Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> II. LITERATURE REVIEW METHOD <s> The demand for cybersecurity professions faces continual shortages. Real-world cyber threats continue to drive this demand as we face a daily barrage of attacks on our critical infrastructure, national, and private industry assets. To meet this demand, many cybersecurity and information assurance educational programs have emerged. These programs range from specialized tracks within traditional academic programs to specialized degree titles developed solely for the purpose of producing cyber capable graduates. In this paper we document curriculum development that focuses on a systems level approach to cyber assurance education. This program incorporates both hardware and software aspects to ensure cyber security graduates are produced that can address adversaries that target complete system implementations. <s> BIB001 </s> Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> II. LITERATURE REVIEW METHOD <s> Intrusion Detection System (IDS) must reliably detect malicious activity. The expansion of web application also exponentially increases cyber threats. Current survey shows that application layer is more vulnerable to web attacks. There are more than 75% of attacks are deployed at application layer and out of that 90% are vulnerable to attacks. In this paper, we address issues of existing IDS i.e. low false positive rate, low false negative rate and data overload. We discuss about use of semantic web in the Intrusion Detection Systems. This article presents a proposition of using Semantic Web and Ontology concepts to define an approach to analyze Security logs with the goal to identify possible security issues. It extracts semantic relations between computer attacks and intrusions in an Intrusion Detection System. Ontology provides to enable, reuse of domain knowledge and it is also easier to understand and update legacy data. <s> BIB002 </s> Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> II. LITERATURE REVIEW METHOD <s> This paper seeks to create a practical taxonomy to describe cyber conflict events and the actors involved in them in a manner that is useful to security practitioners and researchers working in the domain of cyber operations. The proposed Cyber Conflict Taxonomy is an extensible network taxonomy organized as a plex data structure. Subjects of the taxonomy are entered as either Events or Entities and are then categorized using the categories and subcategories of Actions or Actors. Each of these categories is further subdivided into increasingly specific subcategories used to describe the defining characteristics of each subject and labeled lateral linkages are used to illustrate the associative relationships between Entities and Events. The categories are organized in both a hierarchical and associative manner to illustrate the relationships between subjects and categories. A prototype of this taxonomy was developed and tested using a test set of recent cyber conflict events and used to explore the relationship and connections between these events and the states, groups or individuals that participated in them. Furthermore, this taxonomy can potentially identify actors across different events based on their similar method of operation, toolsets and target sets. <s> BIB003 </s> Improving Interdisciplinary Communication With Standardized Cyber Security Terminology: A Literature Review <s> II. LITERATURE REVIEW METHOD <s> Abstract : Since creation of the first interconnected computer network in 1969 as an Advanced Research Projects Agency endeavor, cyberspace has expanded to affect many, if not most, aspects of Americans lives. Unfortunately, accessibility to and expansion of the Internet often proceeded without proper consideration for the security of the information contained or transmitted therein. The lack of necessary security and the anonymity afforded by the Internet led to equally rapid growth (if not more so) of the nefarious exploitation of this man-made domain. Regrettably, it is unlikely that the United States can protect itself from the growing threat of cybercrime and state-sponsored intrusions and operations. 1 However, this prospect should not limit attempts by the United States to defend its cyberspace infrastructure, whether the threat comes from terrorists, cybercriminals, or states and their proxies. 2 Consequently, America must develop offensive and defensive cyber capabilities. Additionally, clearly defined policies require development and implementation to ensure cohesion across the whole of government. With respect to cyber domain attacks on US civilian systems attributable to a nation-state, the Department of Homeland Security (DHS) should have responsibility for responding (in the form of consequence management); US Northern Command (USNORTHCOM), for domestic attack assessment; and US Cyber Command (USCYBERCOM), for defense and any counterstrike response (in coordination with applicable combatant commands and US national agencies). This article describes the cyberspace environment and its threats; explains the current authorities, roles, and responsibilities of these and other agencies; and details how these authorities, roles, and responsibilities need modification to best protect US national security interests. <s> BIB004
The intention of this literature review was to assess the state of emerging cyber security research and explore avenues of cyber security that have not received as much traditional attention as standard topics of network security, cryptography, and basic system security that a typical university curriculum in focuses on  -  . The manual literature review was performed via a number of particular searches throughout September 2015 with the MIT libraries revolving around journal papers containing the word or prefix ''cyber'' and selected based on breadth of coverage as candidates for further reading. Selection criteria included priority given to other literature reviews and papers whose intention was broad characterization of issues, with a slight preference away from technical papers. When technical papers were selected for review they were more often cyber-physical security papers, such as those on SCADA and PLC security. In addition, a number of papers from the Columbia University/Global Commission on Internet Governance (GCIG) 2015 Conference on Internet Governance and Cybersecurity [sic] were selected independently for review. In addition, the selection process evolved slightly over time, becoming more restrictive. The selection process for papers we identified using the MIT libraries online database is illustrated by the following search parameters, which were chosen to narrow down the majority of the papers selected for the literature review. Successive terms in each search (e.g. ''review'' followed by ''overview'') were added sequentially in time as the search was revised during the initial paper selection process in September 2015: 1. (cyber) AND (review OR overview OR meta-analysis OR survey OR primer OR literature OR outline OR governance OR international OR global OR sustainable) NOT (bullying OR psychology OR psychosocial) 2. cyberspace AND ((review OR overview OR meta OR survey OR primer OR literature OR outline or sustainable)) NOT ((bullying OR psychology OR psychosocial)) 3. (cyber) AND (ontology) All searches were restricted to academic journal papers or conference papers from the years 2012-2015. From these searches and the GCIG Conference, 134 candidate papers were selected. Further manual inspection for breadth of coverage was performed, with preference to topics less commonly covered in cyber security education. Time constraints for reading the papers also played a somewhat restrictive role in paper selection. 77 papers in total were selected from this group and were read or skimmed for content BIB001 - BIB002 , BIB003 - BIB004 . The number of citations per paper was not known when selecting papers. 