SCHOOL THESIS

Level 2. Software tools that can be downloaded for computer security
purposes that are then abused to compromise networks and computers. This software is
specifically designed to allow skilled operators to test and penetrate system security, but
in the wrong hands can subvert a network.
Level 3. Malware designed only to exploit and infect other computers.
Examples include RAT, spyware, and botnet clients. Again, these programs are widely
available on the Internet.
Level 4. Purposely built cyber weapons covertly developed by nation
states with the expressed intention of waging cyber warfare. The most famous example is
the “Stuxnet” worm discovered in 2010. (This level would match cyber weapon attacks
as outlined by Rid and McBurney.)
3. Concept of “Cyber Attack”
In order to discuss the merits of any proposed cyber attack warning policy, it
would be helpful to have a clear definition of what specifically defines a “cyber attack.”
Media Definitions. While the news media repeatedly warns us about “cyber
attacks,” 36 there currently are no uniformly agreed-upon terms to describe cybersecurity
activities. Typical cyber actions are often publically described as: 37
“Cyber-vandalism” or “hacktivism” (defacing or otherwise temporarily
interfering with public access websites.)
“Cyber-crime” or “cyber-theft” (defrauding individuals to obtain their
personal identification data, or actual theft of funds from financial accounts.)
“Cyber-espionage” (covertly stealing sensitive or proprietary information.)
“Cyber-warfare” (conducting military operations using cyber means.)
36 “Cyber Attacks on South Korean Nuclear Power Operator Continue,” The Guardian, 28 Dec 2014,
accessed 21 Apr 2015, http://www.theguardian.com/world/2014/dec/28/cyber attacks-south-koreannuclear-power-operator.
37 “At the Nexus of Cybersecurity and Public Policy: Some Basic Concepts and Issues,” National
Academy of Science, 2014, vii, accessed 17 Dec 2014,
http://www.nap.edu/openbook.php?record_id=18749.
19