To Do, To Die, To Reason Why offers a new account of the ethics of war and the legal regulation of war. It is especially concerned with the conduct of individuals, including whether they are required to follow orders to go to war, what moral constraints there are on killing in war, what makes people liable to be killed in war, and the extent to which the laws of war ought to reflect the morality of war. Victor Tadros defends a largely anti-authority view about the morality of war, and notable moral constraints on killing in war, such as the Doctrine of Doing and Allowing and a version of the Doctrine of Double Effect. However, he argues that a much wider range of people are liable to be harmed or killed in war than is normally thought to be the case, on grounds of both causal involvement and fairness. And it argues that the laws of war should converge much more closely with the morality of war than is currently the case.
This book provides the conceptual foundation of security risk assessment and thereby enables reasoning about risk from first principles. It presents the underlying theory that is the basis of a rigorous and universally applicable security risk assessment methodology. Furthermore, the book identifies and explores concepts with profound operational implications that have traditionally been sources of ambiguity if not confusion in security risk management. Notably, the text provides a simple quantitative model for complexity, a significant driver of risk that is typically not addressed in security-related contexts. Risk and The Theory of Security Risk Assessment is a primer of security risk assessment pedagogy, but it also provides methods and metrics to actually estimate the magnitude of security risk. Concepts are explained using numerous examples, which are at times both enlightening and entertaining. As a result, the book bridges a longstanding gap between theory and practice, and therefore will be a useful reference to students, academics and security practitioners.
Effective introduction to cyber threat intelligence, supplemented with detailed case studies and after action reports of intelligence on real attacks Cyber Threat Intelligence introduces the history, terminology, and techniques to be applied within cyber security, offering an overview of the current state of cyberattacks and stimulating readers to consider their own issues from a threat intelligence point of view. The highly qualified author takes a systematic, system-agnostic, and holistic view to generating, collecting, and applying threat intelligence. The text covers the threat environment, malicious attacks, collecting, generating, and applying intelligence and attribution, as well as legal and ethical considerations. It ensures readers know what to look out for when looking for a potential cyber attack and imparts how to prevent attacks early on, explaining how threat actors can exploit a system’s vulnerabilities. It also includes analysis of large scale attacks such as WannaCry, NotPetya, Solar Winds, VPNFilter, and the Target breach, looking at the real intelligence that was available before and after the attack. Sample topics covered in Cyber Threat Intelligence include: The constant change of the threat environment as capabilities, intent, opportunities, and defenses change and evolve. Different business models of threat actors, and how these dictate the choice of victims and the nature of their attacks. Planning and executing a threat intelligence programme to improve an organisation’s cyber security posture. Techniques for attributing attacks and holding perpetrators to account for their actions. Cyber Threat Intelligence describes the intelligence techniques and models used in cyber threat intelligence. It provides a survey of ideas, views and concepts, rather than offering a hands-on practical guide. It is intended for anyone who wishes to learn more about the domain, particularly if they wish to develop a career in intelligence, and as a reference for those already working in the area.
Threats in Context: Identify, Analyze, Anticipate begins with the premise that a risk assessment is relevant primarily—and hinges upon—the correct evaluation of the threat. According to the author, all the other stages of the risk evaluation are, in fact, dependent on getting the understanding and measurement of the threat right. Despite this truism, many risk assessment methods (i.e., the process of determining the threat) tend to rush through a vague typology, offer minimal classifications, utilize an often-outdated list of potential malevolent actions—all of which are based on precedent occurrences. There should be a way to improve on this: a way to provide security practitioners and analysts better tools to deal with the task of analyzing threats and risk and to prepare for such contingencies appropriately. The book begins with a retrospective on the threats from the 1960s through to the present. The list is long and includes hijackings and airport attacks, piracy, drug smuggling, attacks on trains, pipelines, city-wide multi-site attacks, road attacks, workplace shootings, lone wolf attacks, drone attacks, bombings, IEDs, sniper attacks, random stabbings, and more. Terrorism, workplace violence, and active shooter scenarios all present asymmetric problems and unique challenges that require new ways of thinking, operationally, of risk to properly prevent, mitigate, and respond to such threats. The author demonstrates how to develop an appropriate methodology to define both current and emerging threats, providing a five-step process to self-evaluate—to determine an organization’s, a location’s, or a facility’s threats and to plan risk mitigation strategies to accurately identify, minimize, and neutralize such threats. Coverage progressively builds from correctly identifying the root threats—both global and local—to a subsequent understanding of the corollary relationship between threat, vulnerability, and risk, with the threat serving as the fundamental cornerstone of the risk evaluation. As such, Threats in Context will serve as a pivotal resource to security professionals from all backgrounds serving in a variety of fields and industries.
This volume is the result of a conference held at the University of California, Irvine, on the topics that provide its title -- choice, decision, and measurement. The conference was planned, and the volume prepared, in honor of Professor R. Duncan Luce on his 70th birthday. Following a short autobiographical statement by Luce, the volume is organized into four topics, to each of which Luce has made significant contributions. The book provides an overview of current issues in each area and presents some of the best recent theoretical and empirical work. Personal reflections on Luce and his work begin each section. These reflections were written by outstanding senior researchers: Peter Fishburn (Preference and Decision Making), Patrick Suppes (Measurement Theory and Axiomatic Systems), William J. McGill (Psychophysics and Reaction Time), and W.K. Estes (Choice, Identification and Categorization). The first section presents recent theoretical and empirical work on descriptive models of decision making, and theoretical results on general probabilistic models of choice and ranking. Luce's recent theoretical and empirical work on rank- and sign-dependent utility theory is important in many of these contributions. The second section presents results from psychophysics, probabilistic measurement, aggregation of expert opinion, and test theory. The third section presents various process oriented models, with supportive data, for tasks such as redundant signal detection, forced choice, and absolute identification. The final section contains theory and data on categorization and attention, and general theoretical results for developing and testing models in these domains.
Information is a key resource for all enterprises. From the time information is created to the moment it is destroyed, technology plays a significant role in containing, distributing and analysing information. Technology is increasingly advanced and has become pervasive in enterprises and the social, public and business environments.
