Sunday, December 18, 2016

Check Out My TeePublic Designs

Over cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 years fans of this blog have asked if I would consider selling merchandise with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity logo. When I taught classes for TaoSecurity from 2005-2007 I designed T-shirts for my students and provided cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m as part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 registration package. This weekend I decided to exercise my creative side by uploading some designs to TeePublic.

TeePublic offers clothing along with mugs, phone cases, notebooks, and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r items.

Two are based on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity logo. One includes cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 entire logo, along with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 company motto of "The Way of Digital Security." The second is a close-up of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity S, which is a modified yin-yang symbol.

Two ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r designs are inspired by network security monitoring. One is a 1989-era map of MilNet, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 United States' military network. This image is found in many places on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Internet, and I used it previously in my classes. The second is a close-up of a switch and router from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity labs. I used this equipment to create packet captures for teaching network security monitoring.

I hope you like cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se designs. I am particularly partial to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity Logo mug, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 TaoSecurity S Logo Mug, and TaoSecurity S Logo t-shirt.

Let me know what you think via comments here.

Update 28 Dec 2016:

Check out cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 MilNet mug!


Tuesday, October 18, 2016

Five Ways That Good Guys Share More Than Bad Guys

It takes a lot for me to write a cybersecurity blog post cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se days. I spend most of my writing time working on my PhD. Articles like Nothing Brings Banks Togecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r Like A Good Hack drive me up cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 wall, however, and a Tweet rant is insufficient. What fired me up, you might ask? Please read cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following excerpt:

[Troels] Oerting, with no small dose of grudging admiration, says his adversaries excel at something that can’t be addressed with deep pockets or killer software: They’re superb networkers. “The organized crime groups in cyber are sharing much better than we are at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 moment,” says Oerting, a Dane with a square jaw and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 watchful eyes of a cop who’s investigated cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 underworld for 35 years. “They are sharing methodologies, knowledge, tools, practices—what works and what doesn’t.”

Statements like cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se are regularly submitted without evidence. In response, I provide five sources of evidence why organized crime groups do not share more than defenders.

1. Solution providers share. Both commercial and not-for-profit solution providers share enormous amounts of information on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 security landscape. Some of it is free, and some of it is sold as products or consulting. Thousands of security companies and not-for-profit providers compete for your attention, producing white papers, Webinars, and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r resources. You might argue that all of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m claim to be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 answer to your problem. However, this situation is infinitely better than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 1980s and early 1990s. Back cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n, hardly any solutions, or even security companies and organizations, existed at all.

Criminal solution providers share, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y do so by selling cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir wares. This is true for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 open world as well, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 volume of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 open world is orders of magnitude greater.

2. Government agencies share. My fellow Americans, has your organization you been visited by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FBI? Federal agents notified more than 3,000 U.S. companies [in 2013] that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir computer systems had been hacked. The agents didn't just walk in, drop a letter, and leave. If a relationship did not exist previously, it will now be developed.

Beyond third party breach notifications, agencies such as NIST, DHS, and ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs regularly share information with organizations. They may not share as much as we would like, but again, historical perspective reveals great progress.

3. Books, articles, and social media share. The amount of readable material on security is astounding. Again, in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 late 1980s and early 1990s hardly any books or articles were available. Now, thousands of resources exist, with new material from publishers like No Starch arriving monthly. Where are cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 books written by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 underground?

4. Security conferences share. You could spend every week of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 year at a security conference. If you happen to miss a talk, it's likely cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 incomparable Iron Geek recorded it. Does cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 underground offer similar opportunities?

5. Private groups and limited information exchange groups share. A final category of defender sharing takes place in more controlled settings. These involve well-established Information Sharing and Analysis Centers (ISACs), developing Information Sharing and Analysis Organizations (ISAOs), and private mailing lists and forums with limited membership. These could possibly be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 closest analogue to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 much-esteemed underground. Even if you disregard points 1-4 above, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 quality of information shared in this final category absolutely equals, if not exceeds, anything you would find in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 criminal world.

If you disagree with this analysis, and continue to lament that bad guys share more than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 good guys, what evidence can you provide?

Monday, June 27, 2016

Updated PhD Thesis Title

Yesterday I posted Latest PhD Thesis Title and Abstract. One of my colleagues Ben Buchanan subsequently contacted me via Twitter and we exchanged a few messages. He prompted me to think about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title.

