Advanced search    Help

Clear all search criteria

Only 2/3! You are seeing results from the Public Collection, not the complete Full Collection. Sign in to search everything (see eligibility).

• Keep an Eye on North Korean Cyber-Crime as the COVID-19 Spreads

  Show summary     Open resource [pdf]     (open full abstract)

  From the Document: "The Covid-19 [coronavirus disease 2019] outbreak continues to cause tumult in the global economy, with countries like South Korea and Italy reporting a rapid increase in diagnoses and many companies requesting that employees work from home to keep the virus from spreading. In North Korea's case, it has had its Chinese borders closed for over a month, long before the rest of the world began to react to the virus. Even if it were, as its state media claims, coronavirus-free, how long could their economy sustain total global isolation? By sealing their border with their largest economic partner, North Korea has effectively placed itself at the mercy of UN sanctions. [...] To ensure that their country can continue to function while they weather the global crisis, North Korea may very likely double down on cybercrime. While smuggling and other forms of illicit trading require the physical moving of goods and/or services, cybercrime can be committed from anywhere, even a sealed North Korea."

  Pacific Forum, CSIS

  Wiesel, Todd

  2020-03-17
• Computer Attack and Cyber Terrorism: Vulnerabilities and Policy Issues for Congress [October 17, 2003]

  Show summary     Open resource [pdf]     (open full abstract)

  This report discusses possible cyber capabilities of terrorists and sponsoring nations, describes how computer security vulnerabilities might be exploited through a cyber terror attack, and raises some potential issues for Congress. This report presents a working definition for the term "cyber terrorism," plus background information describing how current technology and management processes may leave computers exposed to cyber attack, and a discussion of possible effects of a cyber attack. Potential issues for Congress are presented in the second section, including: whether appropriate guidance exists for a DOD information warfare response to a cyber attack; whether the need to detect possible cyber terrorist activity interferes with individual privacy; whether the roles and responsibilities for protecting against a possible cyber terrorist attack need more clarity for government, industry, and home users; and, whether information sharing on cyber threats and vulnerabilities must be further increased between private industry and the federal government. The final section describes possible policy options for improving protection against threats from possible cyber terrorism. Appendices to this report explain technologies underlying computer viruses, worms, and spyware, how these malicious programs enable cyber crime and cyber espionage, and how tactics currently used by computer hackers might also be employed by terrorists while planning a possible cyber terror attack.

  Library of Congress. Congressional Research Service

  Wilson, Clay

  2003-10-17
• 2020 Internet Crime Report

  Show summary     Open resource [pdf]     (open full abstract)

  The FBI's Internet Crime Complaint Center (IC3) produces a yearly report highlighting their work to combat internet crime. This report covers internet crime discovered in 2020. From the Introduction: "In 2020, while the American public was focused on protecting our families from a global pandemic and helping others in need, cyber criminals took advantage of an opportunity to profit from our dependence on technology to go on an Internet crime spree. These criminals used phishing, spoofing, extortion, and various types of Internet-enabled fraud to target the most vulnerable in our society - medical workers searching for personal protective equipment, families looking for information about stimulus checks to help pay bills, and many others. Crimes of this type are just a small part of what the FBI combats through our criminal and cyber investigative work. Key to our cyber mission is the Internet Crime Complaint Center (IC3), which provides the public with a trustworthy source for information on cyber criminal activity, and a way for the public to report directly to us when they suspect they are a victim of cyber crime. IC3 received a record number of complaints from the American public in 2020: 791,790, with reported losses exceeding $4.1 billion. This represents a 69% increase in total complaints from 2019." This document includes charts, tables, and graphs to illustrate the text.

  Internet Crime Complaint Center (U.S.); United States. Federal Bureau of Investigation

  2021-03?
• Impact of Alleged Russian Cyber Attacks

  Show summary     Open resource [pdf]     (open full abstract)

  "High profile cyber attacks against Estonia and Georgia have brought the subject of cyber security from the realm of internet magazines to main stream media outlets. The cyber attacks advanced the perceptions of animosity between the Russian Federation and former Soviet satellites. The cyber attacks that have occurred in the last few years have shown the vulnerabilities of using the internet and the weaknesses of cyber defenses. There is little concrete proof of involvement of the Russian Federation government in any cyber attacks. The circumstantial evidence does lead to the perception that the Russian government was behind or supported recent cyber attacks. When countries or organizations stand in opposition to Russia they are likely to receive a cyber attack in order to influence their position. Government and organizational leaders need to ensure that their cyber defenses are ready to protect private information, internet services and electrical grids that rely on internet technology to function. Former Soviet satellites, the United States, and international organizations need to strive to increase international co-operation in order to defeat cyber crime. Without a legal international framework cyber criminals will continue to operate in areas where there are no laws or agreements concerning cyber security."

  U.S. Army Command and General Staff College. School of Advanced Military Studies

  Ashmore, William C.

