https://cyber.harvard.edu/cybersecurity/api.php?action=feedcontributions&feedformat=atom&user=Jalbert 2026-07-16T19:58:24Z User contributions MediaWiki 1.43.6 https://cyber.harvard.edu/cybersecurity/?title=Law_and_War_in_the_Virtual_Era&diff=6343 2011-01-31T21:03:57Z

<p>Jalbert: /* Lawfare, jus in bello, and violations of humanitarian law */</p> <hr /> <div>==Full Title of Reference==<br /> Law and War in the Virtual Era<br /> <br /> ==Full Citation==<br /> <br /> Jack M. Beard, ''Law and War in the Virtual Era'', 103 Am. J. Int'l. L. 409 (2009). [http://www.asil.org/ajil/July2009_1selectedpiece.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/Special:Bibliography?f=wikibiblio.bib&amp;title=Special:Bibliography&amp;view=detailed&amp;action=&amp;keyword=Bear_J:2009 BibTeX]<br /> <br /> ==Categorization==<br /> <br /> * Issues: [[Cyberwar]]<br /> <br /> * Approaches: [[International Law (including Laws of War)]]<br /> <br /> ==Key Words==<br /> <br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Intelligence_Infrastructure.2FInformation_Infrastructure | Intelligence Infrastructure/Information Infrastructure]], <br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#International_Humanitarian_Law | International Humanitarian Law]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Lawfare | Lawfare]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Laws_of_War | Laws of War]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Virtual_Military_Technologies | Virtual Military Technologies]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Virtual_Warfare | Virtual Warfare]]<br /> <br /> ==Synopsis and Key Themes==<br /> <br /> ===Thesis===<br /> <br /> The article traces the changing role and growing strategic importance of law in warfare. Whereas for most of its existence, and since the first attempts by states to use law to regulate armed conflict, jus in bello, or the law of war (also referred to in the article as “international humanitarian law”), often failed to protect civilians from the adverse effects of war, the article’s author suggests that the advent of automated, or “virtual” military technologies (specifically, Beard looks at the place of unmanned aerial vehicles, or UAVs, in modern warfare), though originally designed and implemented to expand military capabilities, also expand military informational resources, and therefore unintentionally reinforce the importance of jus in bello, and by association, the role of lawyers in modern military operations. Whereas advances in military technology historically have made law more distant and less relevant to the suffering of civilians (Beard uses both World Wars as examples of this phenomenon), the rise of UAVs has created unprecedented amounts of transparency, a new expectation of accountability, and given more control than ever before to affect military decisions. <br /> Beard opens his article with an anecdote about the aborted killing of the Taliban leader Mullah Omar at the start of the Afghanistan War, on the first night of the war, in 2001. Fleeing Kabul, Mullah Omar was targeted by a Predator, the unmanned aerial vehicle most frequently employed by the U.S. military. Although the UAV held its target throughout a portion of his flight, the legal office at the U.S. Central Command raised concerns about the likelihood that the air strike would cause excessive civilian casualties, and called off the mission.<br /> <br /> ===The unintended consequences of technology===<br /> <br /> Technological advances can occur with little deliberation about their long-term consequences, and the implications of all the potential applications of a new weapons system (this article dwells on “virtual” military technologies, and in particular, on UAVs) may therefore be largely unforeseen. While the US has been driven to more accurate bombing out of strategy, monetary and practical objectives (leading to an increase in the use of Precision-Guided Missiles, or PGMs, during the Gulf War), and not predominantly humanitarian concerns, the use of such technologies often have large ramifications for the humanitarian element of warfare. <br /> <br /> ===The rise of UAVs===<br /> <br /> Before 9/11, UAVs were only of limited use. With the U.S. wars in Afghanistan and Iraq, UAVs became integral to U.S. military operations once their enormous potential in the area of ISR (Intelligence, Surveillance, Reconnaissance) was recognized; thereafter, UAVs were produced and deployed pervasively throughout combat zones in the Middle East. <br /> In 2001, the US Congress mandated that a full third of essential U.S. military aircraft and ground vehicles be unmanned by 2015, signifying the influence and importance of UAVs in modern warfare, and the scope of the change they effect on military and combat operations. <br /> The success of UAVs in American military operations derives from their capacity to do dirty, dull or dangerous work that would otherwise be performed at a greater cost by human beings, but it also takes root in the virtual distance and virtual extrahuman surveillance capabilities effected by their use. With expanded attack capabilities, continuous presence, the ability to simultaneously follow greater numbers of targets, and offering a more continuous, pervasive presence, UAVs transform the modern military landscape. Likewise, the use of UAVs suggests problematic legal and humanitarian implications, because their use expands the potential list of targets that can be attacked. Allowing the military to strike a much more comprehensive list of targets, the deployment of UAVs raises similar questions to those brought up by the use of PGMs during the Gulf War, which is the blurring of the line between target and victim, between combatant and noncombatant. The pervasive presence and targeting and attack potential offered by UAVs suggests that war can now exist everywhere, all the time. <br /> <br /> ===UAVs and intelligence consequences -- challenges to the U.S. military intelligence infrastructure===<br /> <br /> UAVs allow the U.S. military to engage in persistent surveillance around distant areas of the globe, to accumulate more recorded, real-time information than was ever thought possible to collect. But the vast quantities and new types of ISR data have little value if they do not reach the right decision makers or commanders in time. Beard suggests that the linear organizational schemes or vertical bureaucracies that characterize the command structure of the U.S. military are ill-suited to take advantage of the large amounts of new intelligence and ISR information. The rather obsolete hierarchical structure of the U.S. intelligence dissemination network is a traditional linear structure that makes far too little information available to the subordinate unites that need it, on the ground, while producing informational and data overload at the top levels of the command structure. The U.S. military is not an adaptive, decentralized, network-centric intelligence system (as are, for instance, terrorist networks), and network-oriented reforms must be implemented so that commanders at all levels can access real time information and surveillance results. <br /> <br /> ===Lawyers, UAVs, and modern warfare===<br /> <br /> Major technological changes such as the use of UAVs pose personnel challenges to the vast, complex bureaucracies that manage modern warfare. In particular, it greatly enhances the role of lawyers in military operations. The unblinking eye of UAVs and the intensified surveillance capabilities of UAVs have increased public scrutiny of military actions and augmented the demand for military transparency. Rising public expectations of transparency are causing attack planners and military commanders to grapple with new legal responsibilities, and causing lawyers involved with the military to often take a broad view of potential humanitarian considerations that go beyond the more permissive rules of engagement. Prior to authorizing an attack, lawyers, planners, and commanders nowadays must consider the unprecedented new video record that may be created, especially if an attack risks harm to civilians and is likely to be scrutinized later. Laws, rules, and regulations pervade all aspects of military operations and the military social system, and are expected more than ever by the public eye to be respected and adhered. Empowered by diminished need for on-the-ground decision making, and enabled to overcome physical distance thanks to unmanned virtual technologies, lawyers are more linked than ever to the command structure and more involved in targeting decisions. The expanding contours of legal oversight, and the availability of continuous streams of information changes the meaning of what constitutes appropriate legal review. In place of limited sporadic information issued by satellites and manned aircraft, the unblinking eyes of UAVs capture not just the target but the presence of civilians that might be endangered by an attack. <br /> The NATO military effort in Kosovo in 1999 relied almost exclusively on air power. The relative absence of human troops on the ground marked the increasing prominence of lawyers in armed conflict; effectively, NATO’s lawyers, given greater legal review than ever before, became its de facto tactical commanders. The direct involvement of lawyers in military operations has further expanded since Kosovo, reflecting emerging trends in the legalization of war and the rising utility of legal support in modern military operations. <br /> <br /> ===Lawfare, jus in bello, and violations of humanitarian law===<br /> <br /> U.S. COIN doctrine provides new opportunities for international law to serve as a basis for U.S. forces to engage with the civilian population. The new relevance of international law has not been lost on terrorist groups and rogue states, even if they do not observe it: such groups and governments use new informational technologies to exploit images of dead civilians and other evidence of alleged law-of-war violations as part of a growing practice that <br /> some describe as “lawfare.” Although most military theorists once viewed law as largely irrelevant to war, the political and moral legitimacy of military operations is increasingly linked to the observance of legal obligations, particularly those related to protection of the civilian population. American officials have learned that the single most important indicator of compliance with the law of war is the perceived respect for rules protecting the civilian population.<br /> One of the central tenets of the Geneva Conventions, which lay down much of the foundation for modern jus in bello (law of war) is proportionality, the idea that an attack on a military target may be illegal if it implies too much collateral damage. The new “virtual” distance enabled by UAVs is giving proportionality requirements new significance by eliminating some of the key excuses that states have long used to escape responsibility for attacks that appear to cause excessive civilian casualties. Even as virtual technologies enhance the surveillance capabilities of military personnel, they also make the military’s own activities more perceptible before, during, and after attacks. Those who plan or decide upon an attack will increasingly do so with the knowledge that a much more complete record is being created of both their actions and the basis for their decisions.<br /> <br /> ===Conclusions===<br /> <br /> The irony of new virtual military technologies is that, though intended to enhance military and attack capabilities, in fact, they do much to hamper military action. As risk assessment has become so much more reliable and accurate, more precise estimates of how many civilians are likely to die from a given attack means that civilian deaths are now incidental, and no longer accidental to military attacks. <br /> The increasing fusion of humans and machines in war does not diminish accidental civilian casualties, but terms like “technical malfunctions” are used nonetheless to describe seemingly unavoidable causes of many unintended civilian casualties, blurring the distinction between human error and technological malfunction. <br /> The absence of humans as the actual combatants in armed conflicts seems to be steadily achieving acceptance and entering society’s collective consciousness with relatively little reflection. Remotely controlled machines are paving the way for armed conflicts in which humans will increasingly be absent from the battlefield and many dangerous war-fighting missions.<br /> Inasmuch as technological developments reduce the political costs of going to war by eliminating the risk that human operators will be killed or captured, some commentators fear that those developments will make it easier and more attractive for states to become involved in armed conflicts. The demand for UAVs, for example, is soaring as more and more countries, including many in the developing world, are obtaining and becoming familiar with virtual technologies and their ISR capabilities, in part because UAV systems cost much less than their manned counterparts.<br /> <br /> ==Additional Notes and Highlights==<br /> Expertise Required: Law - Low<br /> <br /> ''About the author:''<br /> <br /> A Lecturer at UCLA School of Law, Jack Beard was formerly Associate Deputy General Counsel for International Affairs in the Department of Defense. Beard also served in the International and Operational Law Division as a Lieutenant Colonel, in the U.S. Army Reserve.<br /> <br /> ''See Also:''<br /> <br /> [http://www.nytimes.com/2010/06/08/technology/08homefront.html?src=busln Christopher Drew,''Military Chatrooms from California to Afghanistan'', N.Y. Times, June 7, 2010, at B1.] Discussing social media, virtual technologies and the changing informational landscape of modern warfare.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5059 2010-07-30T16:24:51Z

<p>Jalbert: /* Key Words */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> <br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]<br /> * Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[International Cooperation]]<br /> <br /> ==Key Words==<br /> <br /> <br /> ''insert key words here''<br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> <br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=International_Cooperation&diff=5058 2010-07-30T16:24:36Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Approaches | Approaches-&gt;]][[International Cooperation]]''<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Schmitt, Michael N. (2002) [[Wired Warfare]] <br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Government_Organizations&diff=5057 2010-07-30T16:24:26Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Approaches | Approaches-&gt;]][[Government Organizations]]''<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Private_Efforts/Organizations&diff=5056 2010-07-30T16:24:12Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Approaches | Approaches-&gt;]][[Private Efforts/Organizations]]''<br /> <br /> Bohme, Rainer and Kataria, Gaurav (2006) [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Regulation/Liability&diff=5055 2010-07-30T16:23:51Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Approaches | Approaches-&gt;]][[Regulation/Liability]]''<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Camp, L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> Romanosky et al. (2008) [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Todd, Graham H. (2009) [[Armed Attack in Cyberspace]] <br /> <br /> Schmitt, Michael N., et. al (2004) [[Computers and War]] <br /> <br /> Schmitt, Michael N. (2002) [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. (2009) [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Identity_Management&diff=5054 2010-07-30T16:23:39Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Identity Management]]''<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Public-Private_Cooperation&diff=5053 2010-07-30T16:23:25Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Public-Private Cooperation]]''<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Usability/Human_Factors&diff=5052 2010-07-30T16:23:10Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Usability/Human Factors]]''<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=US_Government_Reports_and_Documents&diff=5051 2010-07-30T16:20:23Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Resource by Type | Resource by Type-&gt;]][[Government Reports and Documents | Government Reports and Documents-&gt;]][[US Government Reports and Documents]]''<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House (2009) [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5050 2010-07-30T16:20:06Z

<p>Jalbert: /* Categorization */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> <br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]<br /> * Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[International Cooperation]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> <br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5049 2010-07-30T16:19:56Z

