information about this first phase of the project, please see [http://cyber.law.harvard.edu/cybersecurity/Main_Page#About_the_Project About the Project].

==Cybersecurity Overview==

The term “Cybersecurity” encompasses a range of issues from [[Cybercrime]] to [[Cyberwar]]. These in turn embrace a diverse set of activities and interests.

Cybercrime, for example, can refer to a lone [[Keyword_Index_and_Glossary_of_Core_Ideas#Hacker | hacker]] breaking into a single computer or to an [[Keyword_Index_and_Glossary_of_Core_Ideas#Organized_Crime | organized network of computer criminals]] collecting thousands or millions of [[Keyword_Index_and_Glossary_of_Core_Ideas#Credit_Card_Fraud | credit card numbers]] and/or [[Keyword_Index_and_Glossary_of_Core_Ideas#Identity_Fraud.2FTheft | personal information records]] from multiple poorly protected corporate sources. Responses to cybercrime range from offering [[Incentives | incentives]] to individuals, manufacturers and/or corporations to protect against [[Keyword_Index_and_Glossary_of_Core_Ideas#Malware | malware]] and [[Keyword_Index_and_Glossary_of_Core_Ideas#Botnet | botnet attacks]] to decisions about [[Insurance | insurance]] and [[Risk_Management_and_Investment | risk management]].

[[Cyberwar| Cyberwarfare]] includes covert [[Espionage | espionage]] attacks against secure systems to collect sensitive [[Keyword_Index_and_Glossary_of_Core_Ideas#National_Security | national security]] information, distributed attacks against the [[Private_Critical_Infrastructure | civilian infrastructure]] to cause widespread failures of [[Electricity, Oil and Natural Gas | energy]] and/or [[Communications | communication systems]] or targeted attacks against [[Government_Networks_(.gov) | military targets]] with the intent to render offensive and defensive systems inoperable or to take control of systems with the ability to deliver [[Keyword_Index_and_Glossary_of_Core_Ideas#Kinetic_Attack | kinetic attacks]]. These attacks all create complicated questions of [[Attribution | attribution]] and [[International Law (including Laws of War) | law]], as the normal [[Keyword_Index_and_Glossary_of_Core_Ideas#Laws_of_War | laws of war]] are of questionable value when applied to threats delivered domestically from a anonymous source in a distant location. In addition, [[Deterrence| deterrence]], offensive actions and defensive response often become blurred in the cyber realm, requiring a fresh look at what policies such as “no first strike” mean in cyberspace.

Solutions to these problems will involve addressing questions of [[Economics_of_Cybersecurity | economics]], incentives, [[Regulation/Liability |law, legislation]], politics, [[Public-Private_Cooperation | government-private cooperation]] and [[International_Cooperation |international diplomacy]]. Government, industry, the military and the public must all play a role in deciding [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Security_as_a_Public_Good | how much cybersecurity is needed]] and who will pay for it. These stakeholders must also address the tradeoffs between [[Privacy | privacy]] and security that often arise in addressing cyber threats. Finally, there needs to be a way to [[Metrics | measure the threat]] and the protections put in place so that the players can make intelligent choices in allocating scare resources.

==Key Resources - How to Use this Wiki==

===Navigating Through the [[Table of Contents]]===
Because this bibliography encompasses such a wide range of cybersecurity issues, the most direct way to get started is to look through the detailed '''[[Table of Contents]]''' and select '''Specific Issues or Themes''' of interest. For example, [[Cybercrime | Cybercrime]] or [[Financial Institutions and Networks |Financial Institutions and Networks]]. At the top of each topic page within the Table of Contents is a "bread crumb" trail showing the path through the Table of Contents to that page. This trail not only shows you how the current page topic fits into the overall structure of the bibliography, each level in this trail is individually selectable allowing you to move up one or more levels to broaden your search. For example, if you are looking at the ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]][[Incentives]]'' page, you can click on the [[Issues | Issues->]] link to see references addressing all the cybersecurity Issues topics.