  2009-05-21
• Remarks by Secretary Napolitano at the Global Cyber Security Conference [August 4, 2009]

  Show summary     Open resource [pdf]     (open full abstract)

  This Press Release presents the remarks made by Department of Homeland Security (DHS) Secretary Janet Napolitano at the Global Cyber Security Conference in Washington D. C. "I want to thank the Secret Service, S&T [DHS Science and Technology Directorate]--of our office for hosting this meeting on cybersecurity--an area that has commanded special attention from me in my office since I began my tenure as Secretary. Indeed, even before--at the state level as we repeatedly saw our state systems hacked into--it is not a threat of the future. It is an actuality. Indeed, it was just about a year ago today that criminal charges came from a Secret Service investigation into the theft and sale of 40 million credit card numbers by an international group of cyber criminals. And that case, I believe, was just the tip of the iceberg in terms of the damage that cyber crime, cybersecurity can entail. We have to look at the landscape now; but, more important, we have to--I think--acknowledge amongst ourselves that in terms of cybersecurity we've been living in a cyber 1.0 world and we need to be cyber 3.0 and beyond. Because the minute we start talking about a particular methodology of cyber the cyber bad guys are already moving ahead. This is a very, very rapidly evolving environment in which real crime and real damage can occur."

  United States. Department of Homeland Security. Press Office

  2009-08-04
• Defining Cyber and Focusing the Military's Role in Cyberspace

  Show summary     Open resource [pdf]     (open full abstract)

  From the thesis abstract: "This strategy research paper proposes definitions for cyber crime, cyber war, and cyber terrorism that possess potential for wide adoption throughout the U.S. government, civilian sector, and international community. Using the proposed definitions, more distinct roles for government agencies and civilian sector emerge. The Department of Homeland Security (DHS) retains the lead for overall domestic cyber security with support from the Department of Defense (DoD), Department of Justice (DoJ), Department of State, and the civilian sector. DoD assumes primary responsibility for cyber war, while DHS and DoJ assume primary responsibility for cyber crime and cyber terrorism. The proposed definitions permit DoD to focus on defending, deterring, disrupting, and defeating adversaries that conduct and prosecute cyber war against the U.S. and its allies. The proposed definitions also help to identify cost savings by reducing or eliminating inefficient and duplicative capabilities throughout the government. Lastly, the proposed definitions serve as an aid to decision makers as they work their way through the challenges of Jus ad Bellum and Jus in Bello when responding to cyber threats."

  Army War College (U.S.)

  Mowery, Samuel P.

  2013-03
• Cyber Warriors and the 'Jus in Bello'

  Show summary     Open resource [pdf]     (open full abstract)

  "The increasing interest in cyber operations, or 'efforts to alter, disrupt, degrade or destroy computer systems or networks or the information or programs on them,' as a warfighting tool raises questions regarding application of the 'jus in bello' to 'cyber warriors,' or actors involved with cyber operations. Most cyber warriors will not be evaluated under the law of armed conflict. Cyber operations to date generally have amounted to nothing more than annoyances or crimes, or were in reality espionage, and therefore are regulated by municipal criminal law. […] Nevertheless, the question of the legal status of cyber warriors under the 'jus in bello' is likely to arise in two circumstances. First, the international armed conflicts and non-international armed conflicts of the present and the future are likely to include cyber operations as one element of an integrated war strategy. […] Second, an isolated cyber operation may have sufficient kinetic effects to rise to the level of an 'armed attack,' justifying the use of force in lawful self-defense. […] Under these two circumstances, categorization of cyber warriors as combatants, civilians or potentially unlawful combatants carries consequences. The most important of these are with respect to targeting. […] This article analyzes the difficult legal questions raised by application of the 'jus in bello' categories to cyber warriors. The traditional category approach to targeting and detention works best when participation is limited to traditional combatants and it is possible to distinguish on the battlefield between combatants and civilians. Both assumptions are challenged in cyber operations."

  Naval War College (U.S.). International Law Studies

  Padmanabhan, Vijay M.

  2013
• 2017 Internet Crime Report

  Show summary     Open resource [pdf]     (open full abstract)

  "2017 was a milestone year for the FBI's Internet Crime Complaint Center (IC3). On October 12, 2017, at 4:10pm, the IC3 received its 4 millionth consumer internet crime complaint. As the lead federal agency for investigating cyber-attacks by criminals, overseas adversaries, and terrorists, the FBI's IC3 provides the public with a trustworthy and convenient reporting mechanism to submit information concerning suspected Internet-facilitated criminal activity. The IC3 also strengthens the FBI's partnerships with our law enforcement and private industry partners. As cyber criminals become more sophisticated in their efforts to target victims, we must continue to transform and develop in order to address the persistent and evolving cyber threats we face. The 2017 Internet Crime Report emphasizes the IC3's efforts in monitoring trending scams such as Business Email Compromise (BEC), Ransomware, Tech Support Fraud, and Extortion. The report also highlights the Elder Justice Initiative promoting justice for the nation's seniors. In 2017, IC3 received a total of 301,580 complaints with reported losses exceeding $1.4 Billion. This past year, the most prevalent crime types reported by victims were Non-Payment/Non-Delivery, Personal Data Breach, and Phishing. The top three crime types with the highest reported loss were BEC, Confidence/Romance fraud, and Non-Payment/Non-Delivery. This year's report features success stories from two different successful cases initiated from IC3 complaints. Additionally, the Operation Wellspring (OWS) Initiative continues to build the cyber investigative capability by utilizing Cyber Task Force officers, thus strengthening state and local law enforcement collaboration."