<p>Jalbert: /* Categorization */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> <br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Issues: [[Usability/Human Factors]]; [[Public-Private Cooperation]]; [[Identity Management]]<br /> * Approaches : [[Regulation/Liability]]; [[Private Efforts/Organizations]]; [[Government Organizations]]; [[Government Cooperation]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> <br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5048 2010-07-30T16:17:18Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> <br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5047 2010-07-30T16:16:26Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5046 2010-07-30T16:15:58Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> '''Selection from the Executive Summary:'''<br /> <br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> '''Synopsis from Ascension Risk Management [http://www.ascensionriskmanagement.com/], a risk management consulting firm specializing in Infosec:'''<br /> <br /> “The nation’s approach to cybersecurity over the past 15 years has failed to keep pace with the threat. We need to demonstrate abroad and at home that the United States takes cybersecurity related issues, policies, and activities seriously. This requires White House leadership that draws upon the strength, advice, and ideas of the entire Nation.” ~ A quote from the Executive Summary <br /> <br /> The report declares that cybersecurity risks rank up there with the most important economic and national security challenges of the 21st Century. In order to meet this challenge the report declares that: “It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution” (from the Executive Summary). <br /> <br /> To support this declaration the report mentions a few malicious activities have already disrupted critical infrastructure elements in other countries (the disruption of electric power grids); the exploited financial services (any number of data breaches and fraud cases); and the systematic loss of US intellectual property (estimated to have a loss of economic value as high as $1 trillion dollars). In order to address these issues the report breaks down its findings and recommendations into five areas:<br /> <br /> *Leading from the top;<br /> *Building the capacity of a digital nation;<br /> *Sharing responsibility for cybersecurity;<br /> *Improving information sharing and incident response; and<br /> *Building the architecture of the future.<br /> <br /> The report calls for the US to be a world leader in addressing the challenges of cyberspace. In order to realize this goal, leadership must come directly from the White House. The rationale for this is the fact that within the US government, only the White House has the authority to coordinate the wide array of capabilities and authorities required to respond to cyber incidents. In order to support and facilitate this authority the report recommends that a cybersecurity policy official be appointed to coordinate the nation's cybersecurity related policies and activities. This individual would be part of the National Security Council (NSC). Additionally it is suggested that this new official should participate in economic, counterterrorism, and science and technology policy discussion in order to provide the cybersecurity perspective; a move that would go a long way to integrate cybersecurity concerns into all sorts of decision making processes. At a high level, the duties of the cybersecurity policy official would revolve around reviewing laws and policies, proposing new legislation, strengthening federal leadership and accountability for cybersecurity, and increasing the interaction between the federal government and state, local, and tribal leadership with regard to cybersecurity.<br /> <br /> '''&quot;Building Capacity for a Digital Nation&quot;''' <br /> In this section, the report likens the cybersecurity challenge to the space race after the Sputnik launch in 1957. The report calls for an emphasis on math and science skills in order to develop a workforce of US citizens to compete on a global level and sustain the leadership role of the United States. In order to meet these challenges the report calls for the need to build public awareness into the nature and risks involved in the use of cyberspace. In this vein, the report suggests an effort to enhance our education system by integrating cybersecurity into the education curriculum and by promoting scientific, engineering, and market leadership in the IT sector. The report also calls for the need to expand and train the federal information technology workforce. The language here seems to indicate a desire to recapture many of the IT positions that have been lost through outsourcing to the private sector. <br /> <br /> '''&quot;Sharing Responsibility for Cybersecurity&quot;''' <br /> In this section, the report acknowledges the fact that the federal government cannot succeed without engaging the private sector. A national dialogue is needed between the concerns of the private sector and the needs of the public sector. Input from the private sector is sorely needed to craft legislation and regulations to support businesses that prioritize security. <br /> <br /> '''International Cooperation''' <br /> The report recognizes that international norms are critical to supporting cyberspace and therefore any national cybersecurity strategy needs to foster international cooperation and collaboration. Some of the items mentioned were the development of uniform technical standards and a standardization of legal practices. <br /> <br /> '''&quot;Creating Effective Information Sharing and Incident Response&quot;''' <br /> The report calls for a nationwide incident response capability to include Federal, State, local and tribal governments working together with the private sector and international allies, given that cyber incidents are likely to affect networks and systems across both the public and private sector. This section also leverages the Cybersecurity Coordinator named in the &quot;Leadership from the Top&quot; section of the report and calls for the development of a national incident response framework. This framework would go a long way to avoid the confusion surrounding roles, responsibilities and authority that always comes up when multiple departments and agencies respond to an incident. <br /> <br /> '''&quot;Encouraging Innovation&quot;'''<br /> The report acknowledges that there has been a convergence of technologies where data, voice, and video are now sharing a common infrastructure. This decentralizes the nature of the technology and allows for innovation. It also presents a common vulnerability -- namely the susceptibility of the common infrastructure to disruption. Understandably there are huge national security implications surrounding the vulnerability of this common infrastructure. The report calls for the government to find ways to incentivize the market to innovate and make more secure products. It even hints that legal changes in the form of liability considerations could be in the works for companies that come on board. Conversely increased liability consequences would exist for those who have poor security. <br /> <br /> The report then calls for an increase in the research and development efforts of the federal government that would focus on “game-changing” technologies in the effort to enhance the United States’ competitiveness. These efforts would be in conjunction with industry and academia in order to avoid duplication and leverage complementary capabilities. <br /> <br /> Another suggestion put forth is the establishment of some sort of federal level identity management system. There are many pros and cons to this option. The report acknowledges that people may be uncomfortable with this idea and in what I read to be a preemptive move calls for cooperation with the civil liberties and privacy communities. <br /> <br /> <br /> The report concludes with two forms of action plans, a near-term plan and a mid-term plan. <br /> <br /> <br /> '''The Near-Term Plan:'''<br /> <br /> <br /> <br /> *1 Appoint a cybersecurity policy official responsible for coordinating the Nation’s cybersecurity policies and activities; establish a strong NSC directorate, under the direction of the cybersecurity policy official dual-hatted to the NSC and the NEC, to coordinate interagency development of cybersecurity-related strategy and policy.<br /> *2 Prepare for the President’s approval an updated national strategy to secure the information and communications infrastructure. This strategy should include continued evaluation of CNCI activities and, where appropriate, build on its successes.<br /> *3 Designate cybersecurity as one of the President’s key management priorities and establish performance metrics.<br /> *4 Designate a privacy and civil liberties official to the NSC cybersecurity directorate.<br /> *5 Convene appropriate interagency mechanisms to conduct interagency-cleared legal analyses of priority cybersecurity-related issues identified during the policy-development process and formulate coherent unified policy guidance that clarifies roles, responsibilities, and the application of agency authorities for cybersecurity-related activities across the Federal government.<br /> *6 Initiate a national public awareness and education campaign to promote cybersecurity.<br /> *7 Develop U.S. Government positions for an international cybersecurity policy framework and strengthen our international partnerships to create initiatives that address the full range of activities, policies, and opportunities associated with cybersecurity.<br /> *8 Prepare a cybersecurity incident response plan; initiate a dialog to enhance public-private partnerships with an eye toward streamlining, aligning, and providing resources to optimize their contribution and engagement<br /> *9 In collaboration with other EOP entities, develop a framework for research and development strategies that focus on game-changing technologies that have the potential to enhance the security, reliability, resilience, and trustworthiness of digital infrastructure; provide the research community access to event data to facilitate developing tools, testing theories, and identifying workable solutions.<br /> *10 Build a cybersecurity-based identity management vision and strategy that addresses privacy and civil liberties interests, leveraging privacy-enhancing technologies for the Nation. <br /> <br /> '''The Mid-Term Plan'''<br /> <br /> *1 Improve the process for resolution of interagency disagreements regarding interpretations of law and application of policy and authorities for cyber operations.<br /> *2 Use the OMB program assessment framework to ensure departments and agencies use performance-based budgeting in pursuing cybersecurity goals.<br /> *3 Expand support for key education programs and research and development to ensure the Nation’s continued ability to compete in the information age economy.<br /> *4 Develop a strategy to expand and train the workforce, including attracting and retaining cybersecurity expertise in the Federal government.<br /> *5 Determine the most efficient and effective mechanism to obtain strategic warning, maintain situational awareness, and inform incident response capabilities.<br /> *6 Develop a set of threat scenarios and metrics that can be used for risk management decisions, recovery planning, and prioritization of R&amp;D.<br /> *7 Develop a process between the government and the private sector to assist in preventing, detecting, and responding to cyber incidents.<br /> *8 Develop mechanisms for cybersecurity-related information sharing that address concerns about privacy and proprietary information and make information sharing mutually beneficial.<br /> *9 Develop solutions for emergency communications capabilities during a time of natural disaster, crisis, or conflict while ensuring network neutrality.<br /> *10 Expand sharing of information about network incidents and vulnerabilities with key allies and seek bilateral and multilateral arrangements that will improve economic and security interests while protecting civil liberties and privacy rights.<br /> *11 Encourage collaboration between academic and industrial laboratories to develop migration paths and incentives for the rapid adoption of research and technology development innovations.<br /> *12 Use the infrastructure objectives and the research and development framework to define goals for national and international standards bodies.<br /> *13 Implement, for high-value activities (e.g., the Smart Grid), an opt-in array of interoperable identity management systems to build trust for online transactions and to enhance privacy.<br /> *14 Refine government procurement strategies and improve the market incentives for secure and resilient hardware and software products, new security innovation, and secure managed services.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5045 2010-07-30T15:35:00Z

<p>Jalbert: /* Additional Notes and Highlights */</p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> Selection from the Executive Summary:<br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions<br /> to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cyberspace_Policy_Review&diff=5044 2010-07-30T15:34:39Z

<p>Jalbert: </p> <hr /> <div>==Full Title of Reference==<br /> National Cyber Defense Financial Services Workshop Report<br /> <br /> ==Full Citation==<br /> <br /> Executive Office of the President of The U.S. ''Cyberspace Policy Review. Assuring a Trusted and Resilient Information and Communications Infrastructure'' (2009). [http://www.cyber.st.dhs.gov/docs/Cyberspace_Policy_Review_final.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=White_House:2009A&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> Selection from the Executive Summary:<br /> The Nation is at a crossroads. The globally-interconnected digital information and communications infrastructure known as “cyberspace”underpins almost every facet of modern society and provides critical support for the U.S. economy, civil infrastructure, public safety, and national security. This technology has transformed the global economy and connected people in ways never imagined. Yet, cybersecurity risks pose some of the most serious economic and national security challenges of the 21st Century. The digital infrastructure’s architecture was driven more by considerations of interoperability and efficiency than of security. Consequently, a growing array of state and non-state actors are compromising, stealing, changing, or destroying information and could cause critical disruptions<br /> to U.S. systems. At the same time, traditional telecommunications and Internet networks continue to converge, and other infrastructure sectors are adopting the Internet as a primary means of interconnectivity. The United States faces the dual challenge of maintaining an environment that promotes efficiency, innovation, economic prosperity, and free trade while also promoting safety, security, civil liberties, and privacy rights. It is the fundamental responsibility of our government to address strategic vulnerabilities in cyberspace and ensure that the United States and the world realize the full potential of the information technology revolution.<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> [http://global.bsa.org/cybersecuritydashboard/ | Cyberspace Policy Review Dashboard]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cybersecurity_Annotated_Bibliography&diff=5043 2010-07-30T15:27:23Z

<p>Jalbert: </p> <hr /> <div>Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Beard, Jack M. (2009) [[Law and War in the Virtual Era]] <br /> <br /> Bohme, Rainer ''(2005)'' [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Brown, Davis (2006) [[A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict]] <br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computer Economics, Inc. (2007) [[2007 Malware Report]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Defense Office of General Counsel ''(1999)'' [[An Assessment of International Legal Issues in Information Operations]] <br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Dörmann, Knut (2004) [[Applicability of the Additional Protocols to Computer Network Attacks]] <br /> <br /> Dunlap, Charles J. Jr. ''(2009)'' [[Towards a Cyberspace Legal Regime in the Twenty-First Century]] <br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark and Parisi, Francesco (''2006'') [[The Law and Economics of Cybersecurity: An Introduction]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Hollis, Duncan B. (2007) [[Why States Need an International Law for Information Operations]] <br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force ''(2004)'' [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> Powell, Benjamin ''(2005)'' [[Is Cybersecurity a Public Good]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> Romanosky et al. (''2008'') [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schmitt, Michael N., et. al (2004) [[Computers and War]] <br /> <br /> Schmitt, Michael N. (1999) [[Computer Network Attack and the Use of Force in International Law]] <br /> <br /> Schmitt, Michael N. (2002) [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. (2009) [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Stohl, Michael (2006) [[Cyber Terrorism]]<br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (''2007'') [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> Todd, Graham H. (2009) [[Armed Attack in Cyberspace]] <br /> <br /> Trend Micro Incorporated (2010) [[Trend Micro Annual Report]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> Watts, Sean (2010) [[Combatant Status and Computer Network Attack]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=5010 2010-07-29T16:28:05Z

<p>Jalbert: /* Software Vulnerability */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Cyber-Insurance_Revisited | Bohme]] <br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | Schmitt]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Managing_Online_Security_Risks | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=5009 2010-07-29T16:27:48Z

<p>Jalbert: /* Disclosure Policy */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Cyber-Insurance_Revisited | Bohme]] <br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | Schmitt]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Managing_Online_Security_Risks | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=5008 2010-07-29T16:27:31Z

<p>Jalbert: /* Cyber Crime */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Cyber-Insurance_Revisited | Bohme]] <br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | Schmitt]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Managing_Online_Security_Risks | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=5007 2010-07-29T16:27:11Z

<p>Jalbert: /* Credit Card Fraud */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Insider_Threat_Study | U.S. Secret Service]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Cyber-Insurance_Revisited | Bohme]] <br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | Schmitt]] <br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | [2]]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [3]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]], [[Computer_Network_Attack_and_the_Use_of_Force_in_International_Law | [2]]] <br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Managing_Online_Security_Risks | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Models_and_Measures_for_Correlation_in_Cyber-Insurance | Bohme and Kataria]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Usability/Human_Factors&diff=5006 2010-07-29T16:26:40Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Usability/Human Factors]]''<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Incentives&diff=5005 2010-07-29T16:26:23Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Incentives]]''<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Bohme, Rainer (2005) [[Cyber-Insurance Revisited]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> Romanosky et al. (2008) [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Telang, Rahul and Wattal, Sunil (2007) [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Financial_Institutions_and_Networks&diff=5004 2010-07-29T16:26:02Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Threats and Actors | Threats and Actors-&gt;]][[Security Targets | Security Targets-&gt;]][[Private Critical Infrastructure | Private Critical Infrastructure-&gt;]][[Financial Institutions and Networks]]''<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=US_Government_Reports_and_Documents&diff=5003 2010-07-29T16:25:45Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Resource by Type | Resource by Type-&gt;]][[Government Reports and Documents | Government Reports and Documents-&gt;]][[US Government Reports and Documents]]''<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force (2004) [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> United States Secret Service (2004) [[Insider Threat Study]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents | Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Insider_Threat_Study&diff=5002 2010-07-29T16:25:05Z

