Download - Foreign Military Studies Office - U.S. Army

C4ISR technology to ensure that they can protect their digital systems in space
and potentially cause harm to an opponent’s C4ISR capability.
Better understanding of cyber-related terminology and concepts makes
it more likely that the US can conduct cyber-based counterinsurgency on the
Internet. The US and other nations have done much to monitor al Qaeda’s
online techniques. In the US, academic and other organizations such as the Site
Institute continue to monitor and analyze al Qaeda websites on a daily basis.
The Homeland Security Department hired Dartmouth University to undertake a
study of Islamic websites and foreign information operations— both of which
they successfully completed. The website Internet Haganah (or “defense” in
Hebrew) has developed a methodology to track and find the servers from which
terrorists are sending their messages. The organization then explains the
situation to the proprietors of the servers on which an insurgent or terrorist site
exists and asks them to do something about it. This has resulted in the
movement of many terrorist websites over the past few years from one site to
another, putting them always on the run and disrupting their operations. 523 CNN
reports that Jeremy Reynalds, who runs a faith-based homeless shelter, combs
the Internet in his free time for illegal terrorist postings. He is given credit for
discovering that the soldier identified as John Adams (a toy doll dressed as a
US soldier with a rifle at his head) was a fake. 524 Such efforts must continue.
Other creative strategies to deal with insurgents must be developed to
supplement these efforts. However, monitoring is not countering, and herein
lies the problem.
New methods of analysis are being discovered that might help the
cybercop more than the cybercriminal (see Appendix Three for more
information on these topics). The Department of Defense’s Cyber Crime Center
(DC3) is changing the way it conducts large computer forensic investigations in
the wake of recent cases. It was reported that
In particular, the DC3 has established a section of its lab and a team of
examiners just to work on cases with large data sets, replacing ad hoc
teams created to address case requests as they come in. DC3 is also
using a combination of commercial forensic software and proprietary
tools to comb seized data stored on large capacity storage-area
networks and network-attached storage devices. The new DC3
approach replaced individual examiners working on separate
523 John Lasker, “Watchdogs Sniff Out Terror Sites,” Wired News, www.wired.com, 25
February 2005.
524 Henry Schuster, “The Internet War,” CNN.com, 16 February 2005.
287