Publications

Information Assurance is the art and science of securing computer systems and networks against efforts by third parties to disable, intrude, or otherwise impede operations. It is the focus of most “cybersecurity” professionals in the technical community. The principal goals are to maintain an information system’s Confidentiality (the secrecy of information as it is used and stored), Integrity, reliability of data and equipment, and Availability, that a computer system is ready and able to function as needed. Information Assurance includes writing secure software, deploying it safely, and managing it to minimize the risk of compromise.

Cybersecurity is an often abused and much misused term that was once intended to describe and now serves better to confuse. While originally intended to cover security related issues associated with “cyberspace,” a phrase coined by author William Gibson in the short story “Burning Chrome,” it has become the byword for a staggeringly diverse array of topics. While this is frustrating, the term is popular as shorthand, so we offer this paper to identify and explain four clusters of related topics under the larger umbrella of “cybersecurity.” Each is a distinct issue area with unique technical and policy challenges, while retaining some association to the others...

On the centennial of the start of World War I—a war that began largely as a result of crisis miscalculations and escalations—we are entering a new era with important implications for deterrence, escalation control, and coalition management. Today, like at the time of World War I, we confront a large number of actors who have the potential to misread cues and red lines while relying on treaty relationships if they miscalculate. Then, as now, military technologies were widely diffused. Prevailing assumptions about how an adversary (or potential adversary) would react in a crisis or confrontation were based on imperfect intelligence and inadequate understanding of red lines...