DOCSLIB.ORG

Rešerše Informačních Zdrojů Světa K Informační a Kybernetické

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Rešerše Informačních Zdrojů Světa K Informační a Kybernetické AMBIS vysoká škola a.s. Regionální rozvoj REŠERŠE INFORMAČNÍCH ZDROJŮ SVĚTA K INFORMAČNÍ A KYBERNETICKÉ BEZPEČNOSTI Bakalářská práce Autor: Martin Šilhánek Bezpečnostní management v regionech Vedoucí práce: Ing. Vladimír Šulc, Ph.D. Praha 2020 Prohlášení: Prohlašuji, že jsem bakalářskou práci zpracoval samostatně a v seznamu uvedl veškerou použitou literaturu. Svým podpisem stvrzuji, že odevzdaná elektronická podoba práce je identická s její tištěnou verzí, a jsem seznámen se skutečností, že se práce bude archivovat v knihovně VŠ AMBIS a dále bude zpřístupněna třetím osobám prostřednictvím interní databáze elektronických vysokoškolských prací. V Praze, dne 24. 10. 2020 Martin Šilhánek ANOTACE A KLÍČOVÁ SLOVA Anotace: Tato bakalářská práce se zabývá základními principy ochrany informací v jejich digitální podobě, následované navržením implementací a řízením bezpečnostního systému v souladu s mezinárodně uznávanými standardy. Práce obsahuje znalosti shromážděné ze vzdělávacích materiálů publikovaných státními orgány, mezinárodními firmami a dalšími autory zabývající se konstantně vyvíjející se problematikou kybernetické bezpečnosti. Poznatky obsažené v této práci jsou přínosné pro malé organizace a každého, kdo se chce obohatit o vědomosti jak ochránit své informace. Klíčová slova CZ: Kybernetická bezpečnost, informační bezpečnost, řízení kvality, protiopatření, riziko Annotation: This bachelor thesis deals with the basic principles of information security in their digital form, followed by the implementation and management of security system according to internationally distinguished standards. The thesis contains knowledge gathered from educational materials published by authorities, international corporations and other authors working with constantly develeping matters of cyber security. The findings in this thesis are benefitial for small organizations and for those who want to learn to protect their information. Key words: Cybersecurity, information security, quality management, countermeasure, risk, malware OBSAH Úvod ........................................................................................................................ 5 Metody a cíl práce ................................................................................................... 7 Teorie....................................................................................................................... 8 1.1 Informační bezpečnost ............................................................................. 8 1.1.1 Informace .................................................................................................. 8 1.1.2 Životní cyklus informace .......................................................................... 9 1.1.3 Bezpečnostní struktura informačního systému ....................................... 10 1.1.4 Bezpečnostní modely .............................................................................. 11 1.1.5 Analýza rizik ........................................................................................... 17 1.1.6 Zranitelnost nultého dne ......................................................................... 24 1.2 Řízení kvality ......................................................................................... 25 1.3 Kybernetická bezpečnost........................................................................ 26 1.3.1 Útoky ...................................................................................................... 29 Praktická část ......................................................................................................... 32 1.4 Malware .................................................................................................. 32 1.5 Bezpečnostní opatření ............................................................................ 48 1.6 Standardy a normy ................................................................................. 51 1.7 Trénink a vzdělávání .............................................................................. 52 1.8 Pokročilé malware opatření .................................................................... 54 1.9 Dotazníkové šetření ................................................................................ 56 ZÁVĚR .................................................................................................................. 63 SEZNAM POUŽITÝCH ZDROJŮ....................................................................... 65 SEZNAM ZKRATEK ........................................................................................... 71 SEZNAM PŘÍLOH ............................................................................................... 73 OFICIÁLNÍ ZADÁNÍ BAKALÁŘSKÉ PRÁCE ................................................. 