Cybersecurity Wiki - User contributions [en]

Main Page

2012-08-31T16:20:15Z

Gili:

__NOTOC__

{|align="center" style="text-align:center; background-color:white" class="wikitable" width="100%"
!colspan="5"|Navigation
|-align="center" valign="bottom"
|style="width: 20%"|[[File:toc_icon.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Table_of_Contents]] Table of Contents
|style="width: 20%"|[[File:All_articles3.svg‎|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Cybersecurity_Annotated_Bibliography]] List of All Articles
|style="width: 20%"|[[File:case_studies.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Category:Case_Studies]] Case Studies
|style="width: 20%"|[[File:h2o_icon.svg|105x105px|link=http://h2odev.law.harvard.edu/playlists/633]] Suggested Syllabi (H2O)
|style="width: 20%"|[[File:Help_icon4.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Help]] How to Use this Wiki
|}

==Introduction==
This Cybersecurity wiki provides a set of evolving resources on [[Cybersecurity_Overview|cybersecurity, broadly defined]], and includes an '''[[Cybersecurity_Annotated_Bibliography|annotated list]]''' of relevant articles and literature, which can be searched in a number of ways. Please [[#Navigation|see below]]. It is intended as a tool/resource for researchers, technologists, students, policy-makers and others who are interested in cybersecurity issues more broadly. For more information about this first phase of the project, including the team, methodology, and opportunities to contribute, please see [[About|About the Project]].

If you have feedback, comments, or suggested additional readings/resources, please contact: [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu]. 

Prior to suggesting material for inclusion in the wiki, please consult the [[Submitting Feedback]] page.

==Navigation==
===Table of Contents===
The quickest way to get started is by using the [[Table of Contents]] as a guide to searching articles by type or category. Some of the articles have wiki entries which include a synopsis, full bibliographic information, and additional relevant notes.

===List of All Articles===
You might also wish to consult the [[Cybersecurity Annotated Bibliography|list of all articles]] and use the [[Help#How_to_Use_the_Filter|filtering tool]] to receive customized search results by type, category, or a free text search term.

===Case Studies===
The [[:Category:Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

===Selected Syllabi (H2O)===
The [http://h2odev.law.harvard.edu/playlists/633 Suggested Syllabi] section uses the [http://cyber.law.harvard.edu/research/h2o H2O] platform to feature a selection of playlists for instruction. H2O is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

===How to Use this Wiki===
For a full explanation of how to browse the wiki, please consult the [[Help]] page.

About

2012-08-31T16:18:00Z

Gili:

'''Team''': These resources have been assembled by a team at the [http://cyber.law.harvard.edu/ Berkman Center for Internet & Society], under the guidance of [http://cyber.law.harvard.edu/people/jgoldsmith Jack Goldsmith]. Please see [http://www.lawfareblog.com/ Jack's blog] for up-to-date coverage of national security and cybersecurity news, issues, and analysis. The development of this wiki has also been supported by the [http://minerva.dtic.mil/ Minerva Initiative].

'''Contributors''': Nick Maietta and Gili Vidan lead our most recent Summer 2012 team, with support from [http://cyber.law.harvard.edu/people/dabrams David Abrams], [http://cyber.law.harvard.edu/people/ugasser Urs Gasser], [http://cyber.law.harvard.edu/people/cnolan Caroline Nolan], and [http://cyber.law.harvard.edu/people/dobrien David O'Brien], in addition to helpful contributions from [http://belfercenter.ksg.harvard.edu/experts/2428/vivek_mohan.html Vivek Mohan] and [http://belfercenter.ksg.harvard.edu/experts/2429/lucas_kello.html Lucas Kello]. Previous team members include Jacob Albert, Shane Matthews, and Felix Treguer.

'''A Note on Methodology''': The materials featured in this wiki are just a starting point for our inquiry; the collected articles were selected as foundational documents based on the recommendation of select researchers, and we look forward to building upon these resources with more recent publications, based on feedback and recommendations from external reviewers, community members, students, and others.

'''Recent Updates''': During the summer of 2012, our collection of over 90 articles was expanded significantly; the wiki now houses 350 plus resources. Other developments include special pages such as [[:Category:Case Studies|Case Studies]] and [http://h2odev.law.harvard.edu/playlists/603 Suggested Syllabi], which are still works in progress.

'''Feedback and Participation''': Please note that the wiki is currently closed to external editors as we finalize the content and underlying structure of the Literature Review. During Fall 2012, we will provide additional opportunities for users to weigh in, contribute to, and comment on the wiki content. If you have feedback, comments, or suggested additional readings/resources, please contact: [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu]. 

Prior to suggesting material for inclusion in the wiki, please consult the [[Submitting Feedback]] page.

'''Attribution''': Some of the pages on this wiki use graphics form the [http://thenounproject.com Noun Project collection]. For specific attribution and licensing, please see the [[Special:ListFiles|list of media assets]].

Template:Filtered Table

2012-08-29T20:33:54Z

Gili:

{| class="dt_types"
|-
|U.S. Government Report
|-
|U.S. Government Hearing
|-
|Non-U.S. Government Report
|-
|Independent Report
|-
|Industry Report
|-
|Book
|-
|Journal Article
|-
|Article
|}

{| class="dt_categories"
|-
|1. Overview
|-
|3. Threats and Actors
|-
|3.1 The Threat and Skeptics
|-
|3.2 Actors and Incentives
|-
|3.2.1 States
|-
|3.2.2 Groups
|-
|3.2.3 Hacktivists
|-
|3.2.4 Terrorists
|-
|3.2.5 Criminals and Criminal Organizations
|-
|3.3 Security Targets
|-
|3.3.1 Public Critical Infrastructure
|-
|3.3.1.1 Government Networks (.gov)
|-
|3.3.1.2 Military Networks (.mil)
|-
|3.3.2 Private Critical Infrastructure
|-
|3.3.2.1 Electricity, Oil and Natural Gas
|-
|3.3.2.2 Financial Institutions and Networks
|-
|3.3.2.3 Transportation
|-
|3.3.2.4 Water, Sewer, etc.
|-
|3.3.3 Communications
|-
|3.3.3.1 Telephone
|-
|3.3.3.2 Public Data Networks
|-
|3.3.3.3 Cloud Computing
|-
|4. Issues
|-
|4.1 Metrics
|-
|4.2 Economics of Cybersecurity
|-
|4.2.1 Risk Management and Investment
|-
|4.2.2 Incentives
|-
|4.2.3 Insurance
|-
|4.2.4 Behavioral Economics
|-
|4.2.5 Market Failure
|-
|4.3 Supply Chain Issues
|-
|4.4 Usability/Human Factors
|-
|4.5 Psychology and Politics
|-
|4.6 Information Sharing/Disclosure
|-
|4.7 Public-Private Cooperation
|-
|4.8 Attribution
|-
|4.9 Identity Management
|-
|4.10 Privacy
|-
|4.11 Cybercrime
|-
|4.12 Cyberwar
|-
|4.13 Espionage
|-
|4.13.1 Government to Government
|-
|4.13.2 Industrial
|-
|4.13.3 Media Perceptions
|-
|5. Approaches
|-
|5.1 Regulation/Liability
|-
|5.2 Private Efforts/Organizations
|-
|5.3 Government Organizations
|-
|5.4 International Cooperation
|-
|5.5 International Law (including Laws of War)
|-
|5.6 Deterrence
|-
|5.7 Technology
|}

