JUCS - Journal of Universal Computer Science 24(5): 646-661, doi: 10.3217/jucs-024-05-0646
Obligation to Defend the Critical Infrastructure? Offensive Cybersecurity Measures
Anže Mihelič‡, Simon Vrhovec§‡ University of Ljubljana, Ljubljana, Slovenia§ University of Maribor, Ljubljana, Slovenia
Corresponding author: Anže Mihelič ( mihelic.anze@gmail.com ) © Anže Mihelič, Simon Vrhovec. This article is freely available under the J.UCS Open Content License. Citation:
Mihelič A, Vrhovec S (2018) Obligation to Defend the Critical Infrastructure? Offensive Cybersecurity Measures. JUCS - Journal of Universal Computer Science 24(5): 646-661. https://doi.org/10.3217/jucs-024-05-0646 |  |
Abstract
Critical infrastructure is vital for the functioning of the state and the society. Even though the legal foundations for critical infrastructure protection in material world are well-established, there is almost no legal basis for providing critical infrastructure security in the cyberspace. In this paper, we study the applicability of different types of cybersecurity measures including the most offensive ones in different domains by drawing parallels to providing security in the material world. By further focusing on the offensive cybersecurity measures (i.e., hack back), we lay out the circumstances in which such invasive measures could be employed for providing security for the critical infrastructure.
Keywords
hack back, private security, critical infrastructure protection, offensive cybersecurity