Technology, policy, law, and ethics regarding U.S. acquisition and use of cyberattack capabilities

Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities

Volumn , Issue , 2009, Pages 1-367

  Owens, William A ^a   Dam, Kenneth W ^b   Lin, Herbert S ^c  

^a AEA Holdings Inc   (United States)

^b UNIVERSITY OF CHICAGO   (United States)

^c NONE

Author keywords

[No Author keywords available]

Indexed keywords

LAW ENFORCEMENT; NETWORK SECURITY;

CYBER-ATTACKS; ESSENTIAL POINT; ETHICAL ISSUES; INTELLIGENCE COMMUNITIES; NATIONAL POLICIES; POTENTIAL IMPACTS; PRIVATE SECTORS; SECURITY COMMUNITY;

PHILOSOPHICAL ASPECTS;

EID: 84988815150     PISSN: None     EISSN: None     Source Type: Book    
DOI: 10.17226/12651     Document Type: Book

References (204)

1. Bradley Graham, "Bush Orders Guidelines for Cyber-Warfare," Washington Post, February 7, 2003, p. A01.
2. Department of Defense, National Military Strategy for Cyberspace Operations, 2006, available at www.dod. mil / pubs / foi / ojcs / 07-F-2105doc1.pdf.
3. Reuters, "Global Cellphone Penetration Reaches 50 Pct," November 29, 2007, available at http://investing.reuters.co.uk/news/articleinvesting.aspx?type=media&storyID=nL29172095.
4. National Research Council, Information Technology for Counterterror-ism: Immediate Actions and Future Possibilities, The National Academies Press, Washington, D.C., 2003
5. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington D.C., 2007.
6. Colin Woodward, "Estonia, Where Being Wired Is a Human Right," Christian Science Monitor, July 1, 2003, available at http://www.csmonitor.com/2003/0701/p07s01-woeu.html
7. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
8. Dennis Blair, Director of National Intelligence, Annual Threat Assessment of the Intelligence Community for the Senate Select Committee on Intelligence, February 12, 2009, available at http://intelligence.senate.gov/090212/blair.pdf.
9. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington D.C., 2007.
10. National Research Council, Information Technology for Counterterror-ism: Immediate Actions and Future Possibilities, The National Academies Press, Washington, D.C., 2003
11. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
12. Peter Wayner, "British Document Outlines Early Encryption Discovery," New York Times, December 24, 1997, available at http://www.nytimes.com/library/cyber/week/122497encrypt.html#1.
13. Max Frankel, High Noon in the Cold War: Kennedy, Khrushchev, and the Cuban Missile Crisis, Random House, New York, 2005.
14. NATO, "Defending Against Cyber Attacks: What Does This Mean in Practice?," March 31, 2008, available at http://www.nato.int/issues/cyber_defence/practice.html.
15. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington D.C., 2007.
16. Gregory Rattray, Strategic Warfare in Cyberspace, MIT Press, Cambridge, Mass., 2001.
17. Daniel Geer, Measuring Security, Cambridge, Mass., 2006, available at http://geer.tinho.net/measuringsecurity.tutorialv2.pdf.
18. Center for Strategic and International Studies, "An Assessment of the National Security Software Industrial Base," presented at the National Defense Industrial Association Defense Software Strategy Summit, October 19, 2006, available at http://www.diig-csis.org/pdf/Chao_SoftwareIndustrialBase_NDIASoftware.pdf.
19. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 19.
20. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 55.
21. P.A. Karger and R.R. Schell, Multics Security Evaluation: Vulnerability Analysis, ESD-TR-74-193, Vol. II, June 1974, HQ Electronic Systems Division, Hanscom Air Force Base, available at http://csrc.nist.gov/publications/history/karg74.pdf.
22. Niels Provos et al., "All Your iFRAMEs Point to Us," Proceedings of the 17th Usenix Security Symposium 08, 2008, available at http://www.usenix.org/events/sec08/tech/full_papers/provos/provos.pdf.
23. Xin Hu and Z. Morley Mao, "Accurate Real-Time Identification of IP Prefix Hijacking," Proceedings of IEEE Symposium on Security and Privacy, May 2007, pp. 3-17;