Later I ruminated on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title of a recent book by my advisor, Dr. Thomas Rid. He wrote Cyber War Will Not Take Place. One of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 best parts of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title. In six words you get his argument as succinctly as possible. (It could be five words if you pushed "cyber" and "war" togecá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 thought alone makes me cringe, in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 age of cyber-everything.)

I wondered if I could transform my latest attempt at a cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis title into something that captured my argument in a succinct form.

I thought about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 obsession of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 majority of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 information security community on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tool and tactics level of war. Too many technicians think about security as a single-exchange contest between an attacker and a defender, like a duel.

That reminded me of a problem I have with Carl von Clausewitz's definition of war.

We shall not enter into any of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 abstruse definitions of war used by publicists. We shall keep to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 element of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 thing itself, to a duel. War is nothing but a duel on an extensive scale.

- On War, Chapter 1

Clausewitz continues by mentioning "cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 countless number of duels which make up a war," and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n makes his famous statement that "War cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365refore is an act of violence to compel our opponent to fulfill our will." However, I've never liked cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tactically-minded idea that war is a "duel."

This concept, plus cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 goal to deliver a compact argument, inspired me to revise my cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis title and subtitle to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following:

Campaigns, Not Duels: The Operational Art of Cyber Intrusions

In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first three words I deliver my argument, and in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 subtitle I provide context by including my key perspective ("operational art"), environment ("cyber," yes, a little part of me is dying, but it's a keyword), and "intrusions."

When I publish cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis as a book in 2018, I hope to use cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same words in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 book title.

Saturday, June 25, 2016

Latest PhD Thesis Title and Abstract

In January I posted Why a War Studies PhD? I recently decided to revise my title and abstract to include attention to both offensive and defensive aspects of intrusion campaigns.

I thought some readers might be interested in reading about my current plans for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis, which I plan to finish and defend in early 2018.

The following offers cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 title and abstract for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis.

Network Intrusion Campaigns: Operational Art in Cyberspace 

Campaigns, Not Duels: The Operational Art of Cyber Intrusions*

Intruders appear to have cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 upper hand in cyberspace, eroding users' trust in networked organizations and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 data that is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir lifeblood. Three assumptions prevail in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 literature and mainstream discussion of digital intrusions. Distilled, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se assumptions are that attacks occur at blinding speed with immediate consequences, that victims are essentially negligent, and that offensive initiative dominates defensive reaction. 
This cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis examines cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se assumptions through two research questions. First, what characterizes network intrusions at different levels of war? Second, what role does operational art play in network intrusion campaigns? 
By analyzing incident reports and public cases, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis refutes cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 assumptions and leverages cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 results to improve strategy.  
The cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis reveals that strategically significant attacks are generally not "speed-of-light" events, offering little chance for recovery.  Digital defenders are hampered by a range of constraints that reduce cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir effectiveness while simultaneously confronting intruders who lack such restrictions. Offense does not necessarily overpower defense, constraints notwithstanding, so long as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 defenders conduct proper counter-intrusion campaigns. 
The cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis structure offers an introduction to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 subject, and an understanding of cybersecurity challenges and trade-offs. It reviews cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 nature of digital intrusions and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 levels of war, analyzing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 interactions at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 levels of tools/tactics/technical details, operations and campaigns, and strategy and policy. The cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis continues by introducing historical operational art, applying lessons from operational art to network intrusions, and applying lessons from network intrusions to operational art. The cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis concludes by analyzing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 limitations of operational art in evolving digital environments.

*See cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 post Updated PhD Thesis Title for details on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 new title.

Tuesday, January 19, 2016

Lt Gen David Deptula on Desert Storm and Islamic State

This weekend Vago Muradian interviewed Lt Gen (ret) David Deptula, most famous for his involvement as a key planner for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Desert Storm air campaign.

I recommend watching cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 entire video, which is less than 8 minutes long. Three aspects caught my attention. I will share cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m here.

First, Lt Gen Deptula said that Desert Storm introduced five changes to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 character of warfare. I noted that he used cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 term "character," and not "nature." If you are a student of warfare and/or strategy, you are most likely in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 camp that says warfare has an unchanging nature, although its character can change. This is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Clausewitz legacy. A minority camp argues that warfare can change both nature and character.

Second, turning to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 five changes introduced by Desert Storm, Lt Gen Deptula listed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following.

