The Active Response Continuum¶

Articles/papers/audio related to the Active Response Continuum¶

https://warontherocks.com/2020/02/kicking-off-a-new-approach-to-cyber-ethics-at-the-department-of-defense/ Kicking Off a New Approach to Cyber Ethics at the Department of Defense, Stuart Coudill, Warontherocks.com, February 12, 2020

https://www.npr.org/2019/04/12/711779130/as-china-hacked-u-s-businesses-turned-a-blind-eye, As China Hacked, U.S. Businesses Turned A Blind Eye, All Things Considered, April 12, 2019

https://medium.com/@dave-dittrich/thoughts-on-the-active-cyber-defense-certainty-act-2-0-d0b456a56d8b, Thoughts on the Active Cyber Defense Certainty Act 2.0, by David Dittrich

https://staff.washington.edu/dittrich/arc/book/definitions.html, Defining the Terms of the Debate [about the Active Response Continuum], by David Dittrich

http://www.steptoecyberblog.com/2012/11/02/the-hackback-debate/, The Hackback Debate, by Stewart Baker, Steptoe and Johnson, LLP blog

http://www.fed-soc.org/events/detail/cybersecurity-and-hacking-back, Cybersecurity and “Hacking Back” Criminal Law and Procedure Practice Group Teleforum, conversation with Stewart A. Baker and Orin S. Kerr, The Federalist Society for Law and Public Policy Studies, December 11, 2012

http://www.rationalsurvivability.com/blog/2012/07/six-degrees-of-desperation/, Six Degress Of Desperation: When Defense Becomes Offense…,” Christopher Hoff (beaker), July 15th, 2012

http://www.caida.org/publications/papers/2010/framework_ethical_research/, A Framework for Understanding and Applying Ethical Principles in Network and Security Research, by Erin Kenneally, Michael Bailey, and Douglas Maughan, Proceedings of the Workshop on Ethics in Computer Security Research (WECSR) 2010, January, 2010

http://blip.tv/file/865018, Immformation Operations, Sinan Eren, ImmunitySec, SOURCE Boston 2008

http://news.bbc.co.uk/2/hi/technology/7719281.stm, Study shows how spammers cash in, BBC News, November 10, 2008 [academic researchers control 75,869 hijacked machines to send out 496 million of their own spam messages, directing recipients to their own fake web site to see how many would attempt a purchase]

http://www.eweek.com/c/a/Security/Chertoff-Describes-Manhattan-Project-for-Cyber-Defenses/, Chertoff Describes ‘Manhattan Project’ for Cyber-defenses, by Ryan Naraine, eWEEK.com, April 8, 2008

http://news.com/Wanted+Cyberbandits%2C+dead+or+alive/2100-1028_3-6201955.html, Wanted: Cyberbandits, dead or alive: British Parliament members compare the Net to the Wild West and say the online industry and governments must protect people., Reuters (via CNet News.com), August 10, 2007

http://www.esquire.com/features/predator, Tonight on Dateline This Man Will Die, Esquire magazine, August 2, 2007 [An argument for carefully defining how the private sector and law enforcement work together.]

http://www.govexec.com/dailyfed/0707/072707bb1.htm, Defense Net Attacks Should Be Countered With ‘Disproportionate Response’, “What’s Brewin?” column, by Bob Brewin, Govexec.com, July 27, 2007 [Of course its not clear exactly how the “highly undesirable consequences” will be directed at the right “attacker’s systems” and not 100,000 mom’s and pop’s PCs on broadband connections.]