24. Anirudh Ramachandran and Nick Feamster, "Understanding the Network-Level Behavior of Spammers," Proceedings of the Association of Computing Machinery SIGCOMM 2006, pp. 291-302, available at http://www.cc.gatech.edu/~avr/publications/p396-ramachandran-sigcomm06.pdf.
25. National Research Council, Signposts in Cyberspace: The Domain Name System and Internet Navigation, The National Academies Press, Washington, D.C., 2005.
26. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 25.
27. John Leyden, "AV Vendors Split over FBI Trojan Snoops," The Register, November 27, 2001, available at http://www.theregister.co.uk/2001/11/27/av_vendors_split_over_fbi/).
28. Declan McCullagh and Anne Broache, "Will Security Firms Detect Police Spyware?," CNET News, July 17, 2007, available at http://news.cnet.com/2100-7348-6197020.html.
29. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 25.
30. Aron J. Ferguson, "Fostering Email Security Awareness: The West Point Carronade," EDUCAUSE Quarterly 28(1):54-57, 2005, available at http://net.educause.edu/ir/library/pdf/EQM0517.pdf.
31. Steve Stasiukonis, "Social Engineering, the USB Way," Dark Reading, June 7, 2006, available at http://www.darkreading.com/document.asp?doc_id=95556&WT.svl=column1_1.
32. LURHQ, "Phatbot Trojan Analysis," June 2004, available at http://www.lurhq.com/phatbot.html.
33. Michael Bailey, Evan Cooke, Farnam Jahanian, David Watson, and Jose Nazario, "The Blaster Worm: Then and Now," IEEE Security and Privacy 3(4):26-31, 2005, available at http://ieeexplore.ieee.org/iel5/8013/32072/01492337.pdf?arnumber=1492337.
34. Joe Stewart, "Phatbot Trojan Analysis," March 15, 2004, available at http://www.secureworks.com/research/threats/phatbot/?threat=phatbot.
35. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington D.C., 2007.
36. CNN, "Staged Cyber Attack Reveals Vulnerability in Power Grid," September 26, 2007, available at http://www.cnn.com/2007/US/09/26/power.at.risk/index.html.
37. Thomas C. Reed, At the Abyss: An Insider's History of the Cold War, Ballantine Books, New York, 2004.
38. North American Electric Reliability Council, "SQL Slammer Worm Lessons Learned for Consideration by the Electricity Sector," June 20, 2003, available at http://www.esisac.com/publicdocs/SQL_Slammer_2003.pdf.
39. Joint Chiefs of Staff, Information Operations, Joint Publication 3-13, U.S. Department of Defense, Washington, D.C., February 2006, available at www.dtic.mil/doctrine/jel/new_pubs/jp3_13.pdf.
40. David Moore, "The Spread of the Sapphire/Slammer Worm," undated publication, available at http://www.caida.org/publications/papers/2003/sapphire/sapphire.html.
41. Brendan P. Kehoe, "Zen and the Art of the Internet," available at http://www.cs.indiana.edu/docproject/zen/zen-1.0_10.html#SEC91.
42. DOD definitions for "strategic operations" and "strategic air warfare," in Joint Chiefs of Staff, Dictionary of Military and Associated Terms, Joint Publication 1-02, Department of Defense, Washington, D.C., April 12, 2001 (as amended through October 17, 2008), available at http://www.dtic.mil/doctrine/jel/new_pubs/jp1_02.pdf.
43. L. Morgan Banks and Larry James, "Warfare, Terrorism, and Psychology," pp. 216-222 in Psychology of Terrorism, Bruce Bongar et al., eds., Oxford University Press, 2007.
44. Lynn Eden, Whole World on Fire: Organizations, Knowledge, and Nuclear Weapons Devastation, Cornell University Press, Ithaca, N.Y., 2004.
45. Jim Garamone, "Love Bug Bites DoD, Others," American Forces Press Service, May 4, 2000, available at http://www.defenselink.mil/news/newsarticle.aspx?id=45220
46. "Statement by Assistant Secretary of Defense (Public Affairs) Ken Bacon," U.S. Department of Defense, May, 2000, available at http://findarticles.com/p/articles/mi_pden/is_200005/ai_2892634075.
47. DOD JP1-02, Dictionary of Military and Associated Terms, April 12, 2001 (as amended through September 30, 2008), available at http://www.dtic.mil/doctrine/jel/new_pubs/jp1_02.pdf.
48. CERT Coordination Center, "Cert Incident Note IN-2001-07 w32/leaves: Exploitation of Previously Installed Subseven Trojan Horses, July 2001. See http://www.cert.org/incidentnotes/IN-2001-07.html.
49. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
