Role of Intelligence Inputs in Defending Against Cyber Warfare and Cyberterrorism

References

• Arora A, Caulkins JP, Telang T (2006) Sell first, fix later: Impact of patching on software quality. Management Sci. 52(3):465–471.Link, Google Scholar
• Bagchi A, Paul JA (2014) Optimal allocation of resources in airport security: Profiling vs. screening. Oper. Res. 62(2):219–233.Link, Google Scholar
• Bagchi A, Paul JA (2017) Espionage and the optimal standard of the customs-trade partnership against terrorism (C-TPAT) program in maritime security. Eur. J. Oper. Res. 262(1):89–107.Crossref, Google Scholar
• Bandyopadhyay T, Mattord HR (2008) Defending cyber terrorism—A game theoretic modeling approach. Amer. Conf. Inform. Systems (AMCIS) Proc., Toronto, 318.Google Scholar
• Bier V, Oliveros S, Samuelson L (2007) Choosing what to protect: Strategic defensive allocation against an unknown attacker. J. Public Econom. Theory 9(4):563–587.Crossref, Google Scholar
• Campbell K, Gordon LA, Loeb MP, Zhou L (2003) The economic cost of publicly announced information security breaches: Empirical evidence from the stock market. J. Comput. Security 11(3):431–448.Crossref, Google Scholar
• Carter CJ, Benson P, Castillo M (2013) Official: Cyberattacks, N. Korea, Jihadist groups top U.S. threats. Accessed December 9, 2015, http://www.cnn.com/2013/03/12/us/threat-assessment/.Google Scholar
• Cavusoglu H, Mishra B, Raghunathan S (2004) The effect of internet security breach announcements on market value: Capital market reaction for breached firms and internet security developers. Internat. J. Electronic Commerce 9(1):70–104.Crossref, Google Scholar
• Cavusoglu H, Raghunathan S, Yue WT (2008) Decision-theoretic and game-theoretic approaches to IT security investment. J. Management Inform. Systems 25(2):281–304.Crossref, Google Scholar
• Chancellor of the Exchequer HM Treasury (2013) Spending review. Accessed March 20, 2014, https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/209036/spending-round-2013-complete.pdf.Google Scholar
• Cheng EK (2016) The burden of proof and the presentation of forensic results. Harvard Law Rev. 130(March):154–162.Google Scholar
• Choi JP, Fershtman C, Gandal N (2010) Network security: Vulnerabilities and disclosure policy. J. Indust. Econom. 58(4):868–894.Crossref, Google Scholar
• Dacey RF (2003) Critical infrastructure protection: Challenges in securing control systems. General Accounting Office. Accessed June 27, 2013, http://www.gao.gov/assets/120/110405.pdf.Google Scholar
• Denning DE (2000) Cyberterrorism: The logic bomb versus the truck bomb. Global Dialogue 2(4):29–37.Google Scholar
• Denning DE (2001) Activism, hactivism, and cyberterrorism: The internet as a tool for influencing foreign policy. Arquilla J, Ronfeldt D, eds. Networks and Netwars: The Future of Terror, Crime, and Militancy (RAND Publications, Santa Monica, CA), 239–288.Google Scholar
• Galloway B, Hancke GP (2013) Introduction to industrial control networks. Comm. Surveys and Tutorials, IEEE 15(2):860–880.Crossref, Google Scholar
• Gal-Or E, Ghose A (2005) The economic incentives for sharing security information. Inform. Systems Res. 16(2):186–208.Link, Google Scholar
• Garg A, Curtis J, Halper H (2003) Quantifying the financial impact of IT security breaches. Inform. Management Comput. Security 11(2):74–83.Crossref, Google Scholar
• Gordon LA, Loeb MP (2002) The economics of information security investment. ACM Trans. Inform. System Security 5(4):438–457.Crossref, Google Scholar
• Hausken K (2006) Returns to information security investment: The effect of alternative information security breach functions on optimal investment and sensitivity to vulnerability. Inform. Systems Frontiers 8(5):338–349.Crossref, Google Scholar
• Hausken K (2007) Information sharing among firms and cyber attacks. J. Accounting Public Policy 26(6):639–688.Crossref, Google Scholar
• Hausken K (2017) Security investment, hacking, and information sharing between firms and between hackers. Games 8(2):23.Crossref, Google Scholar
• Hausken K, Zhuang J (2013) The impact of disaster on the strategic interaction between company and government. Eur. J. Oper. Res. 225(2):363–376.Crossref, Google Scholar