1. Desert Storm introduced "expectations of low casualties, for both sides." I agree with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 expectation of low casualties for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 US, but I don't think low Iraqi casualties were a primary concern. One could argue that stopping cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 war during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "highway of death" showed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 US didn't want to inflict large casualties on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Iraqi forces, but I still think low casualties were primarily a concern for US troops.

2. Desert Storm "normalized precision." Even though a minority of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ordnance delivered during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 war were precision weapons, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365ir use steadily increased throughout all later conflicts.

3. Desert Storm introduced joint and combined organization and execution. This was indeed quite a step forward, although I recall reading that that USMC airpower took measures to remain as separate as possible.

4. Desert Storm put cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 concepts of "effect-based operations" into action. There is no doubt about this one. Lt Gen Deptula talks about a disagreement with Gen Schwartzkopf's staff concerning disabling cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Iraqi power grid. Air power achieved cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 effect of disabling cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 grid within 3-4 days, but Schwartzkopf's team used traditional attritional models, noting that less than a certain percentage of destruction mean mission failure. Deptula was right; cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y were wrong.

5. Desert Storm was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first major conflict where airpower was cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 centerpiece and key force. Call me biased, and no disrespect to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 land forces in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Gulf, but I agree with this one.

The third and final noteworthy element of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 interview involved Lt Gen Deptula's opinion of Islamic State. He said "it's not an insurgency. IS is a state." He said IS possesses cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 five elements of a state, namely:

1. Leadership
2. Key essential systems
3. Infrastructure
4. Population
5. Fielded military forces

I agree with his assessment. I also believe that Western leaders are unwilling to grant IS cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 legitimacy of it being a state, so cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y persist in calling IS names like ISIS, ISIL, Daesh, and so on. I see no problem with that approach, since it incorporates political sensitivities. However, that approach also aggravates cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 perception that Western leaders are out of touch with reality.

Friday, January 08, 2016

Why a War Studies PhD?

When I begin receiving multiple questions on a topic, it's a signal that I should write a blog post.

Several of you have asked me about my experience as a PhD candidate in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 King's College London Department of War Studies. In this post I will try to answer your questions by explaining how I got to this point and my overall impressions about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program.

My Academic Background

I have bachelor's of science degrees in history and political science from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 US Air Force Academy, and a master's degree in public policy from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Harvard Kennedy School. My last formal academic training ended in 1997 when I graduated from cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Air Force Intelligence Officers Training Course.

Why a PhD?

I seriously began considering working on my PhD in 2006, when I was an independent consultant. I've guest lectured at dozens of schools over cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 years, and taught hundreds of students through my Black Hat courses. I thought cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 PhD experience would open more doors for future academic opportunities, and I welcomed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opportunity to make an original contribution to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 literature. In more recent years I've testified to Congress and worked with think tanks, and in both environments PhDs are common.

My First PhD Choice

After reading Security Engineering (cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first edition), I was a fan of Dr Ross Anderson at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 University of Cambridge Computer Laboratory. I contacted him, as well as some of his PhD candidates. They invited me to guest lecture at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 lab, which I did in May 2006. I considered cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 possibility of doing research on network security motioning. I liked cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 idea of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "British system," which emphasized practical research, no coursework, and a high degree of independence. I would have to move my family to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 UK.

In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 spring of 2007, however, I made contact with my future boss at General Electric. I decided instead to join GE as director of incident response. It was too good an opportunity. That put my PhD plans on hold.

A New Direction

In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fall of 2012 I listened to a 24 lecture series titled Masters of War: History's Greatest Strategic Thinkers by Professor Andrew R. Wilson of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Naval War College. Dr. Wilson reintroduced me to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 strategists I had learned about as a cadet twenty years earlier, and kindled a deep interest in strategic history, thought, and practice. I began looking for military history and strategy programs, starting with this list maintained by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Society for Military History.

In cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 summer of 2013, The Economist magazine asked if I would participate in an online debate with Dr Thomas Rid, author of Cyber War Will Not Take Place. After cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 debate I read Thomas' book, and learned he was a professor in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 KCL War Studies department. I enjoyed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 debating process and Thomas' book, so I decided to contact him and some of his PhD candidates to learn more about cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 PhD program.

During that process, FireEye acquired Mandiant in late December 2013. I decided to change roles and become a full-time strategist, inspired by my changing interests and Prof Wilson's course. That decision definitively shifted my focus away from tools and tactics, and towards operations/campaigns and strategy.

