arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv cs/0109078cs.CY
收藏

互联网攻击:交战规则的政策框架

Internet Attacks: A Policy Framework for Rules of Engagement

William Yurcik, David Doss

摘要:

信息技术正在重新定义国家安全以及国家和非国家行为者使用武力的方式。鉴于最近的恐怖主义袭击,在因特网上使用武力的问题值得加以分析。在信息技术赋予国家及其商业企业权力的同时,信息技术使计算机系统支持的基础设施越来越容易获得,相互依赖,更容易受到恶意攻击。计算机安全研究所和联邦调查局联合估计,2000年恶意攻击造成的经济损失达3.78亿美元。国际法明确允许一个国家在受到另一个国家通过互联网攻击时进行自卫,但是,这种攻击可能并不总是上升到武装攻击的范围,持续时间和强度阈值,这可能证明使用武力进行自卫是合理的。本文提出了一个政策框架来分析互联网攻击的交战规则。我们描述了互联网安全的状态,不对称战争的动机,以及冲突管理和武装冲突的国际法的发展。我们专注于未来信息战交战规则的选择。最后,我们对网络攻击的交战规则提出了四点政策建议:(1)美国应在信息战背景下寻求国际上对"武力"和"武装攻击"的定义;(2)美国应寻求国际合作,共同调查和起诉网络攻击;(3)美国必须平衡进攻机会和防御弱点;(4)美国应寻求国际合作,共同调查和起诉网络攻击。(4)美国应该现在就制定战略计划,而不是在互联网攻击期间实时做出政策决定。

英文摘要:

Information technology is redefining national security and the use of force by state and nonstate actors. The use of force over the Internet warrants analysis given recent terrorist attacks. At the same time that information technology empowers states and their commercial enterprises, information technology makes infrastructures supported by computer systems increasingly accessible, interdependent, and more vulnerable to malicious attack. The Computer Security Institute and the FBI jointly estimate that financial losses attributed to malicious attack amounted to $378 million in 2000. International Law clearly permits a state to respond in self-defense when attacked by another state through the Internet, however, such attacks may not always rise to the scope, duration, and intensity threshold of an armed attack that may justify a use of force in self-defense. This paper presents a policy framework to analyze the rules of engagement for Internet attacks. We describe the state of Internet security, incentives for asymmetric warfare, and the development of international law for conflict management and armed conflict. We focus on options for future rules of engagement specific to Information Warfare. We conclude with four policy recommendations for Internet attack rules of engagement: (1) the U.S. should pursue international definitions of "force" and "armed attack" in the Information Warfare context; (2) the U.S. should pursue international cooperation for the joint investigation and prosecution of Internet attacks; (3) the U.S. must balance offensive opportunities against defensive vulnerabilities; and (4) the U.S. should prepare strategic plans now rather than making policy decisions in real-time during an Internet attack.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