78 ÚVOD V dnešní době, kdy se technologie vyvíjí rapidní rychlostí, se hrozby působící na zájmy jedinců a organizací vyvíjejí dvakrát tak rychleji. Tyto hrozby mohou mít negativní vliv na komunikační a informační technologii, které tvoří podstatnou součást života pro každého jedince i organizaci ve společnosti. Ochrana těchto zájmů je podstatná pro všechny členy společnosti, ať jsou součástí veřejného či soukromého sektoru. Zájmy, které poskytují veřejné blaho jsou poskytování bezpečnosti, fungující ekonomika a hospodářství, zatímco soukromníci mají zájem ochránit své finance, data a osobní údaje. Informační bezpečnost má za úkol chránit informační systémy, které obsahují hodnotné i méně důležité informace. Informační systém se skládá z řad aktiv, které jsou jeho součástí a podílí se na jeho chodu. Pro efektivní zabezpečení daného informačního systému je zapotřebí zajistit bezpečnost a snížit míru zranitelnosti u každého z aktiv. V případě úmyslného nebo náhodného využití zranitelnosti může být bezpečnost informačního systému narušena, což může mít zničující dopad na chod organizace či soukromí jedince. Kybernetická bezpečnost je podstatnou a rostoucí součástí informační bezpečnosti. Je třeba vzít v potaz, že kyberbezpečnost je stálá proměnná, kde se škodlivé programy, hacktivismus, podvody, sociální inženýrství a DDoS útoky uzpůsobují novým technologiím a s tím se mění i stále vyvíjející se bezpečnostní opatření. Vzrůstající četnost kybernetických útoků je způsobena stále narůstajícím počtem aktivit a činností, které se přesouvají z fyzického prostředí do kybernetického. Jedná se o častější komunikaci a digitalizací informací z papírové formy a snahou o automatizaci poskytování různých procesů, produktů a služeb. Podstatou kybernetické bezpečnosti je ochránit komunikační a informační systémy, které se nachází v kyberprostoru nebo se podílejí na jeho chodu. Každý člověk, organizace a zařízení s přístupem na internet, je součástí kyberprostoru, a dá se zneužít. Proto je třeba se ujistit, že každý z nich je dostatečně zabezpečený pro snížení rizika kompromitování informačního systému. Datování počátku informační bezpečnosti nelze přesně určit, lidé vždy měli svá tajemství a strategické informace. Jedním z prvních a nejznámějších mechanismů utajování informací a jejich ochranou bylo šifrování, které se využívalo pro zabezpečení komunikace během druhé světové války. V té době se informace předávaly převážně papírově, ústně či s pomocí telegrafu a vysílačů. Okolo devadesátých let, kdy se počítače začaly propojovat skrz internetovou sít, se informační bezpečnost stala aktuálně řešenou problematikou. Tento rozmach internetových sítí způsobil rozvoj informační bezpečnosti ve školách, institucích, obchodech i v soukromé sféře. Právě s tímto rozvojem se začala implementovat standardizace řízení informačních bezpečnostních systémů podle řízení kvality. První část práce popisuje teorii spojenou s ochranou informací. Vysvětluje základní atributy informací, dat a informačních systémů. Teoretická část obsahuje základní informace o řízení kvality a kybernetické bezpečnosti. V druhé, praktické části práce se nachází nejběžnější typy škodlivých programů, které útočníci využívají k jejich činnostem. Druhá část této práce obsahuje praktické ukázky bezpečnostních opatření používaných proti kybernetickým útokům a další opatřením poskytující zvýšenou kvalitu ochrany. 6 METODY A CÍL PRÁCE Hlavní metodou tohoto výzkumu je sběr dat, informací a rešerše informačních zdrojů o informační a kybernetické bezpečnosti. Většina informačních zdrojů pochází z webových stránek institucí zabývající ochranou informací, které pravidelně publikují články o hrozbách, opatřeních a vzdělávání. Cílem této práce je představit souhrn důležitých informací o informační a kybernetické bezpečnosti, možných útoků a jejich protiopatření. Dalším cílem, který je uveden v praktické části, je představení použitelné sady bezpečnostních opatření v oblasti řízení informační a kybernetické bezpečnosti ve spojením s řízením kvality. Metodou vypracování tohoto cíle je analyzování dat získaných z dotazníkového šetření s pomocí programu Microsoft Excel a programovacího jazyku R. Práce je určena zejména pro malé a střední organizace a širokou veřejnost. 7 TEORIE 1.1 Informační bezpečnost Tou nejcennější komoditou na světě je hodnotná informace. Dnešní svět se vyvíjí okolo informací a informační technologie. Lidstvo je obklopeno informačními médii a nesmírným množstvím dat všude okolo. Informace poskytují lidem určitou výhodu nad těmi, co danou informaci nemají. Proto naprostá většina organizací a společností, co se chtějí udržet na trhu, potřebuje těžit stále nová data a převádět tyto data na informace a znalosti. Organizace tyto informace využívají ke generování
Load more

Recommended publications
  • Botnets, Cybercrime, and Cyberterrorism: Vulnerabilities and Policy Issues for Congress
    Order Code RL32114 Botnets, Cybercrime, and Cyberterrorism: Vulnerabilities and Policy Issues for Congress Updated January 29, 2008 Clay Wilson Specialist in Technology and National Security Foreign Affairs, Defense, and Trade Division Botnets, Cybercrime, and Cyberterrorism: Vulnerabilities and Policy Issues for Congress Summary Cybercrime is becoming more organized and established as a transnational business. High technology online skills are now available for rent to a variety of customers, possibly including nation states, or individuals and groups that could secretly represent terrorist groups. The increased use of automated attack tools by cybercriminals has overwhelmed some current methodologies used for tracking Internet cyberattacks, and vulnerabilities of the U.S. critical infrastructure, which are acknowledged openly in publications, could possibly attract cyberattacks to extort money, or damage the U.S. economy to affect national security. In April and May 2007, NATO and the United States sent computer security experts to Estonia to help that nation recover from cyberattacks directed against government computer systems, and to analyze the methods used and determine the source of the attacks.1 Some security experts suspect that political protestors may have rented the services of cybercriminals, possibly a large network of infected PCs, called a “botnet,” to help disrupt the computer systems of the Estonian government. DOD officials have also indicated that similar cyberattacks from individuals and countries targeting economic,
