6th European Conference - Academic Conferences

Edwin Leigh Armistead and Thomas Murphy
use by home PC users in eCommerce. Identity theft protection needs will continue to increase, as
criminals develop increasingly sophisticated means of stealing electronic identity data. The need for
technologies to detect spoofing in emails and on websites will continue to grow. Finally, the capability
to perform software verification and validation (V&V) to determine the inherent security of software
code will become an area of increasing significance.
We argued in the Strategies to Entering the Fray section, based on our analysis of current and
expected contracts, that IA and Cyber Defense will receive increasing attention. Armistead and Clarke
(Armistead, 2010; Clarke & Knake, 2010) also emphasizes the central and crucial importance of
improving Defensive Cyber capability, and of having open debate on Cyber strategy/planning/policy –
similar to the process carried out for nuclear weapons when that technology emerged 50 years ago.
We appreciate the need for coverage and analysis of Defensive and Offensive Cyber strategy,
operations and tactics. More importantly, we also see a serious need to fix a significant Defensive
shortfall in the US cyber position. Because there is no agency with responsibility for Defense of
civilian banking, commercial, industrial systems, and because the DoD and the USG partially depend
on the commercial internet, a monumental vulnerability exists. Engaging in conflicts with a good
offense but without a good defense will fail. The nation as a whole now finds itself in that situation.
These factors define additional reasons the authors switched to the Defensive current focus in our
Strategies for Entering the Fray section. Both Armistead and Clarke (Armistead L., 2010; Clarke &
Knake, 2010) outline a process to establish a well-founded strategy-policy-plan and minimize risk of
uncontrolled Cyber-Kinetic War. These analyses suggest several topics, simulations and desktop
exercises, which would be useful to USG contract work. A well-founded analysis must address our
overall Strategy and Political situation, with military and cyber strategy as a component of national
strategy.
A difficult area needing both theoretical and practical development is formulating Measures of
Performance [MOP] and Measures of Efficiency [MOE] (Tokar, 2010). This is a focus area of military
effects based (EB) planning. Roughly, when carrying out missions involving the application of
components of IO, IW, Cyber, etc., we need to measure if we are “doing the right things” to effectively
achieve our desired goals [MOP] and if we are efficiently “doing things right” [MOE] to not waste time,
$, equipment and people. A related concept in the business world, which will be increasingly
importance as USG and DoD budgets narrow, is Return on Security Investment [ROSI]. The difficulty
with these ideas is in measuring the impact of one component alone when multiple different initiatives
are brought to bear. How one separates the effects of one from the combination of all is directly
related to the model of the complex DIMES-E processes being used.
Finally, the need for new and improved models of complex, DIMES-E systems is the most
fundamental barrier to achieving success, performance and efficiency. The benefits from such
insightful theory and models will be similar to the leap forward in physical sciences resulting from
Newton’s or Kepler’s Laws. If we are to more simply and accurately understand, predict and act to
bring about a desired future, and if we are to be able to tease out the effects of one factor (e.g. SC,
MISO, etc.) from the effects of many, then we must discover and apply much more insightful theories
and mathematical models to DIMES-E systems. Such models can clarify the attribution of who and
what is really at work and how to anticipate and adjust to the situation. This will allow everyone,
leaders and members of governments and organizations alike, to move beyond simply knowing they
are in serious hardship or risk, to appreciate what is being done right and what is not, and act to bring
about a more desirable future rather than an expected undesirable future.
6. Summary
Our overall goal has been to provide both the sources of funding opportunity for academic
researchers as well as sufficient background to understand the strategies for acquiring funding from
those sources. We first described the intuition and insight into the motivation of players, relationships
and integrated influences in the IA and IO business growth areas. In particular, we noted the
important influence of stress from external conditions and global DIMES-E situations. The ability to
understand and address these integrated problem areas is fundamental to an academic’s funding
success. Based on an analysis of contracts up to September 2010, we noted a current focus on IA
and Cyber security. We concluded that IA and Cyber Security are areas that should and will continue
to receive contract funding. Next, we further analyzed current and historical IO, IW, IA and Cyber
contracts and identified which companies have been awarded more contracts to date and are thus
“opportunity targets” for academic consulting. We provided details of strategies to enter the contract
21