Cyber Warfare: An Analysis of the Means and Motivations of Selected Nation States
This study, written in response to a grant provided by the Department of Homeland Security, assesses potential foreign computer threats to information technology networks in the United States. In focusing on overseas cyber threat capabilities, one of the thrusts of this study is to dispel popular myths and anecdotal understanding about the nature and degree of the cyber threat—taking into account public and private digital network vulnerabilities. Our goal is to examine the open source evidence to develop a rigorous and dispassionate assessment of both cyber “offense” by selected nation states and the likely impact of an attack through the wires on the United States. [Foreword and Documentation]


Crisis Information Management Software (CIMS) Interoperability
The Crisis Information Management Software Feature Comparison Report, published by the National Institute of Justice in 2002, evaluated commercial software available to emergency management agencies for use in crisis incident response, planning and mitigation. A follow-up study to The Crisis Information Management Software (CIMS) Feature Comparison Report is currently underway through the Office of Domestic Preparedness. [PDF]


Law Enforcement Tools and Technologies for Investigating Cyber Attacks: A National Research and Development Agenda
Grounded in the investigative process, from discovery of a digital event through investigation, the Law Enforcement Tools and Technologies for Investigating Cyber Attacks: A National Research and Development Agenda documents the continuing, critical, unmet needs of the law enforcement community for solutions to assist in the investigation and prosecution of cyber attacks. Conducted over a two year period by the Institute for Security Technology Studies, this report presents the prioritized needs of the cyber attack investigative community that can form the basis for targeted research and development. This will help to make best use of the inevitably limited resources available in this specialized field where market forces alone are unlikely to provide sufficient incentives to commercial developers. [PDF]


Law Enforcement Tools and Technologies for Investigating Cyber Attacks: Gap Analysis Report
Moving toward the creation of a national research and development agenda for cyber attack investigative technologies, ISTS researchers began a project to identify the available solutions that may address the requirements revealed in the National Needs Assessment. [More]


Survey and Analysis of Security Issues in the U.S. Banking and Finance Sector - September 2003
Critical National Infrastructures Series - The U.S. banking and finance sector is a vital component of the national critical infrastructure, underpinning all economic transactions. Despite ongoing security efforts, the sector remains vulnerable to a variety of events, including large-scale attacks, such as witnessed on September 11, 2001. [PDF]


On the Road to Transportation Security - February 2003
Critical National Infrastructures Series - Transport vehicles and facilities have been frequent targets of terrorist attacks, hijackings, and sabotage around the world. The transportation sector is often not only the target of terrorist attacks, but can serve as a terrorist weapon or delivery mechanism. [PDF]


Cyber Security of the Electric Power Industry - December 2002
Critical National Infrastructures Series - The electric power industry is one of the most crucial national infrastructure sectors. It encompasses sensitive potential targets and underlies the smooth operation of all other infrastructures. Despite widespread backup and continuity of operations resources and procedures, if the electric power sector were to suffer sustained outages, communications could be seriously disrupted, trains could stop running, planes could be grounded, and the economy could grind to a halt. Unlike other energy sources, electricity cannot be stockpiled, so power disruptions would have almost immediate effects. [PDF]


Information and Telecommunications Sector Vulnerabilities and Threats - September 2002