    [Show full text]
  • Effective Malicious Features Extraction and Classification for Incident Handling Systems
    EFFECTIVE MALICIOUS FEATURES EXTRACTION AND CLASSIFICATION FOR INCIDENT HANDLING SYSTEMS CHO CHO SAN UNIVERSITY OF COMPUTER STUDIES, YANGON OCTOBER, 2019 Effective Malicious Features Extraction and Classification for Incident Handling Systems Cho Cho San University of Computer Studies, Yangon A thesis submitted to the University of Computer Studies, Yangon in partial fulfillment of the requirements for the degree of Doctor of Philosophy October, 2019 Statement of Originality I hereby certify that the work embodied in this thesis is the result of original research and has not been submitted for a higher degree to any other University or Institution. …..…………………………… .…………........………………………… Date Cho Cho San ACKNOWLEDGEMENTS First of all, I would like to thank Hist Excellency, the Minister for the Ministry of Education, for providing full facilities support during the Ph.D. course at the University of Computer Studies, Yangon. Secondly, my profound gratitude goes to Dr. Mie Mie Thet Thwin, Rector of the University of Computer Studies, Yangon, for allowing me to develop this research and giving me general guidance during the period of my study. I would like to express my greatest pleasure and the deepest appreciation to my supervisor, Dr. Mie Mie Su Thwin, Professor, the University of Computer Studies, Yangon, for her excellent guidance, caring, patient supervision, and providing me with excellent ideas throughout the study of this thesis. I would also like to extend my special appreciation to Dr. Khine Moe Nwe, Professor and Course-coordinator of the Ph.D. 9th Batch, the University of Computer Studies, Yangon, for her useful comments, advice, and insight which are invaluable through the process of researching and writing this dissertation.
    [Show full text]
  • Chapter 3: Viruses, Worms, and Blended Threats
    Chapter 3 Chapter 3: Viruses, Worms, and Blended Threats.........................................................................46 Evolution of Viruses and Countermeasures...................................................................................46 The Early Days of Viruses.................................................................................................47 Beyond Annoyance: The Proliferation of Destructive Viruses .........................................48 Wiping Out Hard Drives—CIH Virus ...................................................................48 Virus Programming for the Masses 1: Macro Viruses...........................................48 Virus Programming for the Masses 2: Virus Generators.......................................50 Evolving Threats, Evolving Countermeasures ..................................................................51 Detecting Viruses...................................................................................................51 Radical Evolution—Polymorphic and Metamorphic Viruses ...............................53 Detecting Complex Viruses ...................................................................................55 State of Virus Detection.........................................................................................55 Trends in Virus Evolution..................................................................................................56 Worms and Vulnerabilities ............................................................................................................57
    [Show full text]
  • A Highly Immersive Approach to Teaching Reverse Engineering Golden G
    A Highly Immersive Approach to Teaching Reverse Engineering Golden G. Richard III Department of Computer Science University of New Orleans New Orleans, LA 70148 Email: [email protected] Abstract most operating systems courses, but for reverse engi- neering, the devil really is in the details. For example, While short training courses in reverse engineering are to understand an offensive technique like Shadow frequently offered at meetings like Blackhat and Walker [13], which relies on de-synchronization of the through training organizations such as SANS, there are data and instruction TLBs in Intel’s split-TLB design virtually no reverse engineering courses offered in aca- to hide code and data, it’s not enough to have seen a demia. This paper discusses possible reasons for this Powerpoint slide depicting the abstract functionality of situation, emphasizes the importance of teaching re- a TLB—that’s a good start, but both more details and verse engineering (and applied computer security edu- hands-on experience are needed. Furthermore, assem- cation in general), and presents the overall design of a bler language courses, if they exist at all as independ- semester-long course in reverse engineering malware, ent courses in a modern computing curriculum, tend to recently offered by the author at the University of New be much weaker than in the past, often emphasizing the Orleans. use of High Level Assembler (HLA) [4] and develop- 1 Introduction ment of toy applications. In many curricula, the as- sembler language course of old has been folded into the Reverse engineering of software involves detailed undergraduate architecture class.