{| class="wikitable datatable" data-type-filter="{{{1}}}" data-category-filter="{{{2}}}" data-search-filter="{{{3}}}" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"
|-
! align="center" style="background-color:#f0f0f0;"|'''Author/Agency'''
! align="center" style="background-color:#f0f0f0;"|'''Date'''
! align="center" style="background-color:#f0f0f0;"|'''Title'''
! align="center" style="background:#f0f0f0;"|'''Wiki Entry'''
! align="center" style="background:#f0f0f0;"|'''Type'''
! align="center" style="background:#f0f0f0;"|'''Category'''
|-
|-
| Aloise, Gene et al.||2008||[[Nuclear_Security|Nuclear Security]]||Yes||U.S. Government Report||3.3 [[Security Targets]], 3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]]
|-
| Anderson, Ross ||2001||[[Why_Information_Security_is_Hard|Why Information Security is Hard ]]||Yes||Independent Report ||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]], 5.1 [[Regulation/Liability]]
|-
| Anderson, Ross ||2006||[[The_Economics_of_Information_Security|The Economics of Information Security ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| Anderson, Ross J. ||2008||[[Security_Engineering|Security Engineering ]]||Yes||Book ||3.2 [[Security Targets]], 4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Anderson, Ross, et. al ||2008||[[Security_Economics_and_the_Internal_Market|Security Economics and the Internal Market ]]||Yes||Article||4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]], 5.6 [[Deterrence]]
|-
| Arora et al. ||2006||[[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure|Does Information Security Attack Frequency Increase With Vulnerability Disclosure ]]||Yes||Journal Article ||4.2.1 [[Risk Management and Investment]], 4.6 [[Information Sharing/Disclosure]]
|-
| Aviram, Amitai ||2004||[[Overcoming_Impediments_to_Information_Sharing|Overcoming Impediments to Information Sharing ]]||Yes||Journal Article ||4.2.1 [[Risk Management and Investment]], 4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| Barkham, Jason ||2001||[[Information_Warfare_and_International_Law_on_the_Use_of_Force|Information Warfare and International Law on the Use of Force ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Bauer, Johannes M. and van Eeten, Michel J. G.||2009||[[Cybersecurity|Cybersecurity: Stakeholder Incentives, Externalities, and Policy Options]]||Yes||Journal Article||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Beard, Jack M. ||2009||[[Law_and_War_in_the_Virtual_Era|Law and War in the Virtual Era ]]||Yes||Journal Article ||4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Bellovin, Steven M.||2009||[[The_Government_and_Cybersecurity|The Government and Cybersecurity]]||Yes||Journal Article||3.2 [[Actors and Incentives]], 4.7[[Public-Private Cooperation]]
|-
| Besunder, Allison A.||2009||[[Best_Practices_for_Data_Protection_and_Privacy|Best Practices for Data Protection and Privacy]]||Yes||Book||4.6 [[Information Sharing/Disclosure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| Boebert, W. Earl||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059366.pdf A Survey of Challenges in Attribution]||No||Journal Article||4.8 [[Attribution]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Bohme, Rainer ||2005||[[Cyber-Insurance_Revisited|Cyber-Insurance Revisited ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.2.3 [[Insurance]], ,4.2.5 [[Market Failure]]
|-
| Bohme, Rainer ||2006||[[Models_and_Measures_for_Correlation_in_Cyber-Insurance|Models and Measures for Correlation in Cyber-Insurance ]]||Yes||Independent Report ||4.2.3 [[Insurance]], 5.2 [[Private Efforts/Organizations]]
|-
| Bohme, Rainer ||2010||[[Modeling_Cyber-Insurance|Modeling Cyber-Insurance ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.2.3 [[Insurance]], ,5.2 [[Private Efforts/Organizations]]
|-
| Booz Allen Hamilton and the Economist Intelligence Unit ||2012-01-15||[http://www.cyberhub.com/CyberPowerIndex Cyber Power Index ]||No||Industry Report||4. [[Issues]], 4.1 [[Metrics]], 5. [[Approaches]]
|-
| Bradley, Curtis A. and Goldsmith, Jack L.||2011||[[Overview_of_International_Law_and_Institutions|Overview of International Law and Institutions]]||Yes||Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Brown, Davis ||2006||[[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict|A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict ]]||Yes||Journal Article ||3.3.1.2 [[Military Networks (.mil)]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Burstein, Aaron J.||2008||[[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research|Amending the ECPA to Enable a Culture of Cybersecurity Research]]||Yes||Journal Article||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| Business Roundtable||2011-10-11||[http://businessroundtable.org/uploads/studies-reports/downloads/2011_10_Mission_Critical_A_Public-Private_Strategy_for_Effective_Cybersecurity.pdf Mission Critical: A Public-Private Strategy for Effective Cybersecurity ]||No||Independent Report||
|-
| Business Software Alliance ||2012-02-02||Global Cloud Computing Scorecard a Blueprint for Economic Opportunity||No||Industry Report||3.3.3.3 [[Cloud Computing]]
|-
| Business Software Alliance, Center for Democracy & Technology, U.S. Chamber of Commerce, Internet Security Alliance, Tech America ||2011-03-08||[http://www.cdt.org/files/pdfs/20110308_cbyersec_paper.pdf Improving our Nation’s Cybersecurity through the Public-Private Partnership: a White Paper ]||No||Industry Report||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5. [[Approaches]]
|-
| Cabinet Office (United Kingdom) ||2011-11-11||[http://www.cabinetoffice.gov.uk/sites/default/files/resources/uk-cyber-security-strategy-final.pdf The UK Cyber Security Strategy: Protecting and promoting the UK in a digital world ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Camp, L. Jean ||2004||[[Economics_of_Information_Security|Economics of Information Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Camp, L. Jean ||2004||[[Pricing_Security|Pricing Security ]]||Yes||Book ||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Center for a New American Security||2012-06-11||[http://www.cnas.org/node/6405 America’s Cyber Future: Security and Prosperity in the Information Age ]||No||Independent Report||1. [[Overview]], 4. [[Issues]], 5. [[Approaches]]
|-
| Center for Strategic and International Studies ||2008||[[Securing_Cyberspace_for_the_44th_Presidency|Securing Cyberspace for the 44th Presidency ]]||Yes||Independent Report ||4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]], 5.4 [[International Cooperation]]
|-
| Centre for Secure Information Technologies||2011||[http://www.csit.qub.ac.uk/sites/CSIT/InnovationatCSIT/Reports/Filetoupload,295594,en.pdf World Cybersecurity Technology Research Summit (Belfast 2011) ]||No||Independent Report||
|-
| Cetron, Marvin J. and Davies, Owen||2009||[[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity|World War 3.0: Ten Critical Trends for Cybersecurity]]||Yes||Journal Article||3.2 [[Actors and Incentives]], 3.3.1 [[Public Critical Infrastructure]], 4.12 [[Cyberwar]]
|-
| Clark, David and Landau, Susan||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059365.pdf Untangling Attribution]||No||Journal Article||4.8 [[Attribution]], 5.6 [[Deterrence]], 5.7 [[Technology]]
|-
| Clarke, Richard A. ||2010||[[Cyber_War|Cyber War ]]||Yes||Book ||3.1 [[The Threat and Skeptics]], 3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Clinton, Larry ||Undated ||[[Cyber-Insurance_Metrics_and_Impact_on_Cyber-Security|Cyber-Insurance Metrics and Impact on Cyber-Security ]]||Yes||Independent Report ||4.2.3 [[Insurance]], 5.2 [[Private Efforts/Organizations]]
|-
| Cloud Security Alliance ||2009-12||[http://www.cloudsecurityalliance.org/csaguide.pdf Security Guidance for Critical Areas of Focus in Cloud Computing V2.1 ]||No||Independent Report||3.3.3.3 [[Cloud Computing]], 4. [[Issues]], 5.2 [[Private Efforts/Organizations]]
|-
| Cohen, Geoff||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059445.pdf Targeting Third Party Collaboration]||No||Journal Article||3.1 [[The Threat and Skeptics]], 4.7 [[Public-Private Cooperation]], 4.11 [[Cybercrime]]
|-
| Computer Economics, Inc. ||2007||[[2007_Malware_Report|2007 Malware Report ]]||Yes||Industry Report ||4.2 [[Economics of Cybersecurity]]
|-
| Computing Research Association ||2003-||[[Four_Grand_Challenges_in_Trustworthy_Computing|Four Grand Challenges in Trustworthy Computing ]]||Yes||Independent Report ||4.4 [[Usability/Human Factors]], 4.6 [[Information Sharing/Disclosure]], 4.9 [[Identity Management]]
|-
| Cornish, Paul||2009||[[Cyber_Security_and_Politically,_Socially_and_Religiously_Motivated_Cyber_Attacks|Cyber Security and Politically, Socially and Religiously Motivated Cyber Attacks]]||Yes||Non-U.S. Government Report||3.2 [[Actors and Incentives]], 5.4 [[International Cooperation]]
|-
| Cornish, Paul et al.||2009||[[Cyberspace_and_the_National_Security_of_the_United_Kingdom|Cyberspace and the National Security of the United Kingdom - Threats and Responses]]||Yes||Independent Report||3. [[Threats and Actors]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Council on Foreign Relations ||2010-07-15||[http://i.cfr.org/content/publications/attachments/Knake%20-Testimony%20071510.pdf Untangling Attribution: Moving to Accountability in Cyberspace [Testimony]]||No||Independent Report||3.2 [[Actors and Incentives]], 4.8 [[Attribution]], 5. [[Approaches]]
|-
| CSIS Commission on Cybersecurity for the 44th Presidency, Center for Strategic and International Studies ||2011-01||[http://csis.org/files/publication/110128_Lewis_CybersecurityTwoYearsLater_Web.pdf Cybersecurity Two Years Later ]||No||Independent Report||3. [[Threats and Actors]], 5. [[Approaches]], 5.3 [[Government Organizations]]
|-
| Cyber Security Forum Initiative ||2011-05-09||[http://www.unveillance.com/wp-content/uploads/2011/05/Project_Cyber_Dawn_Public.pdf Cyber Dawn: Libya ]||No||Industry Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| Department of Commerce ||2011-06-14||[http://www.nist.gov/nstic/2012-nstic-governance-recs.pdf Models for a Governance Structure for the National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| Department of Commerce ||2010||[[Defense_Industrial_Base_Assessment|Defense Industrial Base Assessment ]]||Yes||U.S. Government Report ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| Department of Commerce, Internet Policy Task Force||2011-06||[http://www.nist.gov/itl/upload/Cybersecurity_Green-Paper_FinalVersion.pdf Cybersecurity, Innovation and the Internet Economy]||No||U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.7 [[Public-Private Cooperation]]
|-
| Department of Defense ||2011-07-14||[http://www.defense.gov/news/d20110714cyber.pdf Department of Defense Strategy for Operating in Cyberspace ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2011-11-15||[http://www.defense.gov/home/features/2011/0411_cyberstrategy/docs/NDAA%20Section%20934%20Report_For%20webpage.pdf Department of Defense Cyberspace Policy Report : A Report to Congress Pursuant to the National Defense Authorization Act for Fiscal Year 2011, Section 934 ]||No||U.S. Government Report||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Department of Defense ||2012-02-16||[http://www.fas.org/sgp/othergov/dod/5200_01v1.pdf DOD Information Security Program: Overview, Classification, and Declassification ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2012-04-11||[http://www.nsci-va.org/CyberReferenceLib/2011-04-Cyber%20Ops%20Personnel.pdf Cyber Operations Personnel Report (DoD) ]||No||U.S. Government Report||
|-
| Department of Defense ||1999||[[An_Assessment_of_International_Legal_Issues_in_Information_Operations|An Assessment of International Legal Issues in Information Operations ]]||Yes||U.S. Government Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Department of Defense ||2005-||[[Strategy_for_Homeland_Defense_and_Civil_Support|Strategy for Homeland Defense and Civil Support ]]||Yes||U.S. Government Report ||3.2.4 [[Terrorists]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2007||[[Mission_Impact_of_Foreign_Influence_on_DoD_Software|Mission Impact of Foreign Influence on DoD Software ]]||Yes||U.S. Government Report ||3.2.4 [[Terrorists]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2011-04||[http://www.nsci-va.org/CyberReferenceLib/2011-04-Cyber%20Ops%20Personnel.pdf Cyber Operations Personnel Report (DOD) ]||No||U.S. Government Report ||
|-
| Department of Energy||2012-04||[http://energy.gov/sites/prod/files/OAS-RA-12-04.pdf The Department's Management of the Smart Grid Investment Grant Program]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]]
|-
| Department of Energy (DOE) Inspector General ||2012-01-01||[http://energy.gov/ig/downloads/departments-management-smart-grid-investment-grant-program-oas-ra-12-04 The Department’s Management of the Smart Grid Investment Grant Program ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.3 [[Government Organizations]]
|-
| Department of Energy, Idaho National Laboratory ||2010-05-01||[http://www.fas.org/sgp/eprint/nstb.pdf NSTB Assessments Summary Report: Common Industrial Control System Cyber Security Weaknesses ]||No||U.S. Government Report||3.3.2 [[Private Critical Infrastructure]], 5.7 [[Technology]]
|-
| Department of Energy, Office of Electricity Delivery & Energy Reliability ||Undated||[http://energy.gov/oe/technology-development/energy-delivery-systems-cybersecurity Cybersecurity for Energy Delivery Systems Program ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2009-09-16||[http://www.cyber.st.dhs.gov/docs/National_Cyber_Leap_Year_Summit_2009_Co-Chairs_Report.pdf National Cyber Leap Year Summit 2009: Co-Chairs' Report]||No||U.S. Government Report||3.3 [[Security Targets]], 4.2 [[Economics of Cybersecurity]], 4.8 [[Attribution]]
|-
| Department of Homeland Security||2007-06||[http://www.oig.dhs.gov/assets/Mgmt/OIG_07-48_Jun07.pdf Challenges Remain in Securing the Nation’s Cyber Infrastructure]||No||U.S. Government Report||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2009-11||[http://www.cyber.st.dhs.gov/docs/DHS-Cybersecurity-Roadmap.pdf A Roadmap for Cybersecurity Research]||No||U.S. Government Report||1. [[Overview]], 4.2.1 [[Risk Management and Investment]]
|-
| Department of Homeland Security||2010-08||[http://www.dhs.gov/xoig/assets/mgmtrpts/OIG_10-111_Aug10.pdf DHS Needs to Improve the Security Posture of Its Cybersecurity Program Systems]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2010-09||[http://www.federalnewsradio.com/pdfs/NCIRP_Interim_Version_September_2010.pdf National Cyber Incident Response Plan]||No||U.S. Government Report||3. [[Threats and Actors]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2011-11||[http://www.dhs.gov/xlibrary/assets/nppd/blueprint-for-a-secure-cyber-future.pdf Blueprint for a Secure Cyber Future: The Cybersecurity Strategy for the Homeland Security Enterprise]||No||U.S. Government Report||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security ||2003||[[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets|The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.2 [[Private Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security ||2009||[[A_Roadmap_for_Cybersecurity_Research|A Roadmap for Cybersecurity Research ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| Department of Justice||2011-04||[http://www.justice.gov/oig/reports/FBI/a1122r.pdf The Federal Bureau of Investigation's Ability to Address the National Security Cyber Intrusion Threat]||No||U.S. Government Report||4.6 [[Information Sharing/Disclosure]], 4.11 [[Cybercrime]], 5.3 [[Government Organizations]]
|-
| Deputy Chief of Staff for Intelligence ||2006||[[Critical_Infrastructure_Threats_and_Terrorism|Critical Infrastructure Threats and Terrorism ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 4.11 [[Cybercrime]], 4.12 [[Cyberwar]]
|-
| Dörmann, Knut ||2004||[[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks|Applicability of the Additional Protocols to Computer Network Attacks ]]||Yes||Independent Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Douglas Maughan||2010||[[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda|The Need for a National Cybersecurity Research and Development Agenda]]||Yes||Article||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Dunlap Charles J, Jr ||2011||[[Perspectives_for_Cyber_Strategists_on_Law_for_Cyberwar|Perspectives for Cyber Strategists on Law for Cyberwar]]||Yes||Journal Article||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.5 [[International Law (including Laws of War)]]
|-
| Dunlap, Charles J. Jr. ||2009||[[Towards_a_Cyberspace_Legal_Regime_in_the_Twenty-First_Century|Towards a Cyberspace Legal Regime in the Twenty-First Century ]]||Yes||Article||4.5 [[Psychology and Politics]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| EastWest Institute ||2011-02-03||[http://vialardi.org/nastrazzuro/pdf/US-Russia.pdf Working Towards Rules for Governing Cyber Conflict: Rendering the Geneva and Hague Conventions in Cyberspace ]||No||Independent Report||3.2.1 [[States]], 5.4 [[International Cooperation]], 5.5 [[International Law (including Laws of War)]]
|-
| Energetics Inc. ||2006||[[Roadmap_to_Secure_Control_Systems_in_the_Energy_Sector|Roadmap to Secure Control Systems in the Energy Sector ]]||Yes||Independent Report ||3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| Energy Sector Control Systems Working Group||2011-09||[http://www.cyber.st.dhs.gov/wp-content/uploads/2011/09/Energy_Roadmap.pdf Roadmap to Achieve Energy Delivery Systems Cybersecurity]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]]
|-
| ENISA||2010||[[Introduction_to_Country_Reports|Introduction to Country Reports]]||Yes||Non-U.S. Government Report||3.2.1 [[States]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| Epstein, Richard A. ||2008||[[Cybersecurity_in_the_Payment_Card_Industry|Cybersecurity in the Payment Card Industry ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| European Network and Information Security Agency ||2010-10-07||[http://www.enisa.europa.eu/media/press-releases/stuxnet-analysis Stuxnet Analysis ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| European Network and Information Security Agency (ENISA) ||2011-04-11||[http://www.enisa.europa.eu/act/res/other-areas/inter-x/report/interx-report Resilience of the Internet Interconnection Ecosystem, at: ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| Federal CIO Council ||2012-01-04||[http://www.gsa.gov/portal/category/102371 Federal Risk and Authorization Management Program (FedRAMP) ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Federal Communications Commission (FCC) ||2010-04-21||[http://hraunfoss.fcc.gov/edocs_public/attachmatch/DOC-305618A1.doc Explore the reliability and resiliency of commercial broadband communications networks ]||No||U.S. Government Report||3.3.3 [[Communications]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Federal Communications Commission (FCC) ||2011-06-03||[ftp://ftp.fcc.gov/pub/Daily_Releases/Daily_Business/2011/db0610/DOC-307454A1.txt FCC's Plan for Ensuring the Security of Telecommunications Networks ]||No||U.S. Government Report||
|-
| Financial Services Sector Coordinating Council for Critical Infrastructure Protection ||2008||[[Research_Agenda_for_the_Banking_and_Finance_Sector|Research Agenda for the Banking and Finance Sector ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]]
|-
| Fischer, Eric A. CRS||2012-04-23||[http://www.fas.org/sgp/crs/natsec/R42114.pdf Federal Laws Relating to Cybersecurity: Discussion of Proposed Revisions]||No||U.S. Government Report||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]]
|-
| Franklin, Jason, et. al ||2007||[[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants|An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants ]]||Yes||Independent Report ||3.2.5 [[Criminals and Criminal Organizations]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| Gandal, Neil ||2008||[[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security|An Introduction to Key Themes in the Economics of Cyber Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]], 5.7 [[Technology]]
|-
| GAO||2003-08-27||[http://www.gao.gov/products/GAO-03-760 Efforts to Improve Information sharing Need to Be Strengthened ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| GAO||2004-05-28||[http://www.gao.gov/assets/160/157541.pdf Technology Assessment: Cybersecurity for Critical Infrastructure Protection]||No||U.S. Government Report||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.7 [[Technology]]
|-
| GAO||2008-07-31||[http://www.gao.gov/assets/280/279084.pdf Cyber Analysis And Warning: DHS Faces Challenges in Establishing a Comprehensive National Capability]||No||U.S. Government Report||5.3 [[Government Organizations]]
|-
| GAO||2009-09-24||[http://www.gao.gov/new.items/d09969.pdf Critical Infrastructure Protection: Current Cyber Sector-Specific Planning Approach Needs Reassessment]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2009-11-17||[http://www.gao.gov/products/GAO-10-230t Continued Efforts Are Needed to Protect Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.2 [[Actors and Incentives]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-05||[http://www.gao.gov/products/GAO-10-338 Cybersecurity: Progress Made But Challenges Remain in Defining and Coordinating the Comprehensive National Initiative ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Is Needed to Protect Federal Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-24||[http://www.gao.gov/products/GAO-10-536t Information Security: Concerted Response Needed to Resolve Persistent Weaknesses, at: ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-04-12||[http://www.gao.gov/products/GAO-10-237 Concerted Effort Needed to Consolidate and Secure Internet Connections at Federal Agencies ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2010-06-03||[http://www.gao.gov/assets/310/305208.pdf Cybersecurity: Key Challenges Need to Be Addressed to Improve Research and Development]||No||U.S. Government Report||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| GAO||2010-06-16||[http://www.gao.gov/products/GAO-10-834t Continued Attention Is Needed to Protect Federal Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-07-01||[http://www.gao.gov/products/GAO-10-513 Federal Guidance Needed to Address Control Issues With Implementing Cloud Computing ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| GAO||2010-07-15||[http://www.gao.gov/products/GAO-10-628 Critical Infrastructure Protection: Key Private and Public Cyber Expectations Need to Be Consistently Addressed ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| GAO||2010-08-02||[http://www.gao.gov/products/GAO-10-606 United States Faces Challenges in Addressing Global Cybersecurity and Governance ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| GAO||2010-09-15||[http://www.gao.gov/products/GAO-10-916 Information Security: Progress Made on Harmonizing Policies and Guidance for National Security and Non-National Security Systems ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-09-23||[http://www.gao.gov/products/GAO-10-772 DHS Efforts to Assess and Promote Resiliency Are Evolving but Program Management Could Be Strengthened ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| GAO||2010-10-06||[http://www.gao.gov/products/GAO-11-24 Cyberspace Policy: Executive Branch Is Making Progress Implementing 2009 Policy Review Recommendations, but Sustained Leadership Is Needed ]||No||U.S. Government Report ||5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2010-11-30||[http://www.gao.gov/products/GAO-11-43 Information Security: Federal Agencies Have Taken Steps to Secure Wireless Networks, but Further Actions Can Mitigate Risk ]||No||U.S. Government Report ||3.3.3 [[Communications]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2011-01-12||[http://www.gao.gov/products/GAO-11-117 Electricity Grid Modernization: Progress Being Made on Cybersecurity Guidelines, but Key Challenges Remain to be Addressed ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Needed to Protect Our Nation's Critical Infrastructure and Federal Information Systems ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-08||[http://www.gao.gov/products/GAO-11-149 Information Security: State Has Taken Steps to Implement a Continuous Monitoring Application, but Key Challenges Remain ]||No||U.S. Government Report ||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2011-07-25||[http://www.gao.gov/products/GAO-11-75 Defense Department Cyber Efforts: DoD Faces Challenges in Its Cyber Activities ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-26||[http://www.gao.gov/products/GAO-11-463T Continued Attention Needed to Protect Our Nation’s Critical Infrastructure ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-29||[http://www.gao.gov/products/GAO-11-695R Defense Department Cyber Efforts: Definitions, Focal Point, and Methodology Needed for DoD to Develop Full-Spectrum Cyberspace Budget Estimates ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-03||[http://www.gao.gov/products/GAO-12-137 Information Security: Weaknesses Continue Amid New Federal Efforts to Implement Requirements ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-05||[http://www.gao.gov/products/GAO-12-130T Information Security: Additional Guidance Needed to Address Cloud Computing Concerns ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-17||[http://www.gao.gov/products/GAO-11-634 Federal Chief Information Officers: Opportunities Exist to Improve Role in Information Technology Management ]||No||U.S. Government Report ||5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-11-29||[http://www.gao.gov/products/GAO-12-8 Cybersecurity Human Capital: Initiatives Need Better Planning and Coordination, at: ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| GAO||2011-12-09||[http://www.gao.gov/products/GAO-12-92 Critical Infrastructure Protection: Cybersecurity Guidance Is Available, but More Can Be Done to Promote Its Use ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2012-01-13||[http://www.gao.gov/assets/590/587681.pdf Defense Contracting: Improved Policies and Tools Could Help Increase Competition on DOD's National Security Exception Procurements]||No||U.S. Government Report||3.3.1.2 [[Military Networks (.mil)]], 4.7 [[Public-Private Cooperation]]
|-
| GAO||2012-02-28||[http://www.csit.qub.ac.uk/media/pdf/Filetoupload,252359,en.pdf Cybersecurity: Challenges to Securing the Modernized Electricity Grid ]||No||Non-U.S. Government Report ||
|-
| GAO||2009||[[Critical_Infrastructure_Protection|Critical Infrastructure Protection - Current Cyber Sector-Specific Planning Approach Needs Reassessment]]||Yes||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2009-07||[http://www.gao.gov/new.items/d09546.pdf Information Security: Agencies Continue to Report Progress, but Need to. Mitigate Persistent Weaknesses]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]]
|-
| GAO||2009-09||[http://www.gao.gov/new.items/d09617.pdf Information Security: Concerted Effort Needed to Improve Federal Performance Measures]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010||[[Information_Security|Information Security - Concerted Effort Needed to Consolidate and Secure Internet Connections at Federal Agencies]]||Yes||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| GAO ||2011-10-05||[http://www.gao.gov/products/GAO-12-130T Information Security: Additional Guidance Needed to Address Cloud Computing Concerns ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Geer, Daniel E. and Conway, Daniel G.||2010||[[Nothing_Ventured,_Nothing_Gained|Nothing Ventured, Nothing Gained]]||Yes||Journal Article||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Gellman, Robert||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059444.pdf Civil Liberties and Privacy Implications of Policies to Prevent Cyberattacks ]||No||Journal Article||4.8 [[Attribution]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| General Accountability Office (GAO) ||2010-07-15||[http://www.gao.gov/products/GAO-10-628 Critical Infrastructure Protection: Key Private and Public Cyber Expectations Need to Be Consistently Addressed ]||No||U.S. Government Report||3.3 [[Security Targets]], 4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| General Accountability Office (GAO) ||2011-01-12||[http://www.gao.gov/products/GAO-11-117 Electricity Grid Modernization: Progress Being Made on Cybersecurity Guidelines, but Key Challenges Remain to be Addressed ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Needed to Protect Our Nation's Critical Infrastructure and Federal Information Systems ]||No||U.S. Government Report||3. [[Threats and Actors]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-07-29||[http://www.gao.gov/products/GAO-11-695R Defense Department Cyber Efforts: Definitions, Focal Point, and Methodology Needed for DOD to Develop Full-Spectrum Cyberspace Budget Estimates ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-11-29||[http://www.gao.gov/products/GAO-12-8 Cybersecurity Human Capital: Initiatives Need Better Planning and Coordination ]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-12-09||[http://www.gao.gov/products/GAO-12-92 Critical Infrastructure Protection: Cybersecurity Guidance Is Available, but More Can Be Done to Promote Its Use ]||No||U.S. Government Report ||
|-
| General Services Administration (GSA) ||2012-02-07||[http://www.gsa.gov/graphics/staffoffices/FedRAMP_CONOPS.pdf Concept of Operations: FedRAMP ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Grady, Mark F. ||2006||[[The_Law_and_Economics_of_Cybersecurity|The Law and Economics of Cybersecurity ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Graham David E ||2010||[[Cyber_Threats_and_the_Law_of_War| Cyber Threats and the Law of War]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Granick, Jennifer Stisa ||2005||[[The_Price_of_Restricting_Vulnerability_Publications|The Price of Restricting Vulnerability Publications ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Hollis, Duncan B. ||2007||[[Why_States_Need_an_International_Law_for_Information_Operations|Why States Need an International Law for Information Operations ]]||Yes||Journal Article ||4.12 [[Cyberwar]], 4.13.1 [[Government to Government|Government to Government Espionage]], 5.5 [[International Law (including Laws of War)]]
|-
| HP TippingPoint DVLabs ||2010||[[2010_Top_Cyber_Security_Risks_Report|2010 Top Cyber Security Risks Report ]]||Yes||Industry report ||4.11 [[Cybercrime]], 5.7 [[Technology]]
|-
| IEEE/EastWest Institute ||2010-05-26||[http://www.ieee-rogucci.org/files/The%20ROGUCCI%20Report.pdf The Reliability of Global Undersea Communications Cable Infrastructure (The Rogucci Report) ]||No||Independent Report||3.3.3 [[Communications]], 4.7 [[Public-Private Cooperation]], 5.4 [[International Cooperation]]
|-
| Institute for Information Infrastructure Protection ||2003||[[Cyber_Security_Research_and_Development_Agenda|Cyber Security Research and Development Agenda ]]||Yes||Independent Report ||4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| Institute for Science and International Security ||2010-12-22||[http://isis-online.org/isis-reports/detail/did-stuxnet-take-out-1000-centrifuges-at-the-natanz-enrichment-plant/ Did Stuxnet Take Out 1,000 Centrifuges at the Natanz Enrichment Plant? Preliminary Assessment ]||No||Independent Report||3. [[Threats and Actors]], 3.3 [[Security Targets]], 5.7 [[Technology]]
|-
| International Instrument Users Association (WIB) ||2010-11-10||[http://www.isssource.com/wib/ WIB Security Standard Released ]||No||Industry Report||3.3 [[Security Targets]], 5.4 [[International Cooperation]]
|-
| International Telecommunications Union ||2012-02-10||[http://www.itu.int/ITU-D/cyb/cybersecurity/docs/itu-toolkit-cybercrime-legislation.pdf ITU Toolkit for Cybercrime Legislation ]||No||Independent Report||
|-
| James Clapper, Director of National Intelligence ||2011-02-10||[http://www.dni.gov/testimonies/20110210_testimony_clapper.pdf Worldwide Threat Assessment of the U.S. Intelligence Community (Testimony) ]||No||U.S. Government Report||3.1 [[The Threat and Skeptics]], 3.2 [[Actors and Incentives]]
|-
| Johnson, Eric M. ||2008||[[Managing_Information_Risk_and_the_Economics_of_Security|Managing Information Risk and the Economics of Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| Johnson, Vincent R. ||2005||[[Cybersecurity,_Identity_Theft,_and_the_Limits_of_Tort_Liability|Cybersecurity, Identity Theft, and the Limits of Tort Liability ]]||Yes||Journal Article ||4.9 [[Identity Management]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| Joint Workshop of the National Security Threats in Cyberspace and the National Strategy Forum ||2009-09-15||[http://nationalstrategy.com/Portals/0/National%20Security%20Threats%20in%20Cyberspace%20FINAL%2009-15-09.pdf National Security Threats in Cyberspace ]||No||Independent Report||
|-
| Joseph S. Nye||2010||[[Cyber_Power|Cyber Power]]||Yes||Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Journal of Strategic Studies ||2011-10-05||[http://www.tandfonline.com/doi/abs/10.1080/01402390.2011.6089393 Cyber War Will Not Take Place ]||No||Journal Article||
|-
| Kelly A. Gable||2010||[[Cyber-Apocalypse_Now|Cyber-Apocalypse Now - Securing the Internet Against Cyberterrorism and Using Universal Jurisdiction as a Deterrent]]||Yes||Journal Article||3.2.4 [[Terrorists]], 3.3 [[Security Targets]], 5.5 [[International Law (including Laws of War)]]
|-
| Kerr, Paul K. et al. CRS||2010-12-09||[http://www.fas.org/sgp/crs/natsec/R41524.pdf The Stuxnet Computer Worm: Harbinger of an Emerging Warfare Capability]||No||U.S. Government Report||3.3 [[Security Targets]], 4.12 [[Cyberwar]], 5.4 [[International Law (including Laws of War)]]
|-
| Kesan, Jay P. and Hayes, Carol M.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059446.pdf Thinking Through Active Defense in Cyberspace ]||No||Journal Article||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Kobayashi, Bruce H.||2005||[[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods|An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and other Public Security Goods]]||Yes||Journal Article||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]]
|-
| Kobayashi, Bruce H. ||2006||[[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods|An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]], 5.6 [[Deterrence]]
|-
| Korns, Stephen W. ||2009||[[Cyber_Operations|Cyber Operations ]]||Yes||Journal Article ||4.8 [[Attribution]], 4.12 [[Cyberwar]], 5.6 [[Deterrence]]
|-
| Kramer, Franklin D., et. al ||2009||[[Cyberpower_and_National_Security|Cyberpower and National Security ]]||Yes||Book ||1. [[Overview]]
|-
| Kundra, Vivek||2010-12-09||[http://www.cio.gov/documents/25-point-implementation-plan-to-reform-federal%20it.pdf 25 Point Implementation Plan to Reform Federal Information Technology Management]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Kundra, Vivek||2011-02-08||[http://www.cio.gov/documents/federal-cloud-computing-strategy.pdf Federal Cloud Computing Strategy]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Lan, Tang et al.||2010||[[Global_Cyber_Deterrence|Global Cyber Deterrence: Views from China, the U.S., Russia, India, and Norway]]||Yes||Independent Report||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.6 [[Deterrence]]
|-
| Lernard, Thomas M. ||2005||[[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches|An Economic Analysis of Notification Requirements for Data Security Breaches ]]||Yes||Independent Report ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Lernard, Thomas M. ||2006||[[Much_Ado_About_Notification|Much Ado About Notification ]]||Yes||Journal Article ||4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Lewis, James Andrews||2005||[[Cyber_Security_and_Regulation_in_the_United_States|Aux armes, citoyens: Cyber Security and Regulation in the United States]]||Yes||Journal Article||3.3.1 [[Public Critical Infrastructure, 3.3.2.2 [[Financial Institutions and Networks]], 3.3.2.3 [[Transportation]]
|-
| Libicki, Martin||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059490.pdf Pulling Punches in Cyberspace]||No||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Lukasik, Stephen J.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059438.pdf A Framework for Thinking about Cyber Conflict and Cyber Deterrence with Possible Declatory Policies for these Domain]||No||Journal Article||3.2 [[Actors and Incentives]], 5.4 [[International Cooperation]], 5.6 [[Deterrence]]
|-
| Massachusetts Institute of Technology (MIT) ||2011-12-05||[http://web.mit.edu/mitei/research/studies/the-electric-grid-2011.shtml The Future of the Electric Grid ]||No||Independent Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4. [[Issues]], 5.1 [[Regulation/Liability]]
|-
| McAfee ||2011-08-02||[http://www.mcafee.com/us/resources/white-papers/wp-operation-shady-rat.pdf Revealed: Operation Shady RAT: an Investigation Of Targeted Intrusions Into 70+ Global Companies, Governments, and Non-Profit Organizations During the Last 5 Years ]||No||Industry Report||3.2.1 [[States]], 3.3 [[Security Targets]], 4.13 [[Espionage]]
|-
| McAfee ||2012-02-01||[http://www.mcafee.com/us/resources/reports/rp-sda-cyber-security.pdf?cid=WBB048 Cyber-security: The Vexed Question of Global Rules: An Independent Report on Cyber-Preparedness Around the World ]||No||Industry Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| McAfee and Center for Strategic and International Studies (CSIS) ||2011-04-21||[http://www.mcafee.com/us/resources/reports/rp-critical-infrastructure-protection.pdf In the Dark: Crucial Industries Confront Cyberattacks ]||No||Industry Report||3. [[Threats and Actors]], 3.3.2 [[Private Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| McAfee and the Security Defense Agenda||2012-02-12||[http://www.mcafee.com/us/resources/reports/rp-sda-cyber-security.pdf Cyber-security: The Vexed Question of Global Rules: An Independent Report on Cyber-Preparedness Around the World]||No||Industry Report||1. [[Overview]], 4. [[Issues]], 5. [[Approaches]]
|-
| McAfee, Inc. ||2010||[[McAfee_Threats_Report|McAfee Threats Report ]]||Yes||Industry Report ||3.2.3 [[Hacktivists]], 3.2.5 [[Criminals and Criminal Organizations]], 4.11 [[Cybercrime]]
|-
| McDermott, Rose||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059442.pdf Decision Making Under Uncertainty]||No||Journal Article||4.4 [[Usability/Human Factors]], 4.5 [[Psychology and Politics]], 4.8 [[Attribution]]
|-
| Microsoft||2010-11||[http://cdn.globalfoundationservices.com/documents/InformationSecurityMangSysforMSCloudInfrastructure.pdf Information Security Management System for Microsoft Cloud Infrastructure ]||No||Industry Report||3.3.3.3 [[Cloud Computing]], 5.2 [[Private Efforts/Organizations]]
|-
| Mitre Corp (JASON Program Office) ||2010-11||[http://www.fas.org/irp/agency/dod/jason/cyber.pdf Science of Cyber-Security ]||No||Independent Report||1. [[Overview]], 4. [[Issues]]
|-
| Moore, Tyler||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059364.pdf Introducing the Economics of Cybersecurity: Principles and Policy Options]||No||Journal Article||4.2 [[Economics of Cybersecurity]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| Moore, Tyler ||2007||[[Examining_the_Impact_of_Website_Take-down_on_Phishing|Examining the Impact of Website Take-down on Phishing ]]||Yes||Independent Report ||4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]], 5.7 [[Technology]]
|-
| Moore, Tyler ||2008||[[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing|The Consequence of Non-Cooperation in the Fight Against Phishing ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]]
|-
| Moore, Tyler ||2009||[[The_Impact_of_Incentives_on_Notice_and_Take-down|The Impact of Incentives on Notice and Take-down ]]||Yes||Book ||4.2.2 [[Incentives]], 4.11 [[Cybercrime]], 5.4 [[International Cooperation]]
|-
| Moore, Tyler, et. al ||2009||[[The_Economics_of_Online_Crime|The Economics of Online Crime ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]]
|-
| Morgan, Patrick M. ||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059436.pdf Applicability of Traditional Deterrence Concepts and Theory to the Cyber Realm ]||No||Journal Article||4.12 [[Cyberwar]], 5.4 [[International Cooperation]], 5.6 [[Deterrence ]]
|-
| National Association of Secretaries of State ||2012-01-12||[http://www.nass.org/index.php?option=com_docman&task=doc_download&gid=1257 Developing State Solutions to Business Identity Theft: Assistance, Prevention and Detection Efforts by Secretary of State Offices ]||No||Independent Report||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| National Cyber Defense Initiative ||2009||[[National_Cyber_Defense_Financial_Services_Workshop_Report|National Cyber Defense Financial Services Workshop Report ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| National Cyber Security Alliance and Microsoft ||2011-05-13||[http://www.staysafeonline.org/sites/default/files/resource_documents/2011%20National%20K-12%20Study%20Final_0.pdf 2011 State of Cyberethics, Cybersafety and Cybersecurity Curriculum in the U.S. Survey ]||No||Industry Report||4.4 [[Usability/Human Factors]]
|-
| National Cyber Security Summit Task Force ||2004||[[Information_Security_Governance|Information Security Governance ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.2 [[Private Efforts/Organizations]], 5.3 [[government Organizations]]
|-
| National Infrastructure Advisory Council ||2004||[[Hardening_The_Internet|Hardening The Internet ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| National Initiative for Cybersecurity Education||2011-08-11||[http://csrc.nist.gov/nice/documents/nicestratplan/Draft_NICE-Strategic-Plan_Aug2011.pdf National Initiative for Cybersecurity Education Strategic Plan: Building a Digital Nation]||No||U.S. Government Report||1. [[Overview]], 5.3 [[Government Organizations]]
|-
| National Initiative for Cybersecurity Education (NICE) ||2011-11-21||[http://csrc.nist.gov/nice/framework/documents/NICE-Cybersecurity-Workforce-Framework-printable.pdf NICE Cybersecurity Workforce Framework ]||No||U.S. Government Report||4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| National Institute of Standards and Technology ||2006||[[SP_800-82:_Guide_to_Supervisory_Control_and_Data_Acquisition_(SCADA)_and_Industrial_Control_Systems_Security|SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], .2.1 [[Risk Management and Investment]], 5.2 [[Private Efforts/Organizations]]
|-
