Information Warfare: Ethical Challenges of the Next Global Battleground William Yurcik yurcik@tele.pitt.edu Telecommunications Program University of Pittsburgh ABSTRACT: Information warfare (IW) is the latest development in a long list of revolutions in military affairs based on new technology (other examples include the introduction of airplanes, the atom bomb, and long-range missiles). IW is defined as an attack on information systems for military advantage using tactics of destruction, denial, exploitation, and/or deception. Information systems are so critical to military operations that it is often more effective to attack an opponent's information systems than to concentrate on destroying its military forces directly. In the civilian context, the U.S. economic, social, and political structures are increasingly dependent upon complex and extensive systems for financial transactions, telecommunications, electric power, energy distribution, and transportation. Because these systems rely upon each other, a serious disruption in any one system will cascade quicky through the other systems potentially causing a national security crisis. Under these circumstances, the ability of the government to respond will be interrupted and severely constrained. Thus in addition to outages caused by natural disasters and accidents, these systems present a tempting target for IW attack to those contemplating an action against U.S. interests. This threat of IW raises the following ethical challenges I seek to address: (1) What constitutes an act of war in the information age? (2) What are the ethical implications of the blurring distinction between acts of war from acts of espionage from acts of terrorism? (3) Can IW be considered nonlethal? (4) Is it ethical to set expectations for a "bloodless war" based on IW? (5) Is it ethically correct to respond to IW tactics with IW tactics? (6) Can protection from IW take place in United States given our democratic freedoms? 1.0 INTRODUCTION "We are more vulnerable than any other nation on earth" - John McConnell, former Director National Security Agency (NSA) [CAR97] "Massive networking makes the U.S. the world's most vulnerable target." - William Studeman, former Deputy Director, Central Intelligence Agency (CIA) [CAR97] Information warfare (IW) is the latest development in a long list of revolutions in military affairs based on new technology (other examples include the introduction of airplanes, the atom bomb, and long-range missiles). IW is defined as an attack on information systems for military advantage using tactics of destruction, denial, exploitation, and/or deception. The information cycle is vulnerable to these tactics at each step from information gathering to data entry to data transmission to information processing to information dissemination. Current research is searching for robust solutions at each step in the information cycle but the problem is systemic in that for every new solution, a new threat is developed in response. The rise of IW is linked to widespread diffusion of information technology. The most important enabling feature of the diffusion of information technology is declining cost. Since the 1950s, costs have declined 90% every five years and most experts expect this trend to continue.[BER 95] Th IW threat will continue to grow because entry costs are low and decreasing, leading a large number of foreign governments to already organize strategic IW organizations within their military. A second feature of IW that affects IW is that as the technology becomes less expensive, it becomes more efficient to decentralize away from a hierarchical command structure such as is traditional to military tradition. [BER95] Information systems are so critical to military operations that it is often more effective to attack an opponent's information systems than to concentrate on destroying its military forces directly. There is a perception within military circles that control of information may become more important than air superiority in previous wars. This has lead to a reevaluation of military doctrine referred to as a revolution in military affairs (RMA). "A revolution is military affairs is a major change in the nature of warfare brought about by the innovative new application of new technologies which, when combined with dramatic changes in military doctrine and operational and organizational concepts, fundamentally alters the character and conduct of military operations." [FOW97] The United States is potentially vulnerable to IW attack because it is more dependent on information systems than any other country in the world. For example, in the U.S. 95% of all military communications is carried over civilian infrastructure, thus intermingling military/civilian targets. In a civilian context, the quality of life of our most basic needs are dependent upon automated information management systems. The U.S. Department of Defense (DoD) has budgeted billions of dollars to IW and all the military services have formed distinct IW organizations which are drafting IW military strategies. [CAM96] In January 1997, the Defense Science Board within the Pentagon released a task force report warning of U.S. vulnerability to a "Electronic Pearl Harbor". [RIC97] The Defense Advanced Research Projects Agency (DARPA) is funding millions of dollars in research to develop an "electronic immune system" that will