  Internet Crime Complaint Center (U.S.); United States. Federal Bureau of Investigation

  2018-05-07?
• Cyber Border Security - Defining and Defending a National Cyber Border

  Show summary     Open resource [html]     (open full abstract)

  "Concerns stemming from the convergence of border and cyber security threats are nothing new to those involved in both disciplines. Criminals and foreign actors have been exploiting computers and cyber methods to circumvent physical border security for decades. Today nearly every crime or homeland security threat that once required some physical nexus with the nation's traditional borders (land, sea, and air) is being committed, or at least facilitated, by some cyber component. In many ways vulnerabilities in cyber security render some aspects of traditional border security irrelevant, or at the very least, much less secure. The article explores this convergence of traditional border and cyber security and proposes a policy that would seek to evolve the concept of border security to include the cyber domain. Based on policy work begun over a decade ago by the author while the national cybercrime program manager for the U.S. Customs Service, the article details how a national cyber border can be defined and enforced. Relying on a methodology that adapts existing authorities, the article provides logical justifications and arguments for the need and legal authority to define a national cyber border. The strengths and shortcomings of this adaptive methodology are explored along with issues which may require new legislation. The article addresses some of the privacy concerns which are certain to arise from the cyber border concept using the same adaptive methodology of existing protections and expectations of privacy. The ultimate goal of the article is to stimulate thought- provoking discussion and spur further academic research into the convergence of cyber and border security; issues which are interdependent and clearly in the forefront of homeland and national security."

  Naval Postgraduate School (U.S.). Center for Homeland Defense and Security

  Osborn, Phillip

  2017-10
• Audit of the Federal Bureau of Investigation's Implementation of Its Next Generation Cyber Initiative

  Show summary     Open resource [pdf]     (open full abstract)

  "The Federal Bureau of Investigation (FBI) has reported that the frequency and impact of cyber attacks on private sector and government computers increased dramatically in the last decade and are expected to continue to grow. In January 2012, former FBI Director Mueller stated during a congressional testimony that he expected the cyber threat to surpass the terrorism threat to our national security in the years to come. According to current FBI Director, James B. Comey, Jr., the FBI is prioritizing the investigation and prevention of cyber intrusions against the United States. The FBI has designated the protection of the United States against cyber-based attacks and high-technology crimes as its number three priority, behind only counterterrorism and counterintelligence. Following the Office of the Inspector General's (OIG) April 2011 report on the FBI's ability to address the national cyber intrusion threat, in October 2012 the FBI launched its Next Generation Cyber (Next Gen Cyber) Initiative to enhance its ability to address cybersecurity threats to the United States.1 In fiscal year 2014, the FBI initially budgeted $314 million for its Next Gen Cyber Initiative, including a total of 1,333 full-time positions (including 756 agents). In addition, the Department of Justice (Department) requested an $86.6 million increase in funding for fiscal year 2014 to support the Initiative. The objective of this audit was to evaluate the FBI's implementation of its Next Gen Cyber Initiative."

  United States. Department of Justice. Office of the Inspector General

  2015-07
• Cyber Infrastructure Protection, Volume II

  Show summary     Open resource [pdf]     (open full abstract)

  "This book is a follow-on to our earlier book published in 2011 and represents a detailed look at various aspects of cyber security. The chapters in this book are the result of invited presentations in a 2-day conference on cyber security held at the City University of New York, City College, June 8-9, 2011. Our increased reliance on the Internet, information, and networked systems has also raised the risks of cyber attacks that could harm our nation's cyber infrastructure. The cyber infrastructure encompasses a number of sectors including the nation's mass transit and other transportation systems, railroads, airlines, the banking and financial systems, factories, energy systems and the electric power grid, and telecommunications, which increasingly rely on a complex array of computer networks. Many of these infrastructures' networks also connect to the public Internet. Unfortunately, many information systems, computer systems, and networks were not built and designed with security in mind. As a consequence, our cyber infrastructure contains many holes, risks, and vulnerabilities that potentially may enable an attacker to cause damage or disrupt the operations of this cyber infrastructure. Threats to the safety and security of the cyber infrastructure come from many directions: hackers, terrorists, criminal groups, and sophisticated organized crime groups; even nation-states and foreign intelligence services conduct cyber warfare. Costs to the economy from these threats are huge and increasing. Cyber infrastructure protection refers to the defense against attacks on such infrastructure and is a major concern of both the government and the private sector."