| National Institute of Standards and Technology (NIST) ||2010-09-02||[http://www.nist.gov/public_affairs/releases/nist-finalizes-initial-set-of-smart-grid-cyber-security-guidelines.cfm NIST Finalizes Initial Set of Smart Grid Cyber Security Guidelines ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| National Research Council ||2010-09-21||[http://www.nap.edu/catalog.php?record_id=12998 Toward Better Usability, Security, and Privacy of Information Technology: Report of a Workshop ]||No||Independent Report||4.2 [[Economics of Cybersecurity]], 4.4 [[Usability/Human Factors]], 4.10 [[Privacy]]
|-
| National Research Council ||2010-10-05||[http://www.nap.edu/catalog.php?record_id=12997#description Proceedings of a Workshop on Deterring Cyberattacks: Informing Strategies and Developing Options for U.S. Policy ]||No||Independent Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| National Research Council ||1999||[[Trust_in_Cyberspace|Trust in Cyberspace ]]||Yes||Independent Report ||3.3.3.2 [[Public Data Networks]], 4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]]
|-
| National Research Council ||2007||[[Toward_a_Safer_and_More_Secure_Cyberspace|Toward a Safer and More Secure Cyberspace ]]||Yes||Independent Report ||1. [[Overview]], 4.8 [[Attribution]], 5.6 [[Deterrence]]
|-
| National Research Council, Committee for Advancing Software-Intensive Systems Producibility ||2010-10-20||[http://www.nap.edu/catalog.php?record_id=12979 Critical Code: Software Producibility for Defense ]||No||Independent Reprot ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| National Science and Technology Council ||2006||[[Federal_Plan_for_Cyber_Security_and_Information_Assurance_Research_and_Development|Federal Plan for Cyber Security and Information Assurance Research and Development ]]||Yes||U.S. Government Report ||4.1 [[Metrics]], 4.7 [[Attribution]], 4.8 [[Public-Private Cooperation]]
|-
| National Science Foundation||2011-08-11||[http://www.livescience.com/15423-forefront-cyber-security-research-nsf-bts.html At the Forefront of Cyber Security Research ]||No||U.S. Government Report||5.7 [[Technology]]
|-
| National Science Foundation||2012-01-17||[http://www.nsf.gov/awardsearch/showAward.do?AwardNumber=1127185 Information Security Risk Taking ]||No||U.S. Government Report||4.1 [[Metrics]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| National Security Cyberspace Institute||2012-07-11||[http://www.nsci-va.org/WhitePapers/2011-07-22-Cyber Analogies Whitepaper-K McKee.pdf A Review of Frequently Used Cyber Analogies ]||No||Independent Report||
|-
| National Security Initiative ||2010-10-18||[http://www.americansecuritychallenge.com/ American Security Challenge ]||No||Independent Report||
|-
| Networking and Information Technology Research and Development ||2009||[[National_Cyber_Leap_Year_Summit_2009,_Co-Chairs%27_Report|National Cyber Leap Year Summit 2009, Co-Chairs' Report ]]||Yes||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 4.9 [[Identity Management]], 5.7 [[Technology]]
|-
| NIST ||2011-09-01||[http://www.nist.gov/customcf/get_pdf.cfm?pub_id=909505 Cloud Computing Reference Architecture ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]]
|-
| NIST ||2011-12-01||[http://www.nist.gov/itl/cloud/upload/SP_500_293_volumeII.pdf U.S. Government Cloud Computing Technology Roadmap, Release 1.0 (Draft), Volume II Useful Information for Cloud Adopters ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| NIST ||2012-02-17||[http://www.nist.gov/nstic/2012-nstic-governance-recs.pdf Recommendations for Establishing an Identity Ecosystem Governance Structure for the National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| Nojeim, Gregory T.||2009||[[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace|Cybersecurity: Preventing Terrorist Attacks and Protecting Privacy in Cyberspace]]||Yes||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| North American Electric Reliability Corp. (NERC) ||2011-01-26||[http://www.wired.com/images_blogs/threatlevel/2011/02/DoE-IG-Report-on-Grid-Security.pdf Federal Energy Regulatory Commission's Monitoring of Power Grid Cyber Security ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| NSTC||2011-12||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/fed_cybersecurity_rd_strategic_plan_2011.pdf Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program]||No||U.S. Government Report||5.3 [[Government Organizations]]
|-
| Nye, Joseph ||2010||[[Cyber_Power|Cyber Power ]]||Yes||Book ||4.12 [[Cyberwar]], 4.13 [[Espionage]], 5.5 [[International Law (including Laws of War)]]
|-
| OECD||2009||[[Cybersecurity_and_Economic_Incentives|Cybersecurity and Economic Incentives]]||Yes||Non-U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]]
|-
| OECD||2009||[[The_Market_Consequences_of_Cybersecurity|The Market Consequences of Cybersecurity]]||Yes||Non-U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]]
|-
| Office of the National Counterintelligence Executive ||2011-11-03||[http://www.ncix.gov/publications/reports/fecie_all/Foreign_Economic_Collection_2011.pdf Foreign Spies Stealing US Economic Secrets in Cyberspace ]||No||U.S. Government Report||3. [[Threats and Actors]], 3.2 [[Actors and Incentives]], 4.13 [[Espionage]]
|-
| Organisation for Economic Co-operation and Development (OECD) ||2010-11-12||[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.165.2211&rep=rep1&type=pdf The Role of Internet Service Providers in Botnet Mitigation: an Empirical Analysis Bases on Spam Data ]||No||Independent Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Organization for Economic Co-operation and Development (OECD) ||2012-01-10||[http://www.oecd-ilibrary.org/docserver/download/fulltext/5k9h2q8v9bln.pdf?expires=1330527950&id=id&accname=guest&checksum=F4470043AC638BE19D5131C3D5CE5EA4 ICT Applications for the Smart Grid: Opportunities and Policy Implications ]||No||Independent Report ||
|-
| PCAST||2010-12||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-nitrd-report-2010.pdf Designing a Digital Future: Federally Funded Research and Development in Networking and Information Technology]||No||U.S. Government Report||4.3 [[Supply Chain Issues]], 4.10 [[Privacy]], 5.3 [[Government Organizations]]
|-
| PCAST||2011-06||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-advanced-manufacturing-june2011.pdf Report to the President on Ensuring American Leadership in Advanced Manufacturing]||No||U.S. Government Report||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| Perkins, Earl||2009||[[Evolving_Cybersecurity_Issues_in_the_Utility_Industry|Evolving Cybersecurity Issues in the Utility Industry]]||Yes||Independent Report||3.3.2 [[Private Critical Infrastructure]], 3.3.2.4 [[Water, Sewer, etc.]], 4.7 [[Public-Private Cooperation]]
|-
| Pew Research Center’s Internet & American Life Project ||2010-06-11||[http://pewinternet.org/Reports/2010/The-future-of-cloud-computing.aspx The future of cloud computing ]||No||Independent Report||3.3.3.3 [[Cloud Computing]]
|-
| Powell, Benjamin ||2005||[[Is_Cybersecurity_a_Public_Good|Is Cybersecurity a Public Good ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.2.5 [[Market Failure]], 5.1 [[Regulation/Liability]]
|-
| President's Commission on Critical Infrastructure Protection ||1997||[[Critical_Foundations|Critical Foundations ]]||Yes||U.S. Government Report ||3.3.2 [[Private Critical Infrastructure]], 3.3.3 [[Communications]], 5.3 [[Government Organizations]]
|-
| President's Information Technology Advisory Council ||2005||[[Cyber_Security:_A_Crisis_of_Prioritization|Cyber Security: A Crisis of Prioritization ]]||Yes||U.S. Government Report ||4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Project on National Security Reform (PNSR) ||2010-11||[http://www.pnsr.org/data/images/pnsr_the_power_of_people_report.pdf The Power of People: Building an Integrated National Security Professional System for the 21st Century ]||No||U.S. Government Report||4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| Quadrennial Defense Review ||2010-07-30||[http://www.usip.org/quadrennial-defense-review-independent-panel-/view-the-report The QDR in Perspective: Meeting AmericaÅfs National Security Needs In the 21st Century (QDR Final Report) ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| RAND||2011-12-21||[http://www.rand.org/content/dam/rand/pubs/occasional_papers/2011/RAND_OP342.pdf A Cyberworm that Knows No Boundaries ]||No||Independent Report||3. [[Threats and Actors]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Rattray, Gregory and Healey, Jason||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059437.pdf Categorizing and Understanding Offensive Cyber Capabilities and Their Use ]||No||Journal Article||3.1 [[The Threat and Skeptics]], 3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| Rollins, John and Wilson, Clay||2007||[[Terrorist_Capabilities_for_Cyberattack|Terrorist Capabilities for Cyberattack]]||Yes||U.S. Government Report||3.2.4 [[Terrorists]], 3.3 [[Security Targets]], 4.2.2 [[Incentives]]
|-
| Romanosky et al. ||2008||[[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft|Do Data Breach Disclosure Laws Reduce Identity Theft ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Rosenzweig, Paul||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059443.pdf The Organization of the United States Government and Private Sector for Achieving Cyber Deterrence ]||No||Journal Article||4.3 [[Supply Chain Issues]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Rotenberg et. al. ||2010||[[The_Cyber_War_Threat_Has_Been_Grossly_Exaggerated|The Cyber War Threat Has Been Grossly Exaggerated ]]||Yes||Article||3.1 [[The Threat and Skeptics]], 3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Rue, Rachel and Pfleeger, Shari Lawrence||2009||[[Making_the_Best_Use_of_Cybersecurity_Economic_Models|Making the Best Use of Cybersecurity Economic Models]]||Yes||Journal Article||4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]]
|-
| Santos, Joost R., et. al||2007||[[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies|A Framework for Linking Cybersecurity Metrics to the Modeling of Macroeconomic Interdependencies]]||Yes||Journal Article||3.3.2 [[Private Critical Infrastructure]], 4.1 [[Metrics]]
|-
| Schmitt Michael N ||2002||[[Wired_Warfare| Wired warfare: Computer network attack and jus in bello]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt Michael N ||2004||[[Direct_Participation_in_Hostilities|Direct Participation in Hostilities and 21st Century Armed Conflict]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N. ||1999||[[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law|Computer Network Attack and the Use of Force in International Law ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N. ||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059439.pdf Cyber Operations in International Law: The Use of Force, Collective Security, Self-Defense, and Armed Conflicts]||No||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N., et. al ||2004||[[Computers_and_War|Computers and War ]]||Yes||Independent Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schneidewind, Norman||2010||[[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks|Metrics for Mitigating Cybersecurity Threats to Networks]]||Yes||Journal Article||4.1 [[Metrics]]
|-
| Schneier, Bruce ||2003||[[Beyond_Fear|Beyond Fear ]]||Yes||Book ||3.2 [[Actors and Incentives]], 4.5 [[Psychology and Politics]], 5.6 [[Deterrence]]
|-
| Schneier, Bruce ||2008||[[Schneier_on_Security|Schneier on Security ]]||Yes||Book ||3.2 [[Actors and Incentives]], 4.4 [[Usability/Human Factors]], 5.1 [[Regulation/Liability]]
|-
| Schwartz, Paul ||2007||[[Notification_of_Data_Security_Breaches|Notification of Data Security Breaches ]]||Yes||Journal Article ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Secretary of the Air Force ||2011-07-27||[http://www.e-publishing.af.mil/shared/media/epubs/AFI51-402.pdf Legal Reviews of Weapons and Cyber Capabilities ]||No||U.S. Government Report ||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.5 [[International Law (including Laws of War)]]
|-
| Shackelford, Scott J.||2010||[[Estonia_Three_Years_Later|Estonia Three Years Later]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Shah, Shashi K.||2004||[[The_Evolving_Landscape_of_Maritime_Cybersecurity|The Evolving Landscape of Maritime Cybersecurity]]||Yes||Journal Article||3.3.1 [[Public Critical Infrastructure]], 3.3.2.3 [[Transportation]]
|-
| Sklerov, Matthew J. ||2009||[[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks|Solving the Dilemma of State Responses to Cyberattacks ]]||Yes||Journal Article ||3.2.1 [[States]], 4.8 [[Attribution]], 5.5 [[International Law (including Laws of War)]]
|-
| Sofaer, Abraham; Clark, David; and Diffie, Whitfield||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059440.pdf Cyber Security and International Cooperation ]||No||Journal Article||5.1 [[Regulation/Liability]], 5.4 [[International Cooperation]], 5.5 [[International Law (including Laws of War)]]
|-
| Software and Information Industry Association (SAII) ||2011-07-26||[http://www.siia.net/index.php?option=com_docman&task=doc_download&gid=3040&Itemid=318 Guide to Cloud Computing for Policy Makers ]||No||Independent Report ||3.3.3.3 [[Cloud Computing]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| Stohl, Michael ||2006||[[Cyber_Terrorism|Cyber Terrorism ]]||Yes||Journal Article ||3.2.3 [[Hacktivists]], 3.2.4 [[Terrorists]], 4.5 [[Psychology and Politics]]
|-
| Stuart Madnick et al.||2009||[[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security|Experiences and Challenges with Using CERT Data to Analyze International Cyber Security]]||Yes||Journal Article||4.6 [[Information Sharing/Disclosure]], 5.4 [[International Cooperation]]
|-
| Swire, Peter P. ||2004||[[A_Model_for_When_Disclosure_Helps_Security|A Model for When Disclosure Helps Security ]]||Yes||Journal Article ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Swire, Peter P. ||2006||[[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons|A Theory of Disclosure for Security and Competitive Reasons ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Symantec||2011-10-24||[http://www.symantec.com/connect/w32_duqu_precursor_next_stuxnet W32.Duqu: The Precursor to the Next Stuxnet ]||No||Industry Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Symantec Corporation ||2010||[[Symantec_Global_Internet_Security_Threat_Report|Symantec Global Internet Security Threat Report ]]||Yes||Industry Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| Telang, Rahul ||2007||[[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors|Impact of Software Vulnerability Announcements on the Market Value of Software Vendors ]]||Yes||Journal Article ||4.1 [[Metrics]], 4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]]
|-
| Theohary, Catherine A. and Rollins, John||2010||[[Cybersecurity:_Current_Legislation,_Executive_Branch_Initiatives,_and_Options_for_Congress|Cybersecurity: Current Legislation, Executive Branch Initiatives, and Options for Congress]]||Yes||U.S. Government Report||4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Thom, Maxie ||2006||[[Information_Warfare_Arms_Control| Information Warfare Arms Control: Risks and Costs]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5. [[Approaches]]
|-
| Thomas, Rob ||2006||[[The_Underground_Economy|The Underground Economy ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.2.2 [[Financial Institutions and Networks]], 4.11 [[Cybercrime]]
|-
| Threat Level Blog (Wired) ||2010-12-27||[http://www.wired.com/threatlevel/2010/12/a-four-day-dive-into-stuxnets-heart/ A Four-Day Dive Into Stuxnet’s Heart ]||No||Independent Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Todd, Graham H. ||2009||[[Armed_Attack_in_Cyberspace|Armed Attack in Cyberspace ]]||Yes||Journal Article ||3.2.1 [[States]], 4.8 [[Attribution]], 5.5 [[International Law (including Laws of War)]]
|-
| Trend Micro Incorporated ||2010||[[Trend_Micro_Annual_Report|Trend Micro Annual Report ]]||Yes||Industry Report ||4.11 [[Cybercrime]]
|-
| U.S. Air Force ||2010-07-15||[http://www.e-publishing.af.mil/shared/media/epubs/afdd3-12.pdf Cyberspace Operations: Air Force Doctrine Document 3-12 ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. Army War College ||2011-05-09||[http://www.strategicstudiesinstitute.army.mil/pubs/display.cfm?pubid=10670 Cyber Infrastructure Protection ]||No||U.S. Government Report||
|-
| U.S. Army War College, Strategy Research Project ||2011-03-24||[http://www.dtic.mil/dtic/tr/fulltext/u2/a552990.pdf China’s Cyber Power and America’s National Security ]||No||U.S. Government Report||3.2.1 [[States]], 4.13 [[Espionage]], 5.3 [[Government Organizations]]
|-
| U.S. Department of Energy, Infrastructure Security and Energy Restoration ||2007-01-01||[http://www.oe.netl.doe.gov/docs/prepare/21stepsbooklet.pdf 21 Steps to Improve Cyber Security of SCADA Networks ]||No||U.S. Government Report||3.3 [[Security Targets]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. Deputy Secretary of Defense, William J. Lynn (Foreign Affairs) ||2010-009||[http://www.foreignaffairs.com/articles/66552/william-j-lynn-iii/defending-a-new-domain Defending a New Domain ]||No||U.S. Government Report ||
|-
| U.S. House Committee on Appropriations (closed/classified) (Subcommittee on Energy and Power)||2011-03-31||[http://www.dhs.gov/ynews/testimony/testimony_1301595025263.shtm Budget Hearing - National Protection and Programs Directorate, Cybersecurity and Infrastructure Protection Programs ]||No||U.S. Government Hearing||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-02-11||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=90d8a16a-23b7-4b9c-a732-cb10ab20e579&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=2&YearDisplay=2011 What Should the Department of Defense’s Role in Cyber Be?]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-03-16||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=79ce7b4c-f88b-40bf-9540-efdb3a2d26b2&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=3&YearDisplay=2011 2012 Budget Request from U.S. Cyber Command]||No||U.S. Government Hearing||3.3.1.2 [[Military Networks (.mil)]], 4.2 [[Economics of Cybersecurity]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-11-03||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=42c170fb-8e0c-453a-81a2-f4ee3fa89283&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=11&YearDisplay=2011 Institutionalizing Irregular Warfare Capabilities]||No||U.S. Government Hearing||4.12 [[Cyberwar]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2012-03-20||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=92823c77-38f0-4c20-a3ee-36729e8e19a3&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=3&YearDisplay=2012 Fiscal 2013 Defense Authorization: IT and Cyber Operations]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce||2011-05-31||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8639 Protecting the Electric Grid: the Grid Reliability and Infrastructure Defense Act]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Commerce, Manufacturing, and Trade)||2011-06-02||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8653 Sony and Epsilon: Lessons for Data Security Legislation]||No||U.S. Government Hearing||4.9 [[Identity Management]], 5.1 [[Regulation/Liability]], 5.2 [[Private Efforts/Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Commerce,Trade and Manufacturing)||2011-06-15||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8693 Discussion Draft of H.R. ___, a bill to require greater protection for sensitive consumer data and timely notification in case of breach]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Communications and Technology)||2012-03-07||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9342 Cybersecurity:Networks The Pivotal Role of Communications]||No||U.S. Government Hearing||3.3.3 [[Communications]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Communications and Technology)||2012-03-28||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9397 Cybersecurity:Threats to Communications Networks and Public-Sector Responses]||No||U.S. Government Hearing||3.3.3 [[Communications]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2011-07-26||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8824 Cybersecurity: Infrastructure An Overview of Risks to Critical]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2012-02-28||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9318 Critical Infrastructure Cybersecurity: Assessments of Smart Grid Security]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2012-03-27||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9393 IT Supply Chain Security: Review of Government and Industry Efforts]||No||U.S. Government Hearing||4.3 [[Supply Chain Issues]]
|-
| U.S. House Committee on Financial Services (field hearing in Hoover, AL)||2011-06-29||[http://financialservices.house.gov/Calendar/EventSingle.aspx?EventID=246611 Field Hearing: Hacked Off: Helping Law Enforcement Protect Private Financial Information]||No||U.S. Government Hearing||3.3.2.2 [[Financial Institutions and Networks]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Financial Services (Subcommittee on Financial Institutions and Consumer Credit)||2011-09-14||[http://financialservices.house.gov/Calendar/EventSingle.aspx?EventID=258792 Combating Cybercriminals]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 3.3.2.2 [[Financial Institutions and Networks]], 5.7 [[Government Organizations]]
|-
| U.S. House Committee on Foreign Affairs (Subcommittee on Oversight and Investigations)||2011-04-15||[http://foreignaffairs.house.gov/hearing_notice.asp?id=1279 Communist Chinese Cyber-Attacks, Cyber-Espionage and Theft of American Technology]||No||U.S. Government Hearing||3.2.1 [[States]], 4.12 [[Cyberwar]], 4.13 [[Espionage]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies and Counterterrorism and Intelligence)||2012-04-19||[http://homeland.house.gov/hearing/subcommittee-hearing-dhs-and-doe-national-labs-finding-efficiencies-and-optimizing-outputs The DHS and DOE National Labs: Finding Efficiencies and Optimizing Outputs in Homeland Security Research and Development]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies and Counterterrorism and Intelligence)||2012-04-26||[http://homeland.house.gov/hearing/joint-subcommittee-hearing-iranian-cyber-threat-us-homeland Iranian Cyber Threat to U.S. Homeland]||No||U.S. Government Hearing||3.2.1 [[States]], 3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-02-11||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9Cpreventing-chemical-terrorism-building-foundation-security-our-nation Preventing Chemical Terrorism: Building a Foundation of Security at Our Nation’s Chemical Facilities]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-03-16||[http://homeland.house.gov/hearing/subcommittee-hearing-examining-cyber-threat-critical-infrastructure-and-american-economy Examining the Cyber Threat to Critical Infrastructure and the American Economy]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.3 [[Security Targets]], 4.2 [[Economics of Cybersecurity]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-04-15||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9C-dhs-cybersecurity-mission-promoting-innovation-and-securing-critical DHS Cybersecurity Mission: Promoting Innovation and Securing Critical Infrastructure]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-06-24||[http://homeland.house.gov/hearing/subcommittee-hearing-examining-homeland-security-impact-obamaadministrations-cybersecurity Examining the Homeland Security Impact of the Obama Administration’s Cybersecurity Proposal]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-12-06||[http://homeland.house.gov/hearing/subcommittee-hearing-hearing-draft-legislative-proposal-cybersecurity Hearing on Draft Legislative Proposal on Cybersecurity]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2012-02-01||[http://homeland.house.gov/markup/subcommittee-markup-hr-3674 Consideration and Markup of H.R. 3674]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technology)||2011-10-06||[http://homeland.house.gov/hearing/cloud-computing-what-are-security-implications Cloud Computing: What are the Security Implications?]||No||U.S. Government Hearing||3.3.3.3 [[Cloud Computing]], 4.13 [[Espionage]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies)||2011-05-26||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9Cunlocking-safety-act%E2%80%99s-potential-promote-technology-and-combat Unlocking the SAFETY Act’s Potential to Promote Technology and Combat Terrorism ]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Oversight, Investigations and Management)||2012-04-24||[http://homeland.house.gov/hearing/subcommittee-hearing-america-under-cyber-attack-why-urgent-action-needed America is Under Cyber Attack: Why Urgent Action is Needed]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.2 [[Actors and Incentives]]
|-
| U.S. House Committee on Oversight and Government Reform||2011-07-07||[http://oversight.house.gov/hearing/cybersecurity-assessing-the-nations-ability-to-address-the-growing-cyber-threat/ Cybersecurity: Assessing the Nation’s Ability to Address the Growing Cyber Threat]||No||U.S. Government Hearing||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Oversight and Government Reform (Subcommittee on National Security, Homeland Defense and Foreign Operations)||2011-05-25||[http://oversight.house.gov/hearing/cybersecurity-assessing-the-immediate-threat-to-the-united-states/ Cybersecurity: Assessing the Immediate Threat to the United States]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| U.S. House Committee on Science, Space and Technology||2011-07-21||[http://science.house.gov/markup/full-committee-%E2%80%93-markup Markup on H.R. 2096, Cybersecurity Enhancement Act of 2011]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space and Technology (Subcommittee on Research and Science Education)||2011-05-25||[http://science.house.gov/hearing/subcommittee-research-and-science-education-subcommittee-technology-and-innovation-%E2%80%93-joint Protecting Information in the Digital Age: Federal Cybersecurity Research and Development Efforts]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space, and Technology (Subcommittee on Investigations and Oversight)||2012-02-29||[http://science.house.gov/hearing/subcommittee-investigations-and-oversight-hearing-nasa-cybersecurity-examination-agency%E2%80%99s NASA Cybersecurity: An Examination of the Agency’s Information Security]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space, and Technology (Subcommittee on Technology and Innovation)||2011-09-21||[http://science.house.gov/hearing/technology-and-innovation-subcommittee-hearing-cloud-computing The Cloud Computing Outlook]||No||U.S. Government Hearing||3.3.3.3 [[Cloud Computing]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Small Business (Subcommittee on Healthcare and Technology)||2011-12-01||[http://smallbusiness.house.gov/Calendar/EventSingle.aspx?EventID=270278 Cyber Security: Protecting Your Small Business]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on the Judiciary||2011-11-16||[http://judiciary.house.gov/hearings/hear_11162011.html Combating Online Piracy (H.R. 3261, Stop the Online Piracy Act)]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on the Judiciary (Subcommittee on Crime, Terrorism and Homeland Security)||2011-11-15||[http://judiciary.house.gov/hearings/hear_11152011.html Cybersecurity: Protecting America’s New Frontier]||No||U.S. Government Hearing||4.10 [[Privacy]], 4.11 [[Cybercrime]]
|-
| U.S. House Committee on the Judiciary (Subcommittee on Intellectual Property, Competition and the Internet)||2011-05-25||[http://judiciary.house.gov/hearings/hear_05252011.html Cybersecurity: Problems Innovative Solutions to Challenging]||No||U.S. Government Hearing||4.7 [[Public-Private Cooperation]], 4.11 [[Cybercrime]], 5.2 [[Private Efforts/Organizations]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-02-10||[https://intelligence.house.gov/hearing/full-committee-world-wide-threats-hearing World Wide Threats]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-10-04||[https://intelligence.house.gov/hearing/cyber-threats-and-ongoing-efforts-protect-nation Cyber Threats and Ongoing Efforts to Protect the Nation]||No||U.S. Government Hearing||4.7 [[Public-Private Cooperation]], 4.13.2 [[Industrial|Industrial Espionage]], 5.4 [[International Cooperation]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-12-01||[https://intelligence.house.gov/markup/mark-hr-xxxx-%E2%80%9Ccyber-intelligence-sharing-and-protection-act-2011%E2%80%9D Markup: Draft Bill: Cyber Intelligence Sharing and Protection Act of 2011]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Navy ||2010-06-17||[http://www.doncio.navy.mil/PolicyView.aspx?ID=1804 DON (Department of the Navy) Cybersecurity/Information Assurance Workforce Management, Oversight and Compliance ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Armed Services||2012-03-27||[http://armed-services.senate.gov/e_witnesslist.cfm?id=5283 To receive testimony on U.S. Strategic Command and U.S. Cyber Command in review of the Defense Authorization Request for Fiscal Year 2013 and the Future Years Defense Program.]||No||U.S. Government Hearing||3.2.1 [[States]], 4.2 [[Economics of Cybersecurity]], 4.12 [[Cyberwar]]
|-
| U.S. Senate Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-05-03||[http://www.armed-services.senate.gov/Transcripts/2011/05%20May/11-31%20-%205-3-11.pdf To receive testimony on the health and status of the defense industrial base and its science and technology-related elements]||No||U.S. Government Hearing||3.3.1.2 [[Military Networks (.mil)]], 4.3 [[Supply Chain Issues]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2012-03-20||[http://www.armed-services.senate.gov/Transcripts/2012/03%20March/12-14%20-%203-20-12.pdf To receive testimony on cybersecurity research and development in review of the Defense Authorization Request for Fiscal Year 2013 and the Future Years Defense Program]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Banking, Housing and Urban Affairs||2011-06-21||[http://banking.senate.gov/public/index.cfm?FuseAction=Hearings.Hearing&Hearing_ID=87487cb2-4710-4c09-a1b0-a9e12cda88f1 Cybersecurity and Data Protection in the Financial Sector]||No||U.S. Government Hearing||3.3.2.2 [[Financial Institutions and Networks]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Commerce, Science and Transportation||2011-06-29||[http://commerce.senate.gov/public/index.cfm?p=Hearings&ContentRecord_id=e2c2a2ca-91d6-48a2-b5ea-b5c4104bdb97&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=b06c39af-e033-4cba-9221-de668ca1978a&MonthDisplay=6&YearDisplay=2011 Privacy and Data Security: Protecting Consumers in the Modern World]||No||U.S. Government Hearing||4.9 [[Identity Management]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Energy and Natural Resources||2011-03-15||[ Cybersecurity and Critical Electric Infrastructure (closed)]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]]
|-
| U.S. Senate Committee on Energy and Natural Resources||2011-05-05||[http://www.energy.senate.gov/public/index.cfm/hearings-and-business-meetings?ID=929c1441-da25-c99d-3e27-af20c29e3b4b Cybersecurity of the Bulk-Power System and Electric Infrastructure]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-02-17||[http://www.hsgac.senate.gov/hearings/the-homeland-security-departments-budget-submission-for-fiscal-year-2012 Homeland Security Department’s Budget Submission for Fiscal Year 2012]||No||U.S. Government Hearing||
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-03-10||[http://www.hsgac.senate.gov/hearings/information-sharing-in-the-era-of-wikileaks-balancing-security-and-collaboration Information Sharing in the Era of WikiLeaks: Balancing Security and Collaboration]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-05-23||[http://www.hsgac.senate.gov/hearings/protecting-cyberspace-assessing-the-white-house-proposal Protecting Cyberspace: Assessing the White House Proposal]||No||U.S. Government Hearing||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2012-02-16||[http://www.hsgac.senate.gov/hearings/securing-americas-future-the-cybersecurity-act-of-2012 Securing America’s Future: The Cybersecurity Act of 2012]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary||2011-03-30||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da1697f72 Oversight of the Federal Bureau of Investigation]||No||U.S. Government Hearing||3. [[Threats and Actors]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Judiciary||2011-09-07||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=3d9031b47812de2592c3baeba629084b Cybercrime: Updating the Computer Fraud and Abuse Act to Protect Cyberspace and Combat Emerging Threats]||No||U.S. Government Hearing||3.11 [[Cybercrime]], 4.13.2 [[Industrial|Industrial Espionage]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary||2012-03-13||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=8b30fa475a5089d793576cd947089793 The Freedom of Information Act: Safeguarding Critical Infrastructure Information and the Public’s Right to Know]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary (Subcommittee on Crime and Terrorism)||2011-04-12||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da16a9959 Cyber Security: Responding to the Threat of Cyber Crime and Terrorism]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary (Subcommittee on Crime and Terrorism)||2011-06-21||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da16e1bbe Cybersecurity: Evaluating the Administration’s Proposals]||No||U.S. Government Hearing||1. [[Overview]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Small Business and Entrepreneurship||2011-07-25||[http://www.sbc.senate.gov/public/index.cfm?p=Hearings&ContentRecord_id=6b4d51de-dd67-434b-869f-a717b315e6c2&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=43eb5e02-e987-4077-b9a7-1e5a9cf28964&MonthDisplay=7&YearDisplay=2011 Role of Small Business in Strengthening Cybersecurity Efforts in the United States]||No||U.S. Government Hearing||4.2.2 [[Incentives]], 4.7 [[public-Private Cooperation]]
|-
| United States Secret Service ||2004||[[Insider_Threat_Study|Insider Threat Study ]]||Yes||U.S. Government Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2.2 [[Incentives]], 4.4 [[Usability/Human Factors]]
|-
| University of Southern California (USC) Information Sciences Institute, University of California Berkeley (UCB), McAfee Research ||2011-01-13||[http://www.isi.edu/deter/news/news.php?story=20 Design of the DETER Security Testbed ]||No||Independent Report||5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| van Eeten, Michael and Bauer, Johannes M.||2009||[[Emerging_Threats_to_Internet_Security|Emerging Threats to Internet Security: Incentives, Externalities and Policy Implications]]||Yes||Journal Article||3.3.1.1 [[Government Networks (.gov)]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| van Eeten, Michel J. G. ||2008||[[Economics_of_Malware|Economics of Malware ]]||Yes||Non-U.S. Government Report ||4.2 [[Economics of Cybersecurity]]
|-
| Varian, Hal ||2000||[[Managing_Online_Security_Risks|Managing Online Security Risks ]]||Yes||Article ||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]]
|-
| Varian, Hal ||2004||[[System_Reliability_and_Free_Riding|System Reliability and Free Riding ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]]
|-
| Vatis, Michael A.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059441.pdf The Council of Europe Convention on Cybercrime]||No||Journal Article||4.11 [[Cybercrime]], 5.5 [[International Law (including Laws of War)]], 5.6 [[Deterrence]]
|-
| Verizon ||2010||[[2010_Data_Breach_Investigations_Report|2010 Data Breach Investigations Report ]]||Yes||Industry Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.11 [[Cybercrime]], 5.2 [[Private Efforts/Organizations]]
|-
| Watts, Sean ||2010||[[Combatant_Status_and_Computer_Network_Attack|Combatant Status and Computer Network Attack ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| White House||2009||[http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf Cyberspace Policy Review: Assuring a Trusted and Resilient Information and Communications Infrastructure]||No||U.S. Government Report||1. [[Overview]], 4.7 [[Public-Private Cooperation]]
|-
| White House||2011-04||[http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf National Strategy for Trusted Identities in Cyberspace: Enhancing Online Choice, Efficiency, Security, and Privacy]||No||U.S. Government Report||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]]
|-
| White House||2011-05||[http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf International Strategy for Cyberspace: Prosperity, Security, and Openness in a Networked World]||No||U.S. Government Report||1. [[Overview]]
|-
| White House||2012-01||[http://www.whitehouse.gov/sites/default/files/national_strategy_for_global_supply_chain_security.pdf National Strategy for Global Supply Chain Security]||No||U.S. Government Report||4.3 [[Supply Chain Issues]]
|-
| White House||2012-02||[http://www.whitehouse.gov/sites/default/files/privacy-final.pdf Consumer Data Privacy in a Networked World: A Framework for Protecting Privacy and Promoting Innovation in the Global Digital Economy]||No||U.S. Government Report||4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| White House ||2010-12-16||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-nitrd-report-2010.pdf Designing A Digital Future: Federally Funded Research And Development In Networking And Information Technology ]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 4. [[Issues]], 5. [[Approaches]]
|-
| White House ||2011-02-13||[http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf Federal Cloud Computing Strategy ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House ||2011-04-15||[http://www.whitehouse.gov/the-press-office/2011/04/15/administration-releases-strategy-protect-online-consumers-and-support-in Administration Releases Strategy to Protect Online Consumers and Support Innovation and Fact Sheet on National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House ||2011-04-15||[http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House ||2003||[[The_National_Strategy_to_Secure_Cyberspace|The National Strategy to Secure Cyberspace ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| White House ||2009||[[Cyberspace_Policy_Review|Cyberspace Policy Review ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.2 [[Private Efforts/Organizations]], 5.3 [[Government Organizations]]
|-
| White House ||2010||[[The_Comprehensive_National_Cybersecurity_Initiative|The Comprehensive National Cybersecurity Initiative ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.2 [[Private Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| White House (Office of Science & Technology Policy) ||2010-12-06||[http://www.whitehouse.gov/blog/2010/12/06/partnership-cybersecurity-innovation Partnership for Cybersecurity Innovation ]||No||U.S. Government Report||3.3.2.2 [[Financial Institutions and Networks]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| White House/Office of Management and Budget (OMB) ||2011-12-08||[http://www.cio.gov/fedrampmemo.pdf Security Authorization of Information Systems in Cloud Computing Environments (FedRAMP) ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2009-05-29||[http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf Cyberspace Policy Review: Assuring a Trusted and Resilient Communications Infrastructure ]||No||U.S. Government Report ||4. [[Issues]], 5. [[Approaches]]
|-
| White House/OMB||2010-03-02||[http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative (CNCI) ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2010-06-25||[http://www.dhs.gov/xlibrary/assets/ns_tic.pdf The National Strategy for Trusted Identities in Cyberspace: Creating Options for Enhanced Online Security and Privacy ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2010-07-06||[http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-28.pdf Clarifying Cybersecurity Responsibilities ]||No||U.S. Government Report ||5.3 [[Government Organizations]]
|-
| White House/OMB||2010-12-09||[http://www.cio.gov/documents/25-Point-Implementation-Plan-to-Reform-Federal%20IT.pdf 25 Point Implementation Plan to Reform Federal Information Technology Management ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2011-02-13||[http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf Federal Cloud Computing Strategy ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2011-05-12||[http://www.whitehouse.gov/the-press-office/2011/05/12/fact-sheet-cybersecurity-legislative-proposal Cybersecurity Legislative Proposal (Fact Sheet) ]||No||U.S. Government Report ||4. [[Issues]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-05-16||[http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf International Strategy for Cyberspace ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| White House/OMB||2011-09-14||[http://www.whitehouse.gov/sites/default/files/omb/memoranda/2011/m11-33.pdf FY 2012 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Managementa ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-10-07||[http://www.whitehouse.gov/the-press-office/2011/10/07/executive-order-structural-reforms-improve-security-classified-networks- Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-12-06||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/fed_cybersecurity_rd_strategic_plan_2011.pdf Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program ]||No||U.S. Government Report ||5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Wilshusen, Gregory C. and Powner, David A.||2009||[[Continued_Efforts_are_Needed_to_Protect_Information_Systems_from_Evolving_Threats|Continued Efforts Are Needed to Protect Information Systems from Evolving Threats]]||Yes||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Wilson, Clay||2007-03-20||[http://www.fas.org/sgp/crs/natsec/RL31787.pdf Information Operations, Electronic Warfare, and Cyberwar: Capabilities and Related Policy Issues]||No||U.S. Government Report||3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| Zittrain, Jonathan L. ||2008||[[The_Future_of_the_Internet_and_How_To_Stop_It|The Future of the Internet and How To Stop It ]]||Yes||Book ||4.4 [[Usability/Human Factors]], 5.1 [[Regulation/Liability]]
|-
| Centre for Secure Information Technologies||2012||[http://www.csit.qub.ac.uk/sites/CSIT/InnovationatCSIT/Reports/Filetoupload,295595,en.pdf 2nd World Cyber security Technology Research Summit (Belfast 2012)]||No||Independent Report||
|}