    [Show full text]
  • Nusikaltimai Elektroninėje Erdvėje Ir Jų Tyrimo Metodikos Nikolaj Goranin Dalius Mažeika
    Nikolaj Goranin Dalius Mažeika NUSIKALTIMAI elektroninėje erDvėje ir jų tyriMo MetoDikos Nikolaj Goranin Dalius Mažeika NUSIKALTIMAI ELEKTRONINĖJE ERDVĖJE IR JŲ TYRIMO METODIKOS MOKOMOJI KNYGA Projektas „Aukštojo mokslo I ir II pakopų informatikos ir informatikos inžinerijos krypčių studijų programų atnaujinimas bei naujų sukūrimas ir įgyvendinimas (AMIPA)“, kodas VP1–2.2–ŠMM–09–V–01–003, finansuojamas iš Europos socialinio fondo ir Lietuvos valstybės biudžeto lėšų. Recenzavo: prof. dr. V. Jusas doc. dr. K. Driaunys © N. Goranin, D. Mažeika, 2011 © KTU Informatikos fakultetas, 2011 © VGTU Fundamentaliųjų mokslų fakultetas, 2011 © UAB TEV, 2011 ISBN 978-609-433-055-1 TURINYS ĮVADAS ........................................................................................................................7 1. NUSIKALTIMAI ELEKTRONINĖJE ERDVĖJE ...................................................9 1.1. Nusikaltimų elektroninėje erdvėje apibrėžimas ir jų tipai ................................9 1.2. Informacinis karas ...........................................................................................11 1.3. Savikontrolės klausimai ..................................................................................14 2. NEE TEISINIAI ASPEKTAI ..................................................................................15 2.1. Teisinė nusikaltimų elektroninėje erdvėje samprata .......................................15 2.2. Elektroninių nusikaltimų kategorijos ..............................................................17 2.3. Tarptautiniai
    [Show full text]
  • Malware Primer Malware Primer
    Malware Primer Malware Primer Table of Contents Introduction Introduction ...........................................................................................................................................................................2 In The Art of War, Sun Tzu wrote, “If you know the enemy and know yourself, you need not fear the result of a hundred battles.” This certainly applies Chapter 1: A Brief History of Malware—Its Evolution and Impact ..............................3 to cyberwarfare. This primer will help you get to know cybercriminals by providing you with a solid foundation in one of their principle weapons: Chapter 2: Malware Types and Classifications ....................................................................................8 malware. Chapter 3: How Malware Works—Malicious Strategies and Tactics ........................11 Our objective here is to provide a baseline of knowledge about the different types of malware, what malware is capable of, and how it’s distributed. Chapter 4: Polymorphic Malware—Real Life Transformers .............................................14 Because effectively protecting your network, users, data, and company from Chapter 5: Keyloggers and Other Password Snatching Malware ...............................16 malware-based attacks requires an understanding of the various ways that the enemy is coming at you. Chapter 6: Account and Identity Theft Malware ...........................................................................19 Keep in mind, however, that we’re only able here
    [Show full text]
  • CS 3700 Networks and Distributed Systems
    CS 3700 Networks and Distributed Systems Lecture 20: Malware/Botnets Slides stolen from Vern Paxson (ICSI) and Stefan Savage (UCSD) Motivation 2 Internet currently used for important services ! Financial transactions, medical records Increasingly used for critical services ! 911, surgical operations, water/electrical system control, remote controlled drones, etc. Networks more open than ever before ! Global, ubiquitous Internet, wireless Malicious Users 3 Miscreants, e.g. LulzSec ! In it for thrills, street cred, or just to learn ! Defacing web pages, spreading viruses, etc. Hacktivists, e.g. Anonymous ! Online political protests ! Stealing and revealing classified information Organized Crime ! Profit driven, online criminals ! Well organized, divisions of labor, highly motivated Network Security Problems 4 Host Compromise ! Attacker gains control of a host ! Can then be used to try and compromise others Denial-of-Service ! Attacker prevents legitimate users from gaining service Attack can be both ! E.g., host compromise that provides resources for denial-of- service Definitions 5 Virus ! Program that attaches itself to another program Worm ! Replicates itself over the network ! Usually relies on remote exploit (e.g. buffer overflow) Rootkit ! Program that infects the operating system (or even lower) ! Used for privilege elevation, and to hide files/processes Trojan horse ! Program that opens “back doors” on an infected host ! Gives the attacker remote access to machines Botnet ! A large group of Trojaned machines, controlled
