Mr Anthony Guess-Johnson consults and volunteers for CSFI in regards to fostering and promoting collaboration of cyberspace topics among interested parties. He has operational experience from currently serving fifteen years in the United States Marine Corps to include: two deployments to Iraq, two deployments to Afghanistan, one deployment to the Mediterranean Sea, and six tours in Okinawa Japan. In his professional capacity he assists the USMC within training personnel and providing planning support to military exercises. In assisting CSFI Mr Guess-Johnson has taken feedback and lessons learned from CSFI collaboration forums and applied them to contemporary challenges. Mr Guess-Johnson also assists with the review of CSFI training curriculum, course structure, and the design of collaboration forums.
Automated Offense and Defense – Response, Concepts and Risks
The concept of automated cyberspace offensive and defensive response actions have critical variables which necessitate a serious assessment in order to implement a strategy of incorporating automated measures. These critical variables are the number of personnel within an organization and the degree of automation sought. Although automation may decrease the number of personnel to run an offensive or defensive system, these systems are only as good as the protocols inherent within their design. An adversary operating outside the parameters of a system’s protocols can neutralize the advantage the system may have. By reducing the dependency on automation, the ability of humans to make subjective assessments about cyberspace dangers is the greatest quality assurance mechanism to adjust to evolving cyberspace threats. However, an increase in personnel invariably increases an organization’s expenses. The challenge for organizations is to determine how much automation is acceptable in risk compared to what an organization considers a reasonable workforce size. This presentation highlights the interaction between human decision making and automation, how automation can aid in decision making, and how automated offensive and defence response actions can be exploited. Understanding the risk associated with leveraging automation in lieu of a larger workforce will enable an organization to implement a favourable automation strategy.