<p>Jalbert: /* Key Words */</p> <hr /> <div>==Full Title of Reference==<br /> Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector<br /> <br /> ==Full Citation==<br /> <br /> United States Secret Service, Computer Emergency Response Team (2004): Insider Threat Study. Illicit Cyber Activity in the Banking and Finance Sector. U.S. Government. Online Paper. [http://www.cyber.st.dhs.gov/docs/its_report_040820.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=USSS:2004&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Threats and Actors: [[Financial Institutions and Networks]]<br /> * Issues: [[Incentives]]; [[Usability/Human Factors]]<br /> <br /> ==Key Words==<br /> <br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Credit_Card_Fraud | Credit Card Fraud]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Crime | Cybercrime]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Disclosure_Policy | Disclosure Policy]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Software_Vulnerability | Software Vulnerability]]<br /> <br /> ==Synopsis==<br /> <br /> In the past, most incidents of fraud against the banking or financial services industry were committed by insiders. It is difficult to estimate how often and to what degree companies face attacks from within; insider attacks are probably under-reported, out of fear for the negative publicity or increased liability that may arise as a consequence.<br /> <br /> The Insider Threat Study examines a series of unique insider incidents from a behavioral and technical perspective.<br /> <br /> '''Scope and Procedure of the Insider Threat Study'''<br /> <br /> The report examines 23 incidents carried out by 26 insiders in the banking and <br /> finance sector between 1996 and 2002. Organizations affected by insider activity <br /> in this sector include credit unions, banks, investment firms, credit bureaus, and <br /> other companies whose activities fall within this sector. Of the 23 incidents, 15 <br /> involved fraud, four involved theft of intellectual property, and four involved <br /> sabotage to the information system/network.<br /> <br /> The study consists of an aggregated case-study analysis that provides an in-depth look at insider incidents that have occurred in critical infrastructure sectors between 1996 and 2002, a review of the prevalence of insider activity across critical infrastructure <br /> sectors over a 10-year time frame, and a survey of recent insider activity experienced by a sample of public- and private-sector organizations.<br /> <br /> Cases were identified through public reporting or as a computer fraud case <br /> investigated by the Secret Service.<br /> <br /> The ITS adapted methods used in previous research performed by the Secret <br /> Service and CERT/CC to conduct in-depth examinations of network, system, and <br /> data compromises and other insider activity. Researchers focused primarily on <br /> tracing insider incidents from the initial harm backward in time to when the idea <br /> of committing the incident first occurred to the insider. In tracing the incidents <br /> backward, researchers tried to identify the behaviors and communications in <br /> which the insiders engaged – both online and offline – prior to and including the <br /> insiders’ harmful activities. <br /> <br /> '''Insider Fraud Requires Little Technical Sophistication'''<br /> <br /> Most of the incidents examined in the banking and finance sector were not <br /> technically sophisticated or complex. That is, they typically involved exploitation <br /> of non-technical vulnerabilities such as business rules or organization policies <br /> (rather than vulnerabilities in an information system or network) and were carried <br /> out by individuals who had little or no technical expertise.<br /> <br /> This suggests it is important for organizations to secure their networks from the full range of users, from persons responsible for data entry to management to system administrators. Proactive practices, such as mandatory password protection and change <br /> policies, and use of password-protected screen savers, can minimize the <br /> possibility of insiders using another employee’s computer and/or account to carry <br /> out the attack. <br /> <br /> '''Perpetrators Planned Their Actions'''<br /> Most of the incidents were thought out and planned in advance. In most cases, <br /> others had knowledge of the insider’s intentions, plans, and/or activities. Those <br /> who knew were often directly involved in the planning or stood to benefit from the <br /> activity. <br /> <br /> '''Financial Gain Motivated Most Perpetrators'''<br /> Most insiders were motivated by financial gain (81%), rather than a desire to harm the <br /> company or information system. Other motives included revenge, dissatisfaction <br /> with company management, culture or polices, and a desire for respect.<br /> <br /> ==Additional Notes and Highlights==</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Insider_Threat_Study&diff=5001 2010-07-29T16:21:52Z

<p>Jalbert: /* Categorization */</p> <hr /> <div>==Full Title of Reference==<br /> Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector<br /> <br /> ==Full Citation==<br /> <br /> United States Secret Service, Computer Emergency Response Team (2004): Insider Threat Study. Illicit Cyber Activity in the Banking and Finance Sector. U.S. Government. Online Paper. [http://www.cyber.st.dhs.gov/docs/its_report_040820.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=USSS:2004&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Threats and Actors: [[Financial Institutions and Networks]]<br /> * Issues: [[Incentives]]; [[Usability/Human Factors]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> In the past, most incidents of fraud against the banking or financial services industry were committed by insiders. It is difficult to estimate how often and to what degree companies face attacks from within; insider attacks are probably under-reported, out of fear for the negative publicity or increased liability that may arise as a consequence.<br /> <br /> The Insider Threat Study examines a series of unique insider incidents from a behavioral and technical perspective.<br /> <br /> '''Scope and Procedure of the Insider Threat Study'''<br /> <br /> The report examines 23 incidents carried out by 26 insiders in the banking and <br /> finance sector between 1996 and 2002. Organizations affected by insider activity <br /> in this sector include credit unions, banks, investment firms, credit bureaus, and <br /> other companies whose activities fall within this sector. Of the 23 incidents, 15 <br /> involved fraud, four involved theft of intellectual property, and four involved <br /> sabotage to the information system/network.<br /> <br /> The study consists of an aggregated case-study analysis that provides an in-depth look at insider incidents that have occurred in critical infrastructure sectors between 1996 and 2002, a review of the prevalence of insider activity across critical infrastructure <br /> sectors over a 10-year time frame, and a survey of recent insider activity experienced by a sample of public- and private-sector organizations.<br /> <br /> Cases were identified through public reporting or as a computer fraud case <br /> investigated by the Secret Service.<br /> <br /> The ITS adapted methods used in previous research performed by the Secret <br /> Service and CERT/CC to conduct in-depth examinations of network, system, and <br /> data compromises and other insider activity. Researchers focused primarily on <br /> tracing insider incidents from the initial harm backward in time to when the idea <br /> of committing the incident first occurred to the insider. In tracing the incidents <br /> backward, researchers tried to identify the behaviors and communications in <br /> which the insiders engaged – both online and offline – prior to and including the <br /> insiders’ harmful activities. <br /> <br /> '''Insider Fraud Requires Little Technical Sophistication'''<br /> <br /> Most of the incidents examined in the banking and finance sector were not <br /> technically sophisticated or complex. That is, they typically involved exploitation <br /> of non-technical vulnerabilities such as business rules or organization policies <br /> (rather than vulnerabilities in an information system or network) and were carried <br /> out by individuals who had little or no technical expertise.<br /> <br /> This suggests it is important for organizations to secure their networks from the full range of users, from persons responsible for data entry to management to system administrators. Proactive practices, such as mandatory password protection and change <br /> policies, and use of password-protected screen savers, can minimize the <br /> possibility of insiders using another employee’s computer and/or account to carry <br /> out the attack. <br /> <br /> '''Perpetrators Planned Their Actions'''<br /> Most of the incidents were thought out and planned in advance. In most cases, <br /> others had knowledge of the insider’s intentions, plans, and/or activities. Those <br /> who knew were often directly involved in the planning or stood to benefit from the <br /> activity. <br /> <br /> '''Financial Gain Motivated Most Perpetrators'''<br /> Most insiders were motivated by financial gain (81%), rather than a desire to harm the <br /> company or information system. Other motives included revenge, dissatisfaction <br /> with company management, culture or polices, and a desire for respect.<br /> <br /> ==Additional Notes and Highlights==</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Insider_Threat_Study&diff=5000 2010-07-29T16:21:34Z

<p>Jalbert: /* Categorization */</p> <hr /> <div>==Full Title of Reference==<br /> Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector<br /> <br /> ==Full Citation==<br /> <br /> United States Secret Service, Computer Emergency Response Team (2004): Insider Threat Study. Illicit Cyber Activity in the Banking and Finance Sector. U.S. Government. Online Paper. [http://www.cyber.st.dhs.gov/docs/its_report_040820.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=USSS:2004&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> * Threats and Actors: [[Financial Institutions and networks]]<br /> * Issues: [[Incentives]]; [[Usability/Human Factors]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> In the past, most incidents of fraud against the banking or financial services industry were committed by insiders. It is difficult to estimate how often and to what degree companies face attacks from within; insider attacks are probably under-reported, out of fear for the negative publicity or increased liability that may arise as a consequence.<br /> <br /> The Insider Threat Study examines a series of unique insider incidents from a behavioral and technical perspective.<br /> <br /> '''Scope and Procedure of the Insider Threat Study'''<br /> <br /> The report examines 23 incidents carried out by 26 insiders in the banking and <br /> finance sector between 1996 and 2002. Organizations affected by insider activity <br /> in this sector include credit unions, banks, investment firms, credit bureaus, and <br /> other companies whose activities fall within this sector. Of the 23 incidents, 15 <br /> involved fraud, four involved theft of intellectual property, and four involved <br /> sabotage to the information system/network.<br /> <br /> The study consists of an aggregated case-study analysis that provides an in-depth look at insider incidents that have occurred in critical infrastructure sectors between 1996 and 2002, a review of the prevalence of insider activity across critical infrastructure <br /> sectors over a 10-year time frame, and a survey of recent insider activity experienced by a sample of public- and private-sector organizations.<br /> <br /> Cases were identified through public reporting or as a computer fraud case <br /> investigated by the Secret Service.<br /> <br /> The ITS adapted methods used in previous research performed by the Secret <br /> Service and CERT/CC to conduct in-depth examinations of network, system, and <br /> data compromises and other insider activity. Researchers focused primarily on <br /> tracing insider incidents from the initial harm backward in time to when the idea <br /> of committing the incident first occurred to the insider. In tracing the incidents <br /> backward, researchers tried to identify the behaviors and communications in <br /> which the insiders engaged – both online and offline – prior to and including the <br /> insiders’ harmful activities. <br /> <br /> '''Insider Fraud Requires Little Technical Sophistication'''<br /> <br /> Most of the incidents examined in the banking and finance sector were not <br /> technically sophisticated or complex. That is, they typically involved exploitation <br /> of non-technical vulnerabilities such as business rules or organization policies <br /> (rather than vulnerabilities in an information system or network) and were carried <br /> out by individuals who had little or no technical expertise.<br /> <br /> This suggests it is important for organizations to secure their networks from the full range of users, from persons responsible for data entry to management to system administrators. Proactive practices, such as mandatory password protection and change <br /> policies, and use of password-protected screen savers, can minimize the <br /> possibility of insiders using another employee’s computer and/or account to carry <br /> out the attack. <br /> <br /> '''Perpetrators Planned Their Actions'''<br /> Most of the incidents were thought out and planned in advance. In most cases, <br /> others had knowledge of the insider’s intentions, plans, and/or activities. Those <br /> who knew were often directly involved in the planning or stood to benefit from the <br /> activity. <br /> <br /> '''Financial Gain Motivated Most Perpetrators'''<br /> Most insiders were motivated by financial gain (81%), rather than a desire to harm the <br /> company or information system. Other motives included revenge, dissatisfaction <br /> with company management, culture or polices, and a desire for respect.<br /> <br /> ==Additional Notes and Highlights==</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Insider_Threat_Study&diff=4999 2010-07-29T16:19:00Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector<br /> <br /> ==Full Citation==<br /> <br /> United States Secret Service, Computer Emergency Response Team (2004): Insider Threat Study. Illicit Cyber Activity in the Banking and Finance Sector. U.S. Government. Online Paper. [http://www.cyber.st.dhs.gov/docs/its_report_040820.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=USSS:2004&amp;f=wikibiblio.bib BibTeX]<br /> <br /> ==Categorization==<br /> * Resource by Type: [[US Government Reports and Documents]]<br /> <br /> ==Key Words== <br /> <br /> <br /> <br /> ==Synopsis==<br /> <br /> In the past, most incidents of fraud against the banking or financial services industry were committed by insiders. It is difficult to estimate how often and to what degree companies face attacks from within; insider attacks are probably under-reported, out of fear for the negative publicity or increased liability that may arise as a consequence.<br /> <br /> The Insider Threat Study examines a series of unique insider incidents from a behavioral and technical perspective.<br /> <br /> '''Scope and Procedure of the Insider Threat Study'''<br /> <br /> The report examines 23 incidents carried out by 26 insiders in the banking and <br /> finance sector between 1996 and 2002. Organizations affected by insider activity <br /> in this sector include credit unions, banks, investment firms, credit bureaus, and <br /> other companies whose activities fall within this sector. Of the 23 incidents, 15 <br /> involved fraud, four involved theft of intellectual property, and four involved <br /> sabotage to the information system/network.<br /> <br /> The study consists of an aggregated case-study analysis that provides an in-depth look at insider incidents that have occurred in critical infrastructure sectors between 1996 and 2002, a review of the prevalence of insider activity across critical infrastructure <br /> sectors over a 10-year time frame, and a survey of recent insider activity experienced by a sample of public- and private-sector organizations.<br /> <br /> Cases were identified through public reporting or as a computer fraud case <br /> investigated by the Secret Service.<br /> <br /> The ITS adapted methods used in previous research performed by the Secret <br /> Service and CERT/CC to conduct in-depth examinations of network, system, and <br /> data compromises and other insider activity. Researchers focused primarily on <br /> tracing insider incidents from the initial harm backward in time to when the idea <br /> of committing the incident first occurred to the insider. In tracing the incidents <br /> backward, researchers tried to identify the behaviors and communications in <br /> which the insiders engaged – both online and offline – prior to and including the <br /> insiders’ harmful activities. <br /> <br /> '''Insider Fraud Requires Little Technical Sophistication'''<br /> <br /> Most of the incidents examined in the banking and finance sector were not <br /> technically sophisticated or complex. That is, they typically involved exploitation <br /> of non-technical vulnerabilities such as business rules or organization policies <br /> (rather than vulnerabilities in an information system or network) and were carried <br /> out by individuals who had little or no technical expertise.<br /> <br /> This suggests it is important for organizations to secure their networks from the full range of users, from persons responsible for data entry to management to system administrators. Proactive practices, such as mandatory password protection and change <br /> policies, and use of password-protected screen savers, can minimize the <br /> possibility of insiders using another employee’s computer and/or account to carry <br /> out the attack. <br /> <br /> '''Perpetrators Planned Their Actions'''<br /> Most of the incidents were thought out and planned in advance. In most cases, <br /> others had knowledge of the insider’s intentions, plans, and/or activities. Those <br /> who knew were often directly involved in the planning or stood to benefit from the <br /> activity. <br /> <br /> '''Financial Gain Motivated Most Perpetrators'''<br /> Most insiders were motivated by financial gain (81%), rather than a desire to harm the <br /> company or information system. Other motives included revenge, dissatisfaction <br /> with company management, culture or polices, and a desire for respect.<br /> <br /> ==Additional Notes and Highlights==</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Models_and_Measures_for_Correlation_in_Cyber-Insurance&diff=4967 2010-07-29T15:23:48Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> Models and Measures for Correlation in Cyber-Insurance<br /> <br /> ==Full Citation==<br /> <br /> Rainer Bohme, ''Models and Measures for Correlation in Cyber-Insurance'', Workshop on the Economics of Information Security (2006).<br /> [http://weis2006.econinfosec.org/docs/16.pdf ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/Special:Bibliography?f=wikibiblio.bib&amp;title=Special:Bibliography&amp;view=detailed&amp;action=&amp;keyword=Bohme_Kataria:2006 ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> * Issues: [[Economics of Cyber Security]]; [[Insurance]] <br /> <br /> ==Key Words==<br /> Insurance<br /> <br /> ==Synopsis==<br /> <br /> THIS BOY'S MINE (j.albert)<br /> <br /> <br /> <br /> ''Abstract:''<br /> High correlation in failure of information systems due to worms and viruses has been cited as major impediment to cyber-insurance. However, of the many cyber-risk classes that influence failure of information systems, not all exhibit similar correlation properties. In this paper, we introduce a new classification of correlation properties of cyber-risks based on a twin-tier approach. At the first tier, is the correlation of cyber-risks within a firm i.e. correlated failure of multiple systems on its internal network. At second tier, is the correlation in risk at a global level i.e. correlation across independent firms in an insurer’s portfolio. Various classes of cyber-risks exhibit different level of correlation at two tiers, for instance, insider attacks <br /> exhibit high internal but low global correlation. While internal risk correlation within a firm influences its decision to seek insurance, the global correlation influences insurers’ decision in setting the premium. Citing real data we study the combined dynamics of the two-step risk arrival process to determine conditions conducive to the existence of cyber-insurance market.<br /> <br /> ''Major themes:''<br /> <br /> '''Correlation in IT risks'''<br /> It is impossible to eliminate security risks in today's IT environment. Most security is intended to deter risk, such as firewall, antivirus, encryption. The residual risk, hopefully, is manageable by the firm protecting itself. If not, security must be outsourced and insurance, purchased.<br /> <br /> Though this approach seems appropriate, it creates a widening rift between security experts <br /> who would employ standardized best practices and deploy homogeneous software to enhance system manageability and redue vulnerabilities, versus those who propose using cyber-insurance as a means of transferring risks associated with system vulnerabilities. This is because insurance relies on the principle of independent risks while standardized system environments by themselves create a global monolithic risk manifested in virtually every standardized system. Unlike in physical world where risks are geographically dispersed, in information world, network exploits, worms and viruses span all boundaries. All systems that run standardized software and processes are vulnerable, because bugs in them, once discovered, are common knowledge and can be exploited anywhere. This potentially creates a situation where not only all systems within an organization could fail by virtue of their being identical and vulnerable to same exploits, but all similar systems worldwide could fail affecting many organizations simultaneously as seen in case of worms like SQL Slammer, Code Red etc. The existence of high correlation in breach or failure of information systems adds a new dimension to risk management that has rarely been looked at in the context of information security.<br /> <br /> '''Correlated risk and insurance'''<br /> While global risk correlation influences insurers’ decision in setting the premium, the internal <br /> correlation within a single firm influences its individual decision to seek insurance. A risk-averse <br /> firm prefers low variance of loss and hence low correlation of failure amongst its internal systems.<br /> <br /> ==Additional Notes and Highlights==</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=4949 2010-07-28T20:19:32Z

