Training Cyber Warriors: What Can Be Learned from Defense Language Training?

Li, Jennifer J; Daugherty, Lindsay

doi:10.7249/rr476

Cited by 8 publications

(2 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This approach has several disadvantages and risks. First, red-teams are costly and can't be everywhere at once [22,23]. Two of our case studies describe using DSA in an ongoing and continuous fashion.…”

Section: Obstaclesmentioning

confidence: 99%

Analytics Morphology and Transformation

Kaisler,

Money,

Espinosa

et al. 2024

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

The asymmetry between cyber-defense and cyber-offense is well-known; defenders must perfectly protect their systems, while attackers need only find one flaw. Defensive cyber-deception has been proposed as a way to mitigate this problem, by using various techniques designed to require attackers to defend themselves from misdirection, false data, and counter-attack. In this paper, we propose a new cyber-deception technique: deceptive self-attack (DSA). DSA modifies network and systems to give the appearance that an unknown third party is also at work attacking the same systems. It is our contention that the presence of this (deceptive) adversary pressures real adversaries in novel ways useful to cyber-defense; and discuss these effects. As a study in DSA, we present and evaluate SOUNDTHEALARM, a SMT-solver based system for generating deceptive self-attack network traffic. SOUNDTHEALARM uses public attack signatures from the Suricata intrusion detection system to automatically generate network traffic consistent with a particular cyber-attack signature.

show abstract

Section: Obstaclesmentioning

confidence: 99%

Analytics Morphology and Transformation

Kaisler,

Money,

Espinosa

et al. 2024

Proceedings of the Annual Hawaii International Conference on System Sciences

View full text Add to dashboard Cite

show abstract

“…In their study, Daugherty and Li (2015) highlight the role of critical languages other than English as an all-important skill in maintaining mission effectiveness for both defensive and offensive cybersecurity operations. Among their findings from interviews with experts in cyber and language was: "Several of the experts interviewed commented that the U.S. education system does not produce enough individuals with language expertise.…”

mentioning

confidence: 99%

Portuguese as an additional language and cybersecurity: a pilot course

Silva¹,

Torrico²

2022

PLJ

View full text Add to dashboard Cite

The 2021 Portuguese GenCyber course was offered online in a summer camp format to two groups of high school students: Portuguese and Spanish speakers (either Heritage or Second Language Speakers). Our intention is to demonstrate the significance of the field of language for specific purposes (LSP) in relation to cybersecurity and particularly the importance of Portuguese in this field. We explain in detail the organization of the asynchronous module of the pilot GenCyber course and its differentiated tasks, which comprised approximately 20 hours of students' coursework completed in 3 weeks. The asynchronous module presented here could be replicated and/or adapted to other Portuguese courses as well. We finish the article with some of the results of the evaluation of the GenCyber program and some of the conclusions from the site visit to the program. This Portuguese GenCyber course is also a reminder of the possible role of Humanities in the development of special topic courses in languages, embracing the diversity of our student populations and the potential to apply their language skills to professional careers in high demand, as in the case of cybersecurity.

show abstract