  Army War College (U.S.). Strategic Studies Institute

  Jordan, Louis H.; Saadawi, Tarek Nazir, 1951-; Boudreau, Vicent

  2013-05
• U.S. Department of Homeland Security Cybersecurity Strategy

  Show summary     Open resource [pdf]     (open full abstract)

  "At DHS, we believe that cyberspace can be secure and resilient. We work every day across the Department and with key partners and stakeholders to identify and manage national cybersecurity risks. We do this by adopting a holistic risk management approach. [...] At the same time, we seek to reduce cyber threats by preventing and disrupting cyber crimes, and to lessen the consequences of cyber incidents by ensuring an effective federal response when appropriate. Finally, we work to create conditions for more effective cyber risk management through efforts to make the cyber ecosystem more fundamentally secure and resilient. This strategy sets forth our goals, objectives, and priorities to successfully execute the full range of the Secretary of Homeland Security's cybersecurity responsibilities. This strategy provides the Department with a framework to execute our cybersecurity responsibilities during the next five years to keep pace with the evolving cyber risk landscape by reducing vulnerabilities and building resilience; countering malicious actors in cyberspace; responding to incidents; and making the cyber ecosystem more secure and resilient."

  United States. Department of Homeland Security

  2018-05-15
• Law Enforcement Cyber Center [website]

  Show summary     Open resource [html]     (open full abstract)

  "The Cyber Center is a collaborative project of the International Association of Chiefs of Police (IACP), RAND Corporation, and the Police Executive Research Forum (PERF), and is made possible by funding from the Bureau of Justice Assistance, at the U.S. Department of Justice's Office of Justice Programs. The Cyber Center was developed to enhance the awareness, expand the education, and build the capacity of justice and public safety agencies to prevent, investigate, prosecute, and respond to cyber threats and cyber crimes. It is intended to be a national resource for law enforcement and related justice and public safety entities. The Cyber Center addresses three principal functional areas: Cyber crime investigations, Digital forensics, [and ]Information systems security. Much of the information available on this site has been developed specifically for the Cyber Center, but there are also links to useful outside resources. This should not be considered an exhaustive list of information pertaining to cyber security, investigations, digital forensics, and legal considerations, but is intended to provide interested readers with links to further information."

  United States. Bureau of Justice Assistance; International Association of Chiefs of Police; Police Executive Research Forum . . .

  2014?
• Serial No. 114-32: A Global Perspective on Cyber Threats, Hearing Before the Subcommittee on Oversight and Investigations of the Committee on Financial Services, U.S. House of Representatives, One Hundred Fourteenth Congress, First Session, June 16, 2015

  Show summary     Open resource [pdf]     (open full abstract)

  This is the June 16, 2015 hearing on "A Global Perspective on Cyber Threats," held before the U.S. House of Representatives subcommittee on Oversight and Investigations of the Committee on Financial Services. From the opening statement of Sean P. Duffy: "The purpose of today's hearing is to identify the United States' primary cyber enemies, better understand the growing global cyber threat, and ultimately formulate more effective responses to cyber incidents. The cyber landscape today is vastly different from that of past years, with technology an integral component of nearly all transactions, means of communication, and methods of transportation. In recent years, there has been a growing focus on protecting the cyber security of critical infrastructure. However, in the wake of the breach of over four million personnel records at the Office of Personnel Management, it is still clear that much more needs to be done to protect Americans from cyber threats. Cyber crime provides a clear and present danger to the United States of America. At the other end of these attacks are nationstates like Russia, China, Iran, and North Korea; terrorist groups; criminal organizations; and hacktivists. These groups can range from sophisticated cyber actors to ideological groups motivated by political or patriotic reasons." Statements, letters, and materials submitted for the record include those of the following: Richard Bejtlich, Frank J Cilluffo, and Michael Madon.

  United States. Government Publishing Office

  2016
• Video Games as a Training Tool to Prepare the Next Generation of Cyber Warriors

  Show summary     Open resource [pdf]     (open full abstract)

  "There is a global shortage of more than 1 million skilled cybersecurity professionals needed to address current cybersecurity challenges (CISCO, 2014). Criminal organizations, nation-state adversaries, hacktavists, and numerous other threat actors continuously target business, government, and even critical infrastructure networks. Estimated losses from cyber crime and cyber espionage amount to hundreds of billions annually (Center for Strategic and International Studies, 2013). The need to build, maintain, and defend computing resources is greater than ever before. A novel approach to closing the cybersecurity workforce gap is to develop cutting-edge cybersecurity video games that (1) grab the attention of young adults, (2) build a solid foundation of information security knowledge and skills, (3) inform players of potential career paths, and (4) establish a passion that drives them through higher education and professional growth. Although some video games and other games do exist, no viable options are available that target high school-age students and young adults that supply both a quality gaming experience and foster the gain of key cybersecurity knowledge and skills. Given the Department of Defense's success with simulations and gaming technology, its sponsorship of a cybersecurity video game could prove extremely valuable in addressing the current and future needs for our next generation cyber warriors."

