Digital Resilience

FOREWORD

The White House, Pentagon, State Department, NSA, an Iranian nuclear plant unconnected to the Internet, and numerous large banks and corporations have been successfully hacked. Almost any network can be.

The goal of network owners and operators should not be just to prevent unauthorized penetration. That goal is almost too ambitious to be realized. In addition to seeking to exclude malicious actors, network operators should seek a more attainable goal, to be resilient under attack. Resilient networks are those that quickly identify and limit the activities of unauthorized actors. They are networks that are architected to minimize the potential for damage. Most important, they are characterized by an ability to resume essential operations ...