The IT Law Wiki
Advertisement

Definitions[]

A computer network attack (CNA) refers to:

[a]ctions taken through the use of computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks themselves.[1]
operations to manipulate, disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computer network itself, or to gain control over the computer or computer network.[2]

Overview[]

"The immediate objective of CNA is to deny the enemy the ability to use their computer systems, stored information, and networks as designed or intended. The secondary objective is to affect all those people, system]s, or organizations that rely on that information technology, interfering with or denying them the ability to do their jobs."[3]

"The ultimate intended effect is not necessarily on the targeted system itelf, but may support a larger effect, such as information operations or counterterrorism, e.g., altering or spoofing specific communications or gaining or delying access to adversary communications or logistics channels."[4]

"CNA relies on the data stream to execute the attack. . . . [S]ending a code or instruction to a central processing unit that causes the computer to short out the power supply is CNA."[5]

References[]

  1. U.S. Department of Defense, Joint Pub. 1–02: DOD Dictionary of Military and Associated Terms (Nov. 8, 2010, as amended through May 15, 2011) (full-text).
  2. Harvard University, Program on Humanitarian Policy and Conflict Research, Manual on International Law Applicable to Air and Missile Warfare 6 (May 15, 2009).
  3. Information as Power: China's Cyber Power and America's National Security, at 7.
  4. Joint Terminology for Cyberspace Operations, at 3.
  5. Air Force Supplement to the Department of Defense Dictionary of Military and Associated Terms, at 34-35.

See also[]

Advertisement