  Carnegie-Mellon University. Software Engineering Institute

  Herr, Christopher; Allen, Dennis

  2014
• Cyber Threat Today: Major Attacks on the Rise

  Show summary     Open resource [pdf]     (open full abstract)

  The Federal Bureau of Investigation released an article describing how the number of e-attacks being waged against United States interests is on the increase. "Crooks and spies using the Internet to commit crimes against U.S. businesses and to attack government networks are getting more sophisticated, and the increasing number of such crimes not only impacts the economy but threatens national security. That's the message Shawn Henry, recently appointed head of our Cyber Division, delivered to a group of reporters on Wednesday, revealing that we have thousands of open cases into cyber crimes and organized cyber attacks and detailing our strategy to protect the nation's networks. One case in point: We joined our international partners yesterday in announcing a major takedown of a transnational criminal network that was buying and selling stolen financial information through an online forum known as 'Dark Market.' 'The business of the United States is done on the Internet,' said Henry, a veteran cyber crime investigator. And the information that flows electronically 24/7 is increasingly the target of not only identity thieves and scammers, but organized crime groups, terrorists, and overseas governments."

  United States. Federal Bureau of Investigation

  2008-10-17
• 2015 Internet Crime Report

  Show summary     Open resource [pdf]     (open full abstract)

  From the Introduction: "As cyber criminals become more sophisticated in their efforts to target cyber victims, we must also grow our capabilities to successfully combat and defeat them. The evolving nature of Internet crime presents a unique set of challenges, as crimes often overlap jurisdictional boundaries and perpetrators can attack from anywhere on the globe. A crucial element to our mission of identifying, pursuing, and defeating cyber threats against our nation is the FBI's Internet Crime Complaint Center (IC3), which aids citizens by bringing pervasive cyber crimes and scams to the attention of law enforcement. The 2015 Internet Crime Report highlights the IC3's efforts over the past year, specifically focusing on their efforts regarding Business Email Compromise (BEC) and Email Account Compromise (EAC) scams and the Operation Wellspring Initiative (OWS)."

  United States. Federal Bureau of Investigation; Internet Crime Complaint Center (U.S.)

  2016?
• Prospects for an International Cybersecurity Regime

  Show summary     Open resource [pdf]     (open full abstract)

  "Cybersecurity represents a unique and evolving challenge to US national security planners and practitioners. Global interconnectedness facilitated by the internet has created unprecedented opportunities for international commerce and communication. The evolution of cyber technology provides many positive benefits, but significant security risks come along with it. The United States must be prepared to meet a range of cyber challenges such as cyber-crime, cyber-espionage, and cyber-sabotage. Cyberspace is a domain unlike any other. There are no physical boundaries in cyberspace; actions taken by a group or an individual on one continent can precipitate an immediate effect on a target located on the other side of the world. There are no physical walls, security fences or border checkpoints to prevent malicious cyber activity from crossing international borders. The cyber domain is a virtual domain that allows for anonymity in addition to the ease and low cost of operating within it. Cyberattacks may be perpetrated by states, non-state actors, or individuals and attribution of such attacks can be exceedingly difficult. Damage sustained by cyber-attacks is generally intangible, or non-physical, and yet such attacks can have disastrous effects. Both the public and private sectors are vulnerable to cyberattack."

  United States Air Force Academy; USAF Institute for National Security Studies

  Holdorf, Polly M.

  2015
• S. Rept. 113-258: Inquiry into Cyber Intrusions Affecting U.S. Transportation Command Contractors, Report of the Committee on Armed Services, United States Senate, September 18, 2014

  Show summary     Open resource [pdf]     (open full abstract)

  This report, "Inquiry Into Cyber Intrusions Affecting U.S. Transportation Command Contractors" was presented to the 113th Congress by the U.S. Senate Committee on Armed Services. From the Executive Summary: "In April 2013, the Senate Armed Services Committee initiated an inquiry into how much information was known to the U.S. Transportation Command (TRANSCOM) about successful cyber intrusions affecting command contractors. The committee focused on TRANSCOM because of the central role that the command plays in mobilization, deployment, and sustainment operations and the critical capabilities that private companies contribute to TRANSCOM's ability to meet military requirements in contingcies. Over the course of the inquiry, the committee reviewed information provided by TRANSCOM, 11 command contractors, the Federal Bureau of Investigation (FBI), the Defense Security Service (DSS), the Defense Cyber Crime Center (DC3), and the U.S. Air Force Office of Special Investigations (AFOSI). The committee also reviewed TRANSCOM's cyber incident reporting requirement, cyber intrusion reporting provisions included in the Fiscal Year 2013 National Defense Authorization Act (NDAA), and a number of executive branch guidelines, directives, and agreements to assess their effectiveness in promoting information sharing. The committee's inquiry identified approximately 50 successful intrusions or other cyber events targeting TRANSCOM contractors between June1, 2012 and May 30, 2013. Of those 50, at least 20 were successful intrusions into contractor networks attributed to an 'advanced persistent threat' (APT), a term used to distinguish sophisticated cyber threats that are frequently associated with foreign governments. Of those APT-linked intrustions, TRANSCOM was made aware of only two, a troubling finding given the potential impact of cyber intrustions on defense information and operations."

