Secrets Stolen, Fortunes Lost

Authors
Introduction
Your Enterprise at Risk
How to Read This Book

Part 1: The Challenge
Introduction

1: The Tale of the Targeted Trojan
Introduction
The Haephrati Case

2: When Insiders and/or Competitors Target a Business’s Intellectual Property
Introduction
Lightwave Microsystems
America Online
Casiano Communications
Corning and PicVue
Avery Dennison and Four Pillars
Lexar Media and Toshiba
SigmaTel and Citroen

3dGEO – China

3: When State Entities Target a Business’s Intellectual Property
Introduction
Airbus and Saudi Arabian Airlines
Russian Intelligence and Japanese Trade Secrets
Japan and the Cleveland Clinic Foundation
China and Russia: TsNIIMASH-Export
Overt Nation State Attempts: India, Venezuela, Brazil, and Others
Current and Future Threats to Economic Security

4: When Piracy, Counterfeiting, and Organized Crime Target a Business’s Intellectual Property
Introduction
Technology Counterfeiting
The Apparel Industry
The Entertainment Industry

5: Virtual Roundtable on Intellectual Property and Economic Espionage
Introduction
The Legal Perspective: Naomi Fine
The OpSec Perspective: Keith Rhodes
The Professional Investigator’s Perspective: Ed Stroz
The DoD Cyber Sleuth’s Perspective: James Christy
The Security and Privacy Consultant’s Perspective: Rebecca Herold

Part 2: The Strategy

Introduction
6: Elements of a Holistic Program
Introduction
False Memes Lead People the Wrong Way
From the Industrial Age to the Information Age

7: Case Study: Cisco’s Award-Winning Awareness Program
Introduction
What Is This Scenario?
The Message Is the Medium: Be a Security Champion
When Your Message Reaches the Employees They Become Your Messengers
Staying on Message
It Takes More Than Compelling Content and Hard Work
Lessons Learned

8: Case Study: A Bold New Approach in Awareness and Education Meets an Ignoble Fate
Introduction
The Mission, the Medium, the Message
Meaningful Content and Persuasive Delivery
Investment and Empowerment
Three-Phase Approach
Don’t Be Surprised If…

9: Case Study: The Mysterious Social Engineering Attacks on Entity Y
Introduction
Fundamentals of Social Engineering Attacks
The Mysterious Social Engineering Attacks on Entity Y
Guidance for the Workforce

10: Personnel Security
Introduction
Coming and Going: Guidelines for Background Checks and Termination Procedures
And Everywhere in between: Guidelines for Travel Security and Executive Protection Programs

11: Physical Security: The “Duh” Factor
Introduction

12: Information Security
Introduction

13: The Intelligent Approach
Introduction
The Intelligence Function As an Internal Early Warning System
What Happens to a Million Grains of Sand in a Perfect Storm?
The Partnership Issue Is a Daunting Force-Multiplier, Double-Edged Sword

14: Protecting Intellectual Property in a Crisis Situation
Introduction

15: How to Sell Your Intellectual Property Protection Program
Introduction
Questions to Ask and People to Approach
What Is Your Business Differentiation from Your Competitors?
Notes on Figure 15.1
Notes on Figure 15.2
Implications of IP loss
Notes on Figure 15.3
Notes on Figure 15.4
Notes on Figure 15.5

16: Conclusion
Protect Your IP
Appendix A: Baseline Controls for Information Security Mapped to ISO
Appendix B: Leveraging Your Tax Dollar
Domestic
International
Appendix C: Notes on Cyber Forensics
Digital Evidence: Volume
Digital Evidence: Searches/Legal
Digital Evidence: Cell Phones
Digital Evidence: Accreditation
Digital Evidence: Digital Forensics Intelligence
Appendix D: U.S. International Trade Commission Section 337 Process
Appendix E: U.S. Trade Representative’s 2007 Special 301 Watch List
Appendix F: U.S. Department of Justice Checklist for Reporting a Theft of Trade Secrets Offense
Background and Contact Information
Description of the Trade Secret:
General Physical Measures Taken to Protect the Trade Secret
Confidentiality and Non-Disclosure Agreements
Computer-Stored Trade Secrets
Document Control
Employee Controls
Description of the Theft of Trade Secret
Civil Enforcement Proceedings
Index