<p>Jalbert: /* Risk Modeling */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> <br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> *[[Wired_Warfare | Schmitt]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> References :<br /> <br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Managing_Online_Security_Risks | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=4948 2010-07-28T20:19:12Z

<p>Jalbert: /* Cyber Security as a Public Good */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> <br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> *[[Wired_Warfare | Schmitt]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> References :<br /> <br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Keyword_Index_and_Glossary_of_Core_Ideas&diff=4947 2010-07-28T20:18:13Z

<p>Jalbert: /* Cyber Security as an Externality */</p> <hr /> <div>==Keyword Index and Glossary of Core Ideas==<br /> <br /> ===Air-Gapped Network===<br /> Air gapping is a security measure that isolates a secure network from unsecure networks physically, electrically and electromagnetically. <br /> <br /> See also: [[Keyword_Index_and_Glossary_of_Core_Ideas#Sneakernet | Sneakernet]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Antivirus===<br /> Software which attempts to identify and delete or isolate [[#Malware |malware]]. Antivirus software may use both a database containing signatures of known threats and heuristics to identify malware. Usually run as a background service to scan files and email copied to the protected system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Best Practices===<br /> <br /> The processes, practices, and systems identified in public and private organizations that performed exceptionally well and are widely recognized as improving an organization's performance and efficiency in specific areas. Successfully identifying and applying best practices can reduce business expenses and improve organizational efficiency. [http://www.gao.gov/special.pubs/bprag/bprgloss.htm GAO Glossary]<br /> <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> <br /> ===Black Hat===<br /> A black hat is a computer [[#Hacker | hacker]] who works to harm others (e.g., steal identities, spread computer viruses, install bot software).<br /> <br /> See also: [[#White_Hat | White Hat]]<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Blacklist===<br /> A list of computers, IP addresses, user names or other identifiers to block from access to a computing resource.<br /> <br /> See also: [[#Whitelist | Whitelist]]<br /> <br /> References:<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Botnet===<br /> A portmanteau of &quot;robot&quot; and &quot;network.&quot; Refers to networks of sometimes millions of infected machines that are remotely controlled by malicious actors. A single infected computer may be referred to as a zombie computer. The owners of the computer remotely controlled is often unaware of the infection. The owners of a botnet may use the combined network processing power and bandwidth to send [[#SPAM | SPAM]], install [[#Malware | malware]] and mount [[#DDoS_Attack | DDoS attacks]] or may rent out the botnet to other malicious actors.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Schneier_on_Security | Schneier]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===''Casus Belli''===<br /> The justification for going to war. From the Latin &quot;''casus''&quot; meaning &quot;incident&quot; or &quot;event&quot; and &quot;''belli''&quot; meaning &quot;of war.&quot;<br /> <br /> References:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberpower and National Security | Kramer et. al]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Civilian Participation===<br /> The involvement of non-military persons in warfare. While civilians have often provided support to the military in kinetic wars, in [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Warfare | cyber warfare]] civilians are able to remotely participate in direct attacks against opponents. This raises complicated questions of law when the combatants are not uniformed military personnel. <br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Combatant Status===<br /> The legal status of combatants in warfare. Existing law distinguishes between uniformed military and civilian status.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Emergency Response Team===<br /> A group of experts brought together to deal with computer security issues. The Computer Emergency Response Team (CERT) mandate is to develop and promote best management practices and technology applications to “resist attacks on networked systems, to limit damage, and to ensure continuity of critical services.” (Software Engineering Institute 2008). CERT may be formed by governments to handle security at the national level or by academic institutions or individual corporations.<br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Computer Network Attack===<br /> Includes actions taken via computer networks to disrupt, deny, degrade, or destroy the information within computers and computer networks and/or the computers/networks themselves. [http://www.fas.org/irp/doddir/dod/jp3_13.pdf Joint Doctrine for Information Operations JP 3-13 at I-9 (1998)]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Information_Security | GAO]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Computers_and_War | Schmitt]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Communications Privacy Law===<br /> Laws which regulate access to electronic communications. In the United States, the [http://www.usiia.org/legis/ecpa.html Electronic Communications Privacy Act (ECPA]) protects electronic communications while in transit and prohibits the unlawful access and disclosure of communication contents.<br /> <br /> References:<br /> * [[Amending_The_ECPA_To_Enable_a_Culture_of_Cybersecurity_Research | Burstein]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[Cybersecurity:_Preventing_Terrorist_Attacks_and_Protecting_Privacy_in_Cyberspace | Nojeim]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===COTS Software===<br /> Commercial Off The Shelf Software. Software that is prepackaged and sold as a commodity rather than custom written for a specific user/organization or purpose. Examples include operating systems, database management programs, email servers, application servers and office product suites. [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD at 18.]]<br /> <br /> References:<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Trust in Cyberspace | National Research Council]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Credit Card Fraud===<br /> Theft of goods or services using false or stolen credit card information.<br /> <br /> See Also: [[#Shoulder_Surfing | Shoulder Surfing]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Crimeware===<br /> Software tools designed to aid criminals in perpetrating online crime. Refers only to programs not generally considered desirable or usable for ordinary tasks. Thus, while a criminal may use Internet Explorer in the commission of a [[#Cyber_Crime | cybercrime]], the Internet Explorer application itself would not be considered crimeware.<br /> <br /> References:<br /> * [[2007_Malware_Report |Computer Economics]]<br /> * [[Cybersecurity | Bauer and van Eeten]], [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Crime===<br /> In its broadest definition, cybercrime includes all crime perpetrated with or involving a computer. Symantec defines it as any crime that is committed using a computer or network, or hardware device. The computer or device may be the agent of the crime, the facilitator of the crime, or the target of the crime. The crime may take place on the computer alone or in addition to other locations. [http://www.symantec.com/norton/cybercrime/definition.jsp Symantec]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as an Externality===<br /> Economists define externalities as instances where an individual or firm’s actions have <br /> economic consequences for others for which there is no compensation. One important <br /> distinction is between positive and negative externalities. Instances of the latter are most <br /> commonly discussed, such as the environmental pollution caused by a plant, which may <br /> have impacts on the value of neighboring homes. Important examples of positive <br /> externalities are so common in communications networks that there is a class of &quot;network <br /> externalities. For instance, the simple act of installing telephone service to one additional <br /> customer creates positive externalities on everyone on the telephone network because <br /> they can now each reach one additional person.<br /> Several attributes of computer security suggest that it is an externality. Most importantly, <br /> the lack of security on one machine can cause adverse effects on another. The most <br /> obvious example of this is from electronic commerce, where credit card numbers stolen <br /> from machines lacking security are used to commit fraud at other sites.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Pricing_Security | Camp and Wolfram]], [[Economics_of_Information_Security | 2]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]]<br /> * [[An_Introduction_to_Key_Themes_in_the_Economics_of_Cyber_Security | Gandal]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]], [[Managing_Online_Security_Risks | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Security as a Public Good===<br /> In economics, a public good is a good that is non-rivalrous and non-excludable. Non-rivalry means that consumption of the good by one individual does not reduce availability of the good for consumption by others; and non-excludability that no one can be effectively excluded from using the good.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_Other_Public_Security_Goods | Kobayashi]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Terrorism===<br /> A criminal act perpetrated by the use of computers and telecommunications capabilities, resulting in violence, destruction and/or disruption of services to create fear by causing confusion and uncertainty within a given population, with the goal of influencing a government or population to conform to a particular political, social, or ideological agenda. [http://judiciary.senate.gov/hearings/testimony.cfm?id=1054&amp;wit_id=2995 FBI]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Evolving_Landscape_of_Maritime_Cybersecurity | Shah]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Cyber Warfare===<br /> Actions by a nation-state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption. [[Cyber_War | Clarke]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Cyber_War | Clarke]]<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks#Full_Citation | Cornish]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Global_Cyber_Deterrence | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Estonia_Three_Years_Later | Shackelford]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Data Mining===<br /> The process of extracting hidden information and correlations from one or more databases or collections of data that would not normally be revealed by a simple database query.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy#Synopsis | Besunder]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Schneier on Security | Schneier]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Department of Homeland Security===<br /> Cabinet level department of the United States assigned, ''inter alia'', the task of protecting against terrorist threats and helping state and local authorities prepare for, respond to and recover from domestic disasters.<br /> <br /> References:<br /> * [[Cyber_War | Clarke]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Information_Security | GAO]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Schneier on Security | Schneier]], [[Schneier on Security | [2]]] <br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===DDoS Attack===<br /> The disabling of a targeted website or Internet connection by flooding it with such high levels of Internet traffic that it can no longer respond to normal connection requests. Often mounted by directing an army of zombie computers (see [[#Botnet | botnet]]) to connect to the targeted site simultaneously. The targeted site may crash while trying to respond to an overwhelming number of connections requests or it may be disabled because all available bandwidth and/or computing resources are tied up responding to the attack requests. <br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]], [[Security_Engineering | [2]]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin. et. al]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Digital Pearl Harbor===<br /> A cyberwarfare attack similar in scale and surprise to the 1941 attack on Pearl Harbor. The expression is often invoked by those who argue that a cyber-based attack is either imminent or inevitable and that by not being properly prepared, the United States will suffer significant and unnecessary losses.<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Disclosure Policy===<br /> A policy that governs the disclosure to clients and other stakeholder by a provider of a computer program or system of defects discovered in those products. <br /> <br /> References:<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Distributed Denial of Service (DDoS)===<br /> See: [[#DDoS_Attack | DDoS Attack]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Dumpster Diving===<br /> A method of obtaining proprietary, confidential or useful information by searching through trash discarded by a target.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Einstein===<br /> The operational name of the National Cybersecurity Protection System (NCPS). Was created in 2003 by the United States Computer Emergency Readiness Team (US-CERT)14 in order to aid in its ability to help reduce and prevent computer network vulnerabilities across the federal government. The initial version of Einstein provided an automated process for collecting, correlating, and analyzing agencies’ computer network traffic information from sensors installed at their Internet connections. The Einstein sensors collected <br /> network flow records at participating agencies, which were then analyzed by US-CERT to detect certain types of malicious activity.<br /> <br /> References:<br /> * [[Information_Security | GAO]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===E.U. Cybersecurity===<br /> Discussions relating to cybersecurity of the European Union and of European Union states.<br /> <br /> References:<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Generativity===<br /> Generativity is a system’s capacity to produce unanticipated change through unfiltered contributions from broad and varied audiences. <br /> <br /> References:<br /> <br /> *[[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Geneva Conventions===<br /> Four treaties and three additional protocols that regulates the conduct of hostilities between states and set the standards for humanitarian treatment of the victims of war.