http://www.silicon.com/publicsector/0,3800010403,39167883,00.htm, UK needs cyber-crime reporting body, by Gemma Simpson, Silicon.com, July 19, 2007

http://www.cio.com/article/118500/CIOs_Look_Beyond_Cops_for_Help_Fighting_Cybercrime, CIOs Look Beyond Cops for Help Fighting Cybercrime, by Christopher Koch, CIO magazine, June 11, 2007

http://www.ciao.gov/resource/pccip/lf12.pdf, Approaches to Cyber Intrusion Response, A “Legal Foundations” Study – Report 12 of 12 (.pdf)

http://www.ciao.gov/resource/pccip/lf07.pdf, Adequacy of Criminal Law and Procedure (Cyber), A “Legal Foundations” Study – Report 7 of 12 (.pdf)

http://www.ciao.gov/resource/pccip/DeterrenceCyberDimension.pdf, Toward Deterrence in the Cyber Dimension (.pdf)

http://jolt.law.harvard.edu/articles/pdf/v11/11HarvJLTech699.pdf, Private Intrusion Response, by Stevan D. Mitchell and Elizabeth A. Banker, 11 Harvard Journal of Law & Technology 699 (Spring 1998) (.pdf) [Here is a brief of the article]

http://www.iwar.org.uk/cip/resources/congress/000726mb.htm, Tesimony of Mario Balakgie, Chief Information Assurance Officer, DIA, before the Subcomittee on Government Management, Information, and Technology, July 26, 2000

http://www.securityfocus.com/infocus/1516, Appropriate Response: More Questions Than Answers, by Chris Loomis, SecurityFocus INFOCUS

http://www.siliconvalley.com/mld/siliconvalley/3795332.htm, Computers under attack can hack back, expert says, Mercury News, Auguest 3, 2002

http://www.cnn.com/2000/TECH/computing/06/01/hack.back.idg/, Can you hack back?, by Deborah Radcliff, NetworkWorld Fusion, June 1, 2000

http://www.computerworld.com/governmenttopics/government/legalissues/story/0,10801,53869,00.html, Should You Strike Back?, by Deborah Radcliff, Computerworld, November 13, 2000

http://www.sosresearch.org/publications/ISTAS02hackback.PDF, Internet Hack Back: Counter Attacks as Self-Defense or Vigilantism?, by Vikas Jayawal, William Yurcik, David Doss, Illinois State University

http://www.sosresearch.org/publications/ethics00.PDF, Information Warfare Survivability:Is the Best Defense a Good Offense?, by William Yurcik, Illinois State University

http://arxiv.org/pdf/cs/0109078, Internet Attacks: A Policy Framework for Rules of Engagement, by William Yurcik and David Doss, Illinois State University

http://www.e-secure-db.us/dscgi/ds.py/View/Collection-287, E-SECURE-DB: Attack Response Center: Information on Counter attack and monitoring

http://www.globalsecurity.org/space/library/policy/army/fm/100-12/appa.htm, FM 100-12 Appendix A: Intelligence Preparation of the Battlespace

(See also the Cyberwarfare section)

Attacks on Google accounts and servers¶

http://www.washingtonpost.com/wp-dyn/content/article/2010/02/03/AR2010020304057_pf.html, Google to enlist NSA to help it ward off cyberattacks, by Ellen Nakashima, The Washington Post, February 4, 2010

http://www.wired.com/threatlevel/2010/02/apt-hacks/, Report Details Hacks Targeting Google, Others, by Kim Zetter, Wired.com, February 3, 2010

http://googleblog.blogspot.com/2010/01/new-approach-to-china.html, A New Approach to China, by David Drummond, SVP, Corporate Development and Chief Legal Officer, Google, January 12, 2010

http://www.wired.com/threatlevel/2010/01/google-censorship-china, Google to Stop Censoring Search Results in China After Hack Attack, by Kim Zetter, Wired.com, January 12, 2010

http://www.nytimes.com/2010/01/18/technology/internet/18defend.html, Companies Fight Endless War Against Computer Attacks, by Steve Lohr, New York Times, January 18, 2010

http://www.etaiwannews.com/etn/news_content.php?id=1172469&lang=eng_news&cate_img=35.jpg&cate_rss=news_Business, Google complaint highlights China-based hacking, by Joe McDonald, Associated Press, March 4, 2010

http://news.com/U.S.+Air+Force+to+create+cyberspace+command/2110-7348_3-6131893.html, U.S. Air Force to create cyberspace command: Major command would be established to protect both civilian and military online networks, by Reuters, November 2, 2006

http://www.gcn.com/print/25_25/41696-1.html, Sharing data is crucial to cyberdefense, by Patience Wait, GCN.com, August 21, 2006

