International Cyber Terrorism

IV. Proactive Cyber-Defense
Strategically, cyber defense refers to operations that are conducted in the cyber domain
in support of mission objectives. To help understand the practical difference between
cyber security and cyber defense, is to recognize that cyber defense requires a shift
from network assurance (security) to mission assurance where cyber defense is fully
integrated into operational planning across the Joint Functions. Cyber defense focuses
on sensing, detecting, orienting, and engaging adversaries in order to assure mission
success and to out-maneuver that adversary. This shift from security to defense
requires a strong emphasis on intelligence, surveillance and reconnaissance, and the
integration of staff activities to include intelligence, operations, communications, and
planning. Defensive cyber operations refer to activities on or through the global
information infrastructure to help protect and institutions’ electronic information and
information infrastructures as a matter of mission assurance. Does not normally involve
direct engagement with the adversary.
The distinction between cyber defense, active cyber defense, proactive cyber defense
and offensive cyber operations has been influenced by doctrine, pragmatics of
technology or tradecraft and legal thresholds.
Page 73 of 174