Words Mean Things: The Case for Information System Attack and Control System Attack

摘要

War fighters in the U.S. Department of Defense (DoD) need a more precise, focused lexicon and a common understanding of cyberspace-related terminology; the term 'Computer Network Attack' (CNA) is too broad. DoD should incorporate two new terms into the DoD information operations (IO) lexicon as CNA subcategories: Information Systems Attack (ISA) and Control Systems Attack (CSA). Use of these two new terms will help the joint force commander (JFC) and others in DoD more precisely define effects and determine command relationships more clearly than the use of the current overarching term: CNA. This paper begins with a discussion and analysis of current CNA-related definitions and builds the case for incorporating the two new terms into the IO lexicon. It also discusses a new term, 'cyberspace,' and suggests that a more restrictive definition of the term (issued by the Deputy Secretary of Defense (DepSecDef)) is needed. The paper also gives a brief overview of CNA effects as outlined by Lt Col Russell Mathers in his JMO thesis, 'Cyberspace Coercion in Phase 0/1: How to Deter Armed Conflict,' expands on his thesis, and builds the case that operations in cyberspace are no different than operations conducted in any other domain. The final section of the paper discusses command relationships for ISA and CSA. In conducting ISA, the United States Strategic Command (USSTRATCOM) should provide support via TACON forces to another geographic Combatant Commander (GCC) or subordinate JFC, and when conducting CSA the geographic JFC should exercise TACON over CSA forces.