    [Show full text]
  • Leading International University Squashes Threats from Modern Malware with Palo Alto Networks
    PALO ALTO NETWORKS: Customer Profile Leading International University Squashes Threats from Modern Malware with Palo Alto Networks “Palo Alto Networks gives us true insight into what’s really going on in our network to ensure that risky traffic and activity is blocked. The control, visibility and threat prevention capabilities of the PA-4000 Series are unmatched. The cost was right and the ORGANIZATION: benefits quickly justified the cost.” University of Groningen – Mente Heemstra, Network Specialist, University of Groningen INDUSTRY: Education BACKGROUND CHALLENGE: Founded in 1614, the University of Groningen enjoys an international reputation Gain visibility into network to improve as one of the oldest and leading educational and research universities in Europe. security and control while maintaining a Located in the north of the Netherlands, the university offers degree programs policy of application access for all users. at Bachelor’s, Master’s and Ph.D. levels in virtually every field, many of them SOLUTION: completely taught in English. Research and knowledge, combined with an Replace legacy firewalls and Intrusion interdisciplinary approach, form the basis of the school’s programs. Research and Prevention System (IPS) managing traffic education at the University of Groningen is internationally oriented, as students between the university and its Internet from every continent prepare themselves for international career paths. Groningen Service Provider with Palo Alto Networks PA Series next-generation firewall with is an ideal, safe city with a flourishing student life. IPS for granular visibility of threats and better control of suspect Internet FILE SHARING AND MALWARE ON CAMPUS applications. Approximately 28,000 students study at the acclaimed University of Groningen.
    [Show full text]
  • SAFE SQL Slammer Worm Attack Mitigation
    White Paper SAFE SQL Slammer Worm Attack Mitigation Introduction further amplified because of ICMP This document discusses the recently unreachable messages returned by routers released SQL Slammer worm and its effects for nonexistent hosts. on the network and its hosts. Today The SQL Slammer worm apparently does numerous technologies are available for not contain malicious payload beyond the use in Cisco products that mitigate the buffer overflow to gain access to the host detrimental effects of the worm. These running the SQL Server Resolution Service include not only security technologies and then to set up the worm. Multiple such as intrusion detection and packet instances of the worm can infect a host filtering, but also virtual LAN (VLAN) because the worm does not check for segmentation, packet classification, and previous infections of the target system. content services. In addition to these technologies the SAFE blueprint from Cisco Cisco Recommendations for combines security best practices and secure Mitigating SQL Slammer network design to mitigate worms and The SQL Slammer worm has been identified viruses like SQL Slammer and other and analyzed by several groups, including network attacks. This paper contains much analysts from eEye Digital Security. Their of the same information discussed in the analysis can be found at: Code-Red and Nimda white papers posted http://www.eeye.com/html/Research/Flash/ at www.cisco.com/go/safe. This is AL20030125.html. important to note because the core This worm appears to be based on the mitigation techniques stay the same as Microsoft SQL Server 2000 exploit noted in new worms are released.
