The whole of cyber defense: Syncing practice and theory
这篇综述探讨了首席信息安全官等网络专业人员面临的防御挑战,基于军事科学和网络安全概念开发了网络防御网格,对125篇信息系统期刊文章进行编码,并运用控制论视角提出三种战略防御模式:反应式、启发式和主动式。
This review explores the problems Chief Information Security Officers (CISOs) and other cyber professionals face when defending their organization against cyberattacks. Using a Cyber Defense Grid, which was developed based on military science and cybersecurity concepts and terminology, we coded 125 articles published in Information Systems (IS) journals. We also employed three avenues (i.e., lenses) from cybernetic theory to frame the coding results to derive cyber defense strategies. In particular, we propose three strategic cyber defense modes: reactive, heuristic, and proactive. Taken together, these three modes suggest ways in which organizations can react strategically within the whole cyber defense domain.