http://infragardconferences.com/thegardian/3.html, Shared Threats require a Shared Response, by Robert Schmidt, The Gardian (InfraGard National Members Alliance newsletter)

http://www.onthemedia.org/transcripts/transcripts_022406_longestcon.html, The Longest Con, On The Media, February 24, 2006 [Story about “scam baiters” who go after Nigerian 419 scammers, either to waste their time or actually track them down physically and/or shut down their computers]

http://www.cl.cam.ac.uk/TechReports/UCAM-CL-TR-637.html, The topology of covert conflict, Shishir Nagaraja and Ross Anderson, July 2005

http://blogs.securiteam.com/index.php/archives/144, Hack the hackers (muhahaha), by Gadi Evron, SecuriTeam Blog posting, December 18, 2005

http://www.oii.ox.ac.uk/research/cybersafety/extensions/pdfs/papers/jay_kesan.pdf, Hacking Back: Optimal Use Of Self-Defense In Cyberspace, by Jay Kesan, Safety & paper presented at the “Security in a Networked World: Balancing Cyber-Right & Responsibilities” conference, September 9, 2005

http://news.zdnet.com/2100-1009_22-5833397.html, From Russia with spam, by Martin Brampton, Silicon.com (Published on ZDNet News), August 15, 2005

http://www.computerweekly.com/articles/article.asp?liArticleID=137817”Police forced to turn away e-crime victims, by Bill Goodwin, Computerworld, April 12, 2005

http://news.zdnet.com/2100-1009_22-5571061.html, Vigilantes launch attack on scam sites, by Dan Ilett, ZDNet (UK), February 10, 2005

http://sf.indymedia.org/news/2004/12/1707531.php, Oz police given computer spy powers, December 14, 2004

http://www.news.com.au/common/story_page/0,4057,11584698%255E15306,00.html, Cybercrime remains a hard nut to crack, news.com.au, December 7, 2004

http://www.cw360.com/articles/article.asp?liArticleID=122475&liFlavourID=1#, Police to sign up IT special constables in war on hackers, by Bill Goodwin, June 10, 2003

http://spamkings.oreilly.com/archives/2006/01/under_attack_spammer_begs_for_1.html, Under attack, spammer begs for mercy, Spam Kings Blog, January 17, 2006

http://www.adn.com/front/story/5572779p-5504444c.html, Palin explains her actions in Ruedrich case, by Richard Mauer, Anchorage Daily News, September 19, 2004

http://www.lawfareblog.com/2013/10/cyber-conflict-bibliography/, Cyber Conflict Bibliography, by Lori Fossum, The George Washington University Law School, October, 2013

http://www.smh.com.au/news/Technology/Estonia-urges-firm-EU-NATO-response-to-new-form-of-warfarecyberattacks/2007/05/16/1178995207414.html, Estonia urges firm EU, NATO response to new form of warfare: cyber-attacks, Sydney Morning Herald, May 16, 2007

http://www.theregister.co.uk/2007/02/27/german_state_hackers/, German cops and spooks prep own spyware: Federal Trojan for ‘online searches’, by Matthias Becker, TheRegister.co.uk, February 27, 2007

http://news.bbc.co.uk/1/hi/world/asia-pacific/3259601.stm, Singapore tackles ‘cyber terror’, BBC News UK, November 11, 2003

http://www.techworld.com/security/news/index.cfm?NewsID=2691, Hacker evidence admissible in court? It could soon be in New Zealand, by Stephen Bell, Computerworld New Zealand, November 26, 2004

http://www.computerworld.com/securitytopics/security/story/0,10801,87554,00.html, New Weapons of Information Warfare, opinion by Paul Strassman, Computerworld, December 1, 2003

http://www.wired.com/news/business/0,1367,60747,00.html, Cloaking Device Made for Spammers, by Brian McWilliams, October 9, 2003

http://www.mit-kmi.com/archive_article.cfm?DocID=51, Computer Offensive: While the new cyberspace security strategy focuses on defending crucial information networks, some U.S. officials are studying the possibility of launching cyberattacks against other countries, by Mickey McCarter, Military Information Technology, November 15, 2002