My Final PhD Choice

In early 2014 I connected with Rob Lee, who had started his PhD with Thomas in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fall of 2013. Speaking with Thomas and Rob, I learned cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 KCL War Studies PhD was even more to my liking than cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Cambridge program. KCL also emphasized practical research, no coursework, and a high degree of independence. I would not have to move my family to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 UK, but I would have to be very disciplined and stay in contact with my advisor and colleagues.

I applied to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program to meet cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 spring 2014 deadline, with enrollment in fall 2014. I was accepted and started cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fall of 2014, while still maintaining my day job at Mandiant and FireEye.

The Thesis

The desired output for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 KCL PhD is a cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis, a 80,000 to 100,000 word work with a goal of eventual publication as a book. Since I was already considering writing my fifth book, this seemed an excellent way to accomplish that goal. Ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rs might find this a scary proposition, but I always enjoyed self-paced research, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 opportunity to devise and answer original research questions was appealing.

Milestones

I will shift my focus slightly to those who might be interested in applying to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program. The PhD program offers three major milestones. First, one must be accepted to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program. I recommend perusing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 list of people to find faculty and current students with interests similar to yours. Contact cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m via email to identify possible advisors and colleagues. If you aren't able to attract any interest, it's a sign you might not have a topic suitable for a PhD. That's a personal judgement, of course.

I approached cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 application process very seriously. I took several months to complete it and submitted my Strategy, Not Speed piece as my writing sample. Thankfully I was accepted!

Once in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 program, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 second major milestone is called cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "mini viva" or cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "upgrade." Prior to passing this milestone, as I understand it, one is not technically a PhD candidate yet. One must write a document of about 20,000 words that includes a cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis abstract, outline, introductory chapter, sample chapter, and completion work plan. The student must cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n defend that document, live, in front of a panel. I passed that stage of my PhD journey late last year.

The third and final major milestone is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "viva" or cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 defense of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 completed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis. I am several years away from this step, but I expect it to be an extended version of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 upgrade process. Remember that one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 purposes of a PhD is to demonstrate cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ability to produce high-level, independent research, so I expect my viva to reflect that philosophy.

My Experience

My experience thus far has been excellent and I plan to continue. However, I would like to highlight a few aspects of my situation. First, I am doing research independently, not at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Strand campus in central London. Several of my colleagues are cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re now, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y have daily access to a whole world of academic experiences that are unavailable to remote students. If you want a campus experience, you should study in London.

Second, I am still working my day job and being a husband and facá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r, which are my priorities. That means I have to be very careful about  how I manage my time. I felt that I could handle cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 situation, based on my experience writing and publishing my last book. I started writing my last NSM book in January 2013 and had it ready for Black Hat in late July that year, during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time when Mandiant released cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 APT1 report.

Third, my cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 nature of counter-intrusion campaigns, dovetails well with my day job and professional interests. I would not be able to pursue a PhD in a field not related to my professional life -- I simply wouldn't have cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time for research. Because my research matches cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 needs and interests of my employer, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 work I do for Mandiant and FireEye frequently doubles as research for my PhD. Obviously I have a very flexible employer who supports my research, and for that I am grateful.

Fourth, although I am independent, thanks to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 initiative of colleagues in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 DC area, I am not alone. Last month one of us started a group for War Studies students in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 DC area, and we plan to have monthly meetings. I also try to meet with KCL personnel (students or faculty) if we happen to be in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same part of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 world at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same time. I started a Slack channel but it hasn't really yet taken off.

Recommended Reading

In addition to reading cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 KCL and War Studies Web sites, I suggest reading Authoring a PhD by Patrick Dunleavy. It is generally aimed at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 British PhD process, focusing on cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 so-called "big book" cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis.  If you find cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sort of research and writing described in that book to be exciting, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365n a KCL PhD might be for you.

Conclusion

In brief, I recommend cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 KCL War Studies PhD if you meet cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 following requirements:

  • You have a suitable undergraduate background, temperament, and social and financial situation, such that you are capable of independent research at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 highest level.
  • You have an interest that syncs with at least one possible advisor in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 department.
  • You are committed to researching for several years, and writing 80,000-100,000 words on your subject, answering research questions to make original academic and practical contributions to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 field.

I may add updates to this post, or simply add cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365m as comments or as answers to questions.

Happy 13th Birthday TaoSecurity Blog

Today, 8 January 2016, is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 13th birthday of TaoSecurity Blog! This is also my 3,000th blog post.