<br /> <br /> See also: [[#Laws_of_War | Laws of War]]<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacker===<br /> Advanced computer users who spend a lot of time on or with computers and work hard to find vulnerabilities in IT systems. [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivism===<br /> The nonviolent use of illegal or legally ambiguous digital tools in pursuit of political ends. These tools include web site defacements, redirects, denial-of-service attacks, information theft, web site parodies, virtual sit-ins, virtual sabotage, and software development. [http://www.alexandrasamuel.com/dissertation/index.html Samuel, A.]<br /> <br /> References:<br /> * [[World_War_3.0:_Ten_Critical_Trends_for_Cybersecurity | Cetron and Davies]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Terrorism | Stohl]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Hacktivist===<br /> A portmanteau of [[#Hacker | &quot;hacker&quot;]] and &quot;activist.&quot; Individuals that have a political motive for their activities, and identify that motivation by their actions, such as defacing opponents’ websites with counter-information or disinformation.<br /> <br /> See also: [[#Hacktivism | Hacktivism]]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[McAfee Threats Report | McAfee]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Honeypot===<br /> A computer, network or other information technology resource set as a trap to attract attacks. Honeypots may be used to collect metrics (how long does it take for an unprotected system to be breached), to test defenses, to examine methods of attack or to catch attackers. A honeypot system may also be used to collect [[#SPAM | SPAM]] so it can be added to a [[#Blacklist | blacklist]].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Identity Fraud/Theft===<br /> The exploitation by malevolent third parties of unwarranted access to clients' or consumers' identities. Often the result of lax data security or privacy measures.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Notification_of_Data_Security_Breaches | Schwartz and Janger]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Asymmetries===<br /> Information asymmetry deals with the study of decisions in transactions where one party has more or better information than the other. This creates an imbalance of power in transactions which can sometimes cause the transactions to go awry.<br /> <br /> The software market suffers from the same information asymmetry. Vendors may make claims about the security of their products, but buyers have no reason to trust them. In many cases, even the vendor does not know how secure its software is. So buyers have no reason to pay more for protection, and vendors are disinclined to invest in it.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Cyber_War | Clarke]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Intelligence Infrastructure/Information Infrastructure===<br /> The network of computers and communication lines underlying critical services that American society has come to depend on: financial systems, the power grid, transportation, emergency services, and government programs. Information infrastructure includes the Internet, telecommunications networks, “embedded” systems (the built-in microprocessors that control machines from microwaves to missiles), and “dedicated” devices like individual personal computers. [http://www.cfr.org/publication/10212/targets_for_terrorism.html Council on Foreign Relations]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cyber_Power | Nye]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Information Operations===<br /> Actions taken to affect adversary information and information systems while defending one’s own information and information systems.” Information Operations (IO) can occur during peacetime and at every level of warfare.<br /> Information warfare (IW), by contrast, is IO “conducted during time of crisis or conflict to achieve or promote specific objectives over a specific adversary or adversaries” [Joint Chiefs of Staff, Department of Defense, Dictionary of Military and Associated Terms, Joint Publication]<br /> <br /> References:<br /> <br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Interdependencies===<br /> The inter-connections between supposedly independent but often interdependent systems.<br /> <br /> See also: [[#SCADA_Systems | SCADA Systems]]<br /> <br /> References:<br /> * [[The_Economics_of_Information_Security | Anderson and Moore]]<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Trust in Cyberspace | National Research Council]]<br /> * [[Cybersecurity_and_Economic_Incentives | OECD]]<br /> * [[Evolving_Cybersecurity_Issues_in_the_Utility_Industry | Perkins]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[System_Reliability_and_Free_Riding | Varian]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===International Humanitarian Law===<br /> That part of international law which seek, for humanitarian reasons, to limit the effects of armed conflict. It protects persons who are not or are no longer participating in the hostilities and restricts the means and methods of warfare. International humanitarian law is also known as the law of war or the law of armed conflict. International law is the body of rules governing relations between States. It is contained in agreements between States (treaties or conventions), in customary rules, which consist of State practise considered by them as as legally binding, and in general principles. [http://www.icrc.org/web/eng/siteeng0.nsf/html/humanitarian-law-factsheet ICRC]<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Relay Chat (IRC)===<br /> A method of real-time Internet communication often used by criminals to buy and sell purloined information such as credit card numbers and personal identity information. IRC chatrooms may be open or private.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Internet Service Providers===<br /> A company that offers access to the Internet. Internet Service Providers may also provide add-on services such as web hosting, electronic mail, virus scanning, SPAM filtering, etc.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Market_Consequences_of_Cybersecurity | OECD]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Keylogger===<br /> Software or hardware that monitors and logs the keystrokes a user types into a computer. The keylogger may store the key sequences locally for later retrieval or send them to a remote location. A hardware keylogger can only be detected by physically inspecting the computer for unusual hardware.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> === Kinetic Attack===<br /> Traditional mode of warfare in which arms are used to kill opponents and/or destroy an opponent's infrastructure. Usually used to distinguish a cyber attack in which destruction of the opponent's resources is accomplished through targeted information system attacks without resorting to bullets, bombs or explosives.<br /> <br /> References:<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Computers_and_War | Schmitt]], [[Computers_and_War | 2]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Lawfare===<br /> The use of international law to damage an opponent in a war without use of arms.<br /> <br /> References:<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> *[[Wired_Warfare | Schmitt]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Laws of War===<br /> The body of law that define the legality of using armed force to resolve a conflict (''jus ad bellum'') and the laws that define the legality of the actual hostilities and related activities (''jus in bello'').<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[Applicability_of_the_Additional_Protocols_to_Computer_Network_Attacks | Dörmann]]<br /> * [[Cyber-Apocalypse_Now | Gable]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Power | Nye]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Malware===<br /> A variety of computer software designed to infiltrate a user's computer specifically for malicious purposes. Includes, ''inter alia'', computer virus software, botnet software, computer worms, spyware, trojan horses, crimeware and rootkits.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[A_Proposal_for_an_International_Convention_To_Regulate_the_Use_of_Information_Systems_in_Armed_Conflict | Brown]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Cybersecurity Strategy (U.S.)===<br /> A comprehensive policy to secure America’s digital infrastructure as part of the Administrative Branch's [http://www.whitehouse.gov/cybersecurity/comprehensive-national-cybersecurity-initiative Comprehensive National Cybersecurity Initiative]. The goals of the policy are: to establish a front line of defense against current immediate threats; to defend against threats by enhancing U.S. counterintelligence capabilities and; to strengthen the future cybersecurity environment by expanding cyber education and redirecting research and development efforts to define and develop strategies to deter hostile or malicious activity in cyberspace.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Cyber_Security_and_Regulation_in_the_United_States | Lewis]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===National Security===<br /> Broadly refers to the requirement to maintain the survival of the nation-state through the use of economic, military and political power and the exercise of diplomacy. [http://en.wikipedia.org/wiki/National_security Wikipedia]<br /> <br /> References:<br /> * [[Nuclear_Security | Aloise]]<br /> *[[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[An_Assessment_of_International_Legal_Issues_in_Information_Operations | DoD Office of General Counsel]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Why_States_Need_an_International_Law_for_Information_Operations | Hollis]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Terrorist_Capabilities_for_Cyberattack:_Overview_and_Policy_Issues | Rollins and Wilson]]<br /> * [[Wired_Warfare | Schmitt]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]] <br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===New Normalcy===<br /> New normalcy has become an episodic polict construct in U.S. strategic ideation. National leadership has relied on the new normalcy clarion call to illuminate moments in time when it is understood that the Nation faces not only a severe threat, but also a transcending reorientation. Often invoked in times of national crisis, new normalcy in the American experience signals a cardinal shift in the nature of U.S. security. [&quot;Cyber Operations - The New Balance,&quot; Stephen W. Korns]<br /> <br /> References :<br /> <br /> <br /> ===Notice and Take-down===<br /> Most commonly used to remove infringing web material under copyright law, a notice and take-down regime is a procedure by which an infringing web site is removed from a service provider's (ISP) network, or access to an allegedly infringing website, disabled. Websites violating copyright are subject to notice and take-down, as are phishing websites.<br /> <br /> References:<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Organized Crime===<br /> Groups having some manner of a formalized structure and whose primary objective is to obtain money through illegal activities. Such groups maintain their position through the use of actual or threatened violence, corrupt public officials, graft, or extortion, and generally have a significant impact on the people in their locales, region, or the country as a whole. [http://www.fbi.gov/hq/cid/orgcrime/glossary.htm FBI]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Cybersecurity_in_the_Payment_Card_Industry | Epstein and Brown]]<br /> * [[An_Inquiry_into_the_Nature_and_Causes_of_the_Wealth_of_Internet_Miscreants | Franklin et. al]]<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Outreach and Collaboration===<br /> Working across government and with the private sector to share information on threats and other data, and to develop shared approaches to securing cyberspace. [http://www.fas.org/sgp/crs/natsec/R40836.pdf CRS Report for Congress, at 6 (2009).]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]], [[Strategy_for_Homeland_Defense_and_Civil_Support | [2]]]<br /> * [[The_National_Strategy_for_the_Physical_Protection_of_Critical_Infrastructures_and_Key_Assets | DHS]], [[A Roadmap for Cybersecurity Research | [2]]]<br /> * [[Introduction_to_Country_Reports | ENISA]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> *[[The_Law_and_Economics_of_Cybersecurity | Grady and Parisi]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Experiences_and_Challenges_with_Using_CERT_Data_to_Analyze_International_Cyber_Security | Madnick et. al.]]<br /> * [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | Moore and Clayton]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Cybersecurity:_Current_Legislation%2C_Executive_Branch_Initiatives%2C_and_Options_for_Congress | Theohary and Rollins]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Password Weakness===<br /> Security threats caused by the use of easily guessable passwords which protect vital stores of confidential information stored online.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cybersecurity%2C_Identity_Theft%2C_and_the_Limits_of_Tort_Liability | Johnson, V.]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Patching===<br /> Patching refers to the installation of a piece of software designed to fix problems with, or update a computer program or its supporting data. This includes fixing security vulnerabilities and other bugs, and improving the usability or performance. Though meant to fix problems, poorly designed patches can sometimes introduce new problems. [http://en.wikipedia.org/wiki/Patch_%28computing%29 Wikipedia]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Phishing===<br /> The criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Security_Economics_and_the_Internal_Market | Anderson et. al.]]<br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Examining_the_Impact_of_Website_Take-down_on_Phishing | Moore and Clayton]], [[The_Consequence_of_Non-Cooperation_in_the_Fight_Against_Phishing | [2]]], [[The_Impact_of_Incentives_on_Notice_and_Take-down | [3]]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Privacy Law===<br /> Laws which regulate the protection of confidential personal information stored in private records or disclosed to a professional. Also includes laws which regulate the gathering of electronic data in which personal information is accumulated or misappropriated.<br /> <br /> References:<br /> * [[Best_Practices_for_Data_Protection_and_Privacy | Besunder]]<br /> * [[Securing_Cyberspace_for_the_44th_Presidency | Center for Strategic and International Studies]]<br /> * [[A Roadmap for Cybersecurity Research | DHS]]<br /> * [[Strategy_for_Homeland_Defense_and_Civil_Support | DoD]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Red Team===<br /> A structured, iterative process executed by trained, educated and practiced team members that provides commanders an independent capability to continuously challenge plans, operations, concepts, organizations and capabilities in the context of the operational environment and from our partners’ and adversaries’ perspectives. See [http://www.tradoc.army.mil/pao/tnsarchives/July05/070205.htm U.S. Army]<br /> <br /> References:<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | Deputy Chief of Staff for Intelligence]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Research &amp; Development===<br /> Research and development (R&amp;D) addressing cyber security and information infrastructure protection.