  United States. Government Printing Office

  2014-09-18
• Taxonomies of Cyber Adversaries and Attacks: A Survey of Incidents and Approaches

  Show summary     Open resource [pdf]     (open full abstract)

  "In this paper we construct taxonomies of cyber adversaries and methods of attack, drawing from a survey of the literature in the area of cyber crime. We begin by addressing the scope of cyber crime, noting its prevalence and effects on the US economy. We then survey the literature on cyber adversaries, presenting a taxonomy of the different types of adversaries and their corresponding methods, motivations, maliciousness, and skill levels. Subsequently we survey the literature on cyber attacks, giving a taxonomy of the different classes of attacks, subtypes, and threat descriptions. The goal of this paper is to inform future studies of cyber security on the shape and characteristics of the risk space and its associated adversaries."

  Lawrence Livermore National Laboratory

  Powers, Shawn; Meyers, Carol; Faissol, Daniel

  2009-04
• S. Hrg. 107-366: Improving Our Ability to Fight Cybercrime: Oversight of the National Infrastructure Protection Center: Hearing before the Subcommittee on Technology, Terrorism, and Government Information of the Committee on the Judiciary, United States Senate, One Hundred Seventh Congress, First Session, July 25, 2001

  Show summary     Open resource [pdf]     (open full abstract)

  From the opening statement of Dianne Feinstein: "This hearing will be on a GAO report, General Accounting Office report, on the National Infrastructure Protection Center, or NIPC...as it is called for short. NIPC is the leading Government body that combats cyber crime and cyber terrorism. So this Subcommittee hearing will actually cover all three parts of the Subcommittee's name--Technology, Terrorism, and Government Information. NIPC, which was founded only a few years ago, has a broad mission to prevent, to warn against, to analyze, and to respond to cyber attacks. However, many experts, both within and without Government and the private sector, have suggested that NIPC has not fulfilled its mission. Critics have argued that it has done a poor job at analyzing and warning against cyber threats and attacks. Second, while NIPC was intended to be an interagency organization, critics have contended that the FBI has dominated the NIPC and has done a poor job coordinating with other Federal agencies in fighting cyber crime. Third, critics have suggested that NIPC has not done a good at ensuring information sharing between it and private sector and Government entities. [The GAO] report, which is right here, generally confirms problems identified by the critics of NIPC. First, the report finds that, while NIPC has issued many analyses of individual incidents, it hasn't done a good job at developing strategic analysis of threat and vulnerability data. This is because of NIPC's failure to adopt a methodology to analyze strategic cyber threats, lack of adequate staff expertise, and an absence of sufficient industry-specific data on vulnerabilities. The result has been confusion about NIPC's role and responsibilities. The report also finds that the NIPC has not done enough to establish information-sharing and cooperative relationships with the private sector and other Government agencies. The report also concludes that NIPC has generally done good investigative field work. However, it points out they still need additional resources and new procedures to ensure that information flows more efficiently from the field to NIPC." Statements, letters, and material submitted for the record include those of the following: Dianne Feinstein, Charles E. Grassley, Orrin G. Hatch, Jon Kyl, Eugene F. Gorzelink and Taher Elgamal.

  United States. Government Printing Office

  2002
• Readout of Secretary Napolitano's Meetings with Top European Officials [January 5, 2011]

  Show summary     Open resource [pdf]     (open full abstract)

  "Department of Homeland Security (DHS) Secretary Janet Napolitano today traveled to Brussels and met with European Commission (EC) Vice President and Digital Agenda Commissioner Neelie Kroes, EC Vice President and Transport Commissioner Siim Kallas, and several Members of the European Parliament to discuss international collaboration to strengthen cyber, cargo and aviation security and ensure the security and resilience of our global supply chain systems against terrorism, transnational crime and natural disasters while also facilitating the flow of legitimate travel and commerce in advance of previously scheduled meetings with the World Customs Organization. In her meeting with EC Vice President and Digital Agenda Commissioner Kroes, Secretary Napolitano underscored the Obama administration's continued collaboration with the European Union to strengthen cybersecurity--including the ongoing, coordinated efforts of the United States and EU to protect vital cyber networks from attacks through the U.S.-EU Cyber Working Group. This Working Group--formalized by President Obama in the Nov. 20 U.S.-EU Summit Declaration--provides for the continued sharing of cybersecurity best practices and security standards and enhances collaboration on public-private partnerships, cyber incident management, and combating cyber crime."

  United States. Department of Homeland Security. Press Office

  2011-01-05
• Cyberterrorism and Computer Crimes: Issues Surrounding the Establishment of an International Legal Regime

  Show summary     Open resource [pdf]     (open full abstract)

  In its broadest sense, information warfare includes such time-honored and accepted practices as deception and misdirection, long recognized as legal ruses under the law of war and surely not the proper subjects of treaty limitation. The international community has long decried terrorism even though that community has been unable to agree on what is encompassed by the term. Domestically, terrorism is defined under two separate statutory sections both requiring violence or the threat to or taking of human life for political ends. Such a definition excludes the vast number of information attacks, otherwise denominated as terroristic, which would only result in large-scale financial losses, electrical power grid shutdowns, or mass chaos caused by the manipulation or destruction of information databases. Even the definition of computer crime has been hard to pin down. The Department of Justice has defined it as broadly as "any violations of criminal law that involve a knowledge of computer technology for their perpetration, investigation or prosecution." But certainly as prosecutors and law enforcement investigative units become increasingly technological, computer technology will be employed in the prosecution and/or investigation of virtually any crime. A new cyber crime treaty could help provide the basis for criminalizing the vast array of cyber offenses that do not cleanly fit within traditional crimes. It would also aid extraditions by overcoming the dual criminality problem. Even more importantly, a new treaty could establish agreed principles of enforcement jurisdiction to enable law enforcement to more quickly, easily, and legally obtain the evidence necessary for the prosecution of cyber crimes and information terrorism.