I wrote my first post on 8 January 2003 while working as an incident response consultant for Foundstone. Kevin Mandia was my boss. Today I am starting my third year as Chief Security Strategist at FireEye, still working for Kevin Mandia. (It's a small world. In April I will hit my five year anniversary with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Mandiant part of FireEye.)

In 2015 my blogging frequency increased dramatically, with 55 posts, more than double my 2014 total of 23 and triple my 2013 output of 18. In 2012 I posted 60 stories, so I was close to that level in 2015. It's still nothing like my writing from 2003-2011 however!

Why cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 drop over cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 years? I "blame" my @taosecurity Twitter account. With almost 36,000 followers, easy posting from mobile devices, and greater interactivity, Twitter is an addictive platform. I have authored roughly 16,000 Tweets since first posting in July 2009.

Second, blogging used to be cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 primary way I could share my ideas with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 community. These days, speaking and writing are a big part of my professional duties. I try to track media reports here and I archive my non-blog writing at my Academia.edu account.

Third, time is precious, and blogging often takes a back seat. I'd racá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r spend time with my family, write and research my PhD, collaborate with think tanks, and so on.

I still plan to keep blogging in 2016. Twitter's only a 140 character platform, and some days I have cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 time and inclination to share a few thoughts beyond what I've said or written for work. I have to decide if I want to write about strategy here, or move to anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r location.

Thanks you to Google for providing me this free platform for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 past 13 years, and to you for reading what I post. I'm one of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 few original "security bloggers" still active, though not writing in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same way as I did in 2003.

I realize my transition from technical details to strategic considerations has alienated some readers, but I am comfortable with my interests and I believe cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 greater security community needs to hear from people who think outside cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 tools and tactics box. This is especially true when cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 majority of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 security community isn't aware cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y are inside such a box, or that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365re is anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r set of ideas and people available to contribute to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 world's digital safety and security.

Tuesday, January 05, 2016

2014-2015 Professional Reading Round-Up

At an earlier point in my career, I used to read a lot of technical security books. From 2006 to 2012 I published a series of Best Book Bejtlich Read posts. Beginning in 2013 I became much more interested in military-derived strategy and history, dating back to my studies at cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Air Force Academy in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 early 1990s. I stopped reviewing books at Amazon.com and didn't talk about my reading.

Last week I read Every Book I Read in 2015 by T. Greer, which inspired me to write my own version of that post. I have records for 2014-2015 thanks to a list I keep at Amazon.com. I'm modifying Greer's approach by not including personal reading, but I am adopting his idea to bold those titles that were my favorites.

The following are presented such that cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 most recently read appears first.

2015 Reading (37 books):

Restraint: A New Foundation for U.S. Grand Strategy 
by Barry R. Posen *(I'm joining cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "restraint" school. I will say more about this in 2016.)

Learning to Eat Soup with a Knife: Counterinsurge​ncy Lessons from Malaya and Vietnam
by John A. Nagl

On Guerrilla Warfare
by Mao Tse-tung

The Rise of China vs. cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Logic of Strategy
by Edward N. Luttwak *(I became a Luttwak fan when I read his book on Rome in 2014. Although I don't agree with everything he writes -- such as his stance on humanitarian assistance -- I find his "logic of strategy" compelling and correct.)

The Dragon Extends its Reach: Chinese Military Power Goes Global
by Larry M. Wortzel

War and Politics
by Bernard Brodie *(I became a huge Brodie fan in 2015, and this book was just as good as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 first Brodie book I read, listed below.)

Strategy: Second Revised Edition
by B. H. Liddell Hart

Science, Strategy and War: The Strategic Theory of John Boyd
by Frans P.B. Osinga

The U.S.-China Military Scorecard: Forces, Geography, and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Evolving Balance of Power, 1996-2017
by Eric Heginbotham, Michael Nixon, Forrest E. Morgan

Strategy in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Missile Age
by Bernard Brodie *(This book made me a Brodie fan. I like his clear reasoning and writing style.)

Strategy: The Logic of War and Peace, Revised and Enlarged Edition
by Edward N. Luttwak *(Despite how much I like Brodie's work, this is probably my "book of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 year." It gave a voice to many of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 frustrations with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 way my technical- and tactics-obsessed colleagues in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 digital security world approach offense and defense. Introducing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "technical" level of war (below tactics) and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "classic delusion of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 'final move'" described well what happens in traditional digital security practice and thought.)