• Hausken K, Zhuang J (2016a) How companies and governments react to disasters. Proc. Institution Mechanical Engineers, Part O: J. Risk Reliability 230(4):417–426.Crossref, Google Scholar
• Hausken K, Zhuang J (2016b) The strategic interaction between a company and the government surrounding disasters. Ann. Oper. Res. 237(1):27–40.Crossref, Google Scholar
• Hua J, Bapna S (2013) The economic impact of cyber terrorism. J. Strategic Inform. Systems 22(2):175–186.Crossref, Google Scholar
• Ingersoll G, Kelley MB (2013) There’s only one thing stopping enemy nations from smashing America’s power grid. Bus. Insider. Accessed February 14, 2015, http://www.businessinsider.com/nations-had-electric-wmd-for-years-2013-2.Google Scholar
• Levitin G, Hausken K (2009a) Intelligence and impact contests in systems with fake targets. Defense Security Anal. 25(2):157–173.Crossref, Google Scholar
• Levitin G, Hausken K (2009b) Intelligence and impact contests in systems with redundancy, false targets, and partial protection. Reliability Engrg. System Safety 94(12):1927–1941.Crossref, Google Scholar
• Miller B, Rowe D (2012) A survey of SCADA and critical infrastructure incidents. Proc. 1st Annual Conf. Res. Inform. Tech., 51–56.Google Scholar
• Nakashima E, Warrick J (2012) Stuxnet was work of U.S. and Israeli experts, officials say. Washington Post. Accessed February 14, 2015, http://www.washingtonpost.com/world/national-security/stuxnet-was-work-of-us-and-israeli-experts-officials-say/2012/06/01/gJQAlnEy6U_story.html.Google Scholar
• NCSS (2017) Binary diagnostic tests—Single sample. Accessed October 19, 2017, https://ncss-wpengine.netdna-ssl.com/wp-content/themes/ncss/pdf/Procedures/NCSS/Binary_Diagnostic_Tests-Single_Sample.pdf.Google Scholar
• Nicholson A, Webber S, Dyer S, Patel T, Janicke H (2012) SCADA security in the light of cyber-warfare. Comput. Security 31(4):418–436.Crossref, Google Scholar
• Office of the Director of National Intelligence (2013) DNI releases budget figure for 2013 national intelligence program. Accessed March 18, 2014, https://www.dni.gov/index.php/newsroom/press-releases/press-releases-2013/item/957-dni-releases-budget-figure-for-2013-national-intelligence-program.Google Scholar
• Patel SC, Bhatt GD, Graham GH (2009) Improving the cyber security of SCADA communication networks. Comm. ACM 52(7):139–142.Crossref, Google Scholar
• Png IPL, Wang QH (2009) Information security: Facilitating user precautions vis-à-vis enforcement against attackers. J. Management Inform. Systems 26(2):97–121.Crossref, Google Scholar
• Pollitt MM (1998) Cyberterrorism—Fact or fancy? Comput. Fraud Security 1998(2):8–10.Crossref, Google Scholar
• Rollins J, Wilson C (2007) Terrorist capabilities for cyber-attack: Overview and policy issues. Linden EV, ed. Focus on Terrorism, Vol. 9 (Nova Science Publishers, Hauppauge, New York), 43–63.Google Scholar
• Scully T (2011) The cyber threat, trophy information and the fortress mentality. J. Bus. Continuity Emergency Planning 5(3):195–207.Google Scholar
• Shaw WT (2013) SCADA system vulnerabilities to cyber attack. Accessed August 23, 2013, http://www.electricenergyonline.com/show_article.php?mag=&article=181.Google Scholar
• U.S. Department of Defense (2012) Remarks by Secretary Leon E Panetta on cybersecurity to the business executives for national security, New York City. Accessed December 9, 2015, http://archive.defense.gov/transcripts/transcript.aspx?transcriptid=5136.Google Scholar
• Wheatcroft P (2010) Cyber terrorism is a real threat now. Wall Street Journal. Accessed December 9, 2015, http://www.wsj.com/articles/SB10001424052748704103904575336703726142746.Google Scholar
• Zhu B, Joseph A, Sastry S (2011) A taxonomy of cyber attacks on SCADA systems. Xia F, Chen Z, Pan G, Yang LT, Ma J, eds. Internet Things (iThings/CPSCom), 2011 Internat. Conf. 4th Internat. Conf. Cyber, Phys. Soc. Comput., October 19–22, Dalian, China, 380–388.Google Scholar
• Zhuang J, Bier VM (2007) Balancing terrorism and natural disasters-defensive strategy with endogenous attacker effort. Oper. Res. 55(5):976–991.Link, Google Scholar