NSA begins to provide guidance on resisting quantum computer attacks against current cryptographic systems. D-Wave Systems makes 1000-qubit quantum computers available for sale this month. And Microsoft has already deprecated SHA-1 and will start retiring support for certificates using SHA-1 in earnest starting January of 2017. Security planners have both short-term and long-terms tasks to add to their agendas.
Q: Is Active Defense a well-defined topic in law and professional ethics?
Attorney Ben Wright
A: No. A great deal of cyber law, including Active Defense, is not well-defined. In cyber law, there is never a 100% guarantee that legal authorities will reach any particular conclusion about any particular activity. Legal understanding of topics like infosec and cyber crime is fluid and rapidly changing.
Q: What are leading US laws that could be relevant to Active Defense?
A: One is the federal Computer Fraud and Abuse Act. It generally forbids accessing a computer without authority and causing harm. Another is the...