Boyd: The Fighter Pilot Who Changed cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Art of War
by Robert Coram

In Pursuit of Military Excellence: The Evolution of Operational Theory
by Shimon Naveh

The Grey Line: Modern Corporate Espionage and Counter Intelligence
by Andrew Brown *(This book wins cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "weirdest book of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 year" award. The author makes outrageous claims, with no sourcing, but seems to know what he is talking about.)

Broker, Trader, Lawyer, Spy: The Secret World of Corporate Espionage
by Eamon Javers

The Nature of War in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Information Age: Clausewitzian Future
by David J. Lonsdale

Cyberspace and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 State: Toward a strategy for cyber-power
by David J Betz, Tim Stevens

Grant's Last Battle: The Story Behind cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Personal Memoirs of Ulysses S. Grant
by Chris Mackowski

There Will Be Cyberwar: How The Move To Network-Centri​c Warfighting Has Set The Stage For Cyberwar
by Richard Stiennon

The Future of Violence: Robots and Germs, Hackers and Drones Confron​ting A New Age of Threat
by Benjamin Wittes, Gabriella Blum *(This book offered valuable insights, including How The World Butchered Benjamin Franklin’s Quote On Liberty Vs. Security.)

Future Crimes: Everything Is Connected, Everyone Is Vulnerable and What We Can Do About It
by Marc Goodman *(This book was surprisingly good. After I read past cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "cyber" parts, I found myself thinking differently about "connectivity" and its effects.)

Cyber Policy in China
by Greg Austin

Data and Goliath: The Hidden Battles to Collect Your Data and Control Your World
by Bruce Schneier *(I like that, after documenting privacy concerns caused by public and private actors, Bruce tells cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 reader to work through cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 democratic process to reform cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 system -- not become anarchists.)

Strategic Reassurance and Resolve: U.S.-China Relations in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Twenty-First Century
by James Steinberg, Michael E. O`Hanlon *(The first book in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "restraint" school I read in 2015.)

@War: The Rise of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Military-Inter​net Complex
by Shane Harris *(I was surprised by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 amount of backroom information cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 author obtained. Fascinating insights.)

Spam Nation: The Inside Story of Organized Cybercrime-fro​m Global Epidemic to Your Front Door
by Brian Krebs *(So much more than spam! Must-read.)

Cyber War versus Cyber Realities: Cyber Conflict in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 International System
by Brandon Valeriano, Ryan C. Maness *(I disagree with a lot of this book, but I appreciate this sort of research.)

Countdown to Zero Day: Stuxnet and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Launch of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 World's First Digital Weapon
by Kim Zetter *(I thought cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 story of Stuxnet was already well-documented, but this was a great book -- especially during cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 finalization of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Iran nuclear deal.)

The Barefoot Lawyer: A Blind Man's Fight for Justice and Freedom in China
by Chen Guangcheng *(I was so pleased to testify with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Barefoot Lawyer himself last year -- awesome experience!)

War
by Lawrence Freedman

Competitive Strategies for cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 21st Century: Theory, History, and Practice
by Thomas Mahnken

Computer Capers
by Thomas Whiteside

China and Cybersecurity: Espionage, Strategy, and Politics in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Digital Domain
by Jon R. Lindsay, Tai Ming Cheung, Derek S. Reveron

On War
by Carl von Clausewitz, Michael Eliot Howard, Peter Paret

Strategy: A History
by Lawrence Freedman

U.S. Army War College Guide to National Security Issues: Volume II - National Security Policy and Strategy (5th Edition)
by U.S. Army War College

U.S. Army War College Guide to National Security Issues- Volume I: Theory of War and Strategy (5th Edition)
by U.S. Army War College

Talking anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r page from Greer, if I were to add entries to my quantum library, cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y would include cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 books by Brodie, Luttwak's Strategy: The Logic of War and Peace. I would probably also have to add Clausewitz, if only because everyone in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 strategy world obsesses about him.

2014 Reading (24 books):

Forged in Fire: Strategy and Decisions in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Airwar over Europe 1940-1945
by Dewitt S. Copp

A Few Great Captains: The Men and Events That Shaped cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Development of U.S. Air Power
by Dewitt S. Copp *(The title of this book was derived from one of my favorite quotes: "No army produces more than a few great captains." Army Chief of Staff Gen George Marshall, eulogizing airman Lt Gen Frank Andrews in 1943.)