provide some level of protection from IW attacks. [http://www.ito.darpa.mil/ResearchAreas/Information_Survivability.html] The Pentagon already spends $1.6 billion to protect its information military systems. [RIC97] A Presidential Commission was formed on July 15, 1996 by Executive Order 13010 to issue recommendations on how to best protect from IW eight critical national infrastructures considered so vital that their incapacity or destruction would have a debilitating impact on the defense and economic security of the United States. These eight critical national infrastructures as listed by President Clinton are: (1) electric power system (2) gas and oil storage and transportation (3) telecommunications (4) banking and finance (5) transportation (6) water suppuly systems (7) emergency services (including medical, police, fire, and rescue) (8) continuity of government services (including federal, state, and local government services) [SCH96, LIB96] posit that the U.S. government should face the ethical consequences of the new global battleground now before a crisis arises by having a declarative policy about its policy to IW attacks. During the Cold War, the U.S. used a policy of strategic nuclear deterrence warning that any attack on the U.S. could expect total destruction in return. It is commonly believed that this policy of deterence was successful but is is impossible to prove. By analogy, analysts have wondered if a similar strategy might deter IW attacks on the U.S. National Information Infrastructure (NII). For a strategy of deterrence to work the following must hold: [LIB96] + the incident must be well-defined + the identity of the perpetrator must be unambiguous + the will and ability to carry out a deterrence strike must be believed + the perpetrator must have something of value at stake + the deterrence strike must be controllable This strategy of deterrence must be measured in the context of the inherent vulnerability of large technologically-based systems. In what has been called the complex-system issue there are axioms: [COO97] (1) Complex systems fail in unpredicable ways from causes that seem to be minor and often obvious flaws in retrospect. (2) The failure of a complex system may be exceptionally difficult to discover and repair. (3) Complex systems fail at inopportune moments usually during demanding system use when the consequences of failure are highest. It must be possible to determine if an "event" involving one of the U.S.'s vital infrastructures is the result of an accident, criminal attack, isolated terrorist incident, or an act of war. The damage from an event may be the same regardless of the cause but the cause of the event will determine the jurisdiction and nature of the response from the U.S. Government. Possible jurisdictions include private industry, the FBI/Department of Justice, CIA/NSA, or DoD and possible responses range from doing nothing to a nuclear retaliatory strike. 2.0 Ethical Challenges of IW The following six sections analyze the most significant ethical questions of IW as a new form of warfare. Many of the questions have been raised before in previous contexts but the unique characteristics of IW bring an urgency to the search for new relevant answers. It should be noted that this analysis is also pertinent to other military situations generally referred to as Operations Other Than War (OOTW) such as peace-keeping missions, preludes to conflict, alternatives to conflict, sanctions, and blockades. For examples, in an IW analogy to the U.S. blockade of Cuba during the Cuban missile crisis, there are IW techniques (i.e. jamming and denial of service attacks) which could be used to block and thus isolate rogue nations from international communications without circumventing physical sovereignty much in the same way the British decided to sever all transatlantic telegraph cables that linked Germany to international communications at the outset of World War I. [KUE, SCH96] 2.1 What Constitutes an Act of War in the Information Age? The nation-state combines the intangible idea of a people (nation) with the tangible construct of a political and economic entity (state). A state under international law possesses sovereignty which means that the state is the final arbiter of order within its physical geographical borders. Implicit to this construct is that a state is able to define and defend its physical geography. Internally a state uses dominant force to compel obediance to laws and externally a state interacts with other states, interaction either in friendly cooperation or competition or to deter and defeat threats. At the core view of any nation-state's view of war should be a National Information Policy which clearly delineates national security thresholds over which another nation-state must not cross. This National Information Policy must also include options which consider individuals or other non-state actors who might try to provoke international conflicts.[SCH96] Increasingly the traditional attributes of the nation-state are blurring as a result of information technology. With IW, the state does not have a monopoly on dominant force nor can even the most powerful state reliably deter and defeat IW attacks. Increasingly non-state actors are attacking across geographic boundaries eroding the concept of sovereignty based on physical geography. With the advent of the information age, the U.S. has lost the sanctuary that it has enjoyed for over 200 years. In the past, U.S. citizens and businesses could be protected by government control of our air, land, and sea geographical borders but now an IW attack may be launched directly through (or around) these traditional geographical physical defenses.