  USAF Institute for National Security Studies

  Aldrich, Richard W., 1959-

  2000-04
• ABA Cybersecurity Legal Task Force [website]

  Show summary     Open resource [html]     (open full abstract)

  The purpose of this web page is to provide legal insight into cybersecurity issues based on the American Bar Association's [ABA] current resources. The ABA has compiled its cyber-resources into a singular entity now represented by a task force which aims to provide legal and policy aid on issues surrounding cyber policy, crime, and threats. The task force has created a mission statement with clear objectives outlined in the following list: "(1) Facilitate collaboration and information exchange among constituent ABA entities and with relevant public agencies and private organizations; (2) Serve as a clearinghouse among ABA entities regarding cybersecurity activities, policy proposals, advocacy, publications and resources; (3) Study and analyze executive and legislative branch cybersecurity proposals; (4) Identify cyber-related issues for appropriate action by the ABA, including filling gaps in policy, encouraging ABA entities to develop new policy as appropriate, and sharing best practices with members and their law firms; and (5) Advise and assist the ABA Governmental Affairs Office on cybersecurity advocacy and responses to government actions.

  American Bar Association
• U.S. Cybersecurity Defense Assessment

  Show summary     Open resource [pdf]     (open full abstract)

  From the Abstract: "In today's global cybersecurity environment, U.S. federal agencies and private sector organizations are engaged in national cyber defense actions designed to protect against intrusion from state and non-state actors, foreign militaries, organized crime, and sophisticated hackers attempting to commit malicious activity or espionage against America's essential networks. The purpose of this paper, which concentrates in US cybersecurity defense as a strategic 'way' of supporting America's enduring national security interests, is threefold. To define cybersecurity defense in a paradigm that is universally acceptable within the American construct; to identify and discuss U.S. cybersecurity defense strategies by examining the progression of America's cybersecurity defense policies and the subsequent Federal agency roles which have developed within the U.S. government configuration; and provides a recommendation to improve America's national cybersecurity defense posture by implementing public-private partnership information sharing programs for critical network infrastructure security within the Defense Industrial Base (DIB) sector."

  Army War College (U.S.)

  Sherman, Darren C.

  2013-03
• Strategies For Resolving The Cyber Attribution Challenge

  Show summary     Open resource [pdf]     (open full abstract)

  From the Executive Summary: "Malicious cyber actors exploit gaps in technology and international cybersecurity cooperation to launch multistage, multi-jurisdictional attacks. Rather than consider technical attribution the challenge, a more accurate argument would be that 'solutions to preventing the attacks of most concern, multi-stage multi-jurisdictional ones, will require not only technical methods, but legal/policy solutions as well.' Deep understanding of the social, cultural, economic, and political dynamics of the nation-states where cyber threat actors operate is currently lacking. This project aims to develop a qualitative framework to guide US policy responses to states that are either origin or transit countries of cyber attacks. [...] Identifying the gaps in international cooperation and their socioeconomic and political bases will provide the knowledge required to support our partners' cybersecurity and contribute to building a cyber environment less hospitable to misuse. It will also help US policy makers to determine the appropriate escalation of diplomatic and defensive responses to irresponsible countries in cyberspace. Further research and discussion will likely enable the timely development of the response frame-work for US sponsorship of sound global norms to guide global cybersecurity. This will also assist the US defense, diplomatic, and development communities in building consensus, leveraging resources to enhance global cybersecurity, and coordinating US global outreach to those countries most beset by cyber crime and conflict."

  Air University (U.S.). Air Force Research Institute

  Yannakogeorgos, Panayotis A.

  2013-05
• International Cyber Security Conference Final Report

  Show summary     Open resource [pdf]     (open full abstract)

  The Center for Technology and National Security Policy (CTNSP) hosted the "Challenges in International Cyber Security" conference at the National Defense University (NDU) on April 29-30, 2009. Twelve key observations during the conference were: "There is, in essence, but one network in cyberspace and all stakeholders have to cooperate in securing that network for every user; Developing effective defenses requires improved mechanisms of indication and warning, increased situational awareness, and the employment of advanced technology; There is broad consensus that international dialogue on cyber governance, crime and security is imperative and overdue; The potential for warfare in the cyber domain will be determined by three factors - the development of laws, a deterrence construct, and operations; Cyber threats are by their very nature asymmetrical and credible deterrence requires at least the capability to respond in kind to cyber attacks; There are three general levels of 'bad' cyber activity - individual hackers, organized criminal activity, and nation state on nation state attacks; The first requirement when seeking to coalesce cyberspace governance is the recognition that spoken and written words form the foundation of our understanding of cyberspace and its governance; The U.S. and others have not fully established national governance over cyberspace matters; We have entered an age of global interdependency in terms of national security and financial stability; When assessing international prospects for future cyber security efforts, considerations of statute and law are essential first order tasks; The international community needs to federate monitoring efforts not just among governments but also across the public-private divide; Meshing commercial goals with national security goals will further incentivize close cooperation and security advances."

