SCHOOL THESIS

DODIN Operations. “Operations to design, build, configure, secure, operate,
maintain, and sustain Department of Defense networks to create and preserve information
assurance on the Department of Defense information networks.” 52 DODIN operations are
the traditional methods we all think of to preserve data availability, integrity,
confidentiality, and user authentication. These operations include configuration control
and system patches, user training, physical security, firewalls, and data encryption. Many
DODIN activities are conducted through regularly scheduled events and updates.
Defensive Cyberspace Operations (DCO). These are operations which respond to
unauthorized activity or alert/threat information against the DODIN. DCO can be both
“passive and active cyberspace operations intended to preserve the ability to utilize
friendly cyberspace capabilities and protect data, networks, net-centric capabilities, and
other designated systems.” 53 DCO consists of both internal defensive measures and DCO
Response Actions (DCO-RA):
“Internal defense measures” are conducted within the DODIN. These are defined
as being “defensive tools and techniques [which] are designed to find, fix and finish
anomalous network activity using rule, signature and behavioral-based techniques.” 54
“DCO-RA” are defensive measures taken outside the defended network to
protect DOD cyberspace capabilities. Once sources of a cyber attack are identified,
response actions (such as custom-made computer code) may be implemented to defend
friendly cyberspace systems. 55
Offensive Cyberspace Operations (OCO). These are “operations intended to
project power by the application of force in and through cyberspace.” 56 OCO focuses
effects in cyberspace to influence or degrade enemy weapon systems, command and
control processes, critical infrastructures, etc.
52 Ibid., 3–7.
53 Ibid., 3–6.
54 Ibid., 3–6.
55 Ibid., 3–6.
56 Ibid., 3–2.
25