Intermediate Intelligence Support to Cyberwarfare

OVERVIEW

Intermediate Intelligence Support to Cyberwarfare is an unclassified 1 ½ day course reviewing key concepts in the basic cyber course by summarizing earlier topics like indications and warning, targeting and BDA while introducing new sessions on legal aspects of cyberwarfare, collaboration with the private sector and the interagency process, minimizing the role of uncertainty, and how intelligence sources and methods must drive the nation’s response to cyber attack. This class is intended for students with two to four years’ experience who are curious for a wider and broader understanding of the field, and includes more group exercises and discussion than the basic course.

Session 1: Introduction
o EDT versus DISA (1998) and GS (2002) as examples of definitions, uncertainty, adversaries, thin line between offense and defense, targeting, battle damage assessment

Session 2: Cyberspace as a Warfighting (and Intelligence) Domain
o Definitions
o Nature of Cyberspace
o Private Sector Possession of Cyberspace
o Evolution of US Organization and Doctrine
o Key Events in Cyberspace History
o The Dominance of Uncertainty
o The Timing of an Attack
o Attack Spectrum
o How Might Wars in Cyberspace Be Fought?

Session 3: Legal Aspects of Cyberwarfare
o The Key Questions and Current Best Answers

Session 4: Adversaries in Cyberspace
o National Security Adversaries in Cyberspace
o Indications and Warning

Session 5: Intelligence Support to the Defense
o Defensive Courses of Action
o Incident Coordination, from CERT to White House
o Responding With All Elements of National Power
o Intelligence Recommendations for Response
o Attribution and Beyond Attribution
o Attribution Case Studies

Session 6: Intelligence Support to the Offense
o Military Warfighting Doctrine for Cyberspace
o Targeting
o Battle Damage Assessment Session

7: Current Issues and Wrap Up