http://techrepublic.com/5100-6329-5055990.html, Hacking the hacker: How a consultant shut down a malicious user on a client’s FTP server, by John Verry, TechRepublic, August 19, 2003

https://staff.washington.edu/dittrich/arc/blaster-activedefense.txt, Email from oudot@rstack.org to honeypots to honeypots mailing, detailing an active defense against the Blaster worm using Niels Provos’ honeyd, August 19, 2003

http://seattletimes.nwsource.com/html/businesstechnology/2001552302_newworm19.htm, Well-intended computer worm slows Asian networks, by Kim Peterson, Seattle Times, August 19, 2003

http://www.msnbc.com/news/952935.asp?0cv=CB10, Good version of worm circulates: More than 500,000 computers still infected by MSBlaster, by MSNBC staff and wire reports, August 18, 2003

http://www.eweek.com/article2/0,4149,1357494,00.asp, Romania Emerges As Nexus of Cybercrime, by William J. Kole, Associated Press Writer, October 19, 2003 (hack, hack back, and get hacked-back-hacked?)

http://msnbc.msn.com/Default.aspx?id=3706599&p1=0, Hacking for Dollars, by Adam Piore, Newsweek International (via MSNBC), December 22, 2003

http://www.secureworks.com/en/html/printer/internet/techResourceCenter/hackback-or-high-road.html, Hackback or the High Road? The question goes beyond Nimda, by Markus DeShon, September 20, 2002

http://www.securityfocus.com/columnists/98, The Right to Defend: Is it criminal to reach out and hack an infected machine that’s attacking your network?, by Tim Mullen, SecurityFocus.com, July 29 2002

Anti-Spyware laws¶

http://www.fcw.com/article97661-02-13-07-Web, Sandia backhacker wins $4.3 million judgment against Sandia Labs, By Bob Brewin, FCW.com, February 13, 2007

http://www.okgazette.com/news/templates/news.asp?articleid=597&zoneid=3, Spyware act gutted: The would-be “Computer Spyware Protection Act” was deleted in a legislative committee at the end of this year’s regular session. The Senate author of the bill said the companies originally behind writing it dropped their support., by Ben Fenwick, Oklahoma Gazette, June 07, 2006

http://www.benedelman.org/spyware/, “Spyware”: Research, Testing, Legislation, and Suits, by Benjamin Edelman (See specifically his list of State and Federal Spyware Legislation)

Lycos Europe “Make Love Not Spam”¶

http://p2pnet.net/story/3150, p2pnet.net News:- Lycos Europe is now has a screen saver with a difference.

http://www.theregister.co.uk/2004/12/01/lycos_spam_attack/, Hackers nobble Lycos anti-spam plan, by John Oates, The Register, December 1, 2004

http://news.zdnet.com/2100-1009_22-5473005.html, Lycos Europe denies attack on zombie army, by Dan Ilett, ZDNet News (UK), December 1, 2004

http://it.slashdot.org/it/04/12/01/0250244.shtml?tid=111&tid=218, Lycos Anti-Spam Site Compromised [Updated], Slashdot discussion, posted December 1, 2004

http://news.zdnet.com/2100-1009_22-5474963.html, Antispam screensaver downs two sites in China, by Dan Ilett, ZDNet News (UK), December 2, 2004

http://news.zdnet.com/2100-1009_22-5476451.html, Lycos Europe’s antispam tool no longer available, by Graeme Wearden, ZDNet News (UK), December 3, 2004

http://www.kuro5hin.org/story/2004/12/2/8540/79696, Lycos Fights Spam With DDOS, posted by eejit, Kuro5hin.org, December 3, 2004

http://news.zdnet.com/2100-1009_22-5479582.html, Antispam campaign bites the dust, by Dan Ilett and Graeme Wearden, ZDNet News (UK), December 6, 2004

http://ice.citizenlab.org/archives/000067.html, Lycos, Spammers & Electronic Civil Disobedience, Internet Censorship Explorer

