Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review
---
paper_title: A Bootstrapping Approach for Developing a Cyber-security Ontology Using Textbook Index Terms

paper_content:

Developing a domain ontology with concepts and relationships between them is a challenge, since knowledge engineering is a labor intensive process that can be a bottleneck and is often not scalable. Developing a cyber-security ontology is no exception. A security ontology can improve search for security learning resources that are scattered in different locations in different formats, since it can provide a common controlled vocabulary to annotate the resources with consistent semantics. In this paper, we present a bootstrapping method for developing a cyber-security ontology using both a security textbook index that provides a list of terms in the security domain and an existing security ontology as a scaffold. The bootstrapping approach automatically extracts the textbook index terms (concepts), derives a relationship to a concept in the security ontology for each and classifies them into the existing security ontology. The bootstrapping approach relies on the exact and approximate similarity matching of concepts as well as the category information obtained from external sources such as Wikipedia. The results show feasibility of our method to develop a more comprehensive and scalable cyber-security ontology with rich concepts from a textbook index. We provide criteria used to select a scaffold ontology among existing ontologies. The current approach can be improved by considering synonyms, deep searching in Wikipedia categories, and domain expert validation.
---
paper_title: What is Cybersecurity? Explorations in Automated Knowledge Generation

paper_content:

This paper addresses a serious impediment to theory and policy for cybersecurity: Trivial as it might appear on the surface, there is no agreed upon understanding of the issue, no formal definition, and not even a consensus on the mere spelling of the terms –– so that efforts to develop policies and postures, or capture relevant knowledge are seriously hampered. In this context, we present a “proof of concept” for a new research strategy based on a close examination of a large corpus of scholarly knowledge, and the extent to which it enables us to generate new knowledge about cybersecurity of relevance to international relations and to national security relevant to the nation’s security and to international relations. Given the new cyber realities, this paper is also a “proof” of how to create new knowledge through automated investigations of the record to date.
---
paper_title: Reference Ontology for Cybersecurity Operational Information

paper_content:

As our cyber society develops and expands, the importance of cybersecurity operations is growing in response to cybersecurity threats coming from beyond national borders. Efficient cybersecurity operations require information exchanges that go beyond organizational borders. Various industry specifications defining information schemata for such exchanges are thus emerging. These specifications, however, define their own schemata since their objectives and the types of information they deal with differ, and desirable schemata differ depending on the purposes. They need to be organized and orchestrated so that individual organizations can fully exchange information and collaborate with one another. To establish the foundations of such orchestration and facilitate information exchanges, this paper proposes a reference ontology for cybersecurity operational information. The ontology structures cybersecurity information and orchestrates industry specifications. We built it from the standpoint of cybersecurity operations in close collaboration with cybersecurity organizations including security operation centers handling actual cybersecurity operations in the USA, Japan and South Korea. This paper demonstrates its usability by discussing the coverage of industry specifications. It then defines an extensible information structure that collaborates with such specifications by using the ontology and describes a prototype cybersecurity knowledge base we constructed that facilitates cybersecurity information exchanges among various parties. Finally, it discusses the usage scenarios of the ontology and knowledge base in cybersecurity operations. Through this work, we wish to contribute to the advancement of cybersecurity information exchanges.
---
paper_title: An Ontological Approach to Computer System Security

paper_content:

Computer system security relies on different aspects of a computer system such as security policies, security mechanisms, threat analysis, and countermeasures. This paper provides an ontological approach to capturing and utilizing the fundamental attributes of those key components to determine the effects of vulnerabilities on a system's security. Our ontology for vulnerability management (OVM) has been populated with all vulnerabilities in NVD (see http://nvd.nist.gov/scap.cfm) with additional inference rules and knowledge discovery mechanisms so that it may provide a promising pathway to make security automation program (NIST Version 1.0, 2007) more effective and reliable.
---
paper_title: Building an ontology for cyberterrorism

paper_content:

Proceedings of the 11th European Conference on Information Warfare and Security, Laval, France, 5-6 July 2012
---
paper_title: Ontology for cyber-physical-social systems self-organisation

paper_content:

Cyber-Physical-Social Systems (CPSSs) integrate various resources from physical, cyber, and social worlds. Efficient interaction of these resources is essential for CPSSs operation. Ontologies do not only provide for semantic operability between different resources but also provide means to create sharable ontology-based context models specified for actual settings. Usage of the context supports situation-driven behavior of CPSSs resources and thus is an enabler for their self-organisation. The present research inherits the idea of context ontologies usage for modelling context in CPSSs. In this work, an upper level context ontology for CPSSs is proposed. This ontology is applied in the domain of self-organising resource network.
---
paper_title: Ontology for Detection of Web Attacks

paper_content:

Intrusion Detection System (IDS) must reliably detect malicious activity. The expansion of web application also exponentially increases cyber threats. Current survey shows that application layer is more vulnerable to web attacks. There are more than 75% of attacks are deployed at application layer and out of that 90% are vulnerable to attacks. In this paper, we address issues of existing IDS i.e. low false positive rate, low false negative rate and data overload. We discuss about use of semantic web in the Intrusion Detection Systems. This article presents a proposition of using Semantic Web and Ontology concepts to define an approach to analyze Security logs with the goal to identify possible security issues. It extracts semantic relations between computer attacks and intrusions in an Intrusion Detection System. Ontology provides to enable, reuse of domain knowledge and it is also easier to understand and update legacy data.
---
paper_title: Developing an Ontology for Cyber Security Knowledge Graphs

paper_content:

In this paper we describe an ontology developed for a cyber security knowledge graph database. This is intended to provide an organized schema that incorporates information from a large variety of structured and unstructured data sources, and includes all relevant concepts within the domain. We compare the resulting ontology with previous efforts, discuss its strengths and limitations, and describe areas for future work.
---
paper_title: Towards a Cyber Conflict Taxonomy

paper_content:

This paper seeks to create a practical taxonomy to describe cyber conflict events and the actors involved in them in a manner that is useful to security practitioners and researchers working in the domain of cyber operations. The proposed Cyber Conflict Taxonomy is an extensible network taxonomy organized as a plex data structure. Subjects of the taxonomy are entered as either Events or Entities and are then categorized using the categories and subcategories of Actions or Actors. Each of these categories is further subdivided into increasingly specific subcategories used to describe the defining characteristics of each subject and labeled lateral linkages are used to illustrate the associative relationships between Entities and Events. The categories are organized in both a hierarchical and associative manner to illustrate the relationships between subjects and categories. A prototype of this taxonomy was developed and tested using a test set of recent cyber conflict events and used to explore the relationship and connections between these events and the states, groups or individuals that participated in them. Furthermore, this taxonomy can potentially identify actors across different events based on their similar method of operation, toolsets and target sets.
---
paper_title: A Systems Approach to Cyber Assurance Education

paper_content:

The demand for cybersecurity professions faces continual shortages. Real-world cyber threats continue to drive this demand as we face a daily barrage of attacks on our critical infrastructure, national, and private industry assets. To meet this demand, many cybersecurity and information assurance educational programs have emerged. These programs range from specialized tracks within traditional academic programs to specialized degree titles developed solely for the purpose of producing cyber capable graduates. In this paper we document curriculum development that focuses on a systems level approach to cyber assurance education. This program incorporates both hardware and software aspects to ensure cyber security graduates are produced that can address adversaries that target complete system implementations.
---
paper_title: Ontology for Detection of Web Attacks

paper_content:

Intrusion Detection System (IDS) must reliably detect malicious activity. The expansion of web application also exponentially increases cyber threats. Current survey shows that application layer is more vulnerable to web attacks. There are more than 75% of attacks are deployed at application layer and out of that 90% are vulnerable to attacks. In this paper, we address issues of existing IDS i.e. low false positive rate, low false negative rate and data overload. We discuss about use of semantic web in the Intrusion Detection Systems. This article presents a proposition of using Semantic Web and Ontology concepts to define an approach to analyze Security logs with the goal to identify possible security issues. It extracts semantic relations between computer attacks and intrusions in an Intrusion Detection System. Ontology provides to enable, reuse of domain knowledge and it is also easier to understand and update legacy data.
---
paper_title: Policy for US Cybersecurity

paper_content:

Abstract : Since creation of the first interconnected computer network in 1969 as an Advanced Research Projects Agency endeavor, cyberspace has expanded to affect many, if not most, aspects of Americans lives. Unfortunately, accessibility to and expansion of the Internet often proceeded without proper consideration for the security of the information contained or transmitted therein. The lack of necessary security and the anonymity afforded by the Internet led to equally rapid growth (if not more so) of the nefarious exploitation of this man-made domain. Regrettably, it is unlikely that the United States can protect itself from the growing threat of cybercrime and state-sponsored intrusions and operations. 1 However, this prospect should not limit attempts by the United States to defend its cyberspace infrastructure, whether the threat comes from terrorists, cybercriminals, or states and their proxies. 2 Consequently, America must develop offensive and defensive cyber capabilities. Additionally, clearly defined policies require development and implementation to ensure cohesion across the whole of government. With respect to cyber domain attacks on US civilian systems attributable to a nation-state, the Department of Homeland Security (DHS) should have responsibility for responding (in the form of consequence management); US Northern Command (USNORTHCOM), for domestic attack assessment; and US Cyber Command (USCYBERCOM), for defense and any counterstrike response (in coordination with applicable combatant commands and US national agencies). This article describes the cyberspace environment and its threats; explains the current authorities, roles, and responsibilities of these and other agencies; and details how these authorities, roles, and responsibilities need modification to best protect US national security interests.
---
paper_title: Trends in cyberspace: can governments keep up?

paper_content:

Whether carried out by individuals or states, cyberattacks are both growing in number and becoming more sophisticated. Since the attack on Estonian cyber infrastructure in 2007, many other examples of massive attacks have been reported. The use of spyware and malware—such as with Stuxnet, DuQu or Flames—to disrupt critical infrastructure has made headlines, questioning the ability of governments and private actors to respond to cyber threats. A broad array of potential threats poses a substantial challenge to existing governance structures, which are often behind the curve in comparison with the dynamically evolving cyberspace. Using existing literature and recent foresight studies, the article analyses the trends in the governance of cyberspace and their implications for governments and global regulatory regimes.
---
paper_title: Online Police Station, A State-of-Art Italian Semantic Technology against Cybercrime

paper_content:

This paper describes a content enabling system that provides deep semantic search and information access to large quantities of distributed multimedia data for both experts and general public. It provides with a language independent search and dynamic classification features for a broad range of data collected from several sources in a number of culturally diverse languages. This system is part of the Online Police Station, launched by the Italian Minister of the Interior in 2006. The Online Police Station uses a virtual reality interface to provide general information and online assistance. Citizens can download forms, make complaints, receive advice and/or report events of an illegal nature. Police specialists can monitor criminal trends to ensure that responses are appropriately focused, and that scarce resources are more effectively employed against criminality. Online Police Station was voted as the Most inspiring good practice for creative solutions to common challenges, at the European eGovernment Awards 2007.
---
paper_title: Cyber resilience: a review of critical national infrastructure and cyber security protection measures applied in the UK and USA.

paper_content:

This paper presents cyber resilience as key strand of national security. It establishes the importance of critical national infrastructure protection and the growing vicarious nature of remote, well-planned, and well executed cyber attacks on critical infrastructures. Examples of well-known historical cyber attacks are presented, and the emergence of 'internet of things' as a cyber vulnerability issue yet to be tackled is explored. The paper identifies key steps being undertaken by those responsible for detecting, deterring, and disrupting cyber attacks on critical national infrastructure in the United Kingdom and the USA.
---
paper_title: Characterization of Cascading Failures in Interdependent Cyber-Physical Systems

paper_content:

In this paper, we focus on the cyber-physical system consisting of interdependent physical-resource and computational-resource networks, e.g., smart power grids, automated traffic control system, and wireless sensor and actuator networks, where the physical-resource and computational-resource network are connected and mutually dependent. The failure in physical-resource network might cause failures in computational-resource network, and vice versa. A small failure in either of them could trigger cascade of failures within the entire system. We aim to investigate the issue of cascading failures occur in such system. We propose a typical and practical model by introducing the interdependent complex network. The interdependence between two networks is practically defined as follows: Each node in the computational-resource network has only one support link from the physical-resource network, while each node in physical-resource network is connected to multiple computational nodes. We study the effect of cascading failures using percolation theory and present detailed mathematical analysis of failure propagation in the system. We analyze the robustness of our model caused by random attacks or failures by calculating the size of functioning parts in both networks. Our mathematical analysis proves that there exists a threshold for the proportion of faulty nodes, above which the system collapses. Using extensive simulations, we determine the critical values for different system parameters. Our simulation also shows that, when the proportion of faulty nodes approaching critical value, the size of functioning parts meets a second-order transition. An important observation is that the size of physical-resource and computational-resource networks, and the ratio between their sizes do not affect the system robustness.
---
paper_title: Review of Security Issues in Industrial Networks

paper_content:

Although awareness is constantly rising, that industrial computer networks (in a very broad sense) can be exposed to serious cyber threats, many people still think that the same countermeasures, developed to protect general-purpose computer networks, can be effectively adopted also in those situations where a physical system is managed/controlled through some distributed Information and Communication Technology (ICT) infrastructure. Unfortunately, this is not the case, as several examples of successful attacks carried out in the last decade, and more frequently in the very recent past, have dramatically shown. Experts in this area know very well that often the peculiarities of industrial networks prevent the adoption of classical approaches to their security and, in particular, of those popular solutions that are mainly based on a detect and patch philosophy. This paper is a contribution, from the security point of view, to the assessment of the current situation of a wide class of industrial distributed computing systems. In particular, the analysis presented in this paper takes into account the process of ensuring a satisfactory degree of security for a distributed industrial system, with respect to some key elements such as the system characteristics, the current state of the art of standardization and the adoption of suitable controls (countermeasures) that can help in lowering the security risks below a predefined, acceptable threshold.
---
paper_title: SCADA communication and security issues

paper_content:

Supervisory control and data acquisition SCADA systems are widely used to monitor and control industrial processes. They provide the key functionality of real-time monitoring, logging/archiving, report generation, and automation for smart grid, which is a promising power delivery system for the near future. On the basis of these functionalities, various SCADA architectures, including hardware and software architecture, have been proposed and standardized; however, the most open and expediently growing areas in the smart grid are the infrastructure and technologies for the SCADA communication and security. In this paper, we provide a review for many documented standards in SCADA, and we also review its state-of-the-art communication and security aspects. Copyright © 2013 John Wiley & Sons, Ltd.
---
paper_title: CYBER SITUATIONAL AWARENESS – A SYSTEMATIC REVIEW OF THE LITERATURE

paper_content:

Abstract Cyber situational awareness is attracting much attention. It features prominently in the national cyber strategies of many countries, and there is a considerable body of research dealing with it. However, until now, there has been no systematic and up-to-date review of the scientific literature on cyber situational awareness. This article presents a review of cyber situational awareness, based on systematic queries in four leading scientific databases. 102 articles were read, clustered, and are succinctly described in the paper. The findings are discussed from the perspective of both national cyber strategies and science, and some directions for future research are examined.
---
paper_title: A system dynamics approach for assessing the impact of cyber attacks on critical infrastructures

paper_content:

The massive proliferation of information and communications technologies (hardware and software) into the heart of modern critical infrastructures has given birth to a unique technological ecosystem. Despite the many advantages brought about by modern information and communications technologies, the shift from isolated environments to "systems-of-systems" integrated with massive information and communications infrastructures (e.g., the Internet) exposes critical infrastructures to significant cyber threats. Therefore, it is imperative to develop approaches for identifying and ranking assets in complex, large-scale and heterogeneous critical infrastructures. To address these challenges, this paper proposes a novel methodology for assessing the impacts of cyber attacks on critical infrastructures. The methodology is inspired by research in system dynamics and sensitivity analysis. The proposed behavioral analysis methodology computes the covariances of the observed variables before and after the execution of a specific intervention involving the control variables. Metrics are proposed for quantifying the significance of control variables and measuring the impact propagation of cyber attacks.Experiments conducted on the IEEE 14-bus and IEEE 300-bus electric grid models, and on the well-known Tennessee Eastman chemical process demonstrate the efficiency, scalability and cross-sector applicability of the proposed methodology in several attack scenarios. The advantages of the methodology over graph-theoretic and electrical centrality metric approaches are demonstrated using several test cases. Finally, a novel, stealthy cyber-physical attack is demonstrated against a simulated power grid; this attack can be used to analyze the precision of anomaly detection systems.
---
paper_title: A Systems Approach to Cyber Assurance Education

paper_content:

The demand for cybersecurity professions faces continual shortages. Real-world cyber threats continue to drive this demand as we face a daily barrage of attacks on our critical infrastructure, national, and private industry assets. To meet this demand, many cybersecurity and information assurance educational programs have emerged. These programs range from specialized tracks within traditional academic programs to specialized degree titles developed solely for the purpose of producing cyber capable graduates. In this paper we document curriculum development that focuses on a systems level approach to cyber assurance education. This program incorporates both hardware and software aspects to ensure cyber security graduates are produced that can address adversaries that target complete system implementations.
---
paper_title: A strategic framework for managing internet security

paper_content:

The internet which was originally developed as an open distributed system has since evolved to become a key platform for connectivity of businesses and communities. Today, the internet is used for transferring critical information amongst sophisticated systems. These systems extend beyond one business organization to community of customers and suppliers. Consequently, today, vulnerabilities and risks to the Internet are equally relevant to systems that are integrated within corporate networks. Cloud Computing solutions, Supervisory Control and Data Acquisition (SCADA) systems and the Bring Your Own Device (BYOD) approach adopted by some organizations are examples of complexity of managing Internet security today. These systems are not only vulnerable to own system specific issues but also threatened by other Internet-related vulnerabilities. Whilst numerous previous studies have identified the need for managing Internet security, there remains a need for taking a strategic approach in security management of the Internet and sensitive Industrial Control Systems (ICS) integrated systems. This paper examines research on Internet security using a risk management approach. It presents an overview of key issues and recommends a management framework for secure Internet access.
---
paper_title: Supply Chain Cyber-Resilience: Creating an Agenda for Future Research

paper_content:

Supply chain management has become dependent on electronic systems; since the 2000s, we have seen the emergence of information technology solutions to support business operations, to share information, to connect businesses, and to generate greater visibility along supply chains in order to gain knowledge and control of processes. On the other hand, although supply chains have pursued aspects such as the standardization of business processes, increased communication, connectivity, and data exchange, the vulnerability of these systems to cyber-attacks is nevertheless increasing. Why is this? In modern supply chains, information is shared digitally more than any other way, and supply chains are so reliant on good quality information that, without it, supply chain managers cannot make decisions on forecasts, production, distribution, etc. Equally importantly, poor data leads to poor decisions and performance. So, even with the most efficient and responsive supply chain, performance will be greatly compromised without good quality information.
---
paper_title: An Ontological Approach to Computer System Security

paper_content:

Computer system security relies on different aspects of a computer system such as security policies, security mechanisms, threat analysis, and countermeasures. This paper provides an ontological approach to capturing and utilizing the fundamental attributes of those key components to determine the effects of vulnerabilities on a system's security. Our ontology for vulnerability management (OVM) has been populated with all vulnerabilities in NVD (see http://nvd.nist.gov/scap.cfm) with additional inference rules and knowledge discovery mechanisms so that it may provide a promising pathway to make security automation program (NIST Version 1.0, 2007) more effective and reliable.
---
paper_title: A survey of cyber crimes

paper_content:

With the advancement of computer and information technology, cyber crime is now becoming one of the most significant challenges facing law enforcement organizations. Cyber crimes are generally referred as criminal activities that use computers or networks. An understanding of the characteristics and nature of cyber crimes is important in helping research communities find ways to effectively prevent them. Most existing research focuses more on attacks and attack models, including either actual attacks or imaginary/possible attacks over all layers of networks or computers, but there has been less work carried out on a comprehensive survey of cyber crimes. This paper provides a survey of cyber crimes that have actually occurred. First, cyber crimes in the digital world are compared with crimes in the physical world. Then, cyber crimes are categorized according to the roles of computers or networks. Furthermore, we also notice that some cyber crimes are actually traditionally non-cyber crimes that are facilitated by computers or networks. It is surprising that there are so many recurrent cyber crimes. More efforts are needed to protect people from cyber crimes. Copyright © 2011 John Wiley & Sons, Ltd. ::: ::: (This paper provides a survey of cyber crimes that have actually occurred. First, cyber crimes in the digital world are compared with crimes in the physical world. Then, cyber crimes are categorized according to the roles of computers or networks.)
---
paper_title: Global Cyberspace Is Safer than You Think: Real Trends in Cybercrime

paper_content:

What are the real trends in cybercrime? Recent media coverage has been rife with stories of large-scale data breaches, hacks and online financial crime. Information technology (IT) security firms such as Norton Symantec and Kaspersky Labs publish yearly reports that generally show the security of cyberspace to be poor and often getting worse. This paper argues that the level of security in cyberspace is actually far better than the picture described by media accounts and IT security reports. Currently, numbers on the occurrence of cybercrime are almost always depicted in either absolute (1,000 attacks per year) or as year-over-year percentage change terms (50 percent more attacks in 2014 than in 2013). To get an accurate picture of the security of cyberspace, cybercrime statistics need to be expressed as a proportion of the growing size of the Internet (similar to the routine practice of expressing crime as a proportion of a population, i.e., 15 murders per 1,000 people per year). To substantiate this argument, data was collected on the size of the Internet, with a focus on users, points of interaction and volume of online activity. Data was then collected on the vectors of cyber attack, the occurrence of cyber attacks and the cost of cybercrime. Normalizing these crime statistics around various measures of the growing size of cyberspace, a clear picture emerges: the absolute numbers always paint a worse scenario of the security of cyberspace than the normalized numbers. In particular, the absolute numbers tend to lead to one of three misrepresentations: first, the absolute numbers say things are getting worse, while the normalized numbers show that the situation is improving; second, both numbers show that things are improving, but the normalized numbers show that things are getting better at a faster rate; and third, both numbers say that things are getting worse, but the normalized numbers indicate that the situation is deteriorating more slowly than the absolute numbers. Overall, global cyberspace is actually far safer than commonly thought.
---
paper_title: What is Cybersecurity? Explorations in Automated Knowledge Generation

paper_content:

This paper addresses a serious impediment to theory and policy for cybersecurity: Trivial as it might appear on the surface, there is no agreed upon understanding of the issue, no formal definition, and not even a consensus on the mere spelling of the terms –– so that efforts to develop policies and postures, or capture relevant knowledge are seriously hampered. In this context, we present a “proof of concept” for a new research strategy based on a close examination of a large corpus of scholarly knowledge, and the extent to which it enables us to generate new knowledge about cybersecurity of relevance to international relations and to national security relevant to the nation’s security and to international relations. Given the new cyber realities, this paper is also a “proof” of how to create new knowledge through automated investigations of the record to date.
---
paper_title: Online Police Station, A State-of-Art Italian Semantic Technology against Cybercrime

paper_content:

This paper describes a content enabling system that provides deep semantic search and information access to large quantities of distributed multimedia data for both experts and general public. It provides with a language independent search and dynamic classification features for a broad range of data collected from several sources in a number of culturally diverse languages. This system is part of the Online Police Station, launched by the Italian Minister of the Interior in 2006. The Online Police Station uses a virtual reality interface to provide general information and online assistance. Citizens can download forms, make complaints, receive advice and/or report events of an illegal nature. Police specialists can monitor criminal trends to ensure that responses are appropriately focused, and that scarce resources are more effectively employed against criminality. Online Police Station was voted as the Most inspiring good practice for creative solutions to common challenges, at the European eGovernment Awards 2007.
---
paper_title: An Analysis of More Than 1, 400 Articles, 900 Scales, and 17 Years of Research: The State of Scales in Cyberpsychology, Behavior, and Social Networking

paper_content:

Abstract Cyberpsychology is a recently emergent field that examines the impact of technology upon human cognition and behavior. Given its infancy, authors have rapidly created new measures to gauge their constructs of interest. Unfortunately, few of these authors have had the opportunity to test their scales' psychometric properties and validity. This is concerning, as many theoretical assumptions may be founded upon scales with inadequate attributes. If this were found to be true, then previous findings in cyberpsychology studies would need to be retested, and future research would need to shift its focus to creating psychometrically sound and valid measures. To provide inferences on this concern, the current study examines the article reporting, scale creation, and scale reliabilities of every article published in Cyberpsychology, Behavior, and Social Networking from its inception to July 2014. The final data set encompassed the coding of 1,478 individual articles, including 921 scales, and spanning 17 ...
---
paper_title: Online Police Station, A State-of-Art Italian Semantic Technology against Cybercrime

paper_content:

This paper describes a content enabling system that provides deep semantic search and information access to large quantities of distributed multimedia data for both experts and general public. It provides with a language independent search and dynamic classification features for a broad range of data collected from several sources in a number of culturally diverse languages. This system is part of the Online Police Station, launched by the Italian Minister of the Interior in 2006. The Online Police Station uses a virtual reality interface to provide general information and online assistance. Citizens can download forms, make complaints, receive advice and/or report events of an illegal nature. Police specialists can monitor criminal trends to ensure that responses are appropriately focused, and that scarce resources are more effectively employed against criminality. Online Police Station was voted as the Most inspiring good practice for creative solutions to common challenges, at the European eGovernment Awards 2007.
---
paper_title: Defining Terrorism: Is One Man's Terrorist another Man's Freedom Fighter?

paper_content:

Most researchers tend to believe that an objective and internationally accepted definition of terrorism can never be agreed upon; after all, they say, 'one man's terrorist is another man's freedom fighter.' The question of who is a terrorist, according to this school of thought, depends entirely on the subjective outlook of the definer. This article argues that an objective definition of terrorism is not only possible; it is also indispensable to any serious attempt to combat terrorism. A correct and objective definition of terrorism can be based upon accepted international laws and principles regarding what behaviors are permitted in conventional wars between nations. This normative principle relating to a state of war between two countries can be extended without difficulty to a conflict between a nongovernmental organization and a state. This extended version would thus differentiate between guerrilla warfare and terrorism. The aims of terrorism and guerrilla warfare may well be identical; but they are...
---
paper_title: International Politics: Enduring Concepts and Contemporary Issues

paper_content:

PART 1 ANARCHY AND ITS CONSEQUENCES Power and Morality in Statecraft Hans J. Morgenthau Six Principles of Political Realism J. Ann Tickner A Critique of Morgenthau's Principles of Political Realism The Consequences of Anarchy Kenneth N. Waltz The Anarchic Structure of World Politics John J. Mearsheimer Anarchy and the Struggle for Power Alexander Wendt Anarchy Is What States Make of It The Mitigation of Anarchy Kenneth A. Oye The Conditions for Cooperation in World Politics Michael W. Doyle Kant, Liberal Legacies, and Foreign Affairs Stephen M. Walt Alliances: Balancing and Bandwagoning Hans J. Morgenthau The Future of Diplomacy Stanley Hoffmann The Uses and Limits of International Law Robert O. Keohane International Institutions Adam Roberts The United Nations and International Security PART 2 THE USES OF FORCE The Political Uses of Force Robert J. Art The Four Functions of Force Thomas C. Schelling The Diplomacy of Violence Robert J. Art Coercive Diplomacy Robert Jervis Offense, Defense, and the Security Dilemma *Bruce Hoffman What Is Terrorism? The Political Utility of Force Today Robert J. Art The Fungibility of Force Robert A. Pape The Logic of Suicide Terrorism The Spread of Nuclear Weapons Scott D. Sagan Nuclear Instability in South Asia Kenneth N. Waltz Nuclear Stability in South Asia PART 3 THE INTERNATIONAL POLITICAL ECONOMY Perspectives on Political Economy Robert Gilpin The Nature of Political Economy Robert O. Keohane Hegemony in the World Political Economy Bruce R. Scott The Great Divide in the Global Village The Meaning of Globalization Jeffrey Frankel The Globalization of the International Economy *Martin Wolf Will Globalization Survive? Kenneth N. Waltz Globalization and Governance The Pros and Cons of Globalization Dani Rodrik Trading in Illusions John Micklethwait Why the Globalization Backlash is Stupid and Adrain Wooldridge PART 4 CONTEMPORARY WORLD POLITICS Conflict, War, and Terrorism Robert Jervis The Era of Leading Power Peace Samuel P. Huntington The Clash of Civilizations? *Fareed Zakaria Why Do They Hate Us? The Uses of, and Reactions to, U.S. Power Robert Jervis Explaining the Bush Doctrine *F. Gregory Gause III Can Democracy Stop Terrorism? *Stephen M. Walt Taming American Power Civil Wars, and Nation-Building Chaim Kaufmann Possible and Impossible Solutions to Ethnic Civil Wars *James Dobbins Nation-Building by the UN and the U.S. *James L. Payne Deconstructing Nation Building The Environment and Climate Change Garrett Hardin The Tragedy of the Commons *Thomas Homer-Dixon Environmental Changes as a Cause of Acute Conflict *John Browne Beyond Kyoto New Actors and New Forces Margaret E. Keck Transnational Activists Networks and Kathryn Sikkink Rhoda E. Howard Human Rights in World Politics and Jack Donnelly *Daniel W. Drezner The State and Global Governance of the Internet *Andrew Moravcsik Europe without Illusions *Richard K. Betts and The Rise of China: Getting the Questions Right Thomas J. Christensen Moses Naim The Five Wars of Globalization Stephen R. Ratner International Law: The Trials of Global Norms
---
paper_title: Cybermatics: A Holistic Field for Systematic Study of Cyber-Enabled New Worlds

paper_content:

Following the two trends of computerization and informatization, another emerging trend is cyberization in which numerous and various cyber entities in cyberspace will exist in cyber-enabled worlds, including the cyber world and cyber-conjugated physical, social, and mental worlds. Computer science and information science, as holistic fields, have, respectively, played important roles in computerization and informatization. Similarly, it is necessary for there to be a corresponding field for cyberization. Cybermatics is proposed as such a holistic field for the systematic study of cyber entities in cyberspace and cyber world, and their properties, functions, and conjugations with entities in conventional spaces/worlds. This paper sets out to explain the necessity and rationale for, and significance of, the proposed field of Cybermatics, what it is and what it encompasses, and how it is related to other fields and areas.
---
paper_title: A Systems Approach to Cyber Assurance Education

paper_content:

The demand for cybersecurity professions faces continual shortages. Real-world cyber threats continue to drive this demand as we face a daily barrage of attacks on our critical infrastructure, national, and private industry assets. To meet this demand, many cybersecurity and information assurance educational programs have emerged. These programs range from specialized tracks within traditional academic programs to specialized degree titles developed solely for the purpose of producing cyber capable graduates. In this paper we document curriculum development that focuses on a systems level approach to cyber assurance education. This program incorporates both hardware and software aspects to ensure cyber security graduates are produced that can address adversaries that target complete system implementations.
---
paper_title: From information security to cyber security

paper_content:

The term cyber security is often used interchangeably with the term information security. This paper argues that, although there is a substantial overlap between cyber security and information security, these two concepts are not totally analogous. Moreover, the paper posits that cyber security goes beyond the boundaries of traditional information security to include not only the protection of information resources, but also that of other assets, including the person him/herself. In information security, reference to the human factor usually relates to the role(s) of humans in the security process. In cyber security this factor has an additional dimension, namely, the humans as potential targets of cyber attacks or even unknowingly participating in a cyber attack. This additional dimension has ethical implications for society as a whole, since the protection of certain vulnerable groups, for example children, could be seen as a societal responsibility.
---
paper_title: Cybermatics: A Holistic Field for Systematic Study of Cyber-Enabled New Worlds

paper_content:

Following the two trends of computerization and informatization, another emerging trend is cyberization in which numerous and various cyber entities in cyberspace will exist in cyber-enabled worlds, including the cyber world and cyber-conjugated physical, social, and mental worlds. Computer science and information science, as holistic fields, have, respectively, played important roles in computerization and informatization. Similarly, it is necessary for there to be a corresponding field for cyberization. Cybermatics is proposed as such a holistic field for the systematic study of cyber entities in cyberspace and cyber world, and their properties, functions, and conjugations with entities in conventional spaces/worlds. This paper sets out to explain the necessity and rationale for, and significance of, the proposed field of Cybermatics, what it is and what it encompasses, and how it is related to other fields and areas.
---
paper_title: Cybermatics: A Holistic Field for Systematic Study of Cyber-Enabled New Worlds

paper_content:

Following the two trends of computerization and informatization, another emerging trend is cyberization in which numerous and various cyber entities in cyberspace will exist in cyber-enabled worlds, including the cyber world and cyber-conjugated physical, social, and mental worlds. Computer science and information science, as holistic fields, have, respectively, played important roles in computerization and informatization. Similarly, it is necessary for there to be a corresponding field for cyberization. Cybermatics is proposed as such a holistic field for the systematic study of cyber entities in cyberspace and cyber world, and their properties, functions, and conjugations with entities in conventional spaces/worlds. This paper sets out to explain the necessity and rationale for, and significance of, the proposed field of Cybermatics, what it is and what it encompasses, and how it is related to other fields and areas.
---

Title: Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review

Section 1: INTRODUCTION
Description 1: Introduce the importance of cyber security and the necessity of developing standardized terminology across interdisciplinary fields.

Section 2: LITERATURE REVIEW METHOD
Description 2: Describe the methodology used for conducting the literature review, including the selection criteria and search parameters.

Section 3: RESULTS
Description 3: Present the common trends and categories identified in the reviewed literature.

Section 4: PAPER SUMMARIES BY CATEGORY
Description 4: Summarize papers within defined categories such as Public, Infrastructure, Private, and General.

Section 5: COMPARISON TO PRIOR RESEARCH
Description 5: Compare the findings of the literature review to previous research and methodologies.

Section 6: LITERATURE REVIEW CONCLUSIONS
Description 6: Conclude the literature review by identifying key gaps and discussing the importance of standardized terminology.

Section 7: QUANTITATIVE ANALYSIS OF PAPERS
Description 7: Analyze the incidence of terms used in the literature to identify inconsistencies and propose terminology standards.

Section 8: STANDARDIZATION RECOMMENDATIONS
Description 8: Recommend guidelines for standardizing cyber security terminology based on the quantitative analysis.

Section 9: SPECIFIC NOMENCLATURE
Description 9: Resolve confusion around prominent cyber security terms and provide standard usage recommendations.

Section 10: TOWARDS AN AGENDA AND METHODOLOGY
Description 10: Propose the creation of a research agenda and methodology for integrating standardized cyber security terminology.

Section 11: BROAD NOMENCLATURE ISSUES
Description 11: Discuss broader nomenclature issues and Internet-related prefixes that affect the standardization of terms.

Section 12: CONCLUSION
Description 12: Summarize the paper's findings, recommendations, and the urgency of formalizing cyber security as an academic discipline.