Template:Filtered Table

2012-08-24T20:17:45Z

Gili:

{| class="dt_types"
|-
|U.S. Government Report
|-
|U.S. Government Hearing
|-
|Non-U.S. Government Report
|-
|Independent Report
|-
|Industry Report
|-
|Book
|-
|Journal Article
|-
|Article
|}

{| class="dt_categories"
|-
|1. Overview
|-
|3. Threats and Actors
|-
|3.1 The Threat and Skeptics
|-
|3.2 Actors and Incentives
|-
|3.2.1 States
|-
|3.2.2 Groups
|-
|3.2.3 Hacktivists
|-
|3.2.4 Terrorists
|-
|3.2.5 Criminals and Criminal Organizations
|-
|3.3 Security Targets
|-
|3.3.1 Public Critical Infrastructure
|-
|3.3.1.1 Government Networks (.gov)
|-
|3.3.1.2 Military Networks (.mil)
|-
|3.3.2 Private Critical Infrastructure
|-
|3.3.2.1 Electricity, Oil and Natural Gas
|-
|3.3.2.2 Financial Institutions and Networks
|-
|3.3.2.3 Transportation
|-
|3.3.2.4 Water, Sewer, etc.
|-
|3.3.3 Communications
|-
|3.3.3.1 Telephone
|-
|3.3.3.2 Public Data Networks
|-
|3.3.3.3 Cloud Computing
|-
|4. Issues
|-
|4.1 Metrics
|-
|4.2 Economics of Cybersecurity
|-
|4.2.1 Risk Management and Investment
|-
|4.2.2 Incentives
|-
|4.2.3 Insurance
|-
|4.2.4 Behavioral Economics
|-
|4.2.5 Market Failure
|-
|4.3 Supply Chain Issues
|-
|4.4 Usability/Human Factors
|-
|4.5 Psychology and Politics
|-
|4.6 Information Sharing/Disclosure
|-
|4.7 Public-Private Cooperation
|-
|4.8 Attribution
|-
|4.9 Identity Management
|-
|4.10 Privacy
|-
|4.11 Cybercrime
|-
|4.12 Cyberwar
|-
|4.13 Espionage
|-
|4.13.1 Government to Government
|-
|4.13.2 Industrial
|-
|4.13.3 Media Perceptions
|-
|5. Approaches
|-
|5.1 Regulation/Liability
|-
|5.2 Private Efforts/Organizations
|-
|5.3 Government Organizations
|-
|5.4 International Cooperation
|-
|5.5 International Law (including Laws of War)
|-
|5.6 Deterrence
|-
|5.7 Technology
|}

