Information Operations Conditions (INFOCONs) In The Real World

1
Information Operations Conditions (INFOCONs) In
The Real World
Major George L. McMullin II
UNCLASSIFIED
2
INFOCONs

• What
• Why
• How

UNCLASSIFIED
3
VIRTUAL COMMUNITY, VIRTUAL THREAT
Virtual Enemy
Virtual Country
Vulnerabilities
Global Info Flow
Growing Technology Targets
Proliferating Attack Weapons
Technology Leads Laws
UNCLASSIFIED
4
COUNTERING THE THREAT

• Protect
• Detect
• React

People Processes Systems Facilities
Policy/Concepts Awareness Security Assessments
Exercises Response Capabilities
UNCLASSIFIED
5

• DEFCON
• National
• THREATCON
• Geographical
• INFOCON
• Organizational

UNCLASSIFIED
6
USSTRATCOMs RESPONSE

• Training and Awareness
• Info Operations Conditions (INFOCONS)
• Computer Emergency Response Team (STRATCERT)
• Red Team
• Exercises/Testing
• New Intrusion Detection Technology Demonstration

UNCLASSIFIED
7
INFORMATION ASSURANCE POSTURE
Monitor Threats
Assess Vulnerability
Manage Risk
UNCLASSIFIED
8
INFORMATION OPERATIONS CONDITIONS(INFOCONs)

• Escalating Information Threat Conditions
• Normal gt Alpha gt Bravo gt Charlie gt Delta
• Responses for each condition
• Developed by USSTRATCOM personnel
• Defense Science Board report
• Exercise lessons learned
• Focus - C4I defense from computer network attack

UNCLASSIFIED
9
Advantage Hacker

• Technology Edge
• Difficult to develop perfect defense
• High cost in time and money
• Tools
• Free vs Expensive
• Simple vs Complicated
• Picks the time, place, medium, and method
• David Effect

UNCLASSIFIED
10
Effective Employment

• Hostile intent identified?
• Accomplish aims of aggressors?
• Increase in probes/attacks?
• Recommended?
• Mitigating circumstances?

UNCLASSIFIED
11
Coming Soon. . . a Winter Blockbuster!!
Y2K!
All Shows Free!!
One Time Only!
1 Jan 2000!
All Theaters!
El Nino Of The Cyber World!
Coming Soon!
UNCLASSIFIED