Other computer security conferences including talks covering offensive tactics (but not as a major focus)¶

http://en.wikipedia.org/wiki/Computer_security_conference

http://www.blackhat.com/, the Black Hat Briefings

http://cansecwest.com/, CanSecWest

http://www.shmoocon.org/, ShmooCon

http://toorcon.org/, toorcon

http://hackitoergosum.org/, Hackito Ergo Sum

Public/Private Partnerships to Improve Cyber Response¶

http://www.techworld.com/security/news/index.cfm?newsID=112534, APWG suggests e-crime reporting system, by Jeremy Kirk, IDG News Service, March 11, 2009

http://news.com/Police+maintain+uneasy+relations+with+cybervigilantes/2100-7348_3-6150817.html, Police maintain uneasy relations with cybervigilantes: London-area police are working with certain cybervigilante groups as sources of information in the fight against online fraud., by Tom Espiner, special to CNET News.com, January 17, 2007

http://www.dhs.gov/xlibrary/assets/niac/niac_icwgreport_july06.pdf, Public-Private Sector Intelligence Coordination, National Infrastructure Advisory Council, December, 2006

http://jolt.law.harvard.edu/articles/pdf/v11/11HarvJLTech699.pdf, Private Intrusion Response, by Stevan D. Mitchell and Elizabeth A. Banker, 11 Harvard Journal of Law & Technology 699 (Spring 1998)

http://www.ciao.gov/resource/pccip/lf07.pdf, Adequacy of Criminal Law and Procedure (Cyber), A “Legal Foundations” Study – Report 7 of 12

http://www.ciao.gov/resource/pccip/DeterrenceCyberDimension.pdf, Toward Deterrence in the Cyber Dimension

http://www.cistp.gatech.edu/catalog/publicprivate.php, Private-Public & Non-Governmental Organizations, Cyber Security Organization Catalog, Georgia Tech

History of Public and Private Police Forces¶

http://web.mit.edu/gtmarx/www/private.html, The Interweaving Of Public And Private Police Undercover Work (In C. Shearing and P. Stenning, “Private Policing,” Sage Publications, 1987)

http://faculty.ncwc.edu/toconnor/205/205lect04.htm, A Brief Guide to Police History

http://www.oldbaileyonline.org/history/crime/policing.html, Policing in London before the Bobbies

http://www.pbs.org/wgbh/amex/james/filmmore/pt.html, Transcript of “The American Experience: Jesse James” (documentary about Jesse James, including Alan Pinkerton’s pursuit of the James Gang) [Timeline]

Privateering (“Letters of Marque and Reprisal”)¶

http://college.hmco.com/history/readerscomp/mil/html/ml_040900_piracyprivat.htm, Piracy and Privateering

http://www.jmu.edu/madison/center/main_pages/madison_archives/life/war1812/privateer/marque.htm, Letter of Marque carried by Captain Millin of the American privateer Prince of Neufchâtel during the War of 1812

Attribution¶

http://handle.dtic.mil/100.2/ADA468859, Techniques for Cyber Attack Attribution, by David A. Wheeler, Institute for Defense Analyses, October 2003

http://www.nwc.navy.mil/press/review/1998/spring/art1-sp8.htm, Information Operations, Deterrence, and the Use of Force, by Roger W. Barnett, Naval War College, 1998

http://cryptome.org/traceback.htm, ARDA BAA-05-04-IFKA on Network Attack Traceback

http://www.cs3-inc.com/arda-survey.pdf, Survey/Analysis of Levels I, II, and III: Attack Attribution Techniques, Don Cohen & K. Narayanaswamy, April 27, 2004

http://www.fbi.gov/ucr/cius_04/offenses_cleared/index.html, Statistics on crime clearance

http://www.cybercrime.gov/usamay2001_2.htm, Tracking a Computer Hacker, by Daniel A. Morris, Assistant United States Attorney, Computer and Telecommunications Coordinator, District of Nebraska, May 2001

http://www.ciao.gov/resource/pccip/DeterrenceCyberDimension.pdf, Toward Deterrence in the Cyber Dimension (.pdf)

http://www.phoenixnewtimes.com/extra/cyberstalk.html, Caught in the Net: An online posse tracks down an Internet stalker, by Jack Mingo

