Professional Knowledge: Computer Network Operations

Front 1

Core Capabilities of Information Operations (5)

Back 1

1. EW- Electronic Warfare
2. CNO- Computer Network Operations
3. PSYOP- Psychological Operations
4. MILDEC- Military Deception
5. OPSEC- Operational Security

Front 2

USCYBERCOM established on:
Command:

Back 2

by SecDef in October 2009
under USSTRATCOM)

Front 3

Naval Component of USCYBERCOM

Back 3

FLTCYBERCOM (10th FLEET)

Front 4

Diagram components, in order

Back 4

CNO>USFF>SURFOR, AIRFOR, SUBFOR

STRATCOM>USCYBERCOM (NSA)>FLTCYBERCOM (10th)>Subordinate Cyber Commands

Front 5

List 6 Operational Components

Back 5

Cyberspace
Cyberspace Operations
Global Information Grid (GIG)
Computer Network Attack (CNA)
Computer Network Defense (CND)
Computer Network Exploitation (CNE)

Front 6

Cyberspace

Back 6

global domain within information environment, includes internet, telecommunications networks, computer systems, processors and controllers.

Front 7

Cyberspace Operations

Back 7

employ cyber capabilities, primary purpose to achieve objectives in cyberspace. Includes activities to operate and defend GIG

Front 8

Global Information Grid (GIG)

Back 8

globally interconnected, end-to-end set of info capabilities, associated processes and personnel. collect, process, store, disseminate, and manage info.

Front 9

Computer Network Attack (CNA)

Back 9

Actions taken throught the use of computer networks to disrupt, deny, degrade or destroy info on computers

Front 10

Computer network Defense (CND)

Back 10

Actions taken to protect, monitor, analyze, detect, and respond to unauthorized activity in dept defense systems

Front 11

Computer Network Exploitation (CNE)

Back 11

computer networks are used to enable operations and collect intelligence to get data from target or adversary networks.

Front 12

Information Assurance (IA)

Back 12

measures that protect or defend information by assuring availability, integrity, authentication, confidentiality, and non-repudiation. protection, detection, and reaction capabilities

Front 13

Network defenders strive for:

Back 13

Availability
Integrity
Authentication
Confidentiality
Non-repudiation

Front 14

what lays out the system of classification, declassification, and handling of national security info?

Back 14

The current executive order

Front 15

how do you calculate sensitivity?

Back 15

it is based on a calculation of the damage to national security that the release of the information would cause.

Front 16

levels of classification:

Back 16

unclassified
confidential
secret
top secret

Front 17

top secret clearance...

Back 17

does not authorize you to all top secret information. Some information is given on a need to know status.

Front 18

2 main dod networks

Back 18

1. Non-secure internet protocol router network (NIPRNET)
2.Secret Internet protocol router network (SIPRNET)

Front 19

NIPRNET info

Back 19

millions of computers connected to internet with complete access to WWW

Front 20

SIPRNET info

Back 20

not connected to internet, uses same technology as internet, store and transmit classified info up to secret level

Front 21

Defense in Depth

Back 21

the stationing of mutually supporting defense positions designed to absorb and progressively weaken attack, prevent initial observations of the whole position by the enemy, and to allow commander to maneuver the reserve

Front 22

Defense layers in order

Back 22

data
application
host
internal network
perimeter
physical
policies, procedures, awareness

Front 23

List types of computer network attack

Back 23

social engineering
phishing
spoofing and redirection
software vulnerability/malware
password cracking
intercepting traffic
security hopping
improper use of CAC

Front 24

describe social engineering

Back 24

attacker pieces together information from public sources to break into a system

Front 25

describe phishing

Back 25

email or website scam to trick people into giving credit card information, bank account, SSN, passwords, etc. dangerous for self and DOD

Front 26

describe spoofing and redirection

Back 26

using legit authentication and identification data without authorization, to mimic a subject different from attacker. impersonating, piggybacking, etc