Information Warfare And Security

I. INTRODUCTION. 1. Gulf War-Infowar. The Gulf War. Information Warfare. From Chicks to Chips. 2. A Theory of Information Warfare. Information Resources. The Value of Resources. Players. The Offense. The Defense. A Dual Role. Offensive Information Warfare. Increased Availability to Offensive Player. Decreased Availability to Defensive Player. Decreased Integrity. Other Classification Schemes. Defensive Information Warfare. Types of Defense. Information Security and Information Assurance. The CIA Model and Authorization. 3. Playgrounds to Battlegrounds. Play. Motivation. Culture. More than Child's Play. Crime. Intellectual Property Crimes. Fraud. Computer Fraud and Abuse. Fighting Crime. Individual Rights. National Security. Foreign Intelligence. War and Military Conflict. Terrorism. Netwars. Protecting National Infrastructures. II. OFFENSIVE INFORMATION WARFARE. 4. Open Sources. Open Source and Competitive Intelligence. Privacy. Snooping on People Through Open Sources. Web Browsing. Privacy Regulations. Piracy. Copyright Infringement. Trademark Infringement. Dark Sides. 5. Psyops and Perception Management. Lies and Distortions. Distortion. Fabrication. Hoaxes. Social Engineering. Denouncement. Conspiracy Theories. Defamation. Harassment. Advertising. Scams. Spam Wars. Censorship. United States Restrictions. 6. Inside the Fence. Traitors and Moles. State and Military Espionage. Economic Espionage. Corporate Espionage. Privacy Compromises. Business Relationships. Visits and Requests. Fraud and Embezzlement. Bogus Transactions. Data Diddling. Inside Sabotage. Physical Attacks. Software Attacks. Penetrating the Perimeter. Physical Break-ins and Burglaries. Search and Seizure. Dumpster Diving. Bombs. 7. Seizing the Signals. Eavesdropping on Conversations. Cellular Intercepts. Pager Intercepts. Law Enforcement Wiretaps. Foreign Intelligence Intercepts. Deciphering the Messages. Traffic Analysis. Pen Registers and Trap and Trace. Location Tracking. Telecommunications Fraud. Blue Boxes. PBX and Related Fraud. Voice Mail Fraud. Calling Card Fraud. Cloned Phones and Cellular Fraud. Computer Network Monitoring. Packet Sniffers. Keystroke Monitoring. Environment Surveillance. Cameras and Video. Satellites and Imagery. Van Eck Receptors. Miscellaneous Sensors. Shoulder Surfing. Privacy and Accountability. Sabotage. Tampering with Phone Service. Jamming. Radio Frequency Weapons. Physical Attacks. 8. Computer Break-Ins and Hacking. Accounts. Getting Access. Tools and Techniques. A Demonstration. Network Scanners. Packet Sniffers. Password Crackers. Buffer Overpows and Other Exploits. Social Engineering. Covering up Tracks. Information Theft. Gathering Trophies. More than Trophies. Tampering. Web Hacks. Domain Name Service Hacks. Takedown. Remote Shutdown. Extent. 9. Masquerade. Identity Theft. Forged Documents and Messages. E-Mail Forgeries. Forgeries in Spam. E-Mail Floods. IP Spoofing. Counterfeiting. Trojan Horses. Software Trojans. Riding the Web. E-Mail Relays. Chipping. Undercover Operations and Stings. 10. Cyberplagues. Viruses. Program Viruses. Boot Viruses. Macro Viruses. Concealment Techniques. Who Writes Viruses. Prevalence. Virus Hoaxes. Worms. III. DEFENSIVE INFORMATION WARFARE. 11. Secret Codes and Hideaways. Locks and Keys. Cryptography. Digital Ciphers. Code Breaking. Generation and Distribution of Keys. Public-Key Distribution and Diffie-Hellman. Public-Key Cryptography and RSA. Key Storage and Recovery. Applications of Encryption. The Limits of Encryption. Steganography. Anonymity. Sanitization. Trash Disposal. Shielding. 12. How to Tell a Fake. Biometrics. Passwords and Other Secrets. Integrity Checksums. Digital Signatures. Public-Key Management and Certificates. Watermarks. Call Back and Call Home. Location-based Authentication. Badges and Cards. 13. Monitors and Gatekeepers. Access Controls. Authorization Policies. Access Control Monitors. Limitations. Filters. Firewalls. Junk E-Mail Filters. Web Filters. Intrusion and Misuse Detection. Workplace Monitoring. Automated Detection. Computer Intrusion and Misuse Detection. Analogy with the Human Immune System. Detecting and Eradicating Viruses and Malicious Mobile Code. 14. In a Risky World. Vulnerability Monitoring. Finding Computer and Network Security Flaws. Monitoring Security Publications. Building It Secure. The Orange Book. The ITSEC and Common Criteria. Evaluation. Commercial Criteria. ICSA Certification. Accreditation. The Capability Maturity Model. Security Awareness and Training. Avoiding Single Points of Failure. Backups. Risk Management. Risk Assessment and Asset Valuation. Insurance. Benchmarking. Due Care and Liability. Incident Handling. Investigation and Assessment. Containment and Recovery. Improving Security. Notification. In-Kind Response. Legal and Civil Remedies. Economic and Military Response. Emergency Preparedness. Obstacles. 15. Defending the Nation. Generally Accepted System Security Principles. Protecting Critical Infrastructures. President's Commission on Critical Infrastructure Protection. Presidential Decision Directive. Encryption Policy. Code Making. Code Breaking. International Policies. U.S. Policy. Legal Challenges. Legislation. Encryption Policy in Perspective. Bibliography of Books. Endnotes. Index. 0201433036T04062001