Cyber Insecurity

Richard Harrison is the director of Operations and Defense Technology Programs at American Foreign Policy Council. His writings have appeared in Defense News, Jane’s Defence Weekly, USA Today, U.S. News and World Report, and the Washington Times.Trey Herr is a fellow at the Belfer Center’s Cyber Security Project at the Harvard Kennedy School and a non-resident fellow with New Amerca’s Cybersecurity Initiative.

• Acknowledgments Foreword by the Honorable Richard J. Danzig Introduction by Trey Herr and Richard M. Harrison SECTION I: SECURING DATA, DEVICES, AND NETWORKS1. Understanding Information Assurance, by Eric Ormes and Trey Herr 2. A Path to Collective Security: Information Sharing at the State and Local Level, by David Weinstein 3. Protecting Industrial Control Systems in Critical Infrastructure, by Robert M. Lee 4. Safer at Any Speed: The Roads Ahead for Automotive Cyber Safety Policy, by Joshua Corman and Beau Woods 5. Bad Code: Exploring Liability in Software Development, by Jane Chong SECTION II: COMBATING CYBER CRIME 6. Understanding Cyber Crime, by Sasha Romanosky and Trey Herr 7. Disrupting Malware Markets, by Trey Herr and Ryan Ellis 8. The Computer Fraud and Abuse Act: Structure, Controversies, and Proposals for Reform, by Paul Ohm 9. Breach Notification Laws: The Policy and Practice, by Sasha Romanosky 10. Cyber Insurance: A Market-Based Approach to Information Assurance, by Robert Morgus SECTION III: GOVERNING THE SECURITY OF THE INTERNET 11. Understanding Internet Security Governance, by Trey Herr and Heather West 12. A Holistic Approach to the Encryption Debate, by Aaron Brantly 13. Certificate Authorities: Modernizing the Internet’s Chain of Trust, by Adrienne Allen 14. Multistakeholder Approaches to Cybersecurity Challenges, by Allan Friedman and Jonah F. Hill 15. Countering the Proliferation of Malware, by Trey Herr and Paul Rosenzweig SECTION IV: MILITARY CYBER OPERATIONS 16. Understanding Military Cyber Operations, by Trey Herr and Drew Herrick 17. Government Acquisition and Use of Zero-Day Software Vulnerabilities, by Mailyn Fidler 18. The Joint Cyber Force: Challenges and Opportunities, by Jason Rivera, Lauren Boas Hayes, Anastasia Mark, Matthew Russell, and Nathaniel Tisa 19. The Practical Impact of Classification Regarding Offensive Cyber Operations, by Herbert S. Lin and Taylor Grossman 20. Creating Influence through Information, by Kat Dransfield, Abraham Wagner, and Rand Waltzman Concluding Remarks by Trey Herr and Richard M. Harrison Glossary Index Contributors

Cyber Insecurity provides a comprehensive understanding to the basic complexities of the cyber world. Its purpose is threefold: first, to the layperson, explaining the critical features of cyberspace and simplifying its essential components that include many key policy issues; second, to the initiated generalist, providing relevant details and references with respect to some of the more technical and policy details; and third, to policy makers and staffers, to serve as a resource for informed work in crafting public policy. . . . I recommend this book for all military members due to its application in military operations but more importantly in our everyday lives.