Information Warfare - 11 Introduction and Preparing for Attacks

Information Warfare - 12 Purpose of the Course This course is concerned with strategy and tactics as applied to the defense of information. The focus of the course is defending computer networks and hosts against attack, including both recognition and response to attacks.

Information Warfare - 13 Texts Know Your Enemy, Honeynet Project (Enemy) The Art of War, Sun Tzu (Griffith Translation), or use text from Internet: (Sun)

Information Warfare - 14 Grading 20% (each) two graded homeworks 60% Final Paper (Topic related to Information Warfare, Submit paragraph-length proposal by 3/21) Joint work to understand allowed Work for submission is to be individual unless otherwise approved

Information Warfare - 15 Preparing for Conflict Sun Tzu said: The art of war is of vital importance to the State. It is a matter of life and death, a road either to safety or to ruin. Hence it is a subject of inquiry which can on no account be neglected. Why information warfare?

Information Warfare - 16 Information Warfare “Information warfare is the offensive and defensive use of information and information systems to deny, exploit, corrupt, or destroy, an adversary's information, information-based processes, information systems, and computer-based networks while protecting one's own. Such actions are designed to achieve advantages over military or business adversaries.” Dr. Ivan Goldberg

Information Warfare - 17 Why look at Information Warfare? Most intruder activity is not information warfare –Cyber-vandalism –Cyber-crime Advanced intruders are becoming more commercial –Financial targets –Hack-for-hire –Hack-for-sales (e.g., spamming)

Information Warfare - 18 Why look at Information Warfare - 2 Advanced intruders are becoming more strategic –Deniability –Stealthy communication / exploit –Attack through intermediates Defense needs to be more strategic –Avoid time-consumptive response where possible –Avoid damage/costs –Avoid ceding the advantage to the intruder

Information Warfare - 19 Information Warfare is NOT New In one form or another IW as old as war Every great military writer discusses Old idea with new name How old is it?

Information Warfare As Old As War Itself Sun Tzu (4 th Century B.C.) Machiavelli (15 th Century) Jomini (19 th Century) Toffler (20 th Century)

Information Warfare The Theory: Models C2 / Counter C2 Five Pillars ObserveAct Plan Evaluate ConcealFrustrate Misdirect Confuse Security DeceptionDestructionPsychological Warfare Command and Control

Information Warfare What is the Value of IW? Degrades the enemy’s ability to wage war Enhances your ability to wage war Provides operational control Allows for superior intelligence and situational awareness

Information Warfare The Pillars - Security Intelligence gathering The more you know the better your strategy Protection of critical information Even seemingly innocent information can have value to the enemy Information Superiority a prime goal

Information Warfare The Pillars - Deception Concealing intent of attack Concealing extent of attack Concealing methods of attack Concealing methods of defense Concealing objects of attack

Information Warfare Deception “ All warfare is based on deception. Hence, when able to attack, we must seem unable; when using our forces, we must seem inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near.” (Sun Tzu)

Information Warfare The Pillars - Destruction Elimination of communications Computer Network Attack Destruction of Information Infrastructure Goal is to create chaos Destruction almost always limited

Information Warfare The Pillars – Psychological Warfare PsyOps is perception management Not always propaganda Not always deceptive Not always used against the enemy Examples: Persian Gulf and Bosnia

Information Warfare The Pillars – Command and Control No army can win without it C2 provides direction and focus to armies Good C2 essential to morale and belief in leaders Always a major target

Information Warfare Sun Tzu’s Aspects of Conflict Moral Law Heaven Earth Commander Method and Discipline

Information Warfare Moral Law Tau Morale or Purpose Attractiveness or Charisma of Leaders or of Purpose

Information Warfare Heaven Times and Seasons Occasion Weather Pacing and Scheduling of attack

Information Warfare Earth The battlefield The network –Services –Defenses –Users/Clients –Defenders/Administrators

Information Warfare Commander Personality Skills Preparation Motivation Reward

Information Warfare Method and Discipline Tools Procedures / Strategy Care in application / Reserves Preparation Assessment Follow-up

Information Warfare Circumstances Attack-aiding circumstances –Defender inattention –Window of vulnerability –Instability Attack-inhibiting circumstances –Instability –Defender focus –Distraction

Information Warfare Examples of Information Warfare Zapatista Information Strike India/Pakistan Kashmir Cyber Conflict Some marketing pitches Copyright infringement legal maneuvers

Information Warfare Facing the Enemy “Hold out baits to entice the enemy. Feign disorder and crush him. If he is secure at all points, be prepared for him. If he is in superior strength, avoid him. If you opponent is of choleric temper, seek to irritate him. Pretend to be weak, that he may grow arrogant. If he is taking his ease, give him no rest. If his forces are united, separate them. Attack him where he is unprepared, appear where you are not expected. These military devices, leading to victory, must not be divulged beforehand.”

Information Warfare The Rest of the Course Strategy Technology implementation Insider threat Attackers and defenders Physical and Cyber attacks Future