[ROU95] War contemplates armed conflict between nation-states. Historically war has been a legal status that can be specified by declaration and/or occur by way of an attack accompanied by an intention to make war. The modern view of war provides a new look at just war tradition, "jus ad bellum", (when it is right to resort to armed force) and "jus in bello", (what is right to do when using force). The six requirements of "jus ad bellum" were developed by Thomas Aquinas in the 13th century: {JOH96] (1) the resort to force must have a just cause (2) it must be authorized by a competent authority (3) it is expected to produce a preponderance of good over evil (4) it must have a reasonable chance of success (5) it must be a last resort (6) the expected outcome must be peace There are two requirements for "jus in bello": [JOH96] (1) the use of force must be discriminate (it must distinguish the guilty from the innocent) (2) the use of force must be proportional (it must distinguish necessary force from gratuitous force) The application of just war reasoning to future IW conflicts is problematic but there is a growing voice that there is a place for the use of force under national authority in response to broader national security threats to the values and structures that define the international order.[JOH96] Looking at one aspect of the application of just war reasoning to IW, the problem of proportionality - It is impossible to respond to every IW action, there are too many. At what threshold in lives and money should the U.S. consider an IW attack an act of war. How many lives for a certain IW attack or what is the trheshold in monetary terms or physical destruction. Article 51 in the United Nations Charter encourages settlement of international disputes by peaceful means. however, nothing in the Charter "impairs the inherent right of individual or collective self-defense if an armed attack occurs...". Note that infringement of sovereign geographical boundaries by itself is not considered an "armed attack". Also note that experts do not equate "use of force" with an "armed attack". Thus certain kinds of data manaipulation as a result of IW which are consistent with "use of force" would not constitute an "armed attack" under Article 51. [DUN96] Article 41 of the United Nations specificly states measures that are not considered to be an "armed attack": "complete or partial interruption of economic relations and of rail, sea, air, postal, telgraphic, radio, and other means of communications..." IW might still be considered an Act of War, however, if fatalities are involved. [SCH96, DUN96] If data manipulation is such that the primary effects are indistinguishable from conventional kinetic weapons then IW may be considered an "armed attack". The paradigm shift is that weapons are devices designed to kill, injure, or disable people or to damage and destroy property and have not traditionally included electronic warfare devices.[DUN96] 2.2 What are the Ethical Implications of the Blurring Distinction Between Acts of War from Acts of Espionage from Acts of Terrorism? It is very important to be precise in what we identify as a crime and what we identify as an act of war. An "armed attack" as stated in Article 51 contemplates a traditional military attack using coventional weapons and does not include propaganda, information gathering, or economic sanctions. Espionage is a violation of domestic and not international law. The threat analysis section of the 1997 Defense Science Board Report indicates that "a significant threat includes activities engaged on behalf of competitor states." This introduces the new concept of low-intensity conflict in the form of economic espionage between corporations. In the age of multinational corporations that view geographical boundaries and political nation-states as historical inconveniences - should economic warfare between multinational corporations involve the military? [FRE97] The new IW technolgies make it difficult to distinguish between espionage and war. If espionage is conducted by computer to probe a nation's databanks and military control systems when is it an act of war versus an act of espionage? Does it depend on whether the intelligence was passively read versus information actively destroyed and/or manipulated? Does it depend on whether the intelligence was used for military advantage or whether the intelligence was used for political or criminal advantage? [KUE] Does the answer depend on whether a state of war exists or not? A different scenario is modifying internal computer software (via viruses, trojan horse, or logic bomb) or hardware (chipping) before shipment to cause an enemy's computer to behave in a manner other than they would expect. If during peacetime, gaining entry to a computer's internal operating system could be considered a criminal offense or act of espionage despite the fact that the action in question took place before the enemy had acquired ownership of the computer. Is this prudent preparation for IW or is this a hostile action that could precipitate a war? If the computer