Cyber warfare involves the actions by a nation-state or international organization to attack and attempt to damage another nation's computers or information networks through, for example, computer viruses or denial-of-service attacks. RAND research provides recommendations to military and civilian decisionmakers on methods of defending against the damaging effects of cyber warfare on a nation's digital infrastructure.
Research conducted by:
Transportation, Space, and Technology Program;
RAND National Security Research Division;
RAND Europe
Featured at RAND
Because it will be difficult to prevent cyber attacks on critical civilian and military computer networks by threatening to punish attackers, the United States must focus its efforts on defending these networks from cyber attack.
Reports (15)
This report explores whether and when U.S. cyberattack capabilities can be demonstrated, then goes on to examine difficulties and drawbacks of doing so. Such brandishing is no panacea and could even backfire if misinterpreted.
Testimony presented before the House Foreign Affairs Committee, Subcommittee on Europe, Eurasia, and Emerging Threats on March 21, 2013.
The U.S., while worried about a "9/11 in cyberspace," also ought to worry about what a "9/12 in cyberspace" would look like. The consequences of the reaction to a cyberattack could be more serious than the consequences of the original action itself.
How do governments characterize cyber threats and what role does law enforcement play in tackling cyber crime in different countries? These are some of the questions RAND Europe investigated on behalf of the Swedish National Defence College to inform the development of the Swedish Cyber Security Strategy.
The chances are growing that the United States will find itself in a crisis in cyberspace. Such crises can be managed by taking steps to reduce the incentives for other states to step into crisis, by controlling the narrative, understanding the stability parameters of the crises, and trying to manage escalation if conflicts arise from crises.
The U.S. Navy requires an agile, adaptable acquisition process that can field new IT capabilities and services quickly. Successful rapid acquisition programs in the Army, Air Force, and Marine Corps offer lessons for the Navy as it develops its own streamlined processes for computer network defense and similar program areas.
Testimony presented before the U.S. China Economic and Security Review Commission on January 27, 2011.
This annual report describes selected RAND Project AIR FORCE research during 2010 in the areas of strategy and doctrine; force modernization and employment; manpower, personnel, and training; and resource management.
This monograph addresses objectives, missions, tasks, and capabilities for the Air Force's new organization to address cyberspace issues (currently 24th Air Force), applying ''to fly and fight'' to cyberspace.
Identifies and analyzes the human capital management issues associated with the creation of a formal organization dedicated to cyberspace capabilities within the U.S. Air Force.
Explores the potential for and limitations to information warfare, including its use in weapons systems and in command-and-control operations as well as in the generation of ''noise'' and how far ''friendly conquest'' in cyberspace extends.
The Zapatista movement in Mexico is a seminal case of a new mode of conflict -- netwar -- in which the protagonists depend on using network forms of organization, doctrine, strategy, and technology.