50. Department of Homeland Security, "History: Who Became Part of the Department?," 2007, available at http://www.dhs.gov/xabout/history/editorial_0133.shtm.
51. Annie De Montigny-Leboeuf and Frederic Massicotte, "Passive Network Discovery for Real Time Situation Awareness," 2004, available at http://www.snort.org/docs/industry/ADeMontignyNatoISTToulouse2004.pdf.
52. National Research Council, Cryptography's Role in Securing the Information Society, National Academy Press, Washington, D.C., 1996.
53. Ellen Messmer, "First Case of 'Drive-by Pharming' Identified in the Wild," Network World, January 22, 2008, available at http://www.networkworld.com/news/2008/012208-drive-by-pharming.html.
54. Jay Peterzell, "The Moscow Bug Hunt," Time, July 10, 1989, available at http://www.time.com/time/magazine/article/0,9171,958127-4,00.html.
55. Ron Laytner, "Xerox Helped Win The Cold War," Edit International, 2006, available at http://www.editinternational.com/read.php?id=47ddf19823b89.
56. Vassilis Prevelakis and Diomidis Spinellis, "The Athens Affair," IEEE Spectrum, July 2007, available at http://www.spectrum.ieee.org/print/5280.
57. Aaron Davis, "Computer Worm Snarls Web: Electronic Attack Also Affects Phone Service, BOFA's ATM Network," San Jose Mercury News, January 26, 2003, available at http://www.bayarea.com/mld/mercurynews/5034748.htm+atm+slammer+virus&hl=en
58. Daniel E. Geer, "Measuring Security," 2006, pp. 170-178, available at http://geer.tinho.net/measuringsecurity.tutorialv2.pdf.
59. F-Secure, "F-Secure Virus Descriptions: Bugbear.B," 2003, available at http://www.f-secure.com/v-descs/bugbear_b.shtml.
60. Michael W. Wynne, "Flying and Fighting in Cyberspace," Air & Space Power Journal, Spring 2007, available at http://www.airpower.maxwell.af.mil/airchronicles/apj/apj07/spr07/wynnespr07.html.
61. Lt. Gen. Keith B. Alexander, "Warfighting in Cyberspace," Joint Force Quarterly 46(3):58-61, 2007.
62. Clay Wilson, "Information Operations and Cyberwar: Capabilities and Related Policy Issues," U.S. Congressional Research Service (RL31787), updated September 14, 2006, p. 8.
63. Keith B. Alexander, "Warfighting in Cyberspace," Joint Force Quarterly, July 2007, available at http://www.military.com/forums/0,15240,143898,00.html.
64. Clay Wilson, "Information Operations and Cyberwar," 2006.
65. Memo of Robert Gates (Secretary of Defense) to DOD regarding Command and Control for Military Cyberspace Missions, November 12, 2008. Copy available from the NRC.
66. Jaak Aaviksoo, Minister of Defense of Estonia, presentation to Centre of Strategic and International Studies, November 28, 2007, p. 3. of transcript, available at http://www.csis.org/component/option,com_csis_press/task,view/id,3525/.
67. Mark Landler and John Markoff, "In Estonia, What May Be the First War in Cyberspace," International Herald Tribune, May 28, 2007.
68. Joshua Davis, "Hackers Take Down the Most Wired Country in Europe," Wired, Issue 15.09, August 21, 2007.
69. MacAfee Corp., "Cybercrime: The Next Wave," McAfee Virtual Criminology Report, 2007, p. 9.
70. Economist, "A Cyber-riot," May 10, 2007.
71. Jaak Aaviksoo, Minister of Defense of Estonia, presentation to Centre of Strategic and International Studies, November 28, 2007, p. 7. of transcript, available at http://www.csis.org/component/option,com_csis_press/task,view/id,3525/.
72. MacAfee Corporation, "Cybercrime: The Next Wave," McAfee Virtual Criminology Report, 2007, p. 11.
73. Ian Traynor, "Russia Accused of Unleashing Cyberwar to Disable Estonia," Guardian, May 17, 2007, available at http://www.guardian.co.uk/russia/article/0, 2081438,00.html.
74. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 22.
75. John Markoff, "Before the Gunfire, Cyberattacks," New York Times, August 13, 2008, available at http://www.nytimes.com/2008/08/13/technology/13cyber.html?_r=1&oref=slogin.
76. "Gates Unveils Overhaul of Weapons Priorities," Wall Street Journal, April 6, 2009, available at http://online.wsj.com/article/SB123904207376593845.html?mod=googlenews_wsj.
77. Broad Agency Announcement (BAA ESC 07-0001), OL-AA 950 ELSG/KIS, Network Warfare Operations Capabilities (NWOC), Technology Concept Demonstrations, available at http://www.herbb.hanscom.af.mil/tbbs/R1528/Final_NWOC_BAA_Amend_5.doc.