<br /> <br /> References:<br /> * [[Pricing_Security | Camp and Wolfram]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Research_Agenda_for_the_Banking_and_Finance_Sector | Financial Services Sector Coordinating Council for Critical Infrastructure Protection]]<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[Cyber_Security_Research_and_Development_Agenda | Institute for Information Infrastructure Protection]]<br /> * [[The_Need_for_a_National_Cybersecurity_Research_and_Development_Agenda | Maughan]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Hardening_The_Internet | National Infrastructure Advisory Council]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Risk Modeling===<br /> The creation of a model to estimate risk exposure, policy option efficacy and cost-benefit analysis of a particular threat and solution. See [http://cisac.stanford.edu/publications/how_much_is_enough__a_riskmanagement_approach_to_computer_security/ Soo Hoo, Kevin J.]<br /> <br /> References:<br /> * [[Nothing_Ventured%2C_Nothing_Gained | Geer and Conway]]<br /> * [[An_Economic_Analysis_of_the_Private_and_Social_Costs_of_the_Provision_of_Cybersecurity_and_other_Public_Security_Goods | Kobayashi]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Making_the_Best_Use_of_Cybersecurity_Economic_Models | Rue and Pfleeger]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SCADA Systems===<br /> SCADA stands for &quot;supervisory control and data acquisition&quot; and in the cybersecurity context usually refers to industrial control systems that control infrastructure such as electrical power transmission and distribution, water treatment and distribution, wastewater collection and treatment, oil and gas pipelines and large communication systems. The focus is on whether as these systems are connected to the public Internet they become vulnerable to a remote attack.<br /> <br /> References:<br /> * [[Cyberpower and National Security | Kramer et. al]] <br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[Cyber_Power | Nye]]<br /> * [[A_Framework_for_Linking_Cybersecurity_Metrics_to_the_Modeling_of_Macroeconomic_Interdependencies | Santos et. al.]]<br /> * [[Metrics_for_Mitigating_Cybersecurity_Threats_to_Networks | Schneidewind]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Scareware===<br /> Software or web site that purports to be security software reporting a threat against a user's computer to convince the user to purchase unneeded software or install malware.<br /> <br /> * [[2007_Malware_Report | Computer Economics]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Script Kiddie===<br /> A derogatory term for a [[#Black_Hat | Black Hat]] who uses canned tools and programs written by more skillful [[#Hacker | hackers]] to commit cyber crime without understanding how they work.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Security Trade-Offs===<br /> There is no single correct level of security; how much security you have depends on what you’re willing to give up in order to get it. This trade-off is, by its very nature, subjective—secu- rity decisions are based on personal judgments. Different people have different senses of what constitutes a threat, or what level of risk is acceptable. What’s more, between different commu- nities, or organizations, or even entire societies, there is no agreed-upon way in which to define threats or evaluate risks, and the modern technological and media-filled world makes these evaluations even harder. [http://www.scribd.com/doc/12185921/beyond-fear-thinking-sensibly-about-security-in-an-uncertain-world-bruce-schneier-copernicus-books-2003 Bruce Schneier]<br /> <br /> References:<br /> <br /> *[[Cyber-Insurance_Revisited | Bohme]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Shoulder Surfing===<br /> The process of obtaining passwords or other sensitive information by covertly watching an authorized user enter information into a computer system.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sneakernet===<br /> Describes the transfer of data between computers or networks that are not physically, electrically or electromagnetically connected requiring information to be shared by physically transporting media contain the shared information from one computer to another. Initially described systems lacking the technology to network together, now usually refers to systems deliberately isolated for security reasons.<br /> <br /> See also: [[#Air-Gapped_Network | Air-Gapped Network]]<br /> <br /> ===Social Engineering===<br /> Conning a human into supplying passwords, computer access or other sensitive information by pretending to be a person with rights to the information or who the target believes they must surrender the information to.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Emerging_Threats_to_Internet_Security_-_Incentives%2C_Externalities_and_Policy_Implications | Bauer and van Eeten]]<br /> * [[Cyber_Power | Nye]]<br /> * [[The_Market_Consequences_of_Cybersecurity:_Defining_Externalities_and_Ways_to_Address_Them | OECD]], [[Cybersecurity_and_Economic_Incentives | [2]]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Social Network===<br /> A software application or website that allows a large group of users to interact with each other, often allowing the creation of online portals or identities to share with specific people or the online world at large.<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Software Vulnerability===<br /> <br /> A software vulnerablilty refers to the existence of a flaw -- or &quot;bug&quot; -- in software that may allow a third party or program to obtain unauthorized access to the flaw and exploit it. [http://www.spi.dod.mil/tenets.htm U.S. Air Force Software Protection Initiative]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure | Arora et. al.]]<br /> * [[Four Grand Challenges in Trustworthy Computing | Computing Research Association]]<br /> * [[Mission Impact of Foreign Influence on DoD Software | DoD]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[The Price of Restricting Vulnerability Publications | Granick]]<br /> * [[Cyber Security Research and Development Agenda | Institute for Information Infrastructure Protection]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]], [[Trust in Cyberspace | [2]]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[Economics_of_Malware | van Eeten and Bauer]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===SPAM===<br /> Unwanted or junk email usually sent indiscriminately in bulk selling illegal or near illegal goods or services. Even with low response rates and heavy filtering, SPAM can stil be economically viable because of the extremely low costs in sending even huge quantities of electronic messages. Commonly believed to be named after the [http://www.youtube.com/watch?v=anwy2MPT5RE Monty Python skit] where the breakfast meat Spam overwhelms all other food choices.<br /> <br /> References: <br /> * [[Security_Engineering | Anderson]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[The_Impact_of_Incentives_on_Notice_and_Take-down | Moore and Clayton]]<br /> * [[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Schneier on Security | Schneier]] <br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[The_Underground_Economy | Thomas and Martin]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Sponsored Attacks===<br /> [[#Computer_Network_Attack | Computer network attacks]] commissioned by, supported by or carried out by a state or government.<br /> <br /> Reverences:<br /> * [[The_Government_and_Cybersecurity | Bellovin]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Beyond_Fear | Schneier]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===State Affiliation===<br /> Under the control or command of a recognized state or government.<br /> <br /> References:<br /> * [[Cyber_Security_and_Politically%2C_Socially_and_Religiously_Motivated_Cyber_Attacks | Cornish]]<br /> * [[Cyberspace_and_the_National_Security_of_the_United_Kingdom | Cornish et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber-Apocalypse_Now_-_Securing_the_Internet_Against_Cyberterrorism_and_Using_Universal_Jurisdiction_as_a_Deterrent | Gable]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[National_Cyber_Defense_Financial_Services_Workshop_Report | National Cyber Defense Initiative]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Combatant_Status_and_Computer_Network_Attack | Watts]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Tragedy of Commons===<br /> A situation, first described in an influential article written by ecologist Garrett Hardin for the journal Science, in 1968, in which multiple individuals, acting independently, and solely and rationally consulting their own self-interest, will ultimately deplete a shared limited resource even when it is clear that it is not in anyone's long-term interest for this to happen. The term can be applied to any issue related to the management of a shared resource, from energy to the public domain, to cybersecurity.<br /> <br /> References:<br /> * [[Why_Information_Security_is_Hard | Anderson]]<br /> * [[Economics_of_Information_Security | Camp and Wolfram]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Is_Cybersecurity_a_Public_Good | Powell]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Transparency===<br /> A set of policies, practices and procedures that allow citizens to have accessibility, usability, informativeness, understandability and auditability of information and process held by centers of authority. [http://en.wikipedia.org/wiki/Transparency_(social) Wikipedia]<br /> <br /> References:<br /> * [[Overcoming_Impediments_to_Information_Sharing | Aviram and Tor]]<br /> * [[Research Agenda for the Banking and Finance Sector | FSSCC]]<br /> * [[An_Economic_Analysis_of_Notification_Requirements_for_Data_Security_Breaches | Lenard and Rubin]], [[Much_Ado_About_Notification | [2]]]<br /> * [[Managing_Information_Risk_and_the_Economics_of_Security | Johnson, E.]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Do_Data_Breach_Disclosure_Laws_Reduce_Identity_Theft | Romanosky et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[A_Model_for_When_Disclosure_Helps_Security | Swire]], [[A_Theory_of_Disclosure_for_Security_and_Competitive_Reasons | [2]]]<br /> * [[Impact_of_Software_Vulnerability_Announcements_on_the_Market_Value_of_Software_Vendors | Telang and Wattal]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Trojan===<br /> [[#Malware | Malware]] which masquerades as some other type of program such as a link to a web site, a desirable image, etc. to trick a user into installing it. Named for the Ancient Greek legend of the [http://www.mlahanas.de/Greeks/Mythology/TrojanHorse.html Trojan Horse].<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[McAfee Threats Report | McAfee]]<br /> *[[The_Economics_of_Online_Crime | Moore et. al.]]<br /> * [[Beyond_Fear | Schneier]]<br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Military Technologies===<br /> Warfare made possible by advances in remotely controlled or semiautomated military technologies which remove the operator from risk of harm while attacking an opponent.<br /> <br /> References:<br /> * [[Information_Warfare_and_International_Law_on_the_Use_of_Force | Barkham]]<br /> * [[Law_and_War_in_the_Virtual_Era | Beard]]<br /> * [[Critical_Infrastructure_Threats_and_Terrorism | DCSINT]]<br /> * [[Global_Cyber_Deterrence_Views_from_China | Lan]]<br /> * [[Wired_Warfare | Schmitt]], [[Computers_and_War | 2]]<br /> * [[Armed_Attack_in_Cyberspace | Todd]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Virtual Warfare===<br /> <br /> See: [[#Virtual_Military_Technologies | Virtual Military Technologies]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===White Hat===<br /> A white hat is a computer [[#Hacker | hacker]] who works to find and fix computer security risks. White hat consultants are often hired to attempt to break into their client's network to see if all security holes have been addressed.<br /> <br /> See also: [[#Black_Hat | Black Hat]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]], [[Why_Information_Security_is_Hard | [2]]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Whitelist===<br /> A list of computers, IP (Internet Protocol) addresses, user names or other identifiers to specifically allow access to a computing resource. Normally combined with a default &quot;no-access&quot; policy.<br /> <br /> See also: [[#Blacklist | Blacklist]]<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Worm===<br /> A type of malware that replicates itself and spreads to other computers through network connections.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[Cyber_Operations | Korns]]<br /> * [[Toward_a_Safer_and_More_Secure_Cyberspace | National Research Council]]<br /> * [[Beyond_Fear | Schneier]], [[Schneier on Security | [2]]] <br /> * [[Solving_the_Dilemma_of_State_Responses_to_Cyberattacks | Sklerov]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> * [[The_Future_of_the_Internet_and_How_To_Stop_It | Zittrain]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''<br /> <br /> ===Zero-Day Exploit===<br /> [[#Malware | Malware]] designed to exploit a newly discovered security hole unknown to the software developer. &quot;Zero-day&quot; refers to the amount of time a developer has between learning of a security hole and the time it becomes public or when [[#Black_Hat | black hat]] [[#Hacker | hackers]] find out about it and try to use the security hole for nefarious purposes.<br /> <br /> References:<br /> * [[Security_Engineering | Anderson]]<br /> * [[Does_Information_Security_Attack_Frequency_Increase_With_Vulnerability_Disclosure | Arora et. al.]]<br /> * [[Mission_Impact_of_Foreign_Influence_on_DoD_Software | DoD]]<br /> * [[The_Price_of_Restricting_Vulnerability_Publications | Granick]]<br /> * [[McAfee Threats Report | McAfee]]<br /> * [[Symantec Global Internet Security Threat Report | Symantec]]<br /> * [[Trend Micro Annual Report | Trend Micro]]<br /> <br /> ''[[Keyword_Index_and_Glossary_of_Core_Ideas#Top | Jump to top of Glossary]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Behavioral_Economics&diff=4945 2010-07-28T20:17:38Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Behavioral Economics]]''<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Incentives&diff=4944 2010-07-28T20:17:25Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Incentives]]''<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Bohme, Rainer (2005) [[Cyber-Insurance Revisited]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> Romanosky et al. (2008) [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Telang, Rahul and Wattal, Sunil (2007) [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Risk_Management_and_Investment&diff=4942 2010-07-28T20:17:08Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Risk Management and Investment]]''<br /> <br /> Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> *'''''Subcategories:''''' ''None''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Economics_of_Cybersecurity&diff=4941 2010-07-28T20:16:44Z

