This report, the second in a series, reveals insights from chief information security officers; examines network defense measures and attacker-created countermeasures; and explores software vulnerabilities and inherent weaknesses.

National security threats facing the West are fundamentally changing. In this book, Elisabeth Braw offers the first sustained analysis of how new tactics in the gray zone between war and peace dangerously weaken liberal democracies. She discusses the breadth of gray-zone aggression and presents strategies for better defense against it.

Why do nations break into one another's most important computer networks? There is an obvious answer: to steal valuable information or to attack. But this isn't the full story. This book draws on often-overlooked documents leaked by Edward Snowden, real-world case studies of cyber operations, and policymaker perspectives to show that intruding into other countries' networks has enormous defensive value as well. Two nations, neither of which seeks to harm the other but neither of which trusts the other, will often find it prudent to launch intrusions. This general problem, in which a nation's means of securing itself threatens the security of others and risks escalating tension, is a bedrock concept in international relations and is called the 'security dilemma'. This book shows not only that the security dilemma applies to cyber operations, but also that the particular characteristics of the digital domain mean that the effects are deeply pronounced. The cybersecurity dilemma is both a vital concern of modern statecraft and a means of accessibly understanding the essential components of cyber operations.

"Author Anne M. Corbin examines the unique role of defense counsel in juvenile courts, demonstrating the commonplace presence of role conflict, even among defenders in jurisdictions that clearly define this role, and showing the nature, extent, and impact of that role conflict on juvenile justice system stakeholders, processes, and policy"--

The role of a juvenile defender is riddled with conflict, and clients are uniquely challenging because of their lack of life experience and their underdeveloped decision-making abilities. In Dilemma of Duties, Anne M. Corbin examines the distinct function of defense counsel in juvenile courts, demonstrating the commonplace presence of role conflict and confusion, even among defenders in jurisdictions that clearly define their role. This study focuses on juvenile defense attorneys in North Carolina, where it is mandated that counselors advocate for their client’s wishes, even if they do not agree it is in the client’s best interest. In Dilemma of Duties, Corbin outlines patterns of role conflict that defenders experience, details its impact on counselors and clients in the juvenile justice system, and addresses the powerful influence of the juvenile court culture and the lack of resources for defenders. Tasked with guiding these children, counselors frequently must contend with and manage their clients’ general distrust of adults as they attempt to serve as their voices to the court. Understanding how juvenile defenders define their role and experience role conflict provides valuable insights into our juvenile justice system, especially its role in upholding due process rights. Such knowledge points to the importance of the training and practices of juvenile court functionaries and the efficacy, credibility, and legitimacy of the juvenile justice system itself.

Howard and LeBlanc (both are security experts with Microsoft) discuss the need for security and outline its general principles before outlining secure coding techniques. Testing, installation, documentation, and error messages are also covered. Appendices discuss dangerous APIs, dismiss pathetic excuses, and provide security checklists. The book explains how systems can be attacked, uses anecdotes to illustrate common mistakes, and offers advice on making systems secure. Annotation copyrighted by Book News, Inc., Portland, OR.

This book constitutes the refereed proceedings of the 11th International Workshop on Data Privacy Management, DPM 2016 and the 5th International Workshop on Quantitative Aspects in Security Assurance, QASA 2016, held in Heraklion, Crete, Greece, in September 2016. 9 full papers and 4 short papers out of 24 submissions are included in the DPM 2016 Workshop. They are organized around areas related to the management of privacy-sensitive informations, such as translation of high-level business goals into system-level privacy policies; administration of sensitive identifiers; data integration and privacy engineering. The QASA workshop centeres around research topics with a particular emphasis on the techniques for service oriented architectures, including aspects of dependability, privacy, risk and trust. Three full papers and one short papers out of 8 submissions are included in QASA 2016.