78. Army Offensive Information Operations Technologies Broad Agency Announcement, May 3, 2007, available at https://abop.monmouth.army.mil/baas.nsf/Solicitation+By+Number/9BE5D8EAE22A6339852572D4004F0DD5/$File/BAA+Army+Offensive+Information+Operations+Technologies.doc.
79. hamir, "Research Announcement: Microprocessor Bugs Can Be Security Disasters," November 2007, available at http://cryptome.info/bug-attack.htm.
80. Swa Frantzen, WMF FAQ, January 7, 2006, available at http://isc.sans.org/diary.html?storyid=994.
81. Steve Stasiukonis, "Social Engineering, the USB Way," Dark Reading, June 7, 2006, available at http://www.darkreading.comdocument.asp?doc_id=95556&WT.svl=column1_1.
82. Thomas C. Reed, At the Abyss: An Insider's History of the Cold War, Ballantine Books, New York, 2004.
83. Pino Cazzaniga, "Election Defeat Marks Abe's Political Future," AsiaNews.it, July 30, 2007, available at http://www.asianews.it/index.php?l=en&art=9962.
84. Bradley Graham, "Cyberwar: A New Weapon Awaits a Set of Rules," Washington Post, July 8, 1998, p. A1.
85. Global Organized Crime Project, Cybercrime, Cyberterrorism, Cyberwarfare: Averting an Electronic Waterloo, Center for Strategic and International Studies, Washington, D.C., 1998.
86. National Research Council, Cryptography's Role in Securing the Information Society, National Academy Press, Washington, D.C., 1996, Chapter 3.
87. J. Michael McConnell, "Annual Threat Assessment of the Director of National Intelligence for the Senate Select Committee on Intelligence," February 5, 2008, available at http://intelligence.senate.gov/080205/mcconnell.pdf.
88. U.S. Department of Justice, Searching and Seizing Computers and Obtaining Electronic Evidence in Criminal Investigations, Computer Crime and Intellectual Property Section, Criminal Division, July 2002, available at http://www.usdoj.gov/criminal/cybercrime/s&smanual2002.htm#_VB1_.
89. Spencer S. Hsu, "Local Police Want Right to Jam Wireless Signals," Washington Post, February 1, 2009, p. A02, available at http://www.washingtonpost.com/wp-dyn/content/article/2009/01/31/AR2009013101548_pf.html.
90. Spencer S. Hsu, "Local Police Want Right to Jam Wireless Signals," Washington Post, February 1, 2009, p. A02, available at http://www.washingtonpost.com/wp-dyn/content/article/2009/01/31/AR2009013101548_pf.html.
91. Matthew Harwood, "Bill Would Allow Prisons to Jam Cell Phone Signals," Security Management, January 16, 2009, available at http://www.securitymanagement.com/news/bill-would-allow-prisons-jam-cell-phone-signals-005082.
92. Paul H. Robinson, "Criminal Law Defenses: A Systematic Analysis," Columbia Law Review 82:199-291, 1982, available at http://papers.ssrn.com/sol3/papers.cfm?abstract_id=662043.
93. National Research Council, Cybersecurity Today and Tomorrow: Pay Now or Pay Later, The National Academies Press, Washington, D.C., 2002.
94. Associated Press, "Hatch Wants to Fry Traders' PCs," June 18, 2003, available at http://www.wired.com/entertainment/music/news/2003/06/59298.
95. John Markoff, "Worm Infects Millions of Computers Worldwide," New York Times, January 22, 2009, available at http://www.nytimes.com/2009/01/23/technology/internet/23worm.html.
96. Excalibur R&D, "Letter of Marque and Reprisal for Fighting Terrorists," August 20, 2008, available at http://excaliburrd.com/cs/blogs/excalibur/Excalibur%20Letter%20of%20Marque%20paper%2015%20August%202008.pdf.
97. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
98. Robert S. Norris, "The Difficult Discipline of Nuclear History: A Perspective," a presentation at the Carnegie Conference on Non-Proliferation, November 7, 2005, available at http://www.carnegieendowment.org/static/npp/2005conference/presentations/Norris_Nuclear_History_Slides.pdf
99. David M. Kunsman and Douglas B. Lawson, A Primer on U.S. Strategic Nuclear Policy, Sandia National Laboratories, Albuquerque, N.Mex., January 2001, available at http://www.nti.org/e_research/official_docs/labs/prim_us_nuc_pol.pdf.
100. Joint Chiefs of Staff, The National Military Strategy of the United States of America, 2004, available at http://www.strategicstudiesinstitute.army.mil/pdffiles/nms2004.pdf.