https://staff.washington.edu/dittrich/misc/active-forensics.txt, Hack and Counter-Hack – Active Forensics: Tracking that Intruder., by Dragos Ruiu, January 30, 2001

http://arqos.csc.ncsu.edu/papers/2001-09-sleepytracing-jiw.pdf, Tracing Based Active Intrusion Response, by Xinyuan Wang, Douglas S. Reeves, S. Felix Wu, 2001

http://www.cert.org/research/isw/isw2000/papers/13.pdf, Intelligence Preparation of the Information Battlespace – A Cyber Playbook for Information Survivability, by James K. Williams, Roderick A. Moore, and Charles McCain

http://www.nbc.gov/pip.cfm, BAA 03-03-FH (Information Assurance For the US Intelligence Community Broad Agency Announcement aimed at attack attribution. Defines four levels of attribution that are useful in framing the topic.)

Law¶

http://www.usdoj.gov/criminal/cybercrime/fedcode.htm, US Federal Code related to Cybercrime, Department of Justice Computer Crime and Intellectual Property Section

http://www.ncsl.org/programs/lis/CIP/cyberter-legis02.htm, 2001-02 Cyberterrorism/Computer Crime Legislation

Council of Europe, Convention on Cybercrime (ETS No: 185) http://conventions.coe.int/Treaty/EN/WhatYouWant.asp?NT=185

http://europa.eu.int/information_society/eeurope/2005/all_about/security/handbook/text_en.htm, Handbook of Legislative Procedures of Computer and Network Misuse in EU Countries (CSIRT Project Survey)

http://www.findlaw.com/01topics/10cyberspace/computercrimes/gov_laws.html, FindLaw > Legal Subjects > Cyberspace Law > Computer Crime > Primary Materials - Laws and Government Documents

http://www.mosstingrett.no/info/legal.html, THE LEGAL FRAMEWORK - UNAUTHORIZED ACCESS TO COMPUTER SYSTEMS (PENAL LEGISLATION IN 44 COUNTRIES), by Stein Schjolberg, Chief Judge, Moss District Court, Norway, April 7, 2003

http://milcom.jag.af.mil/ch15/info.htm, LEGAL ASPECTS OF INFORMATION OPERATIONS

http://papers.ssrn.com/sol3/papers.cfm?abstract_id=399740#PaperDownload, Cybercrime’s Scope: Interpreting ‘Access’ and ‘Authorization’ in Computer Misuse Statutes, by Orin S. Kerr, New York University Law Review, Vol. 78, November 2003

http://www.safersite.com/Whitepapers/LiabilityofPests.asp, The Legal Risks of Computer Pests and Hacker Tools, by Benjamin Wright, J.D., September 25, 2001

http://www.asianlaws.org/cyberlaw/library/cc/ptscanning.htm, Port Scanning and its Legal Implications, by Adv. Abhinav Bhatt, Asian School of Cyber Laws

http://www.proxypot.org/yui.pdf, Criminal complaint in case of U.S. v. John Lin, Shao Yui, Elaine Espinosa, and Daniel Mankani, U.S. District Court, Eastern District of Michigan (spam honeypots used to collect evidence in CAN-SPAM Act case)

http://www.edp24.co.uk/Content/News/Index/TonyMartin.asp, Tony Martin: convicted killer or defender of householders’ rights?, EDP24

http://www.phillipsnizer.com/library/cases/lib_case37.cfm, Scott Moulton and Network Installation Computer Services, Inc. v. VC3, Civ. Act. No. 1:00-CV-434-TWT (N.D. Ga. November 6, 2000)

http://www.securityfocus.com/news/126, Port scans legal, judge says: Federal court finds that scanning a network doesn’t cause damage, or threaten public health and safety, by Kevin Poulsen, SecurityFocus Dec 18 2000

http://grove.ufl.edu/~techlaw/vol6/Preston.html, Finding Fences in Cyberspace: Privacy and Open Access on the Internet by Ethan Preston

International response to piracy on the high seas¶

The United Nations http://www.un.org/Depts/los/convention_agreements/convention_overview_convention.htm, Convention on the Law of the Sea

