Digital Conflict

By Kevin Coleman

Blog archive

12 courses for a cyber warfare curriculum

Innovation and creativity require out-of-box thinking. That is what catches cyber defenders off guard and often makes the difference between a successful attack and failure. Given that observation, I was recently asked to think about what it would take for the Defense Department to fully integrate that characteristic into its cyber warriors.

First of all, out-of-box thinking runs counter to the traditional military mind-set that is created through current educational programs. Changing that mind-set will take time, and the only thing that can increase the rate of change is demonstrated success through the use of those characteristics.

Second, most cyber warfare training is highly focused on the technical aspects of cyberattacks, and that is a huge shortcoming. A broad background of understanding is needed that includes common operational user methods.

Third, we tend to view a cyberattack as an event. It is not. It is a multithreaded process that has internal recursive loops that incorporate operational feedback.

Using the three constructs above as a foundation, here are 12 programs that should be included in the core curriculum for advanced cyber warfare training.

1. Developing cyberattack strategy.
2. Identifying traditional and nontraditional points of attack.
3. Understanding the 43 current cyberattack vectors.
4. Working the cyberattack process.
5. Understanding tools and techniques supporting the attack process.
6. Using creativity and innovation in cyberattack design.
7. Understanding modular design of cyber weapons.
8. Knowing sources of cyberattack code for reuse and cloaking.
9. Target profiling and vulnerability announcement monitoring.
10. Social profiling of targets in support of social engineering.
11. Designing disinformation and misdirection in cyberattack code.
12. Designing counter cyber forensics in cyberattack code.

Those 12 courses would build the skills necessary for success in the offensive, defensive and intelligence collection areas in the military and intelligence communities and in many sectors of the defense industry.

However, education doesn’t stop there. The dynamics of the extended computer industry — including alternative devices — coupled with the rate of change we are seeing in cyberattack methods and techniques combine to make continuous education a necessity.

Posted by Kevin Coleman on Feb 08, 2011 at 12:12 PM


Featured

  • IT Modernization
    Eisenhower Executive Office Building (Image: Wikimedia Commons)

    OMB's user guide to the MGT Act

    The Office of Management and Budget is working on a rules-of-the-road document to cover how agencies can seek and use funds under the MGT Act.

  • global network (Pushish Images/Shutterstock.com)

    As others see us -- a few surprises

    A recent dinner with civil servants from Asia delivered some interesting insights, Steve Kelman writes.

  • FCW Perspectives
    cloud (Singkham/Shutterstock.com)

    A smarter approach to cloud

    Advances in cloud technology are shifting the focus toward choosing the right tool for the job and crafting solutions that truly modernize systems.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.