hardware "chip" is commercially manufactured and altered, what are the legal and ethical of a company inserting internal hardware hooks as specified in cooperation with national security at "request" of the government especially if the company has international sales? Finally is IW a potential step which might lead to an escalated conventional military conflict which could have been avoided by other means? [SCH96] 2.3 Can IW be Considered Nonlethal? Nonlethal weapons are defined as weapons whose intent is to nonlethally overwhelm an enemy's lethal force by destroying the aggressive capability of his weapons and temporarily neutralizing their soldiers. Nonlethal is most often referred to immediate casualty counts not on downstream collateral effects. [SCH96] In response to the power of public opinion and instant global media coverage, the U.S. military has begun to develop a new kind of weaponry designed to minimize bloodshed by accomplishing objectives with the minimum use of lethality. This weaponry includes sticky foam cannons, sonic cannons, and electromagnetic weapons which effectively temporarility paralyze the enemy without killing them.[SCH96] Is it more ethical to use a sophisticated smart bomb precisely targeted to kill 10-20 soldiers immediately or is it more ethical to choose a nonlethal weapon which has the same tactical effect with no immediate casualty count but an indirect collateral effect of 100-200 civilian deaths? Ethically, the function of the target against which the weapon is used and the existence or lack of a state of war determines one ethical framework for analysis. For instance, disabling the electronics of a fighter plane or air defense radar during wartime is the goal of a large investment in electronic warfare equipment by the U.S. and is considered fair and ethical. However, disabling the electronics of a civilian airliner or air traffic control during either peacetime or wartime violates the principles of discrimination of combatants and proportionality of response and is considered unethical and a act against humanity. 2.4 Is it Ethical to Set Expectations for a "Bloodless War" Based on IW? As nonlethal weaponry of all types (especially IW weapons) advance from novelty to norm, however, many potential pitfalls will need to be faced. The most important of these is the expectation that such weapons will ultimately allow wars to be fought without casualties. Nonlethal military capabilities are not new although IW weapons are the newest weapons in the nonlethal arsenal. Military forces have used riot-control chemical agents, defoliants, rubber bullets, and electric stun weapons for decades. As U.S. military forces are involved in missions that require extended direct contact with civilians (e.g. Somalia, Bosnia), force can no longer be viewed as either on or off but rather as a continuum with nonlethal weapons on one end and nuclear devices on the other end. [ALE95] In more traditional conventional warfare, IW attacks to disrupt, deny and destroy C4I capabilities (Command, Control, Communication, and Computer Intelligence) are a core part of military tactics and strategy. If IW weapons can be used to remotely blind an opponent to incoming aircraft, disrupt logistics support, and destroy or exploit an adversary's communications then many of the problems associated with the use of ground forces for these missions can be avoided. It is important to point out that although nonlethal weapons are not meant to be fatal, they can still kill if used improperly or against people particularly susceptible to their effects. Because these technologies are potentially lethal in these circumstances, the term "nonlethal" has not been universally accepted within the U.S. military. For example, the U.S. Marines Corps uses the term "less lethal" to imply that there is no guarantee of non-lethality.[ALE95] Asserting that IW will ultimately allow future wars to be fought without casualties is widespread misconception likely to prove counterproductive and even potentially dangerous. First, all nonlethal weapons are not equally applicable to all military missions. Secondly, overselling of nonlethal capabilities without providing a context can lead to operational failures, deaths, and policy failure. Thirdly, unrealistic expectations about nonlethal weapon capabilities inhibit their adoption by military forces who need to build confidence in these weapons. There is a large assymetry in global military power when comparing the U.S. versus other nation-states. In 1994, the U.S. DoD budget exceeded that of Russia, China, Japan, France and Great Britain _combined_. This assymetry makes it unlikely another nation-state would challenge the U.S. in a direct high-technology conventional war except for circumstances which we should not depend upon (e.g. incredible miscalculations and/or ignorant dictators which were both present in the Gulf War). Despite the luxury of a bumbling opponent, the success of the Gulf War has lead the U.S. citizenry to expectations of low casualties in all future conflicts. These expectations go against two cardinal rules of military strategy; (1) you do not plan to refight the last war and (2) the future battlefields cannot not be dictated by the United States. The next battlefield for which the U.S. DoD is preparing is a global battlefield with weapons of information warfare targetting civilian infrastructure. Even in this scenario, military and civilian casualties will be likely from either primary or secondary effects from IW attacks. 