United Nations Conference on Trade and Development (UNCTAD) conference on http://www.unctad.org/Templates/Search.asp?intItemID=2068&lang=1&frmSearchStr=arrest+of+ships&frmCategory=all&section=whole#doc, Arrest of Ships

Statutes re: use of force in defense of property (c/o Ivan Orton)¶

http://www.guamattorneygeneral.com/gca/9gc007.pdf, 9 GCA: Crimes and Corrections, Chapter 7 (See Section 7.90: “Force in Defense of Property: Defined and Allowed”)

http://www.aals.org/profdev/torts/barnes.pdf, Judges and Legis latures in 21st Century Torts: Integrating Cases and Statutes, by David W. [Jake] Barnes, Seton Hall University School of Law (See pp. 2-4)

http://www.law.sc.edu/opinions/25459.htm, State of South Carolina v. Jeffrey M. Thompson, South Carolina Supreme Court opinion 25459 (Use of force against fur bearing animals)

http://timesargus.nybor.com/Local/Story/69133.html, Bear Shootings under fire, by Stefan Hard, Times Argus, July 25, 2003 (Laws re: use of force against moose more specific than laws re: use of force against bears)

Reading list for Active Defense Workshop¶

http://www.cnn.com/2000/TECH/computing/06/01/hack.back.idg/, Can you hack back?, by Deborah Radcliff, NetworkWorld Fusion, June 1, 2000

http://www.sosresearch.org/publications/ISTAS02hackback.PDF, Internet Hack Back: Counter Attacks as Self-Defense or Vigilantism?, by Vikas Jayawal, William Yurcik, David Doss, Illinois State University

http://jolt.law.harvard.edu/articles/pdf/v11/11HarvJLTech699.pdf, Private Intrusion Response, by Stevan D. Mitchell and Elizabeth A. Banker, 11 Harvard Journal of Law & Technology 699 (Spring 1998) (.pdf)

http://www.ciao.gov/resource/pccip/lf07.pdf, Adequacy of Criminal Law and Procedure (Cyber), A “Legal Foundations” Study – Report 7 of 12 (.pdf)

http://www.ciao.gov/resource/pccip/DeterrenceCyberDimension.pdf, Toward Deterrence in the Cyber Dimension (.pdf)

http://64.225.202.40/mediadefender/press%20about%20MD/nytimes_5_8_03_pg1.htm, Software Bullet Sought to Kill Music Piracy, by Andrew Ross Sorkin, The New York Times, May 4, 2003

https://staff.washington.edu/dittrich/arc/blaster-activedefense.txt, Email from outdot@rstack.org to honeypots to honeypots mailing, detailing an active defense against the Blaster worm using Neils Provost’s honeyed, August 19, 2003

http://seattletimes.nwsource.com/html/businesstechnology/2001552302_newworm19.htm, Well-intended computer worm slows Asian networks, by Kim Peterson, Seattle Times, August 19, 2003

http://news.com/2100-1028-5108854.html, Bush pushes for cybercrime treaty, by Declan McCullagh, CNET News.com, November 18, 2003

The Active Response Continuum¶

Articles/papers/audio related to the Active Response Continuum¶

Attacks on Google accounts and servers¶

Anti-Spyware laws¶

Lycos Europe “Make Love Not Spam”¶

Music/Video related stories¶

Conferences related to the Active Response Continuum (specifically “offensive computing”)¶

Other computer security conferences including talks covering offensive tactics (but not as a major focus)¶

Public/Private Partnerships to Improve Cyber Response¶

History of Public and Private Police Forces¶

Privateering (“Letters of Marque and Reprisal”)¶

Attribution¶

Law¶

International response to piracy on the high seas¶

Statutes re: use of force in defense of property (c/o Ivan Orton)¶

Books related to “Active Defense”¶

Tools and software systems related to “Active Defense”¶

Security Event Management (SEM)/Security Incident Management (SIM)/Security Event Information Management (SEIM)/Security Information and Event Manageer (SIEM)¶

Commercial products¶

Open source products¶

Bulding on SIM/SEM/SEIM/SIEM/(whatever…)¶

Reading list for Active Defense Workshop¶

Table of Contents

Search