{| class="wikitable datatable" data-type-filter="{{{1}}}" data-category-filter="{{{2}}}" data-search-filter="{{{3}}}" border="1" cellpadding="1" cellspacing="0" style="border: 1px solid LightGrey;"
|-
! align="center" style="background-color:#f0f0f0;"|'''Author/Agency'''
! align="center" style="background-color:#f0f0f0;"|'''Date'''
! align="center" style="background-color:#f0f0f0;"|'''Title'''
! align="center" style="background:#f0f0f0;"|'''Wiki Entry'''
! align="center" style="background:#f0f0f0;"|'''Type'''
! align="center" style="background:#f0f0f0;"|'''Category'''
|-
|-
| Aloise, Gene et al.||2008||[[Nuclear_Security|Nuclear Security]]||Yes||U.S. Government Report||3.3 [[Security Targets]], 3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]]
|-
| Anderson, Ross ||2001||[[Why_Information_Security_is_Hard|Why Information Security is Hard ]]||Yes||Independent Report ||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]], 5.1 [[Regulation/Liability]]
|-
| Anderson, Ross ||2006||[[The_Economics_of_Information_Security|The Economics of Information Security ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| Anderson, Ross J. ||2008||[[Security_Engineering|Security Engineering ]]||Yes||Book ||3.2 [[Security Targets]], 4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Anderson, Ross, et. al ||2008||[[Security_Economics_and_the_Internal_Market|Security Economics and the Internal Market ]]||Yes||Article||4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]], 5.6 [[Deterrence]]
|-
| Arora et al. ||2006||[[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure|Does Information Security Attack Frequency Increase With Vulnerability Disclosure ]]||Yes||Journal Article ||4.2.1 [[Risk Management and Investment]], 4.6 [[Information Sharing/Disclosure]]
|-
| Aviram, Amitai ||2004||[[Overcoming_Impediments_to_Information_Sharing|Overcoming Impediments to Information Sharing ]]||Yes||Journal Article ||4.2.1 [[Risk Management and Investment]], 4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| Barkham, Jason ||2001||[[Information_Warfare_and_International_Law_on_the_Use_of_Force|Information Warfare and International Law on the Use of Force ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Bauer, Johannes M. and van Eeten, Michel J. G.||2009||[[Cybersecurity|Cybersecurity: Stakeholder Incentives, Externalities, and Policy Options]]||Yes||Journal Article||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Beard, Jack M. ||2009||[[Law_and_War_in_the_Virtual_Era|Law and War in the Virtual Era ]]||Yes||Journal Article ||4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Bellovin, Steven M.||2009||[[The_Government_and_Cybersecurity|The Government and Cybersecurity]]||Yes||Journal Article||3.2 [[Actors and Incentives]], 4.7[[Public-Private Cooperation]]
|-
| Besunder, Allison A.||2009||[[Best_Practices_for_Data_Protection_and_Privacy|Best Practices for Data Protection and Privacy]]||Yes||Book||4.6 [[Information Sharing/Disclosure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| Boebert, W. Earl||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059366.pdf A Survey of Challenges in Attribution]||No||Journal Article||4.8 [[Attribution]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Bohme, Rainer ||2005||[[Cyber-Insurance_Revisited|Cyber-Insurance Revisited ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.2.3 [[Insurance]], ,4.2.5 [[Market Failure]]
|-
| Bohme, Rainer ||2006||[[Models_and_Measures_for_Correlation_in_Cyber-Insurance|Models and Measures for Correlation in Cyber-Insurance ]]||Yes||Independent Report ||4.2.3 [[Insurance]], 5.2 [[Private Efforts/Organizations]]
|-
| Bohme, Rainer ||2010||[[Modeling_Cyber-Insurance|Modeling Cyber-Insurance ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.2.3 [[Insurance]], ,5.2 [[Private Efforts/Organizations]]
|-
| Booz Allen Hamilton and the Economist Intelligence Unit ||2012-01-15||[http://www.cyberhub.com/CyberPowerIndex Cyber Power Index ]||No||Industry Report||4. [[Issues]], 4.1 [[Metrics]], 5. [[Approaches]]
|-
| Bradley, Curtis A. and Goldsmith, Jack L.||2011||[[Overview_of_International_Law_and_Institutions|Overview of International Law and Institutions]]||Yes||Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Brown, Davis ||2006||[[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict|A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict ]]||Yes||Journal Article ||3.3.1.2 [[Military Networks (.mil)]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Burstein, Aaron J.||2008||[[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research|Amending the ECPA to Enable a Culture of Cybersecurity Research]]||Yes||Journal Article||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| Business Roundtable||2011-10-11||[http://businessroundtable.org/uploads/studies-reports/downloads/2011_10_Mission_Critical_A_Public-Private_Strategy_for_Effective_Cybersecurity.pdf Mission Critical: A Public-Private Strategy for Effective Cybersecurity ]||No||Independent Report||
|-
| Business Software Alliance ||2012-02-02||[ Global Cloud Computing Scorecard a Blueprint for Economic Opportunity ]||No||Industry Report||3.3.3.3 [[Cloud Computing]]
|-
| Business Software Alliance, Center for Democracy & Technology, U.S. Chamber of Commerce, Internet Security Alliance, Tech America ||2011-03-08||[http://www.cdt.org/files/pdfs/20110308_cbyersec_paper.pdf Improving our Nation’s Cybersecurity through the Public-Private Partnership: a White Paper ]||No||Industry Report||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5. [[Approaches]]
|-
| Cabinet Office (United Kingdom) ||2011-11-11||[http://www.cabinetoffice.gov.uk/sites/default/files/resources/uk-cyber-security-strategy-final.pdf The UK Cyber Security Strategy: Protecting and promoting the UK in a digital world ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Camp, L. Jean ||2004||[[Economics_of_Information_Security|Economics of Information Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Camp, L. Jean ||2004||[[Pricing_Security|Pricing Security ]]||Yes||Book ||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Center for a New American Security||2012-06-11||[http://www.cnas.org/node/6405 America’s Cyber Future: Security and Prosperity in the Information Age ]||No||Independent Report||1. [[Overview]], 4. [[Issues]], 5. [[Approaches]]
|-
| Center for Strategic and International Studies ||2008||[[Securing_Cyberspace_for_the_44th_Presidency|Securing Cyberspace for the 44th Presidency ]]||Yes||Independent Report ||4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]], 5.4 [[International Cooperation]]
|-
| Centre for Secure Information Technologies||2011||[http://www.csit.qub.ac.uk/sites/CSIT/InnovationatCSIT/Reports/Filetoupload,295594,en.pdf World Cybersecurity Technology Research Summit (Belfast 2011) ]||No||Independent Report||
|-
| Cetron, Marvin J. and Davies, Owen||2009||[[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity|World War 3.0: Ten Critical Trends for Cybersecurity]]||Yes||Journal Article||3.2 [[Actors and Incentives]], 3.3.1 [[Public Critical Infrastructure]], 4.12 [[Cyberwar]]
|-
| Clark, David and Landau, Susan||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059365.pdf Untangling Attribution]||No||Journal Article||4.8 [[Attribution]], 5.6 [[Deterrence]], 5.7 [[Technology]]
|-
| Clarke, Richard A. ||2010||[[Cyber_War|Cyber War ]]||Yes||Book ||3.1 [[The Threat and Skeptics]], 3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Clinton, Larry ||Undated ||[[Cyber-Insurance_Metrics_and_Impact_on_Cyber-Security|Cyber-Insurance Metrics and Impact on Cyber-Security ]]||Yes||Independent Report ||4.2.3 [[Insurance]], 5.2 [[Private Efforts/Organizations]]
|-
| Cloud Security Alliance ||2009-12||[http://www.cloudsecurityalliance.org/csaguide.pdf Security Guidance for Critical Areas of Focus in Cloud Computing V2.1 ]||No||Independent Report||3.3.3.3 [[Cloud Computing]], 4. [[Issues]], 5.2 [[Private Efforts/Organizations]]
|-
| Cohen, Geoff||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059445.pdf Targeting Third Party Collaboration]||No||Journal Article||3.1 [[The Threat and Skeptics]], 4.7 [[Public-Private Cooperation]], 4.11 [[Cybercrime]]
|-
| Computer Economics, Inc. ||2007||[[2007_Malware_Report|2007 Malware Report ]]||Yes||Industry Report ||4.2 [[Economics of Cybersecurity]]
|-
| Computing Research Association ||2003-||[[Four_Grand_Challenges_in_Trustworthy_Computing|Four Grand Challenges in Trustworthy Computing ]]||Yes||Independent Report ||4.4 [[Usability/Human Factors]], 4.6 [[Information Sharing/Disclosure]], 4.9 [[Identity Management]]
|-
| Cornish, Paul||2009||[[Cyber_Security_and_Politically,_Socially_and_Religiously_Motivated_Cyber_Attacks|Cyber Security and Politically, Socially and Religiously Motivated Cyber Attacks]]||Yes||Non-U.S. Government Report||3.2 [[Actors and Incentives]], 5.4 [[International Cooperation]]
|-
| Cornish, Paul et al.||2009||[[Cyberspace_and_the_National_Security_of_the_United_Kingdom|Cyberspace and the National Security of the United Kingdom - Threats and Responses]]||Yes||Independent Report||3. [[Threats and Actors]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Council on Foreign Relations ||2010-07-15||[http://i.cfr.org/content/publications/attachments/Knake%20-Testimony%20071510.pdf Untangling Attribution: Moving to Accountability in Cyberspace [Testimony]]||No||Independent Report||3.2 [[Actors and Incentives]], 4.8 [[Attribution]], 5. [[Approaches]]
|-
| CSIS Commission on Cybersecurity for the 44th Presidency, Center for Strategic and International Studies ||2011-01||[http://csis.org/files/publication/110128_Lewis_CybersecurityTwoYearsLater_Web.pdf Cybersecurity Two Years Later ]||No||Independent Report||3. [[Threats and Actors]], 5. [[Approaches]], 5.3 [[Government Organizations]]
|-
| Cyber Security Forum Initiative ||2011-05-09||[http://www.unveillance.com/wp-content/uploads/2011/05/Project_Cyber_Dawn_Public.pdf Cyber Dawn: Libya ]||No||Industry Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| Department of Commerce ||2011-06-14||[http://www.nist.gov/nstic/2012-nstic-governance-recs.pdf Models for a Governance Structure for the National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| Department of Commerce ||2010||[[Defense_Industrial_Base_Assessment|Defense Industrial Base Assessment ]]||Yes||U.S. Government Report ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| Department of Commerce, Internet Policy Task Force||2011-06||[http://www.nist.gov/itl/upload/Cybersecurity_Green-Paper_FinalVersion.pdf Cybersecurity, Innovation and the Internet Economy]||No||U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.7 [[Public-Private Cooperation]]
|-
| Department of Defense ||2011-07-14||[http://www.defense.gov/news/d20110714cyber.pdf Department of Defense Strategy for Operating in Cyberspace ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2011-11-15||[http://www.defense.gov/home/features/2011/0411_cyberstrategy/docs/NDAA%20Section%20934%20Report_For%20webpage.pdf Department of Defense Cyberspace Policy Report : A Report to Congress Pursuant to the National Defense Authorization Act for Fiscal Year 2011, Section 934 ]||No||U.S. Government Report||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Department of Defense ||2012-02-16||[http://www.fas.org/sgp/othergov/dod/5200_01v1.pdf DOD Information Security Program: Overview, Classification, and Declassification ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2012-04-11||[http://www.nsci-va.org/CyberReferenceLib/2011-04-Cyber%20Ops%20Personnel.pdf Cyber Operations Personnel Report (DoD) ]||No||U.S. Government Report||
|-
| Department of Defense ||1999||[[An_Assessment_of_International_Legal_Issues_in_Information_Operations|An Assessment of International Legal Issues in Information Operations ]]||Yes||U.S. Government Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Department of Defense ||2005-||[[Strategy_for_Homeland_Defense_and_Civil_Support|Strategy for Homeland Defense and Civil Support ]]||Yes||U.S. Government Report ||3.2.4 [[Terrorists]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2007||[[Mission_Impact_of_Foreign_Influence_on_DoD_Software|Mission Impact of Foreign Influence on DoD Software ]]||Yes||U.S. Government Report ||3.2.4 [[Terrorists]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Defense ||2011-04||[http://www.nsci-va.org/CyberReferenceLib/2011-04-Cyber%20Ops%20Personnel.pdf Cyber Operations Personnel Report (DOD) ]||No||U.S. Government Report ||
|-
| Department of Energy||2012-04||[http://energy.gov/sites/prod/files/OAS-RA-12-04.pdf The Department's Management of the Smart Grid Investment Grant Program]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]]
|-
| Department of Energy (DOE) Inspector General ||2012-01-01||[http://energy.gov/ig/downloads/departments-management-smart-grid-investment-grant-program-oas-ra-12-04 The Department’s Management of the Smart Grid Investment Grant Program ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.3 [[Government Organizations]]
|-
| Department of Energy, Idaho National Laboratory ||2010-05-01||[http://www.fas.org/sgp/eprint/nstb.pdf NSTB Assessments Summary Report: Common Industrial Control System Cyber Security Weaknesses ]||No||U.S. Government Report||3.3.2 [[Private Critical Infrastructure]], 5.7 [[Technology]]
|-
| Department of Energy, Office of Electricity Delivery & Energy Reliability ||Undated||[http://energy.gov/oe/technology-development/energy-delivery-systems-cybersecurity Cybersecurity for Energy Delivery Systems Program ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2009-09-16||[http://www.cyber.st.dhs.gov/docs/National_Cyber_Leap_Year_Summit_2009_Co-Chairs_Report.pdf National Cyber Leap Year Summit 2009: Co-Chairs' Report]||No||U.S. Government Report||3.3 [[Security Targets]], 4.2 [[Economics of Cybersecurity]], 4.8 [[Attribution]]
|-
| Department of Homeland Security||2007-06||[http://www.oig.dhs.gov/assets/Mgmt/OIG_07-48_Jun07.pdf Challenges Remain in Securing the Nation’s Cyber Infrastructure]||No||U.S. Government Report||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2009-11||[http://www.cyber.st.dhs.gov/docs/DHS-Cybersecurity-Roadmap.pdf A Roadmap for Cybersecurity Research]||No||U.S. Government Report||1. [[Overview]], 4.2.1 [[Risk Management and Investment]]
|-
| Department of Homeland Security||2010-08||[http://www.dhs.gov/xoig/assets/mgmtrpts/OIG_10-111_Aug10.pdf DHS Needs to Improve the Security Posture of Its Cybersecurity Program Systems]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2010-09||[http://www.federalnewsradio.com/pdfs/NCIRP_Interim_Version_September_2010.pdf National Cyber Incident Response Plan]||No||U.S. Government Report||3. [[Threats and Actors]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security||2011-11||[http://www.dhs.gov/xlibrary/assets/nppd/blueprint-for-a-secure-cyber-future.pdf Blueprint for a Secure Cyber Future: The Cybersecurity Strategy for the Homeland Security Enterprise]||No||U.S. Government Report||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security ||2003||[[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets|The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.2 [[Private Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| Department of Homeland Security ||2009||[[A_Roadmap_for_Cybersecurity_Research|A Roadmap for Cybersecurity Research ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| Department of Justice||2011-04||[http://www.justice.gov/oig/reports/FBI/a1122r.pdf The Federal Bureau of Investigation's Ability to Address the National Security Cyber Intrusion Threat]||No||U.S. Government Report||4.6 [[Information Sharing/Disclosure]], 4.11 [[Cybercrime]], 5.3 [[Government Organizations]]
|-
| Deputy Chief of Staff for Intelligence ||2006||[[Critical_Infrastructure_Threats_and_Terrorism|Critical Infrastructure Threats and Terrorism ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 4.11 [[Cybercrime]], 4.12 [[Cyberwar]]
|-
| Dörmann, Knut ||2004||[[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks|Applicability of the Additional Protocols to Computer Network Attacks ]]||Yes||Independent Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Douglas Maughan||2010||[[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda|The Need for a National Cybersecurity Research and Development Agenda]]||Yes||Article||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Dunlap Charles J, Jr ||2011||[[Perspectives_for_Cyber_Strategists_on_Law_for_Cyberwar|Perspectives for Cyber Strategists on Law for Cyberwar]]||Yes||Journal Article||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.5 [[International Law (including Laws of War)]]
|-
| Dunlap, Charles J. Jr. ||2009||[[Towards_a_Cyberspace_Legal_Regime_in_the_Twenty-First_Century|Towards a Cyberspace Legal Regime in the Twenty-First Century ]]||Yes||Article||4.5 [[Psychology and Politics]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| EastWest Institute ||2011-02-03||[http://vialardi.org/nastrazzuro/pdf/US-Russia.pdf Working Towards Rules for Governing Cyber Conflict: Rendering the Geneva and Hague Conventions in Cyberspace ]||No||Independent Report||3.2.1 [[States]], 5.4 [[International Cooperation]], 5.5 [[International Law (including Laws of War)]]
|-
| Energetics Inc. ||2006||[[Roadmap_to_Secure_Control_Systems_in_the_Energy_Sector|Roadmap to Secure Control Systems in the Energy Sector ]]||Yes||Independent Report ||3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| Energy Sector Control Systems Working Group||2011-09||[http://www.cyber.st.dhs.gov/wp-content/uploads/2011/09/Energy_Roadmap.pdf Roadmap to Achieve Energy Delivery Systems Cybersecurity]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]]
|-
| ENISA||2010||[[Introduction_to_Country_Reports|Introduction to Country Reports]]||Yes||Non-U.S. Government Report||3.2.1 [[States]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| Epstein, Richard A. ||2008||[[Cybersecurity_in_the_Payment_Card_Industry|Cybersecurity in the Payment Card Industry ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| European Network and Information Security Agency ||2010-10-07||[http://www.enisa.europa.eu/media/press-releases/stuxnet-analysis Stuxnet Analysis ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| European Network and Information Security Agency (ENISA) ||2011-04-11||[http://www.enisa.europa.eu/act/res/other-areas/inter-x/report/interx-report Resilience of the Internet Interconnection Ecosystem, at: ]||No||Non-U.S. Government Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| Federal CIO Council ||2012-01-04||[http://www.gsa.gov/portal/category/102371 Federal Risk and Authorization Management Program (FedRAMP) ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Federal Communications Commission (FCC) ||2010-04-21||[http://hraunfoss.fcc.gov/edocs_public/attachmatch/DOC-305618A1.doc Explore the reliability and resiliency of commercial broadband communications networks ]||No||U.S. Government Report||3.3.3 [[Communications]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Federal Communications Commission (FCC) ||2011-06-03||[ftp://ftp.fcc.gov/pub/Daily_Releases/Daily_Business/2011/db0610/DOC-307454A1.txt FCC's Plan for Ensuring the Security of Telecommunications Networks ]||No||U.S. Government Report||
|-
| Financial Services Sector Coordinating Council for Critical Infrastructure Protection ||2008||[[Research_Agenda_for_the_Banking_and_Finance_Sector|Research Agenda for the Banking and Finance Sector ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]]
|-
| Fischer, Eric A. CRS||2012-04-23||[http://www.fas.org/sgp/crs/natsec/R42114.pdf Federal Laws Relating to Cybersecurity: Discussion of Proposed Revisions]||No||U.S. Government Report||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]]
|-
| Franklin, Jason, et. al ||2007||[[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants|An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants ]]||Yes||Independent Report ||3.2.5 [[Criminals and Criminal Organizations]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| Gandal, Neil ||2008||[[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security|An Introduction to Key Themes in the Economics of Cyber Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]], 5.7 [[Technology]]
|-
| GAO||2003-08-27||[http://www.gao.gov/products/GAO-03-760 Efforts to Improve Information sharing Need to Be Strengthened ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| GAO||2004-05-28||[http://www.gao.gov/assets/160/157541.pdf Technology Assessment: Cybersecurity for Critical Infrastructure Protection]||No||U.S. Government Report||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.7 [[Technology]]
|-
| GAO||2008-07-31||[http://www.gao.gov/assets/280/279084.pdf Cyber Analysis And Warning: DHS Faces Challenges in Establishing a Comprehensive National Capability]||No||U.S. Government Report||5.3 [[Government Organizations]]
|-
| GAO||2009-09-24||[http://www.gao.gov/new.items/d09969.pdf Critical Infrastructure Protection: Current Cyber Sector-Specific Planning Approach Needs Reassessment]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2009-11-17||[http://www.gao.gov/products/GAO-10-230t Continued Efforts Are Needed to Protect Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.2 [[Actors and Incentives]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-05||[http://www.gao.gov/products/GAO-10-338 Cybersecurity: Progress Made But Challenges Remain in Defining and Coordinating the Comprehensive National Initiative ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Is Needed to Protect Federal Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-03-24||[http://www.gao.gov/products/GAO-10-536t Information Security: Concerted Response Needed to Resolve Persistent Weaknesses, at: ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-04-12||[http://www.gao.gov/products/GAO-10-237 Concerted Effort Needed to Consolidate and Secure Internet Connections at Federal Agencies ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2010-06-03||[http://www.gao.gov/assets/310/305208.pdf Cybersecurity: Key Challenges Need to Be Addressed to Improve Research and Development]||No||U.S. Government Report||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| GAO||2010-06-16||[http://www.gao.gov/products/GAO-10-834t Continued Attention Is Needed to Protect Federal Information Systems from Evolving Threats ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-07-01||[http://www.gao.gov/products/GAO-10-513 Federal Guidance Needed to Address Control Issues With Implementing Cloud Computing ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| GAO||2010-07-15||[http://www.gao.gov/products/GAO-10-628 Critical Infrastructure Protection: Key Private and Public Cyber Expectations Need to Be Consistently Addressed ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| GAO||2010-08-02||[http://www.gao.gov/products/GAO-10-606 United States Faces Challenges in Addressing Global Cybersecurity and Governance ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| GAO||2010-09-15||[http://www.gao.gov/products/GAO-10-916 Information Security: Progress Made on Harmonizing Policies and Guidance for National Security and Non-National Security Systems ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010-09-23||[http://www.gao.gov/products/GAO-10-772 DHS Efforts to Assess and Promote Resiliency Are Evolving but Program Management Could Be Strengthened ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.3 [[Government Organizations]]
|-
| GAO||2010-10-06||[http://www.gao.gov/products/GAO-11-24 Cyberspace Policy: Executive Branch Is Making Progress Implementing 2009 Policy Review Recommendations, but Sustained Leadership Is Needed ]||No||U.S. Government Report ||5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2010-11-30||[http://www.gao.gov/products/GAO-11-43 Information Security: Federal Agencies Have Taken Steps to Secure Wireless Networks, but Further Actions Can Mitigate Risk ]||No||U.S. Government Report ||3.3.3 [[Communications]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2011-01-12||[http://www.gao.gov/products/GAO-11-117 Electricity Grid Modernization: Progress Being Made on Cybersecurity Guidelines, but Key Challenges Remain to be Addressed ]||No||U.S. Government Report ||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Needed to Protect Our Nation's Critical Infrastructure and Federal Information Systems ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-08||[http://www.gao.gov/products/GAO-11-149 Information Security: State Has Taken Steps to Implement a Continuous Monitoring Application, but Key Challenges Remain ]||No||U.S. Government Report ||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| GAO||2011-07-25||[http://www.gao.gov/products/GAO-11-75 Defense Department Cyber Efforts: DoD Faces Challenges in Its Cyber Activities ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-26||[http://www.gao.gov/products/GAO-11-463T Continued Attention Needed to Protect Our Nation’s Critical Infrastructure ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-07-29||[http://www.gao.gov/products/GAO-11-695R Defense Department Cyber Efforts: Definitions, Focal Point, and Methodology Needed for DoD to Develop Full-Spectrum Cyberspace Budget Estimates ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-03||[http://www.gao.gov/products/GAO-12-137 Information Security: Weaknesses Continue Amid New Federal Efforts to Implement Requirements ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-05||[http://www.gao.gov/products/GAO-12-130T Information Security: Additional Guidance Needed to Address Cloud Computing Concerns ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| GAO||2011-10-17||[http://www.gao.gov/products/GAO-11-634 Federal Chief Information Officers: Opportunities Exist to Improve Role in Information Technology Management ]||No||U.S. Government Report ||5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2011-11-29||[http://www.gao.gov/products/GAO-12-8 Cybersecurity Human Capital: Initiatives Need Better Planning and Coordination, at: ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| GAO||2011-12-09||[http://www.gao.gov/products/GAO-12-92 Critical Infrastructure Protection: Cybersecurity Guidance Is Available, but More Can Be Done to Promote Its Use ]||No||U.S. Government Report ||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2012-01-13||[http://www.gao.gov/assets/590/587681.pdf Defense Contracting: Improved Policies and Tools Could Help Increase Competition on DOD's National Security Exception Procurements]||No||U.S. Government Report||3.3.1.2 [[Military Networks (.mil)]], 4.7 [[Public-Private Cooperation]]
|-
| GAO||2012-02-28||[http://www.csit.qub.ac.uk/media/pdf/Filetoupload,252359,en.pdf Cybersecurity: Challenges to Securing the Modernized Electricity Grid ]||No||Non-U.S. Government Report ||
|-
| GAO||2009||[[Critical_Infrastructure_Protection|Critical Infrastructure Protection - Current Cyber Sector-Specific Planning Approach Needs Reassessment]]||Yes||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| GAO||2009-07||[http://www.gao.gov/new.items/d09546.pdf Information Security: Agencies Continue to Report Progress, but Need to. Mitigate Persistent Weaknesses]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]]
|-
| GAO||2009-09||[http://www.gao.gov/new.items/d09617.pdf Information Security: Concerted Effort Needed to Improve Federal Performance Measures]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| GAO||2010||[[Information_Security|Information Security - Concerted Effort Needed to Consolidate and Secure Internet Connections at Federal Agencies]]||Yes||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| GAO ||2011-10-05||[http://www.gao.gov/products/GAO-12-130T Information Security: Additional Guidance Needed to Address Cloud Computing Concerns ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Geer, Daniel E. and Conway, Daniel G.||2010||[[Nothing_Ventured,_Nothing_Gained|Nothing Ventured, Nothing Gained]]||Yes||Journal Article||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]]
|-
| Gellman, Robert||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059444.pdf Civil Liberties and Privacy Implications of Policies to Prevent Cyberattacks ]||No||Journal Article||4.8 [[Attribution]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| General Accountability Office (GAO) ||2010-07-15||[http://www.gao.gov/products/GAO-10-628 Critical Infrastructure Protection: Key Private and Public Cyber Expectations Need to Be Consistently Addressed ]||No||U.S. Government Report||3.3 [[Security Targets]], 4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]]
|-
| General Accountability Office (GAO) ||2011-01-12||[http://www.gao.gov/products/GAO-11-117 Electricity Grid Modernization: Progress Being Made on Cybersecurity Guidelines, but Key Challenges Remain to be Addressed ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-03-16||[http://www.gao.gov/products/GAO-11-463T Cybersecurity: Continued Attention Needed to Protect Our Nation's Critical Infrastructure and Federal Information Systems ]||No||U.S. Government Report||3. [[Threats and Actors]], 3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-07-29||[http://www.gao.gov/products/GAO-11-695R Defense Department Cyber Efforts: Definitions, Focal Point, and Methodology Needed for DOD to Develop Full-Spectrum Cyberspace Budget Estimates ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-11-29||[http://www.gao.gov/products/GAO-12-8 Cybersecurity Human Capital: Initiatives Need Better Planning and Coordination ]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| General Accountability Office (GAO) ||2011-12-09||[http://www.gao.gov/products/GAO-12-92 Critical Infrastructure Protection: Cybersecurity Guidance Is Available, but More Can Be Done to Promote Its Use ]||No||U.S. Government Report ||
|-
| General Services Administration (GSA) ||2012-02-07||[http://www.gsa.gov/graphics/staffoffices/FedRAMP_CONOPS.pdf Concept of Operations: FedRAMP ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Grady, Mark F. ||2006||[[The_Law_and_Economics_of_Cybersecurity|The Law and Economics of Cybersecurity ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 5.1 [[Regulation/Liability]]
|-
| Graham David E ||2010||[[Cyber_Threats_and_the_Law_of_War| Cyber Threats and the Law of War]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Granick, Jennifer Stisa ||2005||[[The_Price_of_Restricting_Vulnerability_Publications|The Price of Restricting Vulnerability Publications ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Hollis, Duncan B. ||2007||[[Why_States_Need_an_International_Law_for_Information_Operations|Why States Need an International Law for Information Operations ]]||Yes||Journal Article ||4.12 [[Cyberwar]], 4.13.1 [[Government to Government|Government to Government Espionage]], 5.5 [[International Law (including Laws of War)]]
|-
| HP TippingPoint DVLabs ||2010||[[2010_Top_Cyber_Security_Risks_Report|2010 Top Cyber Security Risks Report ]]||Yes||Industry report ||4.11 [[Cybercrime]], 5.7 [[Technology]]
|-
| IEEE/EastWest Institute ||2010-05-26||[http://www.ieee-rogucci.org/files/The%20ROGUCCI%20Report.pdf The Reliability of Global Undersea Communications Cable Infrastructure (The Rogucci Report) ]||No||Independent Report||3.3.3 [[Communications]], 4.7 [[Public-Private Cooperation]], 5.4 [[International Cooperation]]
|-
| Institute for Information Infrastructure Protection ||2003||[[Cyber_Security_Research_and_Development_Agenda|Cyber Security Research and Development Agenda ]]||Yes||Independent Report ||4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| Institute for Science and International Security ||2010-12-22||[http://isis-online.org/isis-reports/detail/did-stuxnet-take-out-1000-centrifuges-at-the-natanz-enrichment-plant/ Did Stuxnet Take Out 1,000 Centrifuges at the Natanz Enrichment Plant? Preliminary Assessment ]||No||Independent Report||3. [[Threats and Actors]], 3.3 [[Security Targets]], 5.7 [[Technology]]
|-
| International Instrument Users Association (WIB) ||2010-11-10||[http://www.isssource.com/wib/ WIB Security Standard Released ]||No||Industry Report||3.3 [[Security Targets]], 5.4 [[International Cooperation]]
|-
| International Telecommunications Union ||2012-02-10||[http://www.itu.int/ITU-D/cyb/cybersecurity/docs/itu-toolkit-cybercrime-legislation.pdf ITU Toolkit for Cybercrime Legislation ]||No||Independent Report||
|-
| James Clapper, Director of National Intelligence ||2011-02-10||[http://www.dni.gov/testimonies/20110210_testimony_clapper.pdf Worldwide Threat Assessment of the U.S. Intelligence Community (Testimony) ]||No||U.S. Government Report||3.1 [[The Threat and Skeptics]], 3.2 [[Actors and Incentives]]
|-
| Johnson, Eric M. ||2008||[[Managing_Information_Risk_and_the_Economics_of_Security|Managing Information Risk and the Economics of Security ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| Johnson, Vincent R. ||2005||[[Cybersecurity,_Identity_Theft,_and_the_Limits_of_Tort_Liability|Cybersecurity, Identity Theft, and the Limits of Tort Liability ]]||Yes||Journal Article ||4.9 [[Identity Management]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| Joint Workshop of the National Security Threats in Cyberspace and the National Strategy Forum ||2009-09-15||[http://nationalstrategy.com/Portals/0/National%20Security%20Threats%20in%20Cyberspace%20FINAL%2009-15-09.pdf National Security Threats in Cyberspace ]||No||Independent Report||
|-
| Joseph S. Nye||2010||[[Cyber_Power|Cyber Power]]||Yes||Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Journal of Strategic Studies ||2011-10-05||[http://www.tandfonline.com/doi/abs/10.1080/01402390.2011.6089393 Cyber War Will Not Take Place ]||No||Journal Article||
|-
| Kelly A. Gable||2010||[[Cyber-Apocalypse_Now|Cyber-Apocalypse Now - Securing the Internet Against Cyberterrorism and Using Universal Jurisdiction as a Deterrent]]||Yes||Journal Article||3.2.4 [[Terrorists]], 3.3 [[Security Targets]], 5.5 [[International Law (including Laws of War)]]
|-
| Kerr, Paul K. et al. CRS||2010-12-09||[http://www.fas.org/sgp/crs/natsec/R41524.pdf The Stuxnet Computer Worm: Harbinger of an Emerging Warfare Capability]||No||U.S. Government Report||3.3 [[Security Targets]], 4.12 [[Cyberwar]], 5.4 [[International Law (including Laws of War)]]
|-
| Kesan, Jay P. and Hayes, Carol M.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059446.pdf Thinking Through Active Defense in Cyberspace ]||No||Journal Article||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Kobayashi, Bruce H.||2005||[[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods|An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and other Public Security Goods]]||Yes||Journal Article||4.2.1 [[Risk Management and Investment]], 4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]]
|-
| Kobayashi, Bruce H. ||2006||[[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods|An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]], 5.6 [[Deterrence]]
|-
| Korns, Stephen W. ||2009||[[Cyber_Operations|Cyber Operations ]]||Yes||Journal Article ||4.8 [[Attribution]], 4.12 [[Cyberwar]], 5.6 [[Deterrence]]
|-
| Kramer, Franklin D., et. al ||2009||[[Cyberpower_and_National_Security|Cyberpower and National Security ]]||Yes||Book ||1. [[Overview]]
|-
| Kundra, Vivek||2010-12-09||[http://www.cio.gov/documents/25-point-implementation-plan-to-reform-federal%20it.pdf 25 Point Implementation Plan to Reform Federal Information Technology Management]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Kundra, Vivek||2011-02-08||[http://www.cio.gov/documents/federal-cloud-computing-strategy.pdf Federal Cloud Computing Strategy]||No||U.S. Government Report||3.3.1.1 [[Government Networks (.gov)]], 3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| Lan, Tang et al.||2010||[[Global_Cyber_Deterrence|Global Cyber Deterrence: Views from China, the U.S., Russia, India, and Norway]]||Yes||Independent Report||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.6 [[Deterrence]]
|-
| Lernard, Thomas M. ||2005||[[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches|An Economic Analysis of Notification Requirements for Data Security Breaches ]]||Yes||Independent Report ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Lernard, Thomas M. ||2006||[[Much_Ado_About_Notification|Much Ado About Notification ]]||Yes||Journal Article ||4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Lewis, James Andrews||2005||[[Cyber_Security_and_Regulation_in_the_United_States|Aux armes, citoyens: Cyber Security and Regulation in the United States]]||Yes||Journal Article||3.3.1 [[Public Critical Infrastructure, 3.3.2.2 [[Financial Institutions and Networks]], 3.3.2.3 [[Transportation]]
|-
| Libicki, Martin||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059490.pdf Pulling Punches in Cyberspace]||No||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Lukasik, Stephen J.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059438.pdf A Framework for Thinking about Cyber Conflict and Cyber Deterrence with Possible Declatory Policies for these Domain]||No||Journal Article||3.2 [[Actors and Incentives]], 5.4 [[International Cooperation]], 5.6 [[Deterrence]]
|-
| Massachusetts Institute of Technology (MIT) ||2011-12-05||[http://web.mit.edu/mitei/research/studies/the-electric-grid-2011.shtml The Future of the Electric Grid ]||No||Independent Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4. [[Issues]], 5.1 [[Regulation/Liability]]
|-
| McAfee ||2011-08-02||[http://www.mcafee.com/us/resources/white-papers/wp-operation-shady-rat.pdf Revealed: Operation Shady RAT: an Investigation Of Targeted Intrusions Into 70+ Global Companies, Governments, and Non-Profit Organizations During the Last 5 Years ]||No||Industry Report||3.2.1 [[States]], 3.3 [[Security Targets]], 4.13 [[Espionage]]
|-
| McAfee ||2012-02-01||[http://www.mcafee.com/us/resources/reports/rp-sda-cyber-security.pdf?cid=WBB048 Cyber-security: The Vexed Question of Global Rules: An Independent Report on Cyber-Preparedness Around the World ]||No||Industry Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| McAfee and Center for Strategic and International Studies (CSIS) ||2011-04-21||[http://www.mcafee.com/us/resources/reports/rp-critical-infrastructure-protection.pdf In the Dark: Crucial Industries Confront Cyberattacks ]||No||Industry Report||3. [[Threats and Actors]], 3.3.2 [[Private Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| McAfee and the Security Defense Agenda||2012-02-12||[http://www.mcafee.com/us/resources/reports/rp-sda-cyber-security.pdf Cyber-security: The Vexed Question of Global Rules: An Independent Report on Cyber-Preparedness Around the World]||No||Industry Report||1. [[Overview]], 4. [[Issues]], 5. [[Approaches]]
|-
| McAfee, Inc. ||2010||[[McAfee_Threats_Report|McAfee Threats Report ]]||Yes||Industry Report ||3.2.3 [[Hacktivists]], 3.2.5 [[Criminals and Criminal Organizations]], 4.11 [[Cybercrime]]
|-
| McDermott, Rose||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059442.pdf Decision Making Under Uncertainty]||No||Journal Article||4.4 [[Usability/Human Factors]], 4.5 [[Psychology and Politics]], 4.8 [[Attribution]]
|-
| Microsoft||2010-11||[http://cdn.globalfoundationservices.com/documents/InformationSecurityMangSysforMSCloudInfrastructure.pdf Information Security Management System for Microsoft Cloud Infrastructure ]||No||Industry Report||3.3.3.3 [[Cloud Computing]], 5.2 [[Private Efforts/Organizations]]
|-
| Mitre Corp (JASON Program Office) ||2010-11||[http://www.fas.org/irp/agency/dod/jason/cyber.pdf Science of Cyber-Security ]||No||Independent Report||1. [[Overview]], 4. [[Issues]]
|-
| Moore, Tyler||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059364.pdf Introducing the Economics of Cybersecurity: Principles and Policy Options]||No||Journal Article||4.2 [[Economics of Cybersecurity]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| Moore, Tyler ||2007||[[Examining_the_Impact_of_Website_Take-down_on_Phishing|Examining the Impact of Website Take-down on Phishing ]]||Yes||Independent Report ||4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]], 5.7 [[Technology]]
|-
| Moore, Tyler ||2008||[[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing|The Consequence of Non-Cooperation in the Fight Against Phishing ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]]
|-
| Moore, Tyler ||2009||[[The_Impact_of_Incentives_on_Notice_and_Take-down|The Impact of Incentives on Notice and Take-down ]]||Yes||Book ||4.2.2 [[Incentives]], 4.11 [[Cybercrime]], 5.4 [[International Cooperation]]
|-
| Moore, Tyler, et. al ||2009||[[The_Economics_of_Online_Crime|The Economics of Online Crime ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]]
|-
| Morgan, Patrick M. ||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059436.pdf Applicability of Traditional Deterrence Concepts and Theory to the Cyber Realm ]||No||Journal Article||4.12 [[Cyberwar]], 5.4 [[International Cooperation]], 5.6 [[Deterrence ]]
|-
| National Association of Secretaries of State ||2012-01-12||[http://www.nass.org/index.php?option=com_docman&task=doc_download&gid=1257 Developing State Solutions to Business Identity Theft: Assistance, Prevention and Detection Efforts by Secretary of State Offices ]||No||Independent Report||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| National Cyber Defense Initiative ||2009||[[National_Cyber_Defense_Financial_Services_Workshop_Report|National Cyber Defense Financial Services Workshop Report ]]||Yes||Independent Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| National Cyber Security Alliance and Microsoft ||2011-05-13||[http://www.staysafeonline.org/sites/default/files/resource_documents/2011%20National%20K-12%20Study%20Final_0.pdf 2011 State of Cyberethics, Cybersafety and Cybersecurity Curriculum in the U.S. Survey ]||No||Industry Report||4.4 [[Usability/Human Factors]]
|-
| National Cyber Security Summit Task Force ||2004||[[Information_Security_Governance|Information Security Governance ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.2 [[Private Efforts/Organizations]], 5.3 [[government Organizations]]
|-
| National Infrastructure Advisory Council ||2004||[[Hardening_The_Internet|Hardening The Internet ]]||Yes||U.S. Government Report ||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| National Initiative for Cybersecurity Education||2011-08-11||[http://csrc.nist.gov/nice/documents/nicestratplan/Draft_NICE-Strategic-Plan_Aug2011.pdf National Initiative for Cybersecurity Education Strategic Plan: Building a Digital Nation]||No||U.S. Government Report||1. [[Overview]], 5.3 [[Government Organizations]]
|-
| National Initiative for Cybersecurity Education (NICE) ||2011-11-21||[http://csrc.nist.gov/nice/framework/documents/NICE-Cybersecurity-Workforce-Framework-printable.pdf NICE Cybersecurity Workforce Framework ]||No||U.S. Government Report||4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| National Institute of Standards and Technology ||2006||[[SP_800-82:_Guide_to_Supervisory_Control_and_Data_Acquisition_(SCADA)_and_Industrial_Control_Systems_Security|SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], .2.1 [[Risk Management and Investment]], 5.2 [[Private Efforts/Organizations]]
|-
| National Institute of Standards and Technology (NIST) ||2010-09-02||[http://www.nist.gov/public_affairs/releases/nist-finalizes-initial-set-of-smart-grid-cyber-security-guidelines.cfm NIST Finalizes Initial Set of Smart Grid Cyber Security Guidelines ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| National Research Council ||2010-09-21||[http://www.nap.edu/catalog.php?record_id=12998 Toward Better Usability, Security, and Privacy of Information Technology: Report of a Workshop ]||No||Independent Report||4.2 [[Economics of Cybersecurity]], 4.4 [[Usability/Human Factors]], 4.10 [[Privacy]]
|-
| National Research Council ||2010-10-05||[http://www.nap.edu/catalog.php?record_id=12997#description Proceedings of a Workshop on Deterring Cyberattacks: Informing Strategies and Developing Options for U.S. Policy ]||No||Independent Report||3. [[Threats and Actors]], 4. [[Issues]], 5. [[Approaches]]
|-
| National Research Council ||1999||[[Trust_in_Cyberspace|Trust in Cyberspace ]]||Yes||Independent Report ||3.3.3.2 [[Public Data Networks]], 4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]]