The Rise of American Air Power: The Creation of Armageddon
by Michael S. Sherry *(This book made a powerful case that airpower was promoted as a less violent way to win wars, in comparison to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 slaughter of World War I. Unfortunately, during World War II, it became probably more violent, demonstrated by cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 firebombing of Germany and Japan.)

The Icarus Syndrome: The Role of Air Power Theory in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Evolution and Fate of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 U.S. Air Force
by Carl H. Builder *(This book helped me understand how and why pilots think as cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y do, and why a separate Cyber Force is likely necessary, from a personnel standpoint alone.)

Airpower for Strategic Effect
by Colin S. Gray *(Gray is a prolific author, but with this book I decided to no longer read his works. His style is difficult for me to follow.)

The American Way of War: A History of United States Military Strategy and Policy
by Russell F. Weigley

Command in War
by Martin Van Creveld

The Masks of War: American Military Styles in Strategy and Analysis: A RAND Corporation Research Study
by Carl Builder *(Builder writes with penetrating insight regarding how military services see each ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r.)

American Cold War Strategy: Interpreting NSC 68
by Ernest R. May *(NSC 68 is like Clausewitz -- you have to be conversant with it!)

The Wizards of Armageddon 
by Fred Kaplan *(This book introduced me to Brodie and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r early nuclear strategists. I extracted some excellent lessons from my PhD from it, especially concerning cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 early Air Force's inability to physically execute cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 aircraft operations it said it could perform to provide retaliatory options. It reminded me of Libicki's erroneous belief that cyber security vulnerability is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 victim's choice.)

History and Strategy
by Marc Trachtenberg

Strategy in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Contemporary World
by John Baylis, James J. Wirtz, Colin S. Gray *(Yes, I read a no-kidding text book.)

The Grand Strategy of cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Roman Empire: From cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 First Century A.D. to cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Third
by Edward N. Luttwak *(This book sold me on Luttwak, but I hadn't read about his "logic" yet.)

Historians' Fallacies : Toward a Logic of Historical Thought
by David Hackett Fischer *(This is cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 sort of book that one can leverage to demolish almost everything you encounter when reading history. It's worth reading several times and I intend to try to avoid cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 fallacies in my PhD.)

Addressing Cyber Instability
by Cyber Conflict Studies Association

Authoring a PhD Thesis: How to Plan, Draft, Write and Finish a Doctoral Dissertation
by Patrick Dunleavy *(This is a must-read if you are pursuing cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "big-book" cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365sis as found in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 British system, as is my situation.)

The Air Campaign
by John Warden III *(I am a big fan of Boyd, Warden, and Deptula and try to read whatever cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365y write.)

Alien: How Operational Art Devoured Strategy
by Justin Kelly, Mike Brennan *(I read this book to be familiar with arguments by those who oppose cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 utility of an operational level of war, between strategy and tactics.)

The Sources of Military Doctrine: France, Britain, and Germany Between cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 World Wars
by Barry R. Posen *(I believe Ian Wallace recommended this book. I thought it was great. I already listed Dr Posen's "restraint" work, which I read much later.)

The Air Campaign, John Warden and Classical Airpower Theorists (Revised Edition)
by David R. Mets

Strategic Stability
by Elbridge Colby *(This was some difficult early reading, before I identified my core interests. The concept of "stability" was helpful when I read later works, however.)

Treasury's War: The Unleashing of a New Era of Financial Warfare
by Juan Zarate *(This is an excellent book that documents anocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365r major operational mode for US power in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 21st century.)

Cybersecurity and Cyberwar: What Everyone Needs to Know
by P.W. Singer, Allan Friedman

John Warden and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 Renaissance of American Air Power
by John Andreas Olsen

The only book to make cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 "quantum" list, from my 2014 reading, would be Fischer's Historians' Fallacies.

I read a ton of papers and studies in 2014-2015, but cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365se are cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 books I tracked. I regret that my 2013 reading appears to have disappeared into history. I know that I read Cyber War Will Not Take Place but ocá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365rwise I have no concrete records of professional reading in 2013. It was a very busy year with cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 APT1 report and cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 FireEye acquisition of Mandiant, so perhaps I didn't read that much.

In any case, I hope you find this list useful and perhaps inspiring, should you share cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 same sorts of interests, or if you are wondering how to get started in cá cược thể thao bet365_cách nạp tiền vào bet365_ đăng ký bet365 military, or at least non-business, strategy world.