101. Joint Chiefs of Staff, The National Military Strategy of the United States of America, 2004, available at http://www.strategicstudiesinstitute.army.mil/pdfffles/nms2004.pdf.
102. Stephen Rosen, Chapter 7, "What Is the Enemy Building?" in Winning the Next War: Innovation and the Modern Military, Cornell University Press, Ithaca, N.Y., 1991.
103. William Jackson, "Cyberattacks in the Present Tense, Estonian Says," Government Computing News, November 28, 2007, available at http://www.gcn.com/online/vol1_no1/45476-1.html.
104. Glenn Kessler, "Trying to Kill Fidel Castro," Washington Post, June 27, 2007, p. A06.
105. Jill R. Aitoro, "National Cyber Security Initiative Will Have a Dozen Parts," Nextgov, August 1, 2008, available at http://www.nextgov.com/nextgov/ng_20080801_9053.php.
106. Wyatt Kash, "Cyber Chief Argues for New Approaches," Government Computer News, August 22, 2008, available at http://gcn.com/articles/2008/08/22/cyber-chief-argues-for-new-approaches.aspx.
107. United Press International, "Air Force Seeks Automated Cyber-response," Jan. 2, 2008, at 4:55 p.m.
108. Abraham D. Sofaer, War, Foreign Affairs and Constitutional Power: The Origins, Ballinger Publishing, Cambridge, Mass., 1976.
109. The Records of the Federal Convention of 1787, at 318 (1911), Max Farrand, ed., rev. edition, 1966.
110. Prize Cases, 67 U.S. 635 (1863) ("If a war be made by invasion of a foreign nation, the President is not only authorized but bound to resist force by force").
111. "Letter to Congressional Leaders on the Strike on Iraqi Intelligence Headquarters," Pub. Papers of William J. Clinton 940, 1993.
112. Alfred Cumming, Statutory Procedures Under Which Congress Is to Be Informed of U.S. Intelligence Activities, Including Covert Actions, Congressional Research Service memo, January 18, 2006, available at http://www.fas.org/sgp/crs/intel/m011806.pdf.
113. Medellin v. Texas, 128 S.Ct. 1346, 1356 (2008)
114. Christopher C. Joyner and Catherine Lotrionte, "Information Warfare as International Coercion: Elements of a Legal Framework," European Journal of International Law 12(5):825-865, 2001.
115. Oppenheim's International Law: Ninth Edition, 1991, p. 412.
116. Department of Defense, Office of General Counsel, An Assessment of International Legal Issues in Information Operations, Second Edition, November 1999.
117. United Nations Security Council Resolution 1368 (2001), accessed at http://daccessdds.un.org/doc/UNDOC/GEN/N01/533/82/PDF/N0153382.pdf?OpenElement.
118. Department of Defense, Office of General Counsel, An Assessment of International Legal Issues in Information Operations, Second Edition, November 1999.
119. Michael Schmitt, "Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework," Columbia Journal of Transnational Law 37:885-937, 1999
120. Duncan B. Hollis, "New Tools, New Rules: International Law and Information Operations," pp. 59-72 in Ideas As Weapons: Influence and Perception in Modern Warfare, G. David and T. McKeldin, eds., Potomac Books, Inc., 2009;
121. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
122. Department of Defense, Office of General Counsel, An Assessment of International Legal Issues in Information Operations, Second Edition, November, 1999.
123. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
124. Duncan B. Hollis, "New Tools, New Rules: International Law and Information Operations," pp. 59-72 in Ideas As Weapons: Influence and Perception in Modern Warfare, G. David and T. McKeldin, eds., Potomac Books, Inc., 2009.
125. Michael Schmitt, "Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework," Columbia Journal of Transnational Law 37:885-937, 1999;
126. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University Journal of International Law and Politics 34:57-113, 2001
127. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
128. Michael Schmitt, "Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework," Columbia Journal of Transnational Law 37:885-937, 1999.
129. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
130. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001
