Lessons Learned in Cyberspace Security

Abstract

The lessons learned in cyberspace operations continue to shape cybersecurity education. When a computer is connected to any network, it is immediately vulnerable to both direct and automated attacks. The number of threats in cyberspace are beyond those experienced in the physical world. After analyzing the history and shape of evolving cyberthreats, several key concepts emerge. In keeping with the theme of Lessons Learned from Research and Operations, the authors discuss their lessons learned about cybersecurity. Their experience was gained during their years in operational communities, doing test and evaluation, and later, as educators of military and DoD students. The intent of this paper is to bridge the language and topics of malware used in academia to the operational community, and to provide a lingua franca to support a dialog between the communities. We enumerate the top ten concepts that operators, developers, maintainers, and managers need to address to stay safe in cyberspace. Each concept is briefly discussed; its impacts are explained; the main takeaways; and the relevance to Command and Control (C2). The paper also discusses how individuals can continue to increase their awareness of cybersecurity threats and vulnerabilities.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Jun 01, 2014
Accession Number
ADA608118

Entities

People

  • Lori Delooze
  • Margaret M. Mcmahon

Tags

Communities of Interest

  • C4I
  • Cyber

DTIC Thesaurus Topics

  • Anti-Virus Software
  • Command And Control
  • Computer Program Documentation
  • Computer Programming
  • Computer Programs
  • Computers
  • Cybersecurity
  • Cyberspace
  • Cyberspace Operations
  • Education
  • Electronic Mail
  • Intrusion Detectors
  • Lessons Learned
  • Malware
  • Operating Systems
  • Security
  • Students

Fields of Study

  • Computer science

Readers

  • Cybersecurity.
  • Organizational Process Management (OPM).
  • Strategic Security Studies

Technology Areas

  • Cyber
  • Fully Networked C3
  • Fully Networked C3 - Command and Control