|-
| National Research Council ||2007||[[Toward_a_Safer_and_More_Secure_Cyberspace|Toward a Safer and More Secure Cyberspace ]]||Yes||Independent Report ||1. [[Overview]], 4.8 [[Attribution]], 5.6 [[Deterrence]]
|-
| National Research Council, Committee for Advancing Software-Intensive Systems Producibility ||2010-10-20||[http://www.nap.edu/catalog.php?record_id=12979 Critical Code: Software Producibility for Defense ]||No||Independent Reprot ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| National Science and Technology Council ||2006||[[Federal_Plan_for_Cyber_Security_and_Information_Assurance_Research_and_Development|Federal Plan for Cyber Security and Information Assurance Research and Development ]]||Yes||U.S. Government Report ||4.1 [[Metrics]], 4.7 [[Attribution]], 4.8 [[Public-Private Cooperation]]
|-
| National Science Foundation||2011-08-11||[http://www.livescience.com/15423-forefront-cyber-security-research-nsf-bts.html At the Forefront of Cyber Security Research ]||No||U.S. Government Report||5.7 [[Technology]]
|-
| National Science Foundation||2012-01-17||[http://www.nsf.gov/awardsearch/showAward.do?AwardNumber=1127185 Information Security Risk Taking ]||No||U.S. Government Report||4.1 [[Metrics]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| National Security Cyberspace Institute||2012-07-11||[http://www.nsci-va.org/WhitePapers/2011-07-22-Cyber Analogies Whitepaper-K McKee.pdf A Review of Frequently Used Cyber Analogies ]||No||Independent Report||
|-
| National Security Initiative ||2010-10-18||[http://www.americansecuritychallenge.com/ American Security Challenge ]||No||Independent Report||
|-
| Networking and Information Technology Research and Development ||2009||[[National_Cyber_Leap_Year_Summit_2009,_Co-Chairs%27_Report|National Cyber Leap Year Summit 2009, Co-Chairs' Report ]]||Yes||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 4.9 [[Identity Management]], 5.7 [[Technology]]
|-
| NIST ||2011-09-01||[http://www.nist.gov/customcf/get_pdf.cfm?pub_id=909505 Cloud Computing Reference Architecture ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]]
|-
| NIST ||2011-12-01||[http://www.nist.gov/itl/cloud/upload/SP_500_293_volumeII.pdf U.S. Government Cloud Computing Technology Roadmap, Release 1.0 (Draft), Volume II Useful Information for Cloud Adopters ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| NIST ||2012-02-17||[http://www.nist.gov/nstic/2012-nstic-governance-recs.pdf Recommendations for Establishing an Identity Ecosystem Governance Structure for the National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| Nojeim, Gregory T.||2009||[[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace|Cybersecurity: Preventing Terrorist Attacks and Protecting Privacy in Cyberspace]]||Yes||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| North American Electric Reliability Corp. (NERC) ||2011-01-26||[http://www.wired.com/images_blogs/threatlevel/2011/02/DoE-IG-Report-on-Grid-Security.pdf Federal Energy Regulatory Commission's Monitoring of Power Grid Cyber Security ]||No||U.S. Government Report||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| NSTC||2011-12||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/fed_cybersecurity_rd_strategic_plan_2011.pdf Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program]||No||U.S. Government Report||5.3 [[Government Organizations]]
|-
| Nye, Joseph ||2010||[[Cyber_Power|Cyber Power ]]||Yes||Book ||4.12 [[Cyberwar]], 4.13 [[Espionage]], 5.5 [[International Law (including Laws of War)]]
|-
| OECD||2009||[[Cybersecurity_and_Economic_Incentives|Cybersecurity and Economic Incentives]]||Yes||Non-U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]]
|-
| OECD||2009||[[The_Market_Consequences_of_Cybersecurity|The Market Consequences of Cybersecurity]]||Yes||Non-U.S. Government Report||4.2 [[Economics of Cybersecurity]], 4.2.2 [[Incentives]]
|-
| Office of the National Counterintelligence Executive ||2011-11-03||[http://www.ncix.gov/publications/reports/fecie_all/Foreign_Economic_Collection_2011.pdf Foreign Spies Stealing US Economic Secrets in Cyberspace ]||No||U.S. Government Report||3. [[Threats and Actors]], 3.2 [[Actors and Incentives]], 4.13 [[Espionage]]
|-
| Organisation for Economic Co-operation and Development (OECD) ||2010-11-12||[http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.165.2211&rep=rep1&type=pdf The Role of Internet Service Providers in Botnet Mitigation: an Empirical Analysis Bases on Spam Data ]||No||Independent Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Organization for Economic Co-operation and Development (OECD) ||2012-01-10||[http://www.oecd-ilibrary.org/docserver/download/fulltext/5k9h2q8v9bln.pdf?expires=1330527950&id=id&accname=guest&checksum=F4470043AC638BE19D5131C3D5CE5EA4 ICT Applications for the Smart Grid: Opportunities and Policy Implications ]||No||Independent Report ||
|-
| PCAST||2010-12||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-nitrd-report-2010.pdf Designing a Digital Future: Federally Funded Research and Development in Networking and Information Technology]||No||U.S. Government Report||4.3 [[Supply Chain Issues]], 4.10 [[Privacy]], 5.3 [[Government Organizations]]
|-
| PCAST||2011-06||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-advanced-manufacturing-june2011.pdf Report to the President on Ensuring American Leadership in Advanced Manufacturing]||No||U.S. Government Report||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| Perkins, Earl||2009||[[Evolving_Cybersecurity_Issues_in_the_Utility_Industry|Evolving Cybersecurity Issues in the Utility Industry]]||Yes||Independent Report||3.3.2 [[Private Critical Infrastructure]], 3.3.2.4 [[Water, Sewer, etc.]], 4.7 [[Public-Private Cooperation]]
|-
| Pew Research Center’s Internet & American Life Project ||2010-06-11||[http://pewinternet.org/Reports/2010/The-future-of-cloud-computing.aspx The future of cloud computing ]||No||Independent Report||3.3.3.3 [[Cloud Computing]]
|-
| Powell, Benjamin ||2005||[[Is_Cybersecurity_a_Public_Good|Is Cybersecurity a Public Good ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.2.5 [[Market Failure]], 5.1 [[Regulation/Liability]]
|-
| President's Commission on Critical Infrastructure Protection ||1997||[[Critical_Foundations|Critical Foundations ]]||Yes||U.S. Government Report ||3.3.2 [[Private Critical Infrastructure]], 3.3.3 [[Communications]], 5.3 [[Government Organizations]]
|-
| President's Information Technology Advisory Council ||2005||[[Cyber_Security:_A_Crisis_of_Prioritization|Cyber Security: A Crisis of Prioritization ]]||Yes||U.S. Government Report ||4.2.2 [[Incentives]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Project on National Security Reform (PNSR) ||2010-11||[http://www.pnsr.org/data/images/pnsr_the_power_of_people_report.pdf The Power of People: Building an Integrated National Security Professional System for the 21st Century ]||No||U.S. Government Report||4.4 [[Usability/Human Factors]], 5.3 [[Government Organizations]]
|-
| Quadrennial Defense Review ||2010-07-30||[http://www.usip.org/quadrennial-defense-review-independent-panel-/view-the-report The QDR in Perspective: Meeting AmericaÅfs National Security Needs In the 21st Century (QDR Final Report) ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| RAND||2011-12-21||[http://www.rand.org/content/dam/rand/pubs/occasional_papers/2011/RAND_OP342.pdf A Cyberworm that Knows No Boundaries ]||No||Independent Report||3. [[Threats and Actors]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Rattray, Gregory and Healey, Jason||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059437.pdf Categorizing and Understanding Offensive Cyber Capabilities and Their Use ]||No||Journal Article||3.1 [[The Threat and Skeptics]], 3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| Rollins, John and Wilson, Clay||2007||[[Terrorist_Capabilities_for_Cyberattack|Terrorist Capabilities for Cyberattack]]||Yes||U.S. Government Report||3.2.4 [[Terrorists]], 3.3 [[Security Targets]], 4.2.2 [[Incentives]]
|-
| Romanosky et al. ||2008||[[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft|Do Data Breach Disclosure Laws Reduce Identity Theft ]]||Yes||Independent Report ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Rosenzweig, Paul||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059443.pdf The Organization of the United States Government and Private Sector for Achieving Cyber Deterrence ]||No||Journal Article||4.3 [[Supply Chain Issues]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| Rotenberg et. al. ||2010||[[The_Cyber_War_Threat_Has_Been_Grossly_Exaggerated|The Cyber War Threat Has Been Grossly Exaggerated ]]||Yes||Article||3.1 [[The Threat and Skeptics]], 3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Rue, Rachel and Pfleeger, Shari Lawrence||2009||[[Making_the_Best_Use_of_Cybersecurity_Economic_Models|Making the Best Use of Cybersecurity Economic Models]]||Yes||Journal Article||4.1 [[Metrics]], 4.2.1 [[Risk Management and Investment]]
|-
| Santos, Joost R., et. al||2007||[[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies|A Framework for Linking Cybersecurity Metrics to the Modeling of Macroeconomic Interdependencies]]||Yes||Journal Article||3.3.2 [[Private Critical Infrastructure]], 4.1 [[Metrics]]
|-
| Schmitt Michael N ||2002||[[Wired_Warfare| Wired warfare: Computer network attack and jus in bello]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt Michael N ||2004||[[Direct_Participation_in_Hostilities|Direct Participation in Hostilities and 21st Century Armed Conflict]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N. ||1999||[[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law|Computer Network Attack and the Use of Force in International Law ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N. ||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059439.pdf Cyber Operations in International Law: The Use of Force, Collective Security, Self-Defense, and Armed Conflicts]||No||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schmitt, Michael N., et. al ||2004||[[Computers_and_War|Computers and War ]]||Yes||Independent Report ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| Schneidewind, Norman||2010||[[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks|Metrics for Mitigating Cybersecurity Threats to Networks]]||Yes||Journal Article||4.1 [[Metrics]]
|-
| Schneier, Bruce ||2003||[[Beyond_Fear|Beyond Fear ]]||Yes||Book ||3.2 [[Actors and Incentives]], 4.5 [[Psychology and Politics]], 5.6 [[Deterrence]]
|-
| Schneier, Bruce ||2008||[[Schneier_on_Security|Schneier on Security ]]||Yes||Book ||3.2 [[Actors and Incentives]], 4.4 [[Usability/Human Factors]], 5.1 [[Regulation/Liability]]
|-
| Schwartz, Paul ||2007||[[Notification_of_Data_Security_Breaches|Notification of Data Security Breaches ]]||Yes||Journal Article ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Secretary of the Air Force ||2011-07-27||[http://www.e-publishing.af.mil/shared/media/epubs/AFI51-402.pdf Legal Reviews of Weapons and Cyber Capabilities ]||No||U.S. Government Report ||4.12 [[Cyberwar]], 5.3 [[Government Organizations]], 5.5 [[International Law (including Laws of War)]]
|-
| Shackelford, Scott J.||2010||[[Estonia_Three_Years_Later|Estonia Three Years Later]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]]
|-
| Shah, Shashi K.||2004||[[The_Evolving_Landscape_of_Maritime_Cybersecurity|The Evolving Landscape of Maritime Cybersecurity]]||Yes||Journal Article||3.3.1 [[Public Critical Infrastructure]], 3.3.2.3 [[Transportation]]
|-
| Sklerov, Matthew J. ||2009||[[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks|Solving the Dilemma of State Responses to Cyberattacks ]]||Yes||Journal Article ||3.2.1 [[States]], 4.8 [[Attribution]], 5.5 [[International Law (including Laws of War)]]
|-
| Sofaer, Abraham; Clark, David; and Diffie, Whitfield||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059440.pdf Cyber Security and International Cooperation ]||No||Journal Article||5.1 [[Regulation/Liability]], 5.4 [[International Cooperation]], 5.5 [[International Law (including Laws of War)]]
|-
| Software and Information Industry Association (SAII) ||2011-07-26||[http://www.siia.net/index.php?option=com_docman&task=doc_download&gid=3040&Itemid=318 Guide to Cloud Computing for Policy Makers ]||No||Independent Report ||3.3.3.3 [[Cloud Computing]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| Stohl, Michael ||2006||[[Cyber_Terrorism|Cyber Terrorism ]]||Yes||Journal Article ||3.2.3 [[Hacktivists]], 3.2.4 [[Terrorists]], 4.5 [[Psychology and Politics]]
|-
| Stuart Madnick et al.||2009||[[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security|Experiences and Challenges with Using CERT Data to Analyze International Cyber Security]]||Yes||Journal Article||4.6 [[Information Sharing/Disclosure]], 5.4 [[International Cooperation]]
|-
| Swire, Peter P. ||2004||[[A_Model_for_When_Disclosure_Helps_Security|A Model for When Disclosure Helps Security ]]||Yes||Journal Article ||4.2.2 [[Incentives]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Swire, Peter P. ||2006||[[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons|A Theory of Disclosure for Security and Competitive Reasons ]]||Yes||Journal Article ||4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| Symantec||2011-10-24||[http://www.symantec.com/connect/w32_duqu_precursor_next_stuxnet W32.Duqu: The Precursor to the Next Stuxnet ]||No||Industry Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Symantec Corporation ||2010||[[Symantec_Global_Internet_Security_Threat_Report|Symantec Global Internet Security Threat Report ]]||Yes||Industry Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| Telang, Rahul ||2007||[[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors|Impact of Software Vulnerability Announcements on the Market Value of Software Vendors ]]||Yes||Journal Article ||4.1 [[Metrics]], 4.2 [[Economics of Cybersecurity]], 4.6 [[Information Sharing/Disclosure]]
|-
| Theohary, Catherine A. and Rollins, John||2010||[[Cybersecurity:_Current_Legislation,_Executive_Branch_Initiatives,_and_Options_for_Congress|Cybersecurity: Current Legislation, Executive Branch Initiatives, and Options for Congress]]||Yes||U.S. Government Report||4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Thom, Maxie ||2006||[[Information_Warfare_Arms_Control| Information Warfare Arms Control: Risks and Costs]]||Yes||Journal Article||3.2.1 [[States]], 4.12 [[Cyberwar]], 5. [[Approaches]]
|-
| Thomas, Rob ||2006||[[The_Underground_Economy|The Underground Economy ]]||Yes||Journal Article ||3.2.5 [[Criminals and Criminal Organizations]], 3.3.2.2 [[Financial Institutions and Networks]], 4.11 [[Cybercrime]]
|-
| Threat Level Blog (Wired) ||2010-12-27||[http://www.wired.com/threatlevel/2010/12/a-four-day-dive-into-stuxnets-heart/ A Four-Day Dive Into Stuxnet’s Heart ]||No||Independent Report||3. [[Threats and Actors]], 5.7 [[Technology]]
|-
| Todd, Graham H. ||2009||[[Armed_Attack_in_Cyberspace|Armed Attack in Cyberspace ]]||Yes||Journal Article ||3.2.1 [[States]], 4.8 [[Attribution]], 5.5 [[International Law (including Laws of War)]]
|-
| Trend Micro Incorporated ||2010||[[Trend_Micro_Annual_Report|Trend Micro Annual Report ]]||Yes||Industry Report ||4.11 [[Cybercrime]]
|-
| U.S. Air Force ||2010-07-15||[http://www.e-publishing.af.mil/shared/media/epubs/afdd3-12.pdf Cyberspace Operations: Air Force Doctrine Document 3-12 ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. Army War College ||2011-05-09||[http://www.strategicstudiesinstitute.army.mil/pubs/display.cfm?pubid=10670 Cyber Infrastructure Protection ]||No||U.S. Government Report||
|-
| U.S. Army War College, Strategy Research Project ||2011-03-24||[http://www.dtic.mil/dtic/tr/fulltext/u2/a552990.pdf China’s Cyber Power and America’s National Security ]||No||U.S. Government Report||3.2.1 [[States]], 4.13 [[Espionage]], 5.3 [[Government Organizations]]
|-
| U.S. Department of Energy, Infrastructure Security and Energy Restoration ||2007-01-01||[http://www.oe.netl.doe.gov/docs/prepare/21stepsbooklet.pdf 21 Steps to Improve Cyber Security of SCADA Networks ]||No||U.S. Government Report||3.3 [[Security Targets]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. Deputy Secretary of Defense, William J. Lynn (Foreign Affairs) ||2010-009||[http://www.foreignaffairs.com/articles/66552/william-j-lynn-iii/defending-a-new-domain Defending a New Domain ]||No||U.S. Government Report ||
|-
| U.S. House Committee on Appropriations (closed/classified) (Subcommittee on Energy and Power)||2011-03-31||[http://www.dhs.gov/ynews/testimony/testimony_1301595025263.shtm Budget Hearing - National Protection and Programs Directorate, Cybersecurity and Infrastructure Protection Programs ]||No||U.S. Government Hearing||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-02-11||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=90d8a16a-23b7-4b9c-a732-cb10ab20e579&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=2&YearDisplay=2011 What Should the Department of Defense’s Role in Cyber Be?]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-03-16||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=79ce7b4c-f88b-40bf-9540-efdb3a2d26b2&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=3&YearDisplay=2011 2012 Budget Request from U.S. Cyber Command]||No||U.S. Government Hearing||3.3.1.2 [[Military Networks (.mil)]], 4.2 [[Economics of Cybersecurity]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-11-03||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=42c170fb-8e0c-453a-81a2-f4ee3fa89283&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=11&YearDisplay=2011 Institutionalizing Irregular Warfare Capabilities]||No||U.S. Government Hearing||4.12 [[Cyberwar]]
|-
| U.S. House Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2012-03-20||[http://armedservices.house.gov/index.cfm/hearings-display?ContentRecord_id=92823c77-38f0-4c20-a3ee-36729e8e19a3&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=64562e79-731a-4ac6-aab0-7bd8d1b7e890&MonthDisplay=3&YearDisplay=2012 Fiscal 2013 Defense Authorization: IT and Cyber Operations]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce||2011-05-31||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8639 Protecting the Electric Grid: the Grid Reliability and Infrastructure Defense Act]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Commerce, Manufacturing, and Trade)||2011-06-02||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8653 Sony and Epsilon: Lessons for Data Security Legislation]||No||U.S. Government Hearing||4.9 [[Identity Management]], 5.1 [[Regulation/Liability]], 5.2 [[Private Efforts/Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Commerce,Trade and Manufacturing)||2011-06-15||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8693 Discussion Draft of H.R. ___, a bill to require greater protection for sensitive consumer data and timely notification in case of breach]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Communications and Technology)||2012-03-07||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9342 Cybersecurity:Networks The Pivotal Role of Communications]||No||U.S. Government Hearing||3.3.3 [[Communications]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Communications and Technology)||2012-03-28||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9397 Cybersecurity:Threats to Communications Networks and Public-Sector Responses]||No||U.S. Government Hearing||3.3.3 [[Communications]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2011-07-26||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=8824 Cybersecurity: Infrastructure An Overview of Risks to Critical]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2012-02-28||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9318 Critical Infrastructure Cybersecurity: Assessments of Smart Grid Security]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.2.1 [[Risk Management and Investment]]
|-
| U.S. House Committee on Energy and Commerce (Subcommittee on Oversight and Investigations)||2012-03-27||[http://energycommerce.house.gov/hearings/hearingdetail.aspx?NewsID=9393 IT Supply Chain Security: Review of Government and Industry Efforts]||No||U.S. Government Hearing||4.3 [[Supply Chain Issues]]
|-
| U.S. House Committee on Financial Services (field hearing in Hoover, AL)||2011-06-29||[http://financialservices.house.gov/Calendar/EventSingle.aspx?EventID=246611 Field Hearing: Hacked Off: Helping Law Enforcement Protect Private Financial Information]||No||U.S. Government Hearing||3.3.2.2 [[Financial Institutions and Networks]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Financial Services (Subcommittee on Financial Institutions and Consumer Credit)||2011-09-14||[http://financialservices.house.gov/Calendar/EventSingle.aspx?EventID=258792 Combating Cybercriminals]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 3.3.2.2 [[Financial Institutions and Networks]], 5.7 [[Government Organizations]]
|-
| U.S. House Committee on Foreign Affairs (Subcommittee on Oversight and Investigations)||2011-04-15||[http://foreignaffairs.house.gov/hearing_notice.asp?id=1279 Communist Chinese Cyber-Attacks, Cyber-Espionage and Theft of American Technology]||No||U.S. Government Hearing||3.2.1 [[States]], 4.12 [[Cyberwar]], 4.13 [[Espionage]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies and Counterterrorism and Intelligence)||2012-04-19||[http://homeland.house.gov/hearing/subcommittee-hearing-dhs-and-doe-national-labs-finding-efficiencies-and-optimizing-outputs The DHS and DOE National Labs: Finding Efficiencies and Optimizing Outputs in Homeland Security Research and Development]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies and Counterterrorism and Intelligence)||2012-04-26||[http://homeland.house.gov/hearing/joint-subcommittee-hearing-iranian-cyber-threat-us-homeland Iranian Cyber Threat to U.S. Homeland]||No||U.S. Government Hearing||3.2.1 [[States]], 3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-02-11||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9Cpreventing-chemical-terrorism-building-foundation-security-our-nation Preventing Chemical Terrorism: Building a Foundation of Security at Our Nation’s Chemical Facilities]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-03-16||[http://homeland.house.gov/hearing/subcommittee-hearing-examining-cyber-threat-critical-infrastructure-and-american-economy Examining the Cyber Threat to Critical Infrastructure and the American Economy]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.3 [[Security Targets]], 4.2 [[Economics of Cybersecurity]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-04-15||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9C-dhs-cybersecurity-mission-promoting-innovation-and-securing-critical DHS Cybersecurity Mission: Promoting Innovation and Securing Critical Infrastructure]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-06-24||[http://homeland.house.gov/hearing/subcommittee-hearing-examining-homeland-security-impact-obamaadministrations-cybersecurity Examining the Homeland Security Impact of the Obama Administration’s Cybersecurity Proposal]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2011-12-06||[http://homeland.house.gov/hearing/subcommittee-hearing-hearing-draft-legislative-proposal-cybersecurity Hearing on Draft Legislative Proposal on Cybersecurity]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technologies)||2012-02-01||[http://homeland.house.gov/markup/subcommittee-markup-hr-3674 Consideration and Markup of H.R. 3674]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection and Security Technology)||2011-10-06||[http://homeland.house.gov/hearing/cloud-computing-what-are-security-implications Cloud Computing: What are the Security Implications?]||No||U.S. Government Hearing||3.3.3.3 [[Cloud Computing]], 4.13 [[Espionage]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies)||2011-05-26||[http://homeland.house.gov/hearing/subcommittee-hearing-%E2%80%9Cunlocking-safety-act%E2%80%99s-potential-promote-technology-and-combat Unlocking the SAFETY Act’s Potential to Promote Technology and Combat Terrorism ]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Homeland Security (Subcommittee on Oversight, Investigations and Management)||2012-04-24||[http://homeland.house.gov/hearing/subcommittee-hearing-america-under-cyber-attack-why-urgent-action-needed America is Under Cyber Attack: Why Urgent Action is Needed]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.2 [[Actors and Incentives]]
|-
| U.S. House Committee on Oversight and Government Reform||2011-07-07||[http://oversight.house.gov/hearing/cybersecurity-assessing-the-nations-ability-to-address-the-growing-cyber-threat/ Cybersecurity: Assessing the Nation’s Ability to Address the Growing Cyber Threat]||No||U.S. Government Hearing||3.3 [[Security Targets]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| U.S. House Committee on Oversight and Government Reform (Subcommittee on National Security, Homeland Defense and Foreign Operations)||2011-05-25||[http://oversight.house.gov/hearing/cybersecurity-assessing-the-immediate-threat-to-the-united-states/ Cybersecurity: Assessing the Immediate Threat to the United States]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 3.3.1 [[Public Critical Infrastructure]], 4.7 [[Public-Private Cooperation]]
|-
| U.S. House Committee on Science, Space and Technology||2011-07-21||[http://science.house.gov/markup/full-committee-%E2%80%93-markup Markup on H.R. 2096, Cybersecurity Enhancement Act of 2011]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space and Technology (Subcommittee on Research and Science Education)||2011-05-25||[http://science.house.gov/hearing/subcommittee-research-and-science-education-subcommittee-technology-and-innovation-%E2%80%93-joint Protecting Information in the Digital Age: Federal Cybersecurity Research and Development Efforts]||No||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space, and Technology (Subcommittee on Investigations and Oversight)||2012-02-29||[http://science.house.gov/hearing/subcommittee-investigations-and-oversight-hearing-nasa-cybersecurity-examination-agency%E2%80%99s NASA Cybersecurity: An Examination of the Agency’s Information Security]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| U.S. House Committee on Science, Space, and Technology (Subcommittee on Technology and Innovation)||2011-09-21||[http://science.house.gov/hearing/technology-and-innovation-subcommittee-hearing-cloud-computing The Cloud Computing Outlook]||No||U.S. Government Hearing||3.3.3.3 [[Cloud Computing]], 4.7 [[Public-Private Cooperation]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on Small Business (Subcommittee on Healthcare and Technology)||2011-12-01||[http://smallbusiness.house.gov/Calendar/EventSingle.aspx?EventID=270278 Cyber Security: Protecting Your Small Business]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on the Judiciary||2011-11-16||[http://judiciary.house.gov/hearings/hear_11162011.html Combating Online Piracy (H.R. 3261, Stop the Online Piracy Act)]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| U.S. House Committee on the Judiciary (Subcommittee on Crime, Terrorism and Homeland Security)||2011-11-15||[http://judiciary.house.gov/hearings/hear_11152011.html Cybersecurity: Protecting America’s New Frontier]||No||U.S. Government Hearing||4.10 [[Privacy]], 4.11 [[Cybercrime]]
|-
| U.S. House Committee on the Judiciary (Subcommittee on Intellectual Property, Competition and the Internet)||2011-05-25||[http://judiciary.house.gov/hearings/hear_05252011.html Cybersecurity: Problems Innovative Solutions to Challenging]||No||U.S. Government Hearing||4.7 [[Public-Private Cooperation]], 4.11 [[Cybercrime]], 5.2 [[Private Efforts/Organizations]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-02-10||[https://intelligence.house.gov/hearing/full-committee-world-wide-threats-hearing World Wide Threats]||No||U.S. Government Hearing||3.1 [[The Threat and Skeptics]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-10-04||[https://intelligence.house.gov/hearing/cyber-threats-and-ongoing-efforts-protect-nation Cyber Threats and Ongoing Efforts to Protect the Nation]||No||U.S. Government Hearing||4.7 [[Public-Private Cooperation]], 4.13.2 [[Industrial|Industrial Espionage]], 5.4 [[International Cooperation]]
|-
| U.S. House Permenant Select Committee on Intelligence||2011-12-01||[https://intelligence.house.gov/markup/mark-hr-xxxx-%E2%80%9Ccyber-intelligence-sharing-and-protection-act-2011%E2%80%9D Markup: Draft Bill: Cyber Intelligence Sharing and Protection Act of 2011]||No||U.S. Government Hearing||4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Navy ||2010-06-17||[http://www.doncio.navy.mil/PolicyView.aspx?ID=1804 DON (Department of the Navy) Cybersecurity/Information Assurance Workforce Management, Oversight and Compliance ]||No||U.S. Government Report ||3.3.1.2 [[Military Networks (.mil)]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Armed Services||2012-03-27||[http://armed-services.senate.gov/e_witnesslist.cfm?id=5283 To receive testimony on U.S. Strategic Command and U.S. Cyber Command in review of the Defense Authorization Request for Fiscal Year 2013 and the Future Years Defense Program.]||No||U.S. Government Hearing||3.2.1 [[States]], 4.2 [[Economics of Cybersecurity]], 4.12 [[Cyberwar]]
|-
| U.S. Senate Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2011-05-03||[http://www.armed-services.senate.gov/Transcripts/2011/05%20May/11-31%20-%205-3-11.pdf To receive testimony on the health and status of the defense industrial base and its science and technology-related elements]||No||U.S. Government Hearing||3.3.1.2 [[Military Networks (.mil)]], 4.3 [[Supply Chain Issues]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Armed Services (Subcommittee on Emerging Threats and Capabilities)||2012-03-20||[http://www.armed-services.senate.gov/Transcripts/2012/03%20March/12-14%20-%203-20-12.pdf To receive testimony on cybersecurity research and development in review of the Defense Authorization Request for Fiscal Year 2013 and the Future Years Defense Program]||No||U.S. Government Hearing||4.2.1 [[Risk Management and Investment]], 4.12 [[Cyberwar]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Banking, Housing and Urban Affairs||2011-06-21||[http://banking.senate.gov/public/index.cfm?FuseAction=Hearings.Hearing&Hearing_ID=87487cb2-4710-4c09-a1b0-a9e12cda88f1 Cybersecurity and Data Protection in the Financial Sector]||No||U.S. Government Hearing||3.3.2.2 [[Financial Institutions and Networks]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Commerce, Science and Transportation||2011-06-29||[http://commerce.senate.gov/public/index.cfm?p=Hearings&ContentRecord_id=e2c2a2ca-91d6-48a2-b5ea-b5c4104bdb97&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=b06c39af-e033-4cba-9221-de668ca1978a&MonthDisplay=6&YearDisplay=2011 Privacy and Data Security: Protecting Consumers in the Modern World]||No||U.S. Government Hearing||4.9 [[Identity Management]], 4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Energy and Natural Resources||2011-03-15||[ Cybersecurity and Critical Electric Infrastructure (closed)]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]]
|-
| U.S. Senate Committee on Energy and Natural Resources||2011-05-05||[http://www.energy.senate.gov/public/index.cfm/hearings-and-business-meetings?ID=929c1441-da25-c99d-3e27-af20c29e3b4b Cybersecurity of the Bulk-Power System and Electric Infrastructure]||No||U.S. Government Hearing||3.3.2.1 [[Electricity, Oil and Natural Gas]], 4.7 [[Public-Private Cooperation]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-02-17||[http://www.hsgac.senate.gov/hearings/the-homeland-security-departments-budget-submission-for-fiscal-year-2012 Homeland Security Department’s Budget Submission for Fiscal Year 2012]||No||U.S. Government Hearing||
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-03-10||[http://www.hsgac.senate.gov/hearings/information-sharing-in-the-era-of-wikileaks-balancing-security-and-collaboration Information Sharing in the Era of WikiLeaks: Balancing Security and Collaboration]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2011-05-23||[http://www.hsgac.senate.gov/hearings/protecting-cyberspace-assessing-the-white-house-proposal Protecting Cyberspace: Assessing the White House Proposal]||No||U.S. Government Hearing||3.3 [[Security Targets]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Homeland Security and Governmental Affairs||2012-02-16||[http://www.hsgac.senate.gov/hearings/securing-americas-future-the-cybersecurity-act-of-2012 Securing America’s Future: The Cybersecurity Act of 2012]||No||U.S. Government Hearing||3.3.2 [[Private Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary||2011-03-30||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da1697f72 Oversight of the Federal Bureau of Investigation]||No||U.S. Government Hearing||3. [[Threats and Actors]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Judiciary||2011-09-07||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=3d9031b47812de2592c3baeba629084b Cybercrime: Updating the Computer Fraud and Abuse Act to Protect Cyberspace and Combat Emerging Threats]||No||U.S. Government Hearing||3.11 [[Cybercrime]], 4.13.2 [[Industrial|Industrial Espionage]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary||2012-03-13||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=8b30fa475a5089d793576cd947089793 The Freedom of Information Act: Safeguarding Critical Infrastructure Information and the Public’s Right to Know]||No||U.S. Government Hearing||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary (Subcommittee on Crime and Terrorism)||2011-04-12||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da16a9959 Cyber Security: Responding to the Threat of Cyber Crime and Terrorism]||No||U.S. Government Hearing||4.11 [[Cybercrime]], 5.1 [[Regulation/Liability]]
|-
| U.S. Senate Committee on Judiciary (Subcommittee on Crime and Terrorism)||2011-06-21||[http://www.judiciary.senate.gov/hearings/hearing.cfm?id=e655f9e2809e5476862f735da16e1bbe Cybersecurity: Evaluating the Administration’s Proposals]||No||U.S. Government Hearing||1. [[Overview]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| U.S. Senate Committee on Small Business and Entrepreneurship||2011-07-25||[http://www.sbc.senate.gov/public/index.cfm?p=Hearings&ContentRecord_id=6b4d51de-dd67-434b-869f-a717b315e6c2&ContentType_id=14f995b9-dfa5-407a-9d35-56cc7152a7ed&Group_id=43eb5e02-e987-4077-b9a7-1e5a9cf28964&MonthDisplay=7&YearDisplay=2011 Role of Small Business in Strengthening Cybersecurity Efforts in the United States]||No||U.S. Government Hearing||4.2.2 [[Incentives]], 4.7 [[public-Private Cooperation]]
|-
| United States Secret Service ||2004||[[Insider_Threat_Study|Insider Threat Study ]]||Yes||U.S. Government Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.2.2 [[Incentives]], 4.4 [[Usability/Human Factors]]
|-
| University of Southern California (USC) Information Sciences Institute, University of California Berkeley (UCB), McAfee Research ||2011-01-13||[http://www.isi.edu/deter/news/news.php?story=20 Design of the DETER Security Testbed ]||No||Independent Report||5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| van Eeten, Michael and Bauer, Johannes M.||2009||[[Emerging_Threats_to_Internet_Security|Emerging Threats to Internet Security: Incentives, Externalities and Policy Implications]]||Yes||Journal Article||3.3.1.1 [[Government Networks (.gov)]], 4.2 [[Economics of Cybersecurity]], 4.11 [[Cybercrime]]
|-
| van Eeten, Michel J. G. ||2008||[[Economics_of_Malware|Economics of Malware ]]||Yes||Non-U.S. Government Report ||4.2 [[Economics of Cybersecurity]]
|-
| Varian, Hal ||2000||[[Managing_Online_Security_Risks|Managing Online Security Risks ]]||Yes||Article ||4.2 [[Economics of Cybersecurity]], 4.2.1 [[Risk Management and Investment]]
|-
| Varian, Hal ||2004||[[System_Reliability_and_Free_Riding|System Reliability and Free Riding ]]||Yes||Book ||4.2 [[Economics of Cybersecurity]]
|-
| Vatis, Michael A.||2010||[http://sites.nationalacademies.org/xpedio/groups/cstbsite/documents/webpage/cstb_059441.pdf The Council of Europe Convention on Cybercrime]||No||Journal Article||4.11 [[Cybercrime]], 5.5 [[International Law (including Laws of War)]], 5.6 [[Deterrence]]
|-
| Verizon ||2010||[[2010_Data_Breach_Investigations_Report|2010 Data Breach Investigations Report ]]||Yes||Industry Report ||3.3.2.2 [[Financial Institutions and Networks]], 4.11 [[Cybercrime]], 5.2 [[Private Efforts/Organizations]]
|-
| Watts, Sean ||2010||[[Combatant_Status_and_Computer_Network_Attack|Combatant Status and Computer Network Attack ]]||Yes||Journal Article ||3.2.1 [[States]], 4.12 [[Cyberwar]], 5.5 [[International Law (including Laws of War)]]
|-
| White House||2009||[http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf Cyberspace Policy Review: Assuring a Trusted and Resilient Information and Communications Infrastructure]||No||U.S. Government Report||1. [[Overview]], 4.7 [[Public-Private Cooperation]]
|-
| White House||2011-04||[http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf National Strategy for Trusted Identities in Cyberspace: Enhancing Online Choice, Efficiency, Security, and Privacy]||No||U.S. Government Report||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]]
|-
| White House||2011-05||[http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf International Strategy for Cyberspace: Prosperity, Security, and Openness in a Networked World]||No||U.S. Government Report||1. [[Overview]]
|-
| White House||2012-01||[http://www.whitehouse.gov/sites/default/files/national_strategy_for_global_supply_chain_security.pdf National Strategy for Global Supply Chain Security]||No||U.S. Government Report||4.3 [[Supply Chain Issues]]
|-
| White House||2012-02||[http://www.whitehouse.gov/sites/default/files/privacy-final.pdf Consumer Data Privacy in a Networked World: A Framework for Protecting Privacy and Promoting Innovation in the Global Digital Economy]||No||U.S. Government Report||4.10 [[Privacy]], 5.1 [[Regulation/Liability]]
|-
| White House ||2010-12-16||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/pcast-nitrd-report-2010.pdf Designing A Digital Future: Federally Funded Research And Development In Networking And Information Technology ]||No||U.S. Government Report||3.3.1 [[Public Critical Infrastructure]], 4. [[Issues]], 5. [[Approaches]]
|-
| White House ||2011-02-13||[http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf Federal Cloud Computing Strategy ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House ||2011-04-15||[http://www.whitehouse.gov/the-press-office/2011/04/15/administration-releases-strategy-protect-online-consumers-and-support-in Administration Releases Strategy to Protect Online Consumers and Support Innovation and Fact Sheet on National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House ||2011-04-15||[http://www.whitehouse.gov/sites/default/files/rss_viewer/NSTICstrategy_041511.pdf National Strategy for Trusted Identities in Cyberspace ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House ||2003||[[The_National_Strategy_to_Secure_Cyberspace|The National Strategy to Secure Cyberspace ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| White House ||2009||[[Cyberspace_Policy_Review|Cyberspace Policy Review ]]||Yes||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 5.2 [[Private Efforts/Organizations]], 5.3 [[Government Organizations]]
|-
| White House ||2010||[[The_Comprehensive_National_Cybersecurity_Initiative|The Comprehensive National Cybersecurity Initiative ]]||Yes||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 3.3.2 [[Private Critical Infrastructure]], 5.3 [[Government Organizations]]
|-
| White House (Office of Science & Technology Policy) ||2010-12-06||[http://www.whitehouse.gov/blog/2010/12/06/partnership-cybersecurity-innovation Partnership for Cybersecurity Innovation ]||No||U.S. Government Report||3.3.2.2 [[Financial Institutions and Networks]], 4.7 [[Public-Private Cooperation]], 5.3 [[Government Organizations]]
|-
| White House/Office of Management and Budget (OMB) ||2011-12-08||[http://www.cio.gov/fedrampmemo.pdf Security Authorization of Information Systems in Cloud Computing Environments (FedRAMP) ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2009-05-29||[http://www.whitehouse.gov/assets/documents/Cyberspace_Policy_Review_final.pdf Cyberspace Policy Review: Assuring a Trusted and Resilient Communications Infrastructure ]||No||U.S. Government Report ||4. [[Issues]], 5. [[Approaches]]
|-
| White House/OMB||2010-03-02||[http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative (CNCI) ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2010-06-25||[http://www.dhs.gov/xlibrary/assets/ns_tic.pdf The National Strategy for Trusted Identities in Cyberspace: Creating Options for Enhanced Online Security and Privacy ]||No||U.S. Government Report ||4.7 [[Public-Private Cooperation]], 4.9 [[Identity Management]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2010-07-06||[http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-28.pdf Clarifying Cybersecurity Responsibilities ]||No||U.S. Government Report ||5.3 [[Government Organizations]]
|-
| White House/OMB||2010-12-09||[http://www.cio.gov/documents/25-Point-Implementation-Plan-to-Reform-Federal%20IT.pdf 25 Point Implementation Plan to Reform Federal Information Technology Management ]||No||U.S. Government Report ||4.2 [[Economics of Cybersecurity]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2011-02-13||[http://www.cio.gov/documents/Federal-Cloud-Computing-Strategy.pdf Federal Cloud Computing Strategy ]||No||U.S. Government Report ||3.3.3.3 [[Cloud Computing]], 5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| White House/OMB||2011-05-12||[http://www.whitehouse.gov/the-press-office/2011/05/12/fact-sheet-cybersecurity-legislative-proposal Cybersecurity Legislative Proposal (Fact Sheet) ]||No||U.S. Government Report ||4. [[Issues]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-05-16||[http://www.whitehouse.gov/sites/default/files/rss_viewer/international_strategy_for_cyberspace.pdf International Strategy for Cyberspace ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]], 5.4 [[International Cooperation]]
|-
| White House/OMB||2011-09-14||[http://www.whitehouse.gov/sites/default/files/omb/memoranda/2011/m11-33.pdf FY 2012 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Managementa ]||No||U.S. Government Report ||4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-10-07||[http://www.whitehouse.gov/the-press-office/2011/10/07/executive-order-structural-reforms-improve-security-classified-networks- Structural Reforms to Improve the Security of Classified Networks and the Responsible Sharing and Safeguarding of Classified Information ]||No||U.S. Government Report ||3.3.1 [[Public Critical Infrastructure]], 4.6 [[Information Sharing/Disclosure]], 5.3 [[Government Organizations]]
|-
| White House/OMB||2011-12-06||[http://www.whitehouse.gov/sites/default/files/microsites/ostp/fed_cybersecurity_rd_strategic_plan_2011.pdf Trustworthy Cyberspace: Strategic Plan for the Federal Cybersecurity Research and Development Program ]||No||U.S. Government Report ||5.3 [[Government Organizations]], 5.7 [[Technology]]
|-
| Wilshusen, Gregory C. and Powner, David A.||2009||[[Continued_Efforts_are_Needed_to_Protect_Information_Systems_from_Evolving_Threats|Continued Efforts Are Needed to Protect Information Systems from Evolving Threats]]||Yes||U.S. Government Hearing||3.3.1.1 [[Government Networks (.gov)]], 5.1 [[Regulation/Liability]], 5.3 [[Government Organizations]]
|-
| Wilson, Clay||2007-03-20||[http://www.fas.org/sgp/crs/natsec/RL31787.pdf Information Operations, Electronic Warfare, and Cyberwar: Capabilities and Related Policy Issues]||No||U.S. Government Report||3.3 [[Security Targets]], 4.12 [[Cyberwar]]
|-
| Zittrain, Jonathan L. ||2008||[[The_Future_of_the_Internet_and_How_To_Stop_It|The Future of the Internet and How To Stop It ]]||Yes||Book ||4.4 [[Usability/Human Factors]], 5.1 [[Regulation/Liability]]
|-
| Centre for Secure Information Technologies||2012||[http://www.csit.qub.ac.uk/sites/CSIT/InnovationatCSIT/Reports/Filetoupload,295595,en.pdf 2nd World Cyber security Technology Research Summit (Belfast 2012)]||No||Independent Report||
|}