131. W. Hays Parks, "The International Law of Intelligence Collection," pp. 433-434 in National Security Law, John Norton Moore et al., eds., 1990
132. Roger D. Scott, "Territorially Intrusive Intelligence Collection and International Law, Air Force Law Review 46:217-226, 1999, available at http://permanent.access.gpo.gov/lps28111/Vol.46(1999)/scottfx4[1].doc.
133. Roger D. Scott, "Territorially Intrusive Intelligence Collection and International Law, Air Force Law Review 46:217-226, 1999; available at http://permanent.access.gpo.gov/lps28111/Vol.46(1999)/scottfx4[1].doc.
134. George K. Walker, "Information Warfare and Neutrality," Vanderbilt Journal of Transnational Law 33(5):1079-1200, November 2000.
135. Derek Jinks, "State Responsibility for the Acts of Private Armed Groups," Chicago Journal of International Law 4(1):83-96, Spring 2003).
136. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
137. Timothy Thomas, Decoding the Virtual Dragon, Foreign Military Studies Office, Fort Leavenworth, Kans., 2007.
138. Conference Report on H.R. 1455 (House of Representatives), July 25, 1991, available at http://www.fas.org/irp/congress/1991_cr/h910725-ia.htm.
139. Elizabeth Bazan, The Foreign Intelligence Surveillance Act: An Overview of Selected Issues, Congressional Research Service, Washington D.C., July 7, 2008 (available at www.fas.org/sgp/crs/intel/RL34279.pdf);
140. Elizabeth B. Bazan (ed.), The Foreign Intelligence Surveillance Act: Overview and Modifications, Nova Science Publishers, Hauppauge, N.Y., 2008;
141. Whitfield Diffie and Susan Landau, Privacy on the Line: The Politics of Wiretapping and Encryption, Updated and Expanded Edition, MIT Press, Cambridge, Mass., 2007.
142. Fidel Castro in 1960. "Trying to Kill Fidel Castro," Washington Post, June 27, 2007, p. A06.
143. David E. Sanger and Thom Shanker, "U.S. Debates Deterrence for Nuclear Terrorism," New York Times, May 8, 2007.
144. British Medical Association, Biotechnology, Weapons and Humanity, Harwood Academic Publishers, Amsterdam, the Netherlands, 1999
145. Claire M. Fraser and Malcolm R. Dando, "Genomics and Future Biological Weapons: The Need for Preventive Action by the Biomedical Community," Nature Genetics 29(3):253-256, November 2001, available at http://cmbi.bjmu.edu.cn/news/report/2001/insight-anthrax/feature/Genomics%20and%20future%20biological%20weapons.pdf. The issue of such targeted weapons was raised as early as 1970 in the professional military literature.
146. Carl Larson, "Ethnic Weapons," Military Review 50(11):3-11, November 1970, available at http://usacac.army.mil/CAC/Repository/Materials/MilitaryReview-197011300001-DOC.pdf.
147. Alex Berenson, "As Police Use of Tasers Soars, Questions Over Safety Emerge," New York Times, July 18, 2004.
148. Rohan Gunaratna, Inside Al Qaeda's Global Network of Terror, Columbia University Press, New York, 2002.
149. Jessica Reaves, "People of the Week: John Muhammad and John Malvo," Time, October 24, 2002, available at http://www.time.com/time/nation/article/0,8599,384284,00.html).
150. Susan Kim, "Fear Lingers in DC Area," Disaster News Network, November 12, 2002, available at http://www.disasternews.net/news/article.php?articleid=57).
151. Thomas C. Schelling and Morton H. Halperin, Strategy and Arms Control, Pergamon-Brassey's, Washington, D.C., 1985.
152. Davis Brown, "A Proposal for an International Convention to Regulate the Use of Information Systems in Armed Conflict," Harvard International Law Journal 47(1):179-221, Winter 2006.
153. Davis Brown, "A Proposal for an International Convention to Regulate the Use of Information Systems in Armed Conflict," Harvard International Law Journal 47(1):179-221, Winter 2006.
154. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001.
155. Abraham D. Sofaer and Seymour E. Goodman, A Proposal for an International Convention on Cyber Crime and Terrorism, Center for International Security and Cooperation, Stanford University, August 2000.
156. United Nations Disarmament Handbook, United Nations Publications, New York City, 2004, available at http://www.un.org/disarmament/HomePage/ODAPublications/Yearbook/2004/Html/Ch%20V6.html.