  National Defense University. Center for Technology and National Security Policy

  Barry, Chuck; Lee, Lauren; Rewers, Marek

  2009-06
• Serial No. 106-252: Computer Security: Cyber Attacks-War Without Borders: Hearing before the Subcommittee on National Security, Veterans Affairs, and International Relations of the Committee on Government Reform, House of Representatives, One Hundred Sixth Congress, Second Session, July 26, 2000

  Show summary     Open resource [pdf]     (open full abstract)

  Serial No. 106-252: The Opening Statement of Chairman Stephen Horn regarding Computer Security provides an overview on Cyber Attacks: "In the United States, the Federal Bureau of Investigation and the Departments of Commerce and Defense all have a role in tracking and investigating cyber attacks. Many other agencies and private organizations also track and share this critical information. Other countries also have law enforcement agencies and organizations set up to investigate and share cyber attack information. But among the variety of players, who is coordinating an efficient, effective response to this international problem? Today, we will examine the challenges of coordinating these cyber attack investigations. Our witnesses represent cyber crime investigation units in several countries, including the United States. They will discuss their experiences. There is a great need for a sharing of these experiences daily, weekly and at least monthly. Alliances such as the North Atlantic Treaty Organization should work together if we will be able to win these cyber wars." Statements, letters, and materials for the record include those of the following: Roger Molander, John Pescatore, Richard C. Schaeffer, Jr., Mario Balakgie, Jack Brock, John T. Spotila, Michael Vatis, Juris Reksna, Stefan Kronqvist, Juergen Maurer, Elfren L. Meneses, Jr., Ohad Genis, Edgar A. Adamson, Thomas M. Davis, Stephen Horn, Stefan Kronqvist, Elfren L. Meneses, Jr., and Jim Turner.

  United States. Government Printing Office

  2001
• Headline Archive: 'Dark Market' Takedown: Exclusive Cyber Club for Crooks Exposed

  Show summary     Open resource [pdf]     (open full abstract)

  This Federal Bureau of Investigation (FBI) Headline Archive entitled " 'Dark Market' Takedown: Exclusive Cyber Club for Crooks Exposed," discusses an FBI two-year undercover cyber operation that concluded recently. The following is taken from the article, '...A discerning group of cyber criminals established a forum on the Internet called 'Dark Market,' where they bought and sold stolen financial information such as credit card data, login credentials (user names and passwords), and even electronic equipment for carrying out financial crimes. ...At its peak, this vast criminal network had over 2,500 registered members, who all believed they were operating in a protected cyber environment because they went to great lengths to vet members and to weed out undesirable elements. ...What they didn't know was that one of the site's administrators and most respected members, who called himself Master Splyntr, was one of us--an undercover FBI agent who had infiltrated the site posing as a cyber crook. 'It was a group of people who trusted each other,' said the undercover agent after the arrests. He explained that there are two types of cyber criminals: those who steal, but not from one another, and 'rippers,' who steal from anyone. Keeping the rippers off the Dark Market site, the agent explained, gave the other members a false sense of confidence. 'They did a good job of trying to be secure, and they felt secure. There was honor among thieves, so to speak."

  United States. Federal Bureau of Investigation

  2008-10-20
• Serial No. 113-69: Assessing Persistent and Emerging Cyber Threats to the U.S. in the Homeland, Joint Hearing before the Subcommittee on Counterterrorism and Intelligence and the Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies of the Committee on Homeland Security, House of Representatives, One Hundred Thirteenth Congress, Second Session, May 21, 2014

  Show summary     Open resource [pdf]     (open full abstract)

  This is the May 21, 2014 hearing titled "Assessing Persistent and Emerging Cyber Threats to the U.S. in the Homeland." It was presented as a Joint Hearing before the U.S. House of Representatives Subcommittee on Counterterrorism and Intelligence and the Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies of the Committee on Homeland Security. From the opening statement of the honorable Peter King: "The expanding number of cyber actors, ranging from nationstates to terrorists to criminals, as well as increasing attack capability and the increasing intensity of cyber attacks around the globe, have made cyber warfare and cyber crime one of the most significant threats facing the United States. […] Over the last decade the threats facing the United States have become more diverse, as have the tools for conducting attacks and waging war. While the United States has made great strides to secure the homeland since 9/11, our enemies have evolved, and we must now consider that a foreign adversary, terrorist network, or a criminal organization will use cyberspace to penetrate America's defenses. […] The subcommittees are meeting today to hear testimony examining persistent and emerging cyber threats to the United States." Statements, letters, and materials submitted for the record include those of the following: Glenn Lemons, Joseph Demarest, and Larry Zelvin.

  United States. Government Printing Office

  2014