Conjectures for framing cyberwarfare

Systematically Understanding Cybersecurity Economics: A Survey

“…The framing effect is one of the many different cognitive biases that we can be susceptible to. Framing strategies (i.e., strategies for communicating a complex societal problem in such a way that the main arguments are clearly understandable and cannot be easily challenged [62]) have been studied extensively in the context of cyber risk [63][64][65] and cyber warfare [66,67]. A situation that is framed differently may elicit different responses [68].…”

Framing cyber warfare: an analyst’s perspective

“…Few analysis frameworks capture the uniqueness of the cyber conflict space, 4,5 and those frameworks that do exist are largely focused on understanding the threshold at which malicious cyber actions constitute war. 6,7 While certainly useful, application of such approaches to typical cyber actions requires further refinement 8 and, in their current state, they do not have the capacity to inform strategic planning, concept design, and capability decision making within a Defense context.…”

“…4,7,26 Developing a frame is challenging, as the pace of cyberspace evolution (and its implications) is moving well ahead of the intellectual understanding of how it will manifest itself when applied to international conflict. 5 From a systems perspective, cyber represents a perturbation across both the enterprise (e.g., between the military armed Services, the associated civilian support, and the management organizations) and down through each of the lines of command (from operational HQ to tactical in-the-field). As such, changes can create perturbations both down and across the enterprise simultaneously.…”

“…Any overarching analytical frame for cyber requires the ability to represent both conventional and non-conventional modes of warfare to inform discussion and decision making. 5 A useful analytical frame will incorporate cyber vulnerabilities and effects within conventional modes of warfare. For example, representing the timeliness, availability, reliability, authenticity (or integrity), confidentiality, and assimilation of information within a command and control cycle would enable a comparative analysis.…”

“…[1][2][3] However, understanding cyber as a domain of warfare lacks the maturity of that of the traditional warfighting domains. 4,5 Further, to comprehend cyber warfare within the broader security context, an approach that treats cyber warfare conceptually (top down) as opposed to focusing on individual technologies and tactical implications is important. Indeed, the rapid rate of change in the particular technologies makes taking a bottom-up approach problematic.…”