Cyber defense

HANDBOOK
CYBER DEFENSE
GUIDELINES FOR THE DESIGN, PLANNING, IMPLEMENTATION
AND DEVELOPMENT OF A MILITARY CYBER DEFENSE

Brigadier General Juan José Gómez Ruiz
Director General of the Secretariat
Major General Luciano José Penna
President of the Council of Delegates
INTER-AMERICAN DEFENSE BOARD
Proyect Coordinator
Isabel Niewola
IADB Cyber Defense Program Director
Main Author
Néstor Ganuza
Technical Team
Gonzalo García-Belenguer
Jossele Monroy
Miguel Rego
THIS PROGRAM AND PUBLICATION IS FUNDED BY THE GOVERNMENT OF
Copyright © 2020 Inter-American Defense Board

CONTENT
FIGURES
Preface
Introduction
Definitions and taxonomy, a
need for global consensus
Definitions
Cyberspace
Cyberspace layers
Internet
Cyberspace domain of
operations
Domain of operations
Nature of cyberspace
Cyber Key Terrain
Cyber risk
Cyber tactics
Human factor
Cyber weapons
Cyber attack
Cyber effects
Military cyber deterrence
Figure 1.
Cyber Ecosystem
Figure 2.
Cyber Ecosystem IT element
Figure 3.
Cyber Ecosystem Layers
Figure 4.
Internet hierarchy
Figure 5.
Internet Exchange Map
by TeleGeography
Figure 6
Cyberspace Domain of Operations
Figure 7.
Cross-domain Cyberspace
Figure 8.
Submarine Cable Map
by TeleGeography
Figure 9.
Cyber Risk
Figure 10.
Mission Cyber Risk
Figure 11.
Risk Management
4
7
9
11
14
16
17
20
21
22
23
24
26
28
28
29
31
33
15
16
16
18
18
21
22
24
24
25
25
Cyberspace control
Options in combat
Asymmetry in combat
Military cyber defense
Cyber defense and related disciplines
Cyber operations
Cyber force
Development planning
Legal framework
Doctrine
Organization
Personnel
Training
Command capabilities
Operational capabilities
Technical capabilities
Facilities
Command
Cyber threat
Cyber threat landscape and trends
Advanced Persistent Threat
34
34
35
37
38
39
41
42
43
43
44
45
46
49
55
58
63
63
64
67
67
Cyber threat hunting
Doctrinal principles
Cyber ecosystem
National cybersecurity
International cybersecurity
Public-private partnership
Third-party risks
Cyber risks in pandemics
Information
Legal issues
Standards
Acronyms
References
Notes
69
71
75
76
78
80
82
93
85
87
90
92
94
97
Figure 12.
Cyber Risk Treatment
Figure 13.
Cyber Attack Targets
Figure 14.
Types of Attacks
Figure 15.

Cyber Kill Chain™
by Lockheed Martin
Figure 16.
Cyber Effects
Figure 17.
Deterrence
Figure 18.
Comprehensive Deterrence
Figure 19.
Cyberspace Control
Figure 20.
Cyber Defense and related disciplines
Figure 21.
Cyber Operations
Figure 22.
Responsive Cyber Operations
25
28
29
30
32
33
33
34
35
39
40
Figure 23.

Cyber Force
Figure 24.
Cyber Exercise
Figure 25.
Cooperation
Figure 26.

IT System Security Audit Cycle
Figure 27.
Cyber Threat
Figure 28.

Critical Infrastructure Sectors
Figure 29.
APT Cycle
Figure 30.
National Cyber Security
Figure 31.
Cyber Security Strategy Cycle
Figure 32.
Third Party Risk Management
44
47
51
59
64
66
68
76
77
83

GUÍA DE
CIBERDEFENSA
ORIENTACIONES PARA EL DISEÑO, PLANEAMIENTO, IMPLANTACIÓN Y DESARROLLO DE UNA CIBERDEFENSA MILITAR
5
Significant regional and international cooperation around cybersecurity has emerged between governments in the Americas over the past decade, but much of progress has overwhelmingly been focused on civilian institutions. In some countries, where the armed forces play a lead role in cybersecurity, the military has been actively involved in sharing information and best practices with neighboring states. Nonetheless, the military has generally remained outside of the growing regional collaborative framework that has evolved around cybersecurity and cybercrime in the Western Hemisphere. The Inter-American Defense Board (IADB), supported by the Inter-American Defense Foundation
(IADF), has received mandates from the Organization of American States (OAS) on cyber defense and has begun to make significant progress in facilitating communication and collaboration on cyber defense among the Western Hemisphere’s security and armed forces. As the premier organization for military and defense issues in the Americas, the IADB has the opportunity to meaningfully impact policies and strategies, and to facilitate increased regional cooperation. It is in a unique position to bring together military and civilian decision-makers from Latin America and the Caribbean, to enhance the role of military and defense institutions in increasing cybersecurity, reducing the incidence and impact of cyber attacks as well as improving training and information-sharing. With the support of the Government of Canada, the IADB has launched its Cyber Defense Program, which supports its 29 member countries with capacity-building activities and exercises that will strengthen the Hemisphere’s cyber defense policies and capabilities at speed and at scale, individually and collectively. The IADB and IADF are working with existing partners and initiatives so as to enhance and supplement their results. The military institutions have a direct and pressing interest in bolstering their individual and collective cyber defense capabilities, both to ensure the security of their own military-specific systems, infrastructure, processes, and information, and to be able to contribute to securing broader national interests against growing cyber threats. The IADB and IADF will continue to further multilateral, bilateral and national cyber defense discussions and serve to inform strategy and decision-making, which will act as a catalyst to strengthen relationships, advance multilateral interests, share best practices, and learn from allies and partners. Cyber defense represents the single greatest shared threat and opportunity for cooperation in the Western Hemisphere.
LIEUTENANT GENERAL LUCIANO JOSÉ PENNA
President of the Council of Delegates
Inter-American Defense Board.

GUÍA DE