<p>Jalbert: </p> <hr /> <div>''[[Table of Contents | TOC-&gt;]][[Issues | Issues-&gt;]][[Economics of Cybersecurity]]''<br /> <br /> Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Bohme, Rainer (2005) [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M. (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> Powell, Benjamin (2005) [[Is Cybersecurity a Public Good]]<br /> <br /> Romanosky et al. (2008) [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (2007) [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal (2000) [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> '''''Subcategories:'''''<br /> *''[[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Risk Management and Investment]]''<br /> *''[[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Incentives]]''<br /> *''[[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Insurance]]''<br /> *''[[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Behavioral Economics]]''<br /> *''[[Economics of Cybersecurity | Economics of Cybersecurity-&gt;]][[Market Failure]]''<br /> <br /> ''[[Table of Contents| Jump to Table of Contents]]''</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Managing_Online_Security_Risks&diff=4940 2010-07-28T20:16:23Z

<p>Jalbert: /* Key Words */</p> <hr /> <div>==Full Title of Reference==<br /> <br /> Managing Online Security Risks<br /> <br /> ==Full Citation==<br /> <br /> Hal Varian, ''NYT,'' Managing Online Security Risks (June 1, 2000). [http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=Varian:2000&amp;f=wikibiblio.bib ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> *Issues: [[Economics of Cybersecurity]]; [[Risk Management and Investment]]; [[Incentives]]; [[Behavioral Economics]]<br /> <br /> ==Key Words== <br /> <br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Security_as_an_Externality | Cybersecurity as an Externality]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Cyber_Security_as_a_Public_Good | Cybersecurity as a Public Good]],<br /> [[Keyword_Index_and_Glossary_of_Core_Ideas#Risk_Modeling | Risk Modelling]]<br /> <br /> ==Synopsis==<br /> <br /> In this article, Varian writes about the growing vulnerability of the Internet, a &quot;lab experiment let loose&quot; he describes as being birthed in a secure environment of friendly researchers. The biggest culprit in computer and cyber security, in Varian's mind, is humans, and not technical vulnerability of any kind.<br /> <br /> Whereas cryptography offers a vast measure of effective security, it often fails because of the human element. Varian laments computer security's focus on the hard issues of cryptography and system design, and the neglect of those more important fields of user experience, economics and incentives. Varian quotes a study by Ross Anderson that examines fraud in automated telling machines, almost all instances of which occur because of human -- and not machine -- error.<br /> <br /> Looking at best practices in British and American banks' customer policies, Varian finds that the US, where liability in a customer dispute automatically falls to the bank, banks have a higher incentive to show that they are right. In Britain, where the bank is right unless the customer proves it wrong, banks have little incentive to take care -- the result is ATM fraud.<br /> <br /> Risk management is best thought of not from a technical perspective, but from the standpoint of incentives. Effective risk management is a question of practices, not technology. Furthermore, the job of managing risk should fall to the party that can best do the job. In the case of banks and customers -- this part is the bank. But again, there should be a balance lest customers escape all liability and become too sloppy. <br /> <br /> The same goes for computer attacks. Computer security is poor when liability is too diffuse. If a particular user's computer is taken over via a network, it would be pointless to assign liability to the user, given that most users are clueless about preventing zombie attacks or attacks of any sort. Assigning liability to the network operator makes more sense.<br /> <br /> A typical security analysis involves identifying weak points in a system and indicating who might be in a position to fix them. But security analysts should go one step further and examine the incentives of those responsible for the system. Such an analysis could be used to assign liability so that those who are best positioned to control the risks have appropriate incentives to do so.<br /> <br /> The study of incentives opens the proverbial cybersecurity door to insurance. Here, too, incentives comes into play. Just as there is no such thing as blanket insurance in the real world, neither does it exist in the realm of cybersecurity. Just as an insurer of an office building will give you a reduced rate if you have sprinklers every 12 feet, an insurer against computer crime will give you a reduced rate if you install security patches within two weeks of their posting, provide continuing education for security staff and engage in other good risk management practices. Yet most insurance companies have very little experience with computer security, and being unable to judge the risks, they offer little in the way of protection. <br /> <br /> Varian's ''next steps'' for a better computer security are as follows: The first step is to assign legal liability to the parties best able to manage the risk. Insurers can then develop expertise in risk management for computer security and provide such services to their clients. <br /> <br /> His conclusion is rather bleak:<br /> &quot;Unfortunately, this will be a long and slow process. In the meantime, we can expect to see many more disruptions on the Internet.&quot;<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> ''About the author:'' Hal Varian is Chief Economist at Google and also teaches at UC Berkeley, at the School of Information as well as at the Haas Business School.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Managing_Online_Security_Risks&diff=4938 2010-07-28T20:10:14Z

<p>Jalbert: /* Categorization */</p> <hr /> <div>==Full Title of Reference==<br /> <br /> Managing Online Security Risks<br /> <br /> ==Full Citation==<br /> <br /> Hal Varian, ''NYT,'' Managing Online Security Risks (June 1, 2000). [http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=Varian:2000&amp;f=wikibiblio.bib ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> *Issues: [[Economics of Cybersecurity]]; [[Risk Management and Investment]]; [[Incentives]]; [[Behavioral Economics]]<br /> <br /> ==Key Words== <br /> <br /> Risk management, insurance<br /> <br /> ==Synopsis==<br /> <br /> In this article, Varian writes about the growing vulnerability of the Internet, a &quot;lab experiment let loose&quot; he describes as being birthed in a secure environment of friendly researchers. The biggest culprit in computer and cyber security, in Varian's mind, is humans, and not technical vulnerability of any kind.<br /> <br /> Whereas cryptography offers a vast measure of effective security, it often fails because of the human element. Varian laments computer security's focus on the hard issues of cryptography and system design, and the neglect of those more important fields of user experience, economics and incentives. Varian quotes a study by Ross Anderson that examines fraud in automated telling machines, almost all instances of which occur because of human -- and not machine -- error.<br /> <br /> Looking at best practices in British and American banks' customer policies, Varian finds that the US, where liability in a customer dispute automatically falls to the bank, banks have a higher incentive to show that they are right. In Britain, where the bank is right unless the customer proves it wrong, banks have little incentive to take care -- the result is ATM fraud.<br /> <br /> Risk management is best thought of not from a technical perspective, but from the standpoint of incentives. Effective risk management is a question of practices, not technology. Furthermore, the job of managing risk should fall to the party that can best do the job. In the case of banks and customers -- this part is the bank. But again, there should be a balance lest customers escape all liability and become too sloppy. <br /> <br /> The same goes for computer attacks. Computer security is poor when liability is too diffuse. If a particular user's computer is taken over via a network, it would be pointless to assign liability to the user, given that most users are clueless about preventing zombie attacks or attacks of any sort. Assigning liability to the network operator makes more sense.<br /> <br /> A typical security analysis involves identifying weak points in a system and indicating who might be in a position to fix them. But security analysts should go one step further and examine the incentives of those responsible for the system. Such an analysis could be used to assign liability so that those who are best positioned to control the risks have appropriate incentives to do so.<br /> <br /> The study of incentives opens the proverbial cybersecurity door to insurance. Here, too, incentives comes into play. Just as there is no such thing as blanket insurance in the real world, neither does it exist in the realm of cybersecurity. Just as an insurer of an office building will give you a reduced rate if you have sprinklers every 12 feet, an insurer against computer crime will give you a reduced rate if you install security patches within two weeks of their posting, provide continuing education for security staff and engage in other good risk management practices. Yet most insurance companies have very little experience with computer security, and being unable to judge the risks, they offer little in the way of protection. <br /> <br /> Varian's ''next steps'' for a better computer security are as follows: The first step is to assign legal liability to the parties best able to manage the risk. Insurers can then develop expertise in risk management for computer security and provide such services to their clients. <br /> <br /> His conclusion is rather bleak:<br /> &quot;Unfortunately, this will be a long and slow process. In the meantime, we can expect to see many more disruptions on the Internet.&quot;<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> ''About the author:'' Hal Varian is Chief Economist at Google and also teaches at UC Berkeley, at the School of Information as well as at the Haas Business School.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Managing_Online_Security_Risks&diff=4935 2010-07-28T20:04:11Z

<p>Jalbert: /* Synopsis */</p> <hr /> <div>==Full Title of Reference==<br /> <br /> Managing Online Security Risks<br /> <br /> ==Full Citation==<br /> <br /> Hal Varian, ''NYT,'' Managing Online Security Risks (June 1, 2000). [http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=Varian:2000&amp;f=wikibiblio.bib ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> Issues: [[Economics of Cybersecurity]]<br /> <br /> Issues: [[Risk Management and Investment]]<br /> <br /> Issues: [[Incentives]]<br /> <br /> ==Key Words== <br /> <br /> Risk management, insurance<br /> <br /> ==Synopsis==<br /> <br /> In this article, Varian writes about the growing vulnerability of the Internet, a &quot;lab experiment let loose&quot; he describes as being birthed in a secure environment of friendly researchers. The biggest culprit in computer and cyber security, in Varian's mind, is humans, and not technical vulnerability of any kind.<br /> <br /> Whereas cryptography offers a vast measure of effective security, it often fails because of the human element. Varian laments computer security's focus on the hard issues of cryptography and system design, and the neglect of those more important fields of user experience, economics and incentives. Varian quotes a study by Ross Anderson that examines fraud in automated telling machines, almost all instances of which occur because of human -- and not machine -- error.<br /> <br /> Looking at best practices in British and American banks' customer policies, Varian finds that the US, where liability in a customer dispute automatically falls to the bank, banks have a higher incentive to show that they are right. In Britain, where the bank is right unless the customer proves it wrong, banks have little incentive to take care -- the result is ATM fraud.<br /> <br /> Risk management is best thought of not from a technical perspective, but from the standpoint of incentives. Effective risk management is a question of practices, not technology. Furthermore, the job of managing risk should fall to the party that can best do the job. In the case of banks and customers -- this part is the bank. But again, there should be a balance lest customers escape all liability and become too sloppy. <br /> <br /> The same goes for computer attacks. Computer security is poor when liability is too diffuse. If a particular user's computer is taken over via a network, it would be pointless to assign liability to the user, given that most users are clueless about preventing zombie attacks or attacks of any sort. Assigning liability to the network operator makes more sense.<br /> <br /> A typical security analysis involves identifying weak points in a system and indicating who might be in a position to fix them. But security analysts should go one step further and examine the incentives of those responsible for the system. Such an analysis could be used to assign liability so that those who are best positioned to control the risks have appropriate incentives to do so.<br /> <br /> The study of incentives opens the proverbial cybersecurity door to insurance. Here, too, incentives comes into play. Just as there is no such thing as blanket insurance in the real world, neither does it exist in the realm of cybersecurity. Just as an insurer of an office building will give you a reduced rate if you have sprinklers every 12 feet, an insurer against computer crime will give you a reduced rate if you install security patches within two weeks of their posting, provide continuing education for security staff and engage in other good risk management practices. Yet most insurance companies have very little experience with computer security, and being unable to judge the risks, they offer little in the way of protection. <br /> <br /> Varian's ''next steps'' for a better computer security are as follows: The first step is to assign legal liability to the parties best able to manage the risk. Insurers can then develop expertise in risk management for computer security and provide such services to their clients. <br /> <br /> His conclusion is rather bleak:<br /> &quot;Unfortunately, this will be a long and slow process. In the meantime, we can expect to see many more disruptions on the Internet.&quot;<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> ''About the author:'' Hal Varian is Chief Economist at Google and also teaches at UC Berkeley, at the School of Information as well as at the Haas Business School.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Managing_Online_Security_Risks&diff=4908 2010-07-28T19:39:23Z

<p>Jalbert: /* Additional Notes and Highlights */</p> <hr /> <div>==Full Title of Reference==<br /> <br /> Managing Online Security Risks<br /> <br /> ==Full Citation==<br /> <br /> Hal Varian, ''NYT,'' Managing Online Security Risks (June 1, 2000). [http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=Varian:2000&amp;f=wikibiblio.bib ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> Issues: [[Economics of Cybersecurity]]<br /> <br /> Issues: [[Risk Management and Investment]]<br /> <br /> Issues: [[Incentives]]<br /> <br /> ==Key Words== <br /> <br /> Risk management, insurance<br /> <br /> ==Synopsis==<br /> <br /> ''This could be an abstract from the article.''<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> ''About the author:'' Hal Varian is Chief Economist at Google and also teaches at UC Berkeley, at the School of Information as well as at the Haas Business School.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Managing_Online_Security_Risks&diff=4907 2010-07-28T19:39:00Z

<p>Jalbert: /* Additional Notes and Highlights */</p> <hr /> <div>==Full Title of Reference==<br /> <br /> Managing Online Security Risks<br /> <br /> ==Full Citation==<br /> <br /> Hal Varian, ''NYT,'' Managing Online Security Risks (June 1, 2000). [http://people.ischool.berkeley.edu/~hal/people/hal/NYTimes/2000-06-01.html ''Web'']<br /> <br /> [http://cyber.law.harvard.edu/cybersecurity/?title=Special:Bibliography&amp;view=detailed&amp;startkey=Varian:2000&amp;f=wikibiblio.bib ''BibTeX'']<br /> <br /> ==Categorization==<br /> <br /> Issues: [[Economics of Cybersecurity]]<br /> <br /> Issues: [[Risk Management and Investment]]<br /> <br /> Issues: [[Incentives]]<br /> <br /> ==Key Words== <br /> <br /> Risk management, insurance<br /> <br /> ==Synopsis==<br /> <br /> ''This could be an abstract from the article.''<br /> <br /> ==Additional Notes and Highlights==<br /> <br /> ''About the author:'' Hal Varian is Chief Economist at Google and also teaches at UC Berkeley.</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cybersecurity_Annotated_Bibliography&diff=4900 2010-07-28T19:28:44Z

<p>Jalbert: </p> <hr /> <div>Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Beard, Jack M. (2009) [[Law and War in the Virtual Era]] <br /> <br /> Bohme, Rainer ''(2005)'' [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Brown, Davis (2006) [[A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict]] <br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computer Economics, Inc. (2007) [[2007 Malware Report]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Defense Office of General Counsel ''(1999)'' [[An Assessment of International Legal Issues in Information Operations]] <br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Dörmann, Knut (2004) [[Applicability of the Additional Protocols to Computer Network Attacks]] <br /> <br /> Dunlap, Charles J. Jr. ''(2009)'' [[Towards a Cyberspace Legal Regime in the Twenty-First Century]] <br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark and Parisi, Francesco (''2006'') [[The Law and Economics of Cybersecurity: An Introduction]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Hollis, Duncan B. (2007) [[Why States Need an International Law for Information Operations]] <br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force ''(2004)'' [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> Powell, Benjamin ''(2005)'' [[Is Cybersecurity a Public Good]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> Romanosky et al. (''2008'') [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schmitt, Michael N., et. al (2004) [[Computers and War]] <br /> <br /> Schmitt, Michael N. (1999) [[Computer Network Attack and the Use of Force in International Law]] <br /> <br /> Schmitt, Michael N. (2002) [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (2007) [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. (2009) [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Stohl, Michael (2006) [[Cyber Terrorism]]<br /> <br /> Swire, Peter P (2004) [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (2006) [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (''2007'') [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> Todd, Graham H. ''(2009)'' [[Armed Attack in Cyberspace]] <br /> <br /> Trend Micro Incorporated (2010) [[Trend Micro Annual Report]]<br /> <br /> United States Secret Service ''(2004)'' [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal ''(2000)'' [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> Watts, Sean (2010) [[Combatant Status and Computer Network Attack]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cybersecurity_Annotated_Bibliography&diff=4896 2010-07-28T19:26:20Z