2.5 Is it Ethically Correct to Respond to IW Tactics with IW Tactics? If the U.S. is attacked by IW weapons, how should the U.S. Government respond? By changing perspectives from defense to offense, what is in the U.S. arsenal to wage IW against an adversary: + offensive software (i.e. viruses, worms, trojan horses) + "sniffing" or "wiretapping" software (enabling the capture of an adversary's communications) + "chipping" * (i.e. malicious software embedded in systems by manufacturer) + directed energy weapons (i.e. designed to destroy electronics & not humans/buildings) + psychological operations (i.e. sophisticated and covert propaganda techniques) A strategy that uses these weapons in various combinations has the potential to replace conventional military force. The questions remains: is it ethically correct for the U.S. to defend its security interests by resorting to the same IW tactics that are being used against it? Should information attacks be punished by information counterattacks? The options include maintaining our superpower status at all costs; covertly listening to our adversaries but not actively disrupting operations; or contracting mercenaries in no way officially affiliated with the U.S. government to do our dirty work. Cracking computers to deter and punish computer cracking erodes any moral basis the U.S. has for declaring the evils of IW warfare. It is also harder to predict secondary effects due to the globalization of systems. Retaliation may produce effects ranging from nothing to being counter productive through destruction of U.S. interests. A nation-state or non-state actor that sponsors an attack on the U.S. NII might lack an NII of their own for the U.S. to attack in punishment and thus not be intimidated by a U.S. IW deterrence strategy. Short of an official declaration of war, nation-states may seek UN Security Council action authorizing "all necessary means" even in the absence of an "armed attack" in cases of any threat to peace, breach of peace, or act of aggression. Every breach of international law creates a duty to pay for loss or damages, nation-states may seek recompense under "state responsibility doctrine." In additional to recompense, retribution in the form of proportional countermeasures are authorized when an IW attack which does not involve the use of force violates international law. IW may violate multiple international laws depending on the scenario including the following: + UN Convention on Law of the Sea (prohibits unauthorized broadcasts from the high seas) + International Telecommunications Convention of 1982 (requires nations to avoid "harmful interference") + INTELSAT Convention (satellite communications for non-military purposes) + INMARSAT (maritime satellite communications for "only peaceful purposes") + Chicago Convention (refrain from endangering safety of flight) US military forces are bound by law to follow the rules of engagement of the specific conflict as stated below: "The Armed Forces of the United States shall comply with the law of war in the conduct of military operations and related activities, however such conflicts are characterized." [DoD policy Directive 5100.77] The problem is that there are no characterized rules of engagement for IW conflicts which can take forms of isolated operations, acts of retribution, or undeclared wars. The most serious problem for using IW retaliation to counter IW attacks is that adversaries could counter and/or copy IW capabilities. Every breakthrough in offensive technology eventually inspires a matching advance in defensive technology so forth thus escalating an IW weapons race.[ECO97] A last issue related to retaliation is the ethical dilemma faced by the intermingling of the military and civilian sides of society. Given the uncertainty of deterrence and identifying the enemy, which strategy is most ethical for retaliation; (a) a strategy that attempts to separate the military from civilians and in so doing has a diminished impact which potentially prolongs the duration of the conflict; or (b) a strategy that attempts to minimize lethality and duration but deliberately targets civilian systems? 2.6 Can Protection from IW Take Place in United States Given our Democratic Rights? "The private sector is going to have to yield a bit. We've got a nation to defend." - Senator John Kerry speaking at the National Defense University 1996 [MUN96] How much government control of the U.S. NII is permissable in a free society? Most of the IW technology is software which is easy to replicate, hard to restrict, and dual-use by nature (uses for both civilian or military). In the 1997 Defense Science Board report, it states that the DoD is "confused" about when a court order is required to monitor domestic communications. [FRE97] This raises basic questions about the constitutional and ethical balance between privacy and national security in a new IW context. A "Big Brother" approach that places all of a nation's telecommunications under a single government jurisdiction is improbable given the diffusion and complexity of technology and the shrinking size of government. Most systems were built to serve commerical users who will vehemently object to unfunded mandates (i.e. taxes) and new requirements not driven by business