    [Show full text]
  • ABSTRACT Slammer: Before, During and After Marc-André Laverdière
    ABSTRACT Slammer: Before, During and After Marc-André Laverdière The internet was built to provide flexibility and easy connectivity. However, these qualities of the Internet raise major security concerns that they could be exploited to disrupt our daily lives. One such disruption was the spread of the Slammer/Sapphire worm, which happened on January 25th, 2003. During the spread of the worm, many lost their internet connection, were not able to use ATMs, or saw their flights delayed directly due to the worm’s activity. In this report, we will study the Slammer worm in this ‘natural’ environment: the Internet. We will study Slammer itself, the situation before the attack of the worm, the damage caused by its spread, as well as the lessons learned from this outbreak. We will approach this study mainly from a computer security point of view, while still presenting perspectives from the IT industry’s and the public’s viewpoint. Key Words: Computer Worms, Network Security, Slammer Slammer: Before, During and After by Marc-André Laverdière ma_laver at cs dot concordia dot ca TABLE OF CONTENTS 1. PREFACE............................................................................................................. 1 2. INTRODUCTION................................................................................................ 2 3. BEFORE THE ATTACK..................................................................................... 3 3.1. The Vulnerability 3 3.2. The State of the Security Community 5 4. THE WORM ........................................................................................................ 6 4.1. Buffer Overflow Exploits and Their Development 6 4.2. Worm Body 7 5. DURING THE ATTACK................................................................................... 13 5.1. Propagation of the Worm 13 5.2. Damage Caused 15 5.3. Security Response and Remedying to the Attack 16 5.3.1. Removing Slammer Howto................................................................... 16 5.3.2.
    [Show full text]
  • Fortinet Threat Landscape Report Q4 2016
    THREAT LANDSCAPE REPORT Q4 2016 TABLE OF CONTENTS TABLE OF CONTENTS Foreword . 3 Q4 2016 Highlights and Key Findings . 4 Sources and Measures . .5 Infrastructure Trends . 7 Global Threat Landscape . 10 Exploits . 11 Mini Focus: IoT . 13 Malware . 14 Mini Focus: Mobile Malware . 16 Botnets . 17 Mini Focus: Ransomware . 19 Regional Threat Landscapes . 20 Industry Threat Landscapes . 23 Exploratory Analysis: Holiday Threat Trends . 26 Conclusion and Recommendations . 28 2 FOREWORD FOREWORD Everything worth doing involves some degree of risk, and this is especially true when it comes to commerce. From ancient expeditions into uncharted territories to modern forays into digital connections and clicks, fame and fortune go to those who understand the risks and manage them well. But at the edge of the unknown, understanding tends to be a scarce commodity and is often replaced with fear, uncertainty, and doubt—a trio so intertwined they’re better known simply as “FUD.” This tendency is illustrated beautifully in the “monster maps” of This report seeks to draw an accurate representation of the cyber old, such as the famous Carta Marina shown here. Real dangers threat landscape in Q4 2016 leveraging the vast information experienced at land and sea were often represented as fantastical resources and expertise of FortiGuard Labs. We seek to share beasts as a warning to fellow travelers. It offers an excellent our perspective on the threats that exist, how often they occur, example of how FUD can lead to a mythical view of legitimate what differs across sectors and regions, and what’s changing over threats. Before chalking this tendency up to primitive ignorance, time.
    [Show full text]
  • Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities
    THE NATIONAL ACADEMIES PRESS This PDF is available at http://nap.edu/12651 SHARE Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities DETAILS 390 pages | 6x9 | PAPERBACK ISBN 978-0-309-13850-5 | DOI 10.17226/12651 AUTHORS BUY THIS BOOK William A. Owens, Kenneth W. Dam, and Herbert S. Lin, editors; Committee on Offensive Information Warfare; National Research Council FIND RELATED TITLES Visit the National Academies Press at NAP.edu and login or register to get: – Access to free PDF downloads of thousands of scientific reports – 10% off the price of print titles – Email or social media notifications of new titles related to your interests – Special offers and discounts Distribution, posting, or copying of this PDF is strictly prohibited without written permission of the National Academies Press. (Request Permission) Unless otherwise indicated, all materials in this PDF are copyrighted by the National Academy of Sciences. Copyright © National Academy of Sciences. All rights reserved. Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of CYBerattacK CapaBILITIes William A. Owens, Kenneth W. Dam, and Herbert S. Lin, Editors Committee on Offensive Information Warfare Computer Science and Telecommunications Board Division on Engineering and Physical Sciences Copyright National Academy of Sciences. All rights reserved. Technology, Policy, Law, and Ethics Regarding U.S. Acquisition and Use of Cyberattack Capabilities THE NATIONAL ACADEMIES PRESS 500 Fifth Street, N.W. Washington, DC 20001 NOTICE: The project that is the subject of this report was approved by the Gov- erning Board of the National Research Council, whose members are drawn from the councils of the National Academy of Sciences, the National Academy of Engi- neering, and the Institute of Medicine.
    [Show full text]