157. V. I. Tsymbal, "Kontseptsiya "Informatsionnoy Voiny'" (Concept of Information Warfare), speech given at a Russian-U.S. conference, "Evolving Post-Cold War National Security Issues," Moscow, September 12-14, 1995, p. 7
158. Timothy L. Thomas, "Deterring Information Warfare: A New Strategic Challenge," Parameters 26(Winter):82, 1996-1997.
159. Timothy L. Thomas, "China's Electronic Strategies," Military Review (May-June), 2001. Available at http://leav-www.army.mil/fmso/documents/china_electric/china_elec-tric.htm.
160. James C. Mulvenon, "The PLA and Information Warfare," in James C. Mulvenon (ed.), The People's Liberation Army in the Information Age, Conference Proceedings, The RAND Corporation, 1998.
161. Wang Jianghuai and Lin Dong, "Viewing Our Army's Quality Building from the Perspective of What Information Warfare Demands," Jiefangjun bao, March 3, 1998, p. 6, in FBIS-CHI-98-072, March 13, 1998;
162. Katherine McIntire Peters, "Information Insecurity," Government Executive, April 1, 1999, available at http://www.govexec.com/features/0499/0499s1.htm.
163. Timothy L. Thomas, "Like Adding Wings to the Tiger: Chinese Information War Theory and Practice," Foreign Military Studies Office, Fort Leavenworth, Kans. Undated publication, available at http://fmso.leavenworth.army.mil/documents/chinaiw.htm.
164. Department of Justice, "Russian Computer Hacker Sentenced to Three Years in Prison," 2002, available at http://www.usdoj.gov/criminal/cybercrime/gorshkovSent.htm.
165. Philip Attfield, "United States v Gorshkov Detailed Forensics and Case Study; Expert Witness Perspective," in Proceedings of the First International Workshop on Systematic Approaches to Digital Forensic Engineering (SADFE05), 2005, available at http://ieeexplore.ieee.org/iel5/10612/33521/01592518.pdf?arnumber=1592518.
166. Art Jahnke, "Russian Roulette," 2005, available at http://www.csoonline.com/read/010105/russian.html.
167. Stephanie Overby, "Big Ideas 2003: Passages Beyond India," 2003, available at http://www.cio.com/article/31589/Big_Ideas_Passages_Beyond_India/1.
168. Avi Cohen, "Scandal Shocks Business World," 2005, available at http://www.ynetnews.com/articles/0,7340,L-3091900,00.html.
169. Bob Sullivan, "Israel Espionage Case Points to New Net Threat," June 9, 2005, available at http://www.msnbc.msn.com/id/8145520/.
170. Department of Justice, "Criminal Complaint: United States of America v. Paul G. Ashley, Jonathan David Hall, Joshua James Schichtel, Richard Roby and Lee Graham Walker," 2004, available at http://www.reverse.net/operationcyberslam.pdf.
171. Department of Justice, "Computer Virus Broker Arrested for Selling Armies of Infected Computers to Hackers and Spammers," 2005, available at http://www.cybercrime.gov/anchetaArrest.htm.
172. Joris Evers, "'Bot Herders' May Have Controlled 1.5 million PCs," 2005, available at http://news.com.com/Bot+herders+may+have+controlled+1.5+million+PCs/2100-73503-5906896.html.
173. Department of Justice, "Over One Million Potential Victims of Botnet Cyber Crime," 2007, available at http://www.ic3.gov/media/initiatives/BotRoast.pdf.
174. Leif Nixon, "The Stakkato Intrusions," 2006, available at http://www.nsc.liu.se/nixon/stakkato.pdf.
175. Jenn Abelson, "Breach of Data at TJX Is Called the Biggest Ever: Stolen Numbers Put at 45.7 Million," March 29, 2007, available at http://www.boston.com/business/globe/articles/2007/03/29/breach_of_data_at_tjx_is_called_the_biggest_ever/.
176. Michael Schmitt, "Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework," Columbia Journal of Transnational Law 37:885-937, 1999.
177. Duncan B. Hollis, "New Tools, New Rules: International Law and Information Operations," pp. 59-72 in Ideas As Weapons: Influence and Perception in Modern Warfare, G. David and T. McKeldin, eds., Potomac Books, Inc., 2009.
178. National Research Council, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
179. Ken L. Thompson, "Reflections on Trusting Trust," Communications of the ACM 27(8):761-763, August 1984.
180. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, pp. 40-41.
181. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. vi.
182. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 10.
183. Hal Flynn, "Why Sardonix Failed," SecurityFocus, February 4, 2004, available at http://www.securityfocus.com/columnists/218.
184. Olin Sibert, Phillip A. Porras, and Robert Lindell, "An Analysis of the Intel 80x86 Security Architecture and Implementations," IEEE Transactions on Software Engineering, 22(5):283-293, May 1996;
185. Kris Kaspersky and Alice Chang, "Remote Code Execution Through Intel CPU Bugs," talk presented at Hack-In-The-Box, Dubai, United Arab Emirates, 2008, PowerPoint presentation available at http://nchovy.kr/uploads/3/303/D2T1%20-%20Kris%20Kaspersky%20-%20Remote%20Code%20Execution%20Through%20Intel%20CPU%20Bugs.pdf.
186. Ed Adams, "Biggest Information Security Mistakes That Organizations Make," Security Innovation, Inc., Wilmington, Mass., available at http://www.issa.org/Downloads/Whitepapers/Biggest-Information-Security-Mistakes_Security-Innovation.pdf.
187. Taimur Aslam, Ivan Krsul, and Eugene H. Spafford, "A Taxonomy of Security Vulnerabilities," in Proceedings of the 19th National Information Systems Security Conference, pp. 551-560, Octobter 1996, available at http://ftp.cerias.purdue.edu/pub/papers/taimur-aslam/aslam-krsul-spaf-taxonomy.pdf.
188. Samuel T. King et al., "Designing and Implementing Malicious Hardware," Proceedings of the First USENIX Workshop on Large-Scale Exploits and Emergent Threats (LEET), April 2008, available at http://www.usenix.org/event/leet08/tech/full_papers/king/king.pdf.
189. Defense Science Board, "Report of the Defense Science Board Task Force on Mission Impact of Foreign Influence on DoD Software," U.S. Department of Defense, September 2007, p. 4.
190. CSTB/NRC, Trust in Cyberspace, National Academy Press, Washington, D.C., 1999
191. NRC, Toward a Safer and More Secure Cyberspace, The National Academies Press, Washington, D.C., 2007.
192. NRC, Cybersecurity Today and Tomorrow: Pay Now or Pay Later, The National Academies Press, Washington, D.C., 2002
193. CSTB/NRC, Realizing the Potential of C4I: Fundamental Challenges, National Academy Press, Washington, D.C., 1998.
194. Dennis Blair, Director of National Intelligence, Annual Threat Assessment of the Intelligence Community for the Senate Select Committee on Intelligence, February 12, 2009, available at http://intelligence.senate.gov/090212/blair.pdf.
195. Jill R. Aitoro, "National Cyber Security Initiative Will Have a Dozen Parts," Government Executive, August 1, 2008, available at http://www.nextgov.com/nextgov/ng_20080801_9053.php.
196. Lawrence T. Greenberg, Seymour E. Goodman, and Kevin J. Soo Hoo, Information Warfare and International Law, National Defense University Press, 1998
197. Michael Schmitt, "Computer Network Attack and the Use of Force in International Law: Thoughts on a Normative Framework," Columbia Journal of Transnational Law 37:885-937, 1999
198. Christopher C. Joyner and Catherine Lotrionte, "Information Warfare as International Coercion: Elements of a Legal Framework," European Journal of International Law 12(5):825-865, 2001
199. Jason Barkham, "Information Warfare and International Law on the Use of Force," New York University International Law and Politics 34:57-113, 2001
200. Davis Brown, "A Proposal for an International Convention to Regulate the Use of Information Systems in Armed Conflict," Harvard International Law Journal 47(1):179-221, Winter 2006
201. Duncan B. Hollis, "New Tools, New Rules: International Law and Information Operations," pp. 59-72 in Ideas as Weapons: Influence and Perception in Modern Warfare, G. David and T. McKeldin, eds., Potomac Books Inc., 2009.
202. Roger C. Molander, Andrew S. Riddile, and Peter A. Wilson, Strategic Information Warfare: A New Face of War, National Defense Research Institute, RAND, Washington, D.C., 1996, available at http://www.rand.org/pubs/monograph_reports/2005/MR661.pdf.
203. Gregory J. Rattray, Strategic Warfare in Cyberspace, MIT Press, Cambridge, Mass., 2001.
204. Siobhan Gorman and Yochi Dreazen, "Military Command Is Created for Cyber Security," Wall Street Journal, June 24, 2009, available at http://online.wsj.com/article/SB124579956278644449.html.