demand (e.g. CLIPPER chip encryption and key escrow accounts). Regardless, it is critical to the future security of the U.S. that we find a way to protect our infrastructure from IW attack and have contingency plans for potential IW crises. If the IW attack is detected and the enemy identified but the US is unable to react promptly due to bureaucratic inefficiency or indifference from private industry, it may be too late to react at all. Current political discussion has floated tax incentives and direct subsidies to promote industry cooperation. In a related matter that may provide a precedent, the government has pledged to provide telephone companies with at least $500 million to ensure that FBI officials can access telephone conversations over digital circuits (as opposed to accessing telephone coversations over analog circuits which is technically much easier). 3.0 Conclusion "I consider this issue to be one of the most important issues that our government and our society as a whole face today...what we need, then, is the equivalent of the Manhattan Project for infrastructure protection." - Jamie Gorelick, Deputy Attorney General, U.S. Department of Justice, at 1996 Senate Hearings called by Sam Nunn [MUN96] In conclusion, IW provides a new context for the application of ethical theories. I have presented the just war tradition as an example of the one application. The ethical questions about IW I have raised are not meant to be a complete set of ethical questions, as I have alluded to other ethical questions in the discussion, but rather a subjective assessment of what I feel are the ethical questions derived from the most important issues exposed by IW. I am also confident that new unforeseen ethical questions will inevitably arise from IW in the near future. It is hoped that this research will begin a dialogue on the issues and lay a framework for more substantive work by ethicists. IW and its complement (protection from IW) require important new research efforts from both the technology and ethics research communities. * according to intelligence sources in [SCH96], in the early 1970's at the request of the U.S. government, AT&T sold Poland telephone switches which had back door software hooks enabling the U.S. to remotely shut down Poland's telephone infrastructure if the event of a Soviet invasion. REFERENCES [DUN96] Dunlap Jr., Colonel Charles J. "When Does War Begin in the Information Age? - A Perspective." INFOWARCON5 1996 Conference Proceedings, Arlington VA., September 1996, pp. BREAKOUT B2 3 - 6. [SCH96] Schwartau, Winn. "Ethical Conundra of Information Warfare." pp. 462-469, within the book _Information Warfare_ 2nd Edition by Winn Schwartau, Thunder's Mouth Press, New York, 1996. [KLU96] Kluepfel, Henry M. "Countering Nonlethal Information Warfare: Lessons Learned on Foiling the Information Superhighwayman of the North American Public Switched Telephone Network." pp. 201-212, within the book _Information Warfare_ 2nd Edition by Winn Schwartau, Thunder's Mouth Press, New York, 1996. [LIB96] Libicki, Martin C. "Deterring Information Attacks." pp. 592-600, within the book _Information Warfare_ 2nd Edition. by Winn Schwartau, Thunder's Mouth Press, New York, 1996. [CAM96] Campen. Alan D. "Coming to Terms With Information War." pp. 251-255, within the book _CyberWar: Security, Strategy, and Conflict in the Information Age_. edited by Alan D. Campen, Douglas H. Dearth, and R. Thomas Goodden, AFCEA Internation Press, Fairfax VA, 1996. [ROU95] Round, W. Oscar. "Defining Civil Defense in the Information Age." Strategic Forum, Institute for National Strategic Studies (INSS), National Defense University, Number 46, September 1995. [KUE] Kuehl, Dan. "The Ethics of Information Warfare and Statecraft." School of Information Warfare and Strategy, National Defense University. [GOO96] Goodman, S.E. "War, Information Technologies, and International Asymmetries." Communications of the ACM, Vol. 39, No. 12, December 1996, pp. 11-15. [FOW97] Fowler, Bruce W. and Donald R. Petersen. "Induced Fragility in Information Age Warfare." OR/MS Today, April 1997, pp. 34-37. [JOH96] Johnson, James Turner. "The Broken Tradition." The National Interest, Fall 1996, pp. 27-36. [BAC96] Bacevich, A.J. "Morality and High Technology." The National Interest, Fall 1996, pp. 37-47. [MUN96] Munro, Neil. "Sketching a National Information Warfare Defense Plan." Communications of the ACM, Vol. 39, No. 11, November 1996, pp. 15-17. [FRE97] Frezza, Bill. "The Militarization of Cyberspace." Network Computing, March 15, 1997, pp. 35-36. [BER95] Berkowitz, Bruce B. "Warfare in the Information Age." Issues in Science and Technology, Fall 1995, pp. 59-66. [ALE95] Alexander Lexi R. and Julia L. Klare. "Nonlethal Weapons: New Tools for Peace." Issues for Science and Technology, Winter 1995-96, pp. 67-74. [ECO97] "The Future of Warfare - Select Enemy. Delete." The Economist, March 8, 1997, pp. 21-24. [CAR97] Carlin, John. "A Farewell to Arms." Wired, May 1997, pp. 51, 52, 54, 220, 222, 224, 226. [CRA97] Craddock, Ashley. "NetWar and Peace in the Global Village." Wired, May 1997, pp. 52, 54, 226, 231. [RIC97] Ricks, Thomas E. "Information-Warfare Defense is Urged - Pentagon Panel Warns of 'Electronic Pearl Harbor'." Wall Street Journal, January 6, 1997, p. B2. [COO97] Cook, Richard I. "Observations on RISKS and Risks." Communications of the ACM, March 1997, Vol. 40, No. 3, p. 122.