Proceedings of the 11th European Conference on Information ...

More documents

Recommendations

Info

to classify <strong>the</strong>se techniques, using five different classes: acquired attributes, proposed/in use, external party involvement, sabotage opportunity and prepositioning depth. The novelty <strong>of</strong> this paper is its scope; classifying <strong>the</strong> landscape <strong>of</strong> technical attribution techniques.Keywords: cyber, attribution, pr<strong>of</strong>iling, traceback, honey-pots, taxonomy A Vulnerability-Based Model <strong>of</strong> Cyber Weapons and its Implications for Cyber Conflict Karlis Podins and Christian Czosseck Cooperative Cyber Defence Centre <strong>of</strong> Excellence, Tallinn, Estonia Abstract: Throughout history, mankind has developed and employed novel weapons systems and equally novel countermeasures. Naturally, both <strong>of</strong>fensive and defensive systems are limited by <strong>the</strong> laws <strong>of</strong> nature. Consequently, military concepts and doctrines were designed by implicitly taking into account those same limitations. The digital age has introduced a new class <strong>of</strong> weaponry that poses an initial challenge to our common understanding <strong>of</strong> conflict and warfare as for <strong>the</strong>ir different characteristics: cyber weapons. Cyber weapons and o<strong>the</strong>r terms like hacking are used frequently, commonly without giving clear definitions in <strong>the</strong> given context. We propose a restricted definition <strong>of</strong> cyber weapons as consisting primarily <strong>of</strong> data and knowledge, presenting <strong>the</strong>mselves in <strong>the</strong> form <strong>of</strong> prepared and executed computer codes on or a sequence <strong>of</strong> user interactions with a vulnerable system. This article explores <strong>the</strong> crucial differences between <strong>the</strong> conventional weapons and cyber weapons domains, starting a debate on to which extent classical concepts and doctrines are applicable to cyber space and cyber conflict. This motivates a discussion on <strong>the</strong> role <strong>of</strong> vulnerabilities in IT systems and <strong>the</strong>ir impact to IT security and cyber attacks. The authors describe a vulnerability-based model for cyber weapons and for cyber defense. This model is <strong>the</strong>n applied to describe <strong>the</strong> relationship between cyber-capable actors (e.g. nation-states). The proposed model clarifies important implications for cyber coalition-building, and disarmament. Fur<strong>the</strong>rmore, it presents a general solution for <strong>the</strong> problem <strong>of</strong> <strong>the</strong> destruction <strong>of</strong> cyber weapons, i.e. in <strong>the</strong> context <strong>of</strong> cyber arms control. Keywords: cyber weapons, cyber defense, disarmament, coalition, vulnerabilities 24
Modelling Emergency Response Communication Systems Graeme Pye and Mat<strong>the</strong>w Warren School <strong>of</strong> Information Systems, Faculty <strong>of</strong> Business and Law, Deakin University, Geelong, Australia Abstract: Subsequent to <strong>the</strong> Australian ‘Black Saturday’ bushfires <strong>the</strong>re were a number <strong>of</strong> issues arising from investigations with regard to <strong>the</strong> functional stability and resilience <strong>of</strong> communications systems and <strong>the</strong> flow <strong>of</strong> information between emergency response organisations, and <strong>the</strong>ir ability to provide relevant information to <strong>the</strong> general public. In some cases, <strong>the</strong> transference <strong>of</strong> information failed or was late or ineffective with regard to decisions, advice and information broadcasting during <strong>the</strong> crisis. This was particularly evident in terms <strong>of</strong> managing emergency organisational information requests and field situational advice both to and from emergency response management teams and <strong>the</strong> delivery <strong>of</strong> informative advice to <strong>the</strong> public. This paper analyses one such case study with a view <strong>of</strong> applying a systems modelling technique to determine <strong>the</strong> viability <strong>of</strong> <strong>the</strong> communication systems and information exchange structures associated with an emergency response agency. Keywords: communication, resilience, emergency response, systems modelling Digital Finland: Life at <strong>the</strong> Screen Jari Rantapelkonen1 and Saara Jantunen2 1Department <strong>of</strong> Tactics and Operations Art, National Defence University, Helsinki, Finland 2Department <strong>of</strong> Leadership and Military Pedagogy, National Defence University, Helsinki, Finland Abstract: This article aims to critically engage <strong>the</strong> Finnish cyber narrative from <strong>the</strong> perspective <strong>of</strong> human life. It discusses <strong>the</strong> representation and <strong>the</strong> narrative <strong>of</strong> future 'cyber life', as presented by <strong>the</strong> Finnish authorities through <strong>the</strong> Digital Finland document written in 2010. Digital Finland is a 25
Page 1 and 2: Proceedings <stron
Page 3 and 4: Contents Paper Title Author(s) Guid
Page 5 and 6: Paper Title Author(s) Guide Page Se
Page 7 and 8: Paper Title Author(s) Guide Page Sw
Page 9 and 10: Preface This year sees the<
Page 11 and 12: Greece); Hamid Jahankhani (Universi
Page 13 and 14: Biographies Conference</str
Page 15 and 16: versity Paris 6 on the</str
Page 17 and 18: ic Advisory Group, the</str
Page 19 and 20: Tim Hartog graduated in 2005 at <st
Page 21 and 22: Pierre Leandre is a student in his
Page 23: several years working as both a s<s
Page 26 and 27: malware signatures to all users or
Page 28 and 29: Who are you Today? Prof</st
Page 30 and 31: Recent Cyberwar Spectrum and its An
Page 32 and 33: Keywords: measurement framework, me
Page 34 and 35: EU law and Internet Traffic Control
Page 36 and 37: Evaluation of Nati
Page 38 and 39: and Mexico. The United States have
Page 40 and 41: ut also attitudes and values are pr
Page 42 and 43: countries are currently missing som
Page 44 and 45: Towards an Automated Security Aware
Page 46 and 47: the selection <str
Page 50 and 51: eport on future prospects o
Page 52 and 53: 21st century introduced the
Page 54 and 55: strictions; it obstructs th
Page 56 and 57: possibilities and opportunities to
Page 58 and 59: pendent on being aware of</
Page 60 and 61: ed cells. The outcome of</s
Page 63: PHD Papers 39
Page 66 and 67: Law of Armed Confl
Page 68 and 69: nerabilities have increased as a re
Page 71: Information Systems Security Manage
Page 75 and 76: CNA by Social Media, or is it 5th G
Page 77 and 78: could there be a c

Proceedings of the 11th European Conference on Information ...

Create successful ePaper yourself

Delete template?

Save as template?