At the bottom of each topic page is a list of subcategories leading deeper into the Table of Contents from the current topic. This allows you to drill down to pages with greater specificity. For example, if the current page is ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]]'' (shown in the bread crumb trail at the top of the page), the bottom of the page will offer links to the five subcategories of the '''Economics of Cybersecurity''' including:

*''[[Economics of Cybersecurity | Economics of Cybersecurity->]][[Risk Management and Investment]]''
*''[[Economics of Cybersecurity | Economics of Cybersecurity->]][[Incentives]]''
*''[[Economics of Cybersecurity | Economics of Cybersecurity->]][[Insurance]]''
*''[[Economics of Cybersecurity | Economics of Cybersecurity->]][[Behavioral Economics]]''
*''[[Economics of Cybersecurity | Economics of Cybersecurity->]][[Market Failure]]''

===Choose a [[Broad Topics | Broad Topic Area]] to Explore===
If you are interested in beginning with a broad topic area, however, you might choose to start your search from one of the '''[[Broad Topics]]'''. This allows you to search within the broad categories of '''[[Overview]]''', '''[[Resource by Type]]''', '''[[Threats_and_Actors | Threats and Actors]]''', '''[[Issues | Issues]]''', and '''[[Approaches | Approaches]]'''.

===Select an [[Overview | Overview Document]]===
Alternately, you can access one of the '''[[Overview]]''' readings or one of the selected readings that we've summarized by
'''[[Resource by Type | Resource Type]]''', which includes '''[[Government Reports and Documents]]''', '''[[Independent Reports]]''', '''[[Industry Reports]]''' and '''[[Books]]'''.

===Access the [[Keyword Index and Glossary of Core Ideas | Keyword Index]]===
For a more targeted review by '''Key Word''', please review our '''[[Keyword Index and Glossary of Core Ideas]]''', which will enable you to search definitions and references related to specific terms, from [[Keyword_Index_and_Glossary_of_Core_Ideas#Air-Gapped_Network| Air-Gapped Network]] to [[Keyword_Index_and_Glossary_of_Core_Ideas#Zero-Day_Exploit | Zero-Day Exploit]].

===See a [[Cybersecurity Annotated Bibliography| List of All Articles]]===
An alphabetized '''List of All Articles''' in the bibliography is available in the '''[[Cybersecurity Annotated Bibliography]]'''.

===Export References in Standard BibTex Format===
References may also be accessed and exported in a standard bibliographic format ([http://www.bibtex.org/ BibTeX]) here: '''[http://cyber.law.harvard.edu/cybersecurity/Special:Bibliography Bibliography]'''.

==Ongoing Work==

'''A Note on Methodology''': The materials featured in this wiki are just a starting point for our inquiry; the collected articles are dated through 2011. They were selected as foundational documents on the recommendation of select researchers, and we look forward to building upon them with more recent publications. During the next phase of the project, experts, policy-makers, academics, and others will be asked to review and evaluate the current collection and make recommendations for additional resources to include. We have also included a list of suggested materials for review and possible inclusion in the next phase of the project.

Additional articles for consideration are listed here: [[Suggested References to Add to Wiki]]

==About the Project==

The development of this wiki is supported by the [http://minerva.dtic.mil/ Minerva Initiative].

The resources have been assembled by a team at the [http://cyber.law.harvard.edu/ Berkman Center for Internet & Society], under the guidance of [http://cyber.law.harvard.edu/people/jgoldsmith Jack Goldsmith]. Please see [http://www.lawfareblog.com/ Jack's blog] for up-to-date coverage of national security and cybersecurity news, issues, and analysis.

Contributors include: [http://cyber.law.harvard.edu/people/dabrams David Abrams], Jacob Albert, [http://cyber.law.harvard.edu/people/ugasser Urs Gasser], Shane Matthews, Caroline Nolan, David O'Brien, and Felix Treguer.

If you have feedback, comments, or suggested additional readings/resources, please contact: [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu].

Please note that the wiki is currently closed to external editors as we finalize the content and underlying structure of the Literature Review. During Spring-Summer of 2012, we will provide additional opportunities for users to weigh in, contribute to, and comment on the wiki content. We will also update the initial collection of articles with more recent writings, and based on feedback and recommendations from external reviewers and others.

==Templates and Wiki Tools==

[[Adding a Reference | How to Add a New Reference to this Wiki]]

[[TemplateForSources | Template for Sources]]

[[Guidelines for adding Bibliography entries]]

[[List of Keyword links to copy into reference pages | Keyword Links]]

Wiki [http://meta.wikimedia.org/wiki/Help:Contents User's Guide]