<p>Jalbert: </p> <hr /> <div>Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Beard, Jack M. (2009) [[Law and War in the Virtual Era]] <br /> <br /> Bohme, Rainer ''(2005)'' [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Brown, Davis (2006) [[A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict]] <br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computer Economics, Inc. (2007) [[2007 Malware Report]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Defense Office of General Counsel ''(1999)'' [[An Assessment of International Legal Issues in Information Operations]] <br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Dörmann, Knut (2004) [[Applicability of the Additional Protocols to Computer Network Attacks]] <br /> <br /> Dunlap, Charles J. Jr. ''(2009)'' [[Towards a Cyberspace Legal Regime in the Twenty-First Century]] <br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark and Parisi, Francesco (''2006'') [[The Law and Economics of Cybersecurity: An Introduction]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Hollis, Duncan B. (2007) [[Why States Need an International Law for Information Operations]] <br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force ''(2004)'' [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> Powell, Benjamin ''(2005)'' [[Is Cybersecurity a Public Good]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> Romanosky et al. (''2008'') [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schmit, Michael N., et. al ''(2004)'' [[Computers and War]] <br /> <br /> Schmitt, Michael N. ''(1999)'' [[Computer Network Attack and the Use of Force in International Law]] <br /> <br /> Schmitt, Michael N. ''(2002)'' [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (''2007'') [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. ''(2009)'' [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Stohl, Michael ''(2006)'' [[Cyber Terrorism]]<br /> <br /> Swire, Peter P (''2004'') [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (''2006'') [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (''2007'') [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> Todd, Graham H. ''(2009)'' [[Armed Attack in Cyberspace]] <br /> <br /> Trend Micro Incorporated (2010) [[Trend Micro Annual Report]]<br /> <br /> United States Secret Service ''(2004)'' [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal ''(2000)'' [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> Watts, Sean (2010) [[Combatant Status and Computer Network Attack]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cybersecurity_Annotated_Bibliography&diff=4893 2010-07-28T19:25:22Z

<p>Jalbert: </p> <hr /> <div>Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason (2001) [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Beard, Jack M. (2009) [[Law and War in the Virtual Era]] <br /> <br /> Bohme, Rainer ''(2005)'' [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Brown, Davis (2006) [[A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict]] <br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computer Economics, Inc. (2007) [[2007 Malware Report]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Defense Office of General Counsel ''(1999)'' [[An Assessment of International Legal Issues in Information Operations]] <br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Dörmann, Knut ''(2004)'' [[Applicability of the Additional Protocols to Computer Network Attacks]] <br /> <br /> Dunlap, Charles J. Jr. ''(2009)'' [[Towards a Cyberspace Legal Regime in the Twenty-First Century]] <br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark and Parisi, Francesco (''2006'') [[The Law and Economics of Cybersecurity: An Introduction]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Hollis, Duncan B. (2007) [[Why States Need an International Law for Information Operations]] <br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force ''(2004)'' [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> Powell, Benjamin ''(2005)'' [[Is Cybersecurity a Public Good]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> Romanosky et al. (''2008'') [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schmit, Michael N., et. al ''(2004)'' [[Computers and War]] <br /> <br /> Schmitt, Michael N. ''(1999)'' [[Computer Network Attack and the Use of Force in International Law]] <br /> <br /> Schmitt, Michael N. ''(2002)'' [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (''2007'') [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. ''(2009)'' [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Stohl, Michael ''(2006)'' [[Cyber Terrorism]]<br /> <br /> Swire, Peter P (''2004'') [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (''2006'') [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (''2007'') [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> Todd, Graham H. ''(2009)'' [[Armed Attack in Cyberspace]] <br /> <br /> Trend Micro Incorporated (2010) [[Trend Micro Annual Report]]<br /> <br /> United States Secret Service ''(2004)'' [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal ''(2000)'' [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> Watts, Sean (2010) [[Combatant Status and Computer Network Attack]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]</div>

Jalbert https://cyber.harvard.edu/cybersecurity/?title=Cybersecurity_Annotated_Bibliography&diff=4892 2010-07-28T19:24:44Z

<p>Jalbert: </p> <hr /> <div>Anderson, Ross (2001) [[Why Information Security is Hard]]<br /> <br /> Anderson, Ross and Moore, Tyler (2006) [[The Economics of Information Security]]<br /> <br /> Anderson, Ross J. (2008) [[Security Engineering]]<br /> <br /> Anderson, Ross, et. al (2008) [[Security Economics and the Internal Market]]<br /> <br /> Arora et al. (2006) [[Does Information Security Attack Frequency Increase With Vulnerability Disclosure]]<br /> <br /> Aviram, Amitai and Tor, Avishalom (2004) [[Overcoming Impediments to Information Sharing]]<br /> <br /> Barkham, Jason ''(2001)'' [[Information Warfare and International Law on the Use of Force]] <br /> <br /> Beard, Jack M. (2009) [[Law and War in the Virtual Era]] <br /> <br /> Bohme, Rainer ''(2005)'' [[Cyber-Insurance Revisited]]<br /> <br /> Bohme, Rainer and Kataria, Gaurav ''(2006)'' [[Models and Measures for Correlation in Cyber-Insurance]]<br /> <br /> Bohme, Rainer and Schwartz, Galina ''(2010)'' [[Modeling Cyber-Insurance]]<br /> <br /> Brown, Davis ''(2006)'' [[A Proposal for an International Convention To Regulate the Use of Information Systems in Armed Conflict]] <br /> <br /> Camp, and L. Jean and Lewis, Stephen (2004) [[Economics of Information Security]]<br /> <br /> Camp, L. Jean and Wolfram, Catherine (2004) [[Pricing Security]]<br /> <br /> Center for Strategic and International Studies (2008) [[Securing Cyberspace for the 44th Presidency]]<br /> <br /> Clarke, Richard A. and Knake, Robert (2010) [[Cyber War]]<br /> <br /> Clinton, Larry ''(Undated)'' [[Cyber-Insurance Metrics and Impact on Cyber-Security]]<br /> <br /> Computer Economics, Inc. (2007) [[2007 Malware Report]]<br /> <br /> Computing Research Association (2003) [[Four Grand Challenges in Trustworthy Computing]]<br /> <br /> Department of Commerce (2010) [[Defense Industrial Base Assessment]]<br /> <br /> Department of Defense (2005) [[Strategy for Homeland Defense and Civil Support]]<br /> <br /> Department of Defense Office of General Counsel ''(1999)'' [[An Assessment of International Legal Issues in Information Operations]] <br /> <br /> Department of Defense (2007) [[Mission Impact of Foreign Influence on DoD Software]]<br /> <br /> Department of Homeland Security (2003) [[The National Strategy for the Physical Protection of Critical Infrastructures and Key Assets]]<br /> <br /> Department of Homeland Security (2009) [[A Roadmap for Cybersecurity Research]]<br /> <br /> Deputy Chief of Staff for Intelligence (2006) [[Critical Infrastructure Threats and Terrorism]]<br /> <br /> Dörmann, Knut ''(2004)'' [[Applicability of the Additional Protocols to Computer Network Attacks]] <br /> <br /> Dunlap, Charles J. Jr. ''(2009)'' [[Towards a Cyberspace Legal Regime in the Twenty-First Century]] <br /> <br /> Energetics Inc. (2006) [[Roadmap to Secure Control Systems in the Energy Sector]]<br /> <br /> Epstein, Richard A. and Brown, Thomas P. (2008) [[Cybersecurity in the Payment Card Industry]]<br /> <br /> Financial Services Sector Coordinating Council for Critical Infrastructure Protection (2008) [[Research Agenda for the Banking and Finance Sector]]<br /> <br /> Franklin, Jason, et. al (2007) [[An Inquiry into the Nature and Causes of the Wealth of Internet Miscreants]]<br /> <br /> Gandal, Neil (2008) [[An Introduction to Key Themes in the Economics of Cyber Security]]<br /> <br /> Grady, Mark and Parisi, Francesco (''2006'') [[The Law and Economics of Cybersecurity: An Introduction]]<br /> <br /> Grady, Mark F. and Parisi, Francesco (2006) [[The Law and Economics of Cybersecurity]]<br /> <br /> Granick, Jennifer Stisa (2005) [[The Price of Restricting Vulnerability Publications]]<br /> <br /> Hollis, Duncan B. (2007) [[Why States Need an International Law for Information Operations]] <br /> <br /> Institute for Information Infrastructure Protection (2003) [[Cyber Security Research and Development Agenda]]<br /> <br /> Johnson, Eric M (2008) [[Managing Information Risk and the Economics of Security]]<br /> <br /> Johnson, Vincent R. (2005) [[Cybersecurity, Identity Theft, and the Limits of Tort Liability]]<br /> <br /> Kobayashi, Bruce H. (2006) [[An Economic Analysis of the Private and Social Costs of the Provision of Cybersecurity and Other Public Security Goods]]<br /> <br /> Korns, Stephen W. (2009) [[Cyber Operations]]<br /> <br /> Kramer, Franklin D., et. al (2009) [[Cyberpower and National Security]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2005) [[An Economic Analysis of Notification Requirements for Data Security Breaches]]<br /> <br /> Lernard, Thomas M. and Rubin, Paul H. (2006) [[Much Ado About Notification]]<br /> <br /> McAfee, Inc. (2010) [[McAfee Threats Report]]<br /> <br /> Moore, Tyler and Clayton, Richard (2007) [[Examining the Impact of Website Take-down on Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2008) [[The Consequence of Non-Cooperation in the Fight Against Phishing]]<br /> <br /> Moore, Tyler and Clayton, Richard (2009) [[The Impact of Incentives on Notice and Take-down]]<br /> <br /> Moore, Tyler, et. al (2009) [[The Economics of Online Crime]]<br /> <br /> National Cyber Defense Initiative (2009) [[National Cyber Defense Financial Services Workshop Report]]<br /> <br /> National Cyber Security Summit Task Force ''(2004)'' [[Information Security Governance]]<br /> <br /> National Infrastructure Advisory Council ''(2004)'' [[Hardening The Internet]]<br /> <br /> National Institute of Standards and Technology ''(2006)'' [[SP 800-82: Guide to Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems Security]]<br /> <br /> National Research Council (2007) [[Toward a Safer and More Secure Cyberspace]]<br /> <br /> National Research Council (1999) [[Trust in Cyberspace]]<br /> <br /> National Science and Technology Council ''(2006)'' [[Federal Plan for Cyber Security and Information Assurance Research and Development]]<br /> <br /> Networking and Information Technology Research and Development ''(2009)'' [[National Cyber Leap Year Summit 2009, Co-Chairs' Report]]<br /> <br /> Powell, Benjamin ''(2005)'' [[Is Cybersecurity a Public Good]]<br /> <br /> President's Commission on Critical Infrastructure Protection ''(1997)'' [[Critical Foundations]]<br /> <br /> President's Information Technology Advisory Council ''(2005)'' [[Cyber Security: A Crisis of Prioritization]]<br /> <br /> Romanosky et al. (''2008'') [[Do Data Breach Disclosure Laws Reduce Identity Theft]]<br /> <br /> Schmit, Michael N., et. al ''(2004)'' [[Computers and War]] <br /> <br /> Schmitt, Michael N. ''(1999)'' [[Computer Network Attack and the Use of Force in International Law]] <br /> <br /> Schmitt, Michael N. ''(2002)'' [[Wired Warfare]] <br /> <br /> Schneier, Bruce (2003) [[Beyond Fear]]<br /> <br /> Schneier, Bruce (2008) [[Schneier on Security]]<br /> <br /> Schwartz, Paul and Janger, Edward (''2007'') [[Notification of Data Security Breaches]]<br /> <br /> Sklerov, Matthew J. ''(2009)'' [[Solving the Dilemma of State Responses to Cyberattacks]] <br /> <br /> Stohl, Michael ''(2006)'' [[Cyber Terrorism]]<br /> <br /> Swire, Peter P (''2004'') [[A Model for When Disclosure Helps Security]]<br /> <br /> Swire, Peter P (''2006'') [[A Theory of Disclosure for Security and Competitive Reasons]]<br /> <br /> Symantec Corporation (2010) [[Symantec Global Internet Security Threat Report]]<br /> <br /> Telang, Rahul and Wattal, Sunil (''2007'') [[Impact of Software Vulnerability Announcements on the Market Value of Software Vendors]]<br /> <br /> Thomas, Rob and Martin, Jerry (2006) [[The Underground Economy]]<br /> <br /> Todd, Graham H. ''(2009)'' [[Armed Attack in Cyberspace]] <br /> <br /> Trend Micro Incorporated (2010) [[Trend Micro Annual Report]]<br /> <br /> United States Secret Service ''(2004)'' [[Insider Threat Study]]<br /> <br /> van Eeten, Michel J. G. and Bauer, Johannes M. (2008) [[Economics of Malware]]<br /> <br /> Varian, Hal ''(2000)'' [[Managing Online Security Risks]]<br /> <br /> Varian, Hal (2004) [[System Reliability and Free Riding]]<br /> <br /> Watts, Sean (2010) [[Combatant Status and Computer Network Attack]]<br /> <br /> White House ''(2003)'' [[The National Strategy to Secure Cyberspace]]<br /> <br /> White House ''(2009)'' [[Cyberspace Policy Review]]<br /> <br /> White House ''(2010)'' [[The Comprehensive National Cybersecurity Initiative]]<br /> <br /> Zittrain, Jonathan L. (2008) [[The Future of the Internet and How To Stop It]]</div>

Jalbert