Adding a Reference

2012-08-09T21:30:56Z

Gili:

{{Header_Message|message=This page is undergoing revision, thank you for your patience.}}

TrialMainPage

2012-08-09T21:28:31Z

Gili: Replaced content with "{{Header_Message|message=This page is for trying out ideas for the main page of the wiki.}}"

{{Header_Message|message=This page is for trying out ideas for the main page of the wiki.}}

Main Page

2012-08-09T21:15:23Z

Gili:

__NOTOC__

{|align="center" style="text-align:center; background-color:white" class="wikitable" width="100%"
!colspan="5"|Navigation
|-align="center" valign="bottom"
|style="width: 20%"|[[File:toc_icon.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Table_of_Contents]] Table of Contents
|style="width: 20%"|[[File:All_articles3.svg‎|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Cybersecurity_Annotated_Bibliography]] List of All Articles
|style="width: 20%"|[[File:case_studies.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Category:Case_Studies]] Case Studies
|style="width: 20%"|[[File:h2o_icon.svg|105x105px|link=http://h2odev.law.harvard.edu/playlists/633]] Suggested Syllabi (H2O)
|style="width: 20%"|[[File:Help_icon4.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Help]] How to Use this Wiki
|}

==Introduction==
This Cybersecurity wiki provides a set of evolving resources on [[Cybersecurity_Overview|cybersecurity, broadly defined]], and includes an '''[[Cybersecurity_Annotated_Bibliography|annotated list]]''' of relevant articles and literature, which can be searched in a number of ways. Please [[#Navigation|see below]]. It is intended as a tool/resource for researchers, technologists, students, policy-makers and others who are interested in cybersecurity issues more broadly. For more information about this first phase of the project, including the team, methodology, and opportunities to contribute, please see [[About|About the Project]].

If you have feedback, comments, or suggested additional readings/resources, please contact: [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu]. 

Prior to suggesting material for inclusion in the wiki, please consult the [[Submitting Feedback]] page.

==Navigation==
===Table of Contents===
The quickest way to get started is by using the [[Table of Contents]] as a guide to searching articles by type or category. Some of the articles have wiki entries whcih include a synopsis, full bibliographic information, and additional relevant notes.

===List of All Articles===
You might also wish to consult the [[Cybersecurity Annotated Bibliography|list of all articles]] and use the [[Help#How_to_Use_the_Filter|filtering tool]] to receive customized search results by type, category, or a free text search term.

===Case Studies===
The [[:Category:Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

===Selected Syllabi (H2O)===
The [http://h2odev.law.harvard.edu/playlists/633 Suggested Syllabi] section uses the [http://cyber.law.harvard.edu/research/h2o H2O] platform to feature a selection of playlists for instruction. H2O is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

===How to Use this Wiki===
For a full explanation of how to browse the wiki, please consult the [[Help]] page.

Category:Case Studies

2012-08-09T21:15:03Z

Gili:

{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]
* [[Israeli Trojan Horse]]

==Cybercrime==
* [[Albert Gonzalez]]
** [[TJX Financial Data Thefts]]
* [[Invita]]

==Hacktivism==
===Patriotic===
* [[th3j35t3r]]

===Anarchists===
* [[Anonymous]]

Category:Case Studies

2012-08-09T21:14:25Z

Gili:

Category:Case Studies

2012-08-09T21:13:59Z

Gili:

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]
* [[Israeli Trojan Horse]]

==Cybercrime==
* [[Albert Gonzalez]]
** [[TJX Financial Data Thefts]]
* [[Invita]]

==Hacktivism==
===Patriotic===
* [[th3j35t3r]]

===Anarchists===
* [[Anonymous]]

Category:Case Studies

2012-08-08T19:58:42Z

Gili:

Anonymous

2012-08-08T15:36:25Z

Gili: Created page with "{{Header_Message}} ==Case Summary== ==Recommended Literature== * [http://en.wikipedia.org/wiki/Anonymous_(group) Wikipedia entry] * Saki Knafo, [http://www.huffingtonpost.co..."

{{Header_Message}}

==Case Summary==

==Recommended Literature==
* [http://en.wikipedia.org/wiki/Anonymous_(group) Wikipedia entry]
* Saki Knafo, [http://www.huffingtonpost.com/2012/01/30/anonymous-internet-war_n_1233977.html Anonymous And The War Over The Internet, Part I], Huffington Post, Jan 30, 2012.
* Saki Knafo, [http://www.huffingtonpost.com/2012/01/31/anonymous-war-over-internet_n_1237058.html Anonymous And The War Over The Internet, Part II], Huffington Post, Jan 31, 2012.

[[Category:Case Studies]]

Category:Case Studies

2012-08-08T15:27:05Z

Gili: /* Hacktivism */

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]
* [[Israeli Trojan Horse]]

==Cybercrime==
* [[Invita]]
* [[TJX Financial Data Thefts]]

==Hacktivism==
===Patriotic===

===Anarchists===
* [[Anonymous]]

===Vigilantes===

TJX Financial Data Thefts

2012-08-08T15:23:49Z

Gili: Created page with "{{Header_Message}} ==Case Summary== At various dates between July 2005 and January 2006, intruders used access to systems within the corporate network of TJX Companies, Inc.,..."

{{Header_Message}}

==Case Summary==
At various dates between July 2005 and January 2006, intruders used access to systems within the corporate network of TJX Companies, Inc., to obtain and exfiltrate 45.7 million payment card (i.e., credit or debit card) records. In March 2007, six suspects were arrested, with four more at large, all believed to be involved in the data theft and an elaborate scheme for using the stolen data to make an estimated $8 million in purchases of gift cards and electronics equipment.
:''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. pp355)''

==Recommended Literature==
* [http://en.wikipedia.org/wiki/TJX_Companies#Computer_systems_intrusion Wikipedia entry]
* Jenn Abelson, [http://www.boston.com/business/globe/articles/2007/03/29/breach_of_data_at_tjx_is_called_the_biggest_ever/ Breach of Data at TJX Is Called the Biggest Ever: Stolen Numbers Put at 45.7 Million], Mar 29, 2007.

[[Category:Case Studies]]

Category:Case Studies

2012-08-08T15:16:20Z

Gili:

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]
* [[Israeli Trojan Horse]]

==Cybercrime==
* [[Invita]]
* [[TJX Financial Data Thefts]]

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

Category:Case Studies

2012-08-08T15:11:40Z

Gili:

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]
* [[Israeli Trojan Horse]]

==Cybercrime==
* [[Invita]]

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

Israeli Trojan Horse

2012-08-08T15:10:39Z

Gili:

{{Header_Message}}

==Case Summary==
In 2005, a couple were arrested in Britain on charges of creating a Trojan horse key logger and installing it on systems at dozens of sites by way of CD-ROMs containing what was purported to be a business proposal. This has been described as the largest industrial espionage case in Israeli history. The espionage activity was primarily targeted at competitors to the clients of three private investigation firms, at a cost of approximately $4,000 per compromised computer. Eighteen people were arrested and questioned in the case; however, it was primarily just a couple and their 17-year-old son who were responsible for software production, distribution, and data collection services.
:''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. pp351-2)''

==Recommended Literature==
* BBC, [http://news.bbc.co.uk/2/hi/middle_east/4594255.stm Israeli firms 'ran vast spy ring'] , May 31, 2005.
* Bob Sullivan, [http://www.msnbc.msn.com/id/8145520/ Israel Espionage Case Points to New Net Threat], Jun 9, 2005.

[[Category:Case Studies]]

Israeli Trojan Horse

2012-08-08T15:09:40Z

Gili:

Israeli Trojan Horse

2012-08-08T15:08:56Z

Gili:

Israeli Trojan Horse

2012-08-08T15:07:44Z

Gili: Created page with "{{Header_Message}} ==Case Summary== In 2005, a couple were arrested in Britain on charges of creating a Trojan horse key logger and installing it on systems at dozens of site..."

Category:Case Studies

2012-08-08T14:35:42Z

Gili:

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]

==Cybercrime==
* [[Invita]]
* [[Israeli Trojan Horse]]

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

Invita

2012-08-08T14:16:41Z

Gili:

{{Header_Message}}

==Case Summary==
In 2001, the FBI arrested two Russians, Alexey Ivanov, 21, and Vasily Gorshkov, 25, who were accused of breaking into dozens of sites ranging from Internet service providers to banks. Where they found financial records they could steal, they stole financial records. Where they couldn’t, they contacted the sites saying they knew about a recent break-in and offered their services to remediate the problems or they threatened to release other information stolen from the site to damage the victim’s public reputation.
:''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. p350)''

==Recommended Literature==
* [http://en.wikipedia.org/wiki/United_States_v._Ivanov Wikipedia entry] (United States v. Ivanov)
* Art Jahnke, [http://www.csoonline.com/article/219964/alexey-ivanov-and-vasiliy-gorshkov-russian-hacker-roulette Russian Roulette], 2005.
* Department of Justice, [http://www.justice.gov/criminal/cybercrime/press-releases/2002/gorshkovSent.htm Russian Computer Hacker Sentenced to Three Years in Prison], 2002.

[[Category:Case Studies]]

Invita

2012-08-08T14:16:26Z

Gili:

{{Header_Message}}

==Case Summary==
In 2001, the FBI arrested two Russians, Alexey Ivanov, 21, and Vasily Gorshkov, 25, who were accused of breaking into dozens of sites ranging from Internet service providers to banks. Where they found financial records they could steal, they stole financial records. Where they couldn’t, they contacted the sites saying they knew about a recent break-in and offered their services to remediate the problems or they threatened to release other information stolen from the site to damage the victim’s public reputation.
:''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. p350. )''

==Recommended Literature==
* [http://en.wikipedia.org/wiki/United_States_v._Ivanov Wikipedia entry] (United States v. Ivanov)
* Art Jahnke, [http://www.csoonline.com/article/219964/alexey-ivanov-and-vasiliy-gorshkov-russian-hacker-roulette Russian Roulette], 2005.
* Department of Justice, [http://www.justice.gov/criminal/cybercrime/press-releases/2002/gorshkovSent.htm Russian Computer Hacker Sentenced to Three Years in Prison], 2002.

[[Category:Case Studies]]

Invita

2012-08-08T14:16:17Z

Gili:

{{Header_Message}}

==Case Summary==
In 2001, the FBI arrested two Russians, Alexey Ivanov, 21, and Vasily Gorshkov, 25, who were accused of breaking into dozens of sites ranging from Internet service providers to banks. Where they found financial records they could steal, they stole financial records. Where they couldn’t, they contacted the sites saying they knew about a recent break-in and offered their services to remediate the problems or they threatened to release other information stolen from the site to damage the victim’s public reputation.
::''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. p350. )''

==Recommended Literature==
* [http://en.wikipedia.org/wiki/United_States_v._Ivanov Wikipedia entry] (United States v. Ivanov)
* Art Jahnke, [http://www.csoonline.com/article/219964/alexey-ivanov-and-vasiliy-gorshkov-russian-hacker-roulette Russian Roulette], 2005.
* Department of Justice, [http://www.justice.gov/criminal/cybercrime/press-releases/2002/gorshkovSent.htm Russian Computer Hacker Sentenced to Three Years in Prison], 2002.

[[Category:Case Studies]]

Invita

2012-08-08T14:14:17Z

Gili: Created page with "{{Header_Message}} ==Case Summary== In 2001, the FBI arrested two Russians, Alexey Ivanov, 21, and Vasily Gorshkov, 25, who were accused of breaking into dozens of sites rang..."

{{Header_Message}}

==Case Summary==
In 2001, the FBI arrested two Russians, Alexey Ivanov, 21, and Vasily Gorshkov, 25, who were accused of breaking into dozens of sites ranging from Internet service providers to banks. Where they found financial records they could steal, they stole financial records. Where they couldn’t, they contacted the sites saying they knew about a recent break-in and offered their services to remediate the problems or they threatened to release other information stolen from the site to damage the victim’s public reputation.
** ''(Summary from Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities, National Academy of Science, 2009. p350. )''

==Recommended Literature==
* [http://en.wikipedia.org/wiki/United_States_v._Ivanov Wikipedia entry] (United States v. Ivanov)
* Art Jahnke, [http://www.csoonline.com/article/219964/alexey-ivanov-and-vasiliy-gorshkov-russian-hacker-roulette Russian Roulette], 2005.
* Department of Justice, [http://www.justice.gov/criminal/cybercrime/press-releases/2002/gorshkovSent.htm Russian Computer Hacker Sentenced to Three Years in Prison], 2002.

[[Category:Case Studies]]

Category:Case Studies

2012-08-08T14:06:19Z

Gili: /* Cybercrime */

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]

==Cybercrime==
* [[Invita]]

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

Category:Case Studies

2012-08-08T13:54:16Z

Gili:

{{Header_Message}}
{{TOCright}}
You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]

==Cybercrime==

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

Flame

2012-08-08T13:52:54Z

Gili: Created page with "{{Header_Message}} ==Case Summary== ==Recommended Literature== * [http://en.wikipedia.org/wiki/Flame_(malware) Wikipedia entry] Category:Case Studies"

{{Header_Message}}

==Case Summary==

==Recommended Literature==
* [http://en.wikipedia.org/wiki/Flame_(malware) Wikipedia entry]

[[Category:Case Studies]]

Olympic Games

2012-08-08T13:50:49Z

Gili:

{{Header_Message}}

==Case Summary==
An American program of increasingly sophisticated attacks on the computer systems that ran Iran’s main nuclear enrichment facilities, allegedly responsible for production of the Flame cyber collection platform and the Stuxnet cyber weapon.

==Recommended Literature==
* [http://en.wikipedia.org/wiki/Operation_Olympic_Games Wikipedia entry]
* David E. Sanger, [http://www.google.com/url?q=http%3A%2F%2Fwww.nytimes.com%2F2012%2F06%2F01%2Fworld%2Fmiddleeast%2Fobama-ordered-wave-of-cyberattacks-against-iran.html%3Fpagewanted%3Dall&sa=D&sntz=1&usg=AFQjCNH-7BQdINoh9Q2hlUD8mbm567aHQA Obama Ordered Sped Up Wave of Cyberattacks Against Iran], NY Times, Jun 1, 2012.
* David E. Sanger, [http://books.google.com/books?id=vOJD_Kdn8BAC&printsec=frontcover&source=gbs_ge_summary_r&cad=0#v=onepage&q&f=false Confront and Conceal], 2012.

[[Category:Case Studies]]

Aurora

2012-08-08T13:47:46Z

Gili:

{{Header_Message}}

==Case Summary==

==Recommended Literature==
* [http://en.wikipedia.org/wiki/Operation_Aurora Wikipedia entry]

[[Category:Case Studies]]

Aurora

2012-08-08T13:47:26Z

Gili: Created page with "{{Header_Message}} ==Case Summary== ==Recommended Literature== [http://en.wikipedia.org/wiki/Operation_Aurora Wikipedia entry] Category:Case Studies"

{{Header_Message}}

==Case Summary==

==Recommended Literature==
[http://en.wikipedia.org/wiki/Operation_Aurora Wikipedia entry]

[[Category:Case Studies]]

Category:Case Studies

2012-08-08T13:46:16Z

Gili:

{{Header_Message}}

You can brows case studies featured on the wiki by theme or by using the alphabetical index at the bottom of the page.

==Cyberwar==
* [[Estonia]]
* [[Olympic Games]]

==Espionage==
===State-Sponsored===
* [[Flame]]
* [[GhostNet]]

===Industrial===
* [[Aurora]]

==Cybercrime==

==Hacktivism==
===Patriotic===

===Anarchists===

===Vigilantes===

File:Toc icon.svg

2012-08-08T03:33:53Z

Gili:

"[http://thenounproject.com/noun/network/#icon-No455 Network]" by the Noun Project from the Noun Project collection, 2010.

File:All articles3.svg

2012-08-08T03:32:31Z

Gili:

"[http://thenounproject.com/noun/library/#icon-No3859 Library]" designed in Wikipedia from the Noun Project collection.

File:All articles2.svg

2012-08-08T03:31:14Z

Gili:

"[http://thenounproject.com/noun/article/#icon-No2754 Article]" by P.J. Onori from the Noun Project collection, 2009.

File:All articles3.svg

2012-08-08T03:15:54Z

Gili:

"[http://thenounproject.com/noun/article/#icon-No2754 Classification]" designed in Wikipedia from the Noun Project collection.

File:Case studies.svg

2012-08-08T03:12:33Z

Gili:

"[http://thenounproject.com/noun/book/#icon-No1009 Book]" symbol by Cynthia Garcia from the Noun Project collection, 2010.

File:H2o icon.svg

2012-08-08T03:09:19Z

Gili:

"[http://thenounproject.com/noun/institution/#icon-No3570 Institution]" symbol by Spencer Cohen from the Noun Project collection, 2012.

File:Help icon4.svg

2012-08-08T03:03:16Z

Gili:

"[http://thenounproject.com/noun/information/#icon-No22 Information]" by Roger Cook and Don Shanosky from the Noun Project collection.

Help

2012-08-08T01:08:39Z

Gili: /* View Suggested Syllabi (H2O) */

==Navigating Through the [[Table of Contents]]==
Because this bibliography encompasses such a wide range of cybersecurity issues, the most direct way to get started is to look through the detailed '''[[Table of Contents]]''' and select specific issues or themes of interest. For example, [[Cybercrime]] or [[Financial Institutions and Networks]]. At the top of each topic page within the Table of Contents is a "bread crumb" trail showing the path through the Table of Contents to that page. This trail not only shows you how the current page topic fits into the overall structure of the bibliography, each level in this trail is individually selectable allowing you to move up one or more levels to broaden your search. For example, if you are looking at the ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]][[Incentives]]'' page, you can click on the [[Issues | Issues->]] link to see references addressing all the cybersecurity Issues topics.

Each topic page also features a [[#How to Use the Filter|filtering tool]] to quickly narrow down searches.

==See the [[Cybersecurity Annotated Bibliography| List of All Articles]]==
An alphabetized filterable list of all documents in the wiki is available on the '''[[Cybersecurity Annotated Bibliography]]''' page.

===How to Use the Filter===
All pages listing articles contain a filtering tool for quick and easy customization of search results by type, category, or a free text search term.

Selecting more than one document type will display as a union of the results, e.g. checking "[[Book]]" and "[[Journal Article]]" will display both books and journal articles included in the list.

Only one category (or all categories) can be displayed at once, however, the default search will also display all subcategories. Thus, selecting "[[Security Targets|3.3 Security Targets]]" will also include documents categorized as "[[Private Critical Infrastructure|3.3.2 Private Critical Infrastructure]]" and "[[Transportation|3.3.2.3 Transportation]]." To exclude subcategories, check the box under the categories drop-down menu.

Using the free text search field will return matches in all of the table's fields.

In addition, each column is sortable. This function is especially useful for searching by date, type, or author.

==Choose a Case Study==
The [[:Category: Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

==View Suggested Syllabi (H2O)==
The [http://h2odev.law.harvard.edu/playlists/603 Suggested Syllabi] section uses the [http://h2odev.law.harvard.edu H2O] platform to feature a selection of playlists for instruction. [http://h2odev.law.harvard.edu H2O] is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

==Wiki Resources==
This section contains some tools for wiki contribution.

[[Submitting Feedback | How to Submit Feedback]]

[[TemplateForSources | Template for Sources]]

Wiki [http://meta.wikimedia.org/wiki/Help:Contents User's Guide]

Help

2012-08-08T01:08:10Z

Gili:

==Navigating Through the [[Table of Contents]]==
Because this bibliography encompasses such a wide range of cybersecurity issues, the most direct way to get started is to look through the detailed '''[[Table of Contents]]''' and select specific issues or themes of interest. For example, [[Cybercrime]] or [[Financial Institutions and Networks]]. At the top of each topic page within the Table of Contents is a "bread crumb" trail showing the path through the Table of Contents to that page. This trail not only shows you how the current page topic fits into the overall structure of the bibliography, each level in this trail is individually selectable allowing you to move up one or more levels to broaden your search. For example, if you are looking at the ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]][[Incentives]]'' page, you can click on the [[Issues | Issues->]] link to see references addressing all the cybersecurity Issues topics.

Each topic page also features a [[#How to Use the Filter|filtering tool]] to quickly narrow down searches.

==See the [[Cybersecurity Annotated Bibliography| List of All Articles]]==
An alphabetized filterable list of all documents in the wiki is available on the '''[[Cybersecurity Annotated Bibliography]]''' page.

===How to Use the Filter===
All pages listing articles contain a filtering tool for quick and easy customization of search results by type, category, or a free text search term.

Selecting more than one document type will display as a union of the results, e.g. checking "[[Book]]" and "[[Journal Article]]" will display both books and journal articles included in the list.

Only one category (or all categories) can be displayed at once, however, the default search will also display all subcategories. Thus, selecting "[[Security Targets|3.3 Security Targets]]" will also include documents categorized as "[[Private Critical Infrastructure|3.3.2 Private Critical Infrastructure]]" and "[[Transportation|3.3.2.3 Transportation]]." To exclude subcategories, check the box under the categories drop-down menu.

Using the free text search field will return matches in all of the table's fields.

In addition, each column is sortable. This function is especially useful for searching by date, type, or author.

==Choose a Case Study==
The [[:Category: Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

==View Suggested Syllabi (H2O)==
The [http://h2odev.law.harvard.edu/playlists/603 Suggested Syllabi] section uses the [http://h2odev.law.harvard.edu H2O] platform to feature a selection of playlists for instruction. H2O is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

==Wiki Resources==
This section contains some tools for wiki contribution.

[[Submitting Feedback | How to Submit Feedback]]

[[TemplateForSources | Template for Sources]]

Wiki [http://meta.wikimedia.org/wiki/Help:Contents User's Guide]

Help

2012-08-08T01:07:40Z

Gili:

==Navigating Through the [[Table of Contents]]==
Because this bibliography encompasses such a wide range of cybersecurity issues, the most direct way to get started is to look through the detailed '''[[Table of Contents]]''' and select specific issues or themes of interest. For example, [[Cybercrime]] or [[Financial Institutions and Networks]]. At the top of each topic page within the Table of Contents is a "bread crumb" trail showing the path through the Table of Contents to that page. This trail not only shows you how the current page topic fits into the overall structure of the bibliography, each level in this trail is individually selectable allowing you to move up one or more levels to broaden your search. For example, if you are looking at the ''[[Table of Contents | TOC->]][[Issues | Issues->]][[Economics of Cybersecurity | Economics of Cybersecurity->]][[Incentives]]'' page, you can click on the [[Issues | Issues->]] link to see references addressing all the cybersecurity Issues topics.

Each topic page also features a [[#How to Use the Filter|filtering tool]] to quickly narrow down searches.

==See the [[Cybersecurity Annotated Bibliography| List of All Articles]]==
An alphabetized filterable list of all documents in the wiki is available on the '''[[Cybersecurity Annotated Bibliography]]''' page.

===How to Use the Filter===
All pages listing articles contain a filtering tool for quick and easy customization of search results by type, category, or a free text search term.

Selecting more than one document type will display as a union of the results, e.g. checking "[[Book]]" and "[[Journal Article]]" will display both books and journal articles included in the list.

Only one category (or all categories) can be displayed at once, however, the default search will also display all subcategories. Thus, selecting "[[Security Targets|3.3 Security Targets]]" will also include documents categorized as "[[Private Critical Infrastructure|3.3.2 Private Critical Infrastructure]]" and "[[Transportation|3.3.2.3 Transportation]]." To exclude subcategories, check the box under the categories drop-down menu.

Using the free text search field will return matches in all of the table's fields.

In addition, each column is sortable. This function is especially useful for searching by date, type, or author.

==Choose a Case Study==
The [[:Category: Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

==View Suggested Syllabi==
The [http://h2odev.law.harvard.edu/playlists/603 Suggested Syllabi] section uses the [http://h2odev.law.harvard.edu H2O] platform to feature a selection of playlists for instruction. H2O is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

==Wiki Resources==
This section contains some tools for wiki contribution.

[[Submitting Feedback | How to Submit Feedback]]

[[TemplateForSources | Template for Sources]]

Wiki [http://meta.wikimedia.org/wiki/Help:Contents User's Guide]

TrialMainPage

2012-08-08T01:07:14Z

Gili:

{{Header_Message|message=This page is for trying out ideas for the main page of the wiki.}}
__NOTOC__

{|align="center" style="text-align:center; background-color:white" class="wikitable" width="100%"
!colspan="5"|Navigation
|-align="center" valign="bottom"
|style="width: 20%"|[[File:toc_icon.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Table_of_Contents]] Table of Contents
|style="width: 20%"|[[File:All_articles3.svg‎|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Cybersecurity_Annotated_Bibliography]] List of All Articles
|style="width: 20%"|[[File:case_studies.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Category:Case_Studies]] Case Studies
|style="width: 20%"|[[File:h2o_icon.svg|105x105px|link=http://h2odev.law.harvard.edu/playlists/633]] Suggested Syllabi (H2O)
|style="width: 20%"|[[File:Help_icon4.svg|105x105px|link=http://cyber.law.harvard.edu/cybersecurity/Help]] How to Use this Wiki
|}

==Introduction==
This Cybersecurity wiki provides a set of evolving resources on [[Cybersecurity_Overview|cybersecurity, broadly defined]], and includes an '''[[Cybersecurity_Annotated_Bibliography|annotated list]]''' of relevant articles and literature, which can be searched in a number of ways. Please [[#Navigation|see below]]. It is intended as a tool/resource for researchers, technologists, students, policy-makers and others who are interested in cybersecurity issues more broadly. For more information about this first phase of the project, including the team, methodology, and opportunities to contribute, please see [[About|About the Project]].

If you have feedback, comments, or suggested additional readings/resources, please contact: [mailto:cybersecurity-feedback@cyber.law.harvard.edu cybersecurity-feedback@cyber.law.harvard.edu]. 

Prior to suggesting material for inclusion in the wiki, please consult the [[Submitting Feedback]] page.

==Navigation==
===Table of Contents===
The quickest way to get started is by using the [[Table of Contents]] as a guide to searching articles by type or category. Some of the articles have wiki entries whcih include a synopsis, full bibliographic information, and additional relevant notes.

===List of All Articles===
You might also wish to consult the [[Cybersecurity Annotated Bibliography|list of all articles]] and use the [[Help#How_to_Use_the_Filter|filtering tool]] to receive customized search results by type, category, or a free text search term.

===Case Studies===
The [[:Category:Case Studies|Case Studies]] page presents a list of selected case studies with short summaries and links to related literature such as news articles and investigative reports.

===Selected Syllabi (H2O)===
The [http://h2odev.law.harvard.edu/playlists/633 Suggested Syllabi] section uses the [http://cyber.law.harvard.edu/research/h2o H2O] platform to feature a selection of playlists for instruction. H2O is a Web-based platform for creating, editing, organizing, consuming, and sharing course materials. Using [http://cyber.law.harvard.edu/research/h2o H2O], professors may freely develop and collate course materials by selecting modules from a wide — and growing — repository and edit those modules to the sections that are most relevant to their particular pedagogy and approach.

===How to Use this Wiki===
For a full explanation of how to browse the wiki, please consult the [[Help]] page.

MediaWiki:Aboutsite

2012-08-08T00:54:59Z

Gili:

About the {{SITENAME}}

Deterrence

2012-08-07T20:52:21Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[Deterrence]]''

{{Filtered_Table||5.6,false}}

''[[Table of Contents | Jump to Table of Contents]]''

International Law (including Laws of War)

2012-08-07T20:51:54Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[International Law (including Laws of War)]]''

{{Filtered_Table||5.5,false}}

''[[Table of Contents | Jump to Table of Contents]]''

International Cooperation

2012-08-07T20:51:25Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[International Cooperation]]''

{{Filtered_Table||5.4,false}}

''[[Table of Contents | Jump to Table of Contents]]''

Government Organizations

2012-08-07T20:51:01Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[Government Organizations]]''

{{Filtered_Table||5.3,false}}

''[[Table of Contents | Jump to Table of Contents]]''

Private Efforts/Organizations

2012-08-07T20:50:47Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[Private Efforts/Organizations]]''

{{Filtered_Table||5.2,false}}

''[[Table of Contents | Jump to Table of Contents]]''

Regulation/Liability

2012-08-07T20:50:21Z

Gili:

''[[Table of Contents | TOC->]][[Approaches | Approaches->]][[Regulation/Liability]]''

{{Filtered_Table||5.1,false}}

''[[Table of Contents | Jump to Table of Contents]]''