Recommended Free Tools
In U.S. joint doctrine, cyberspace is a global domain made up of interconnected information-technology infrastructure and the data it contains—not just the public Internet. Cyberspace operations are the use of cyberspace capabilities primarily to achieve objectives in or through that domain. These definitions come from specific doctrine and glossary sources; they are not automatically universal across countries or organizations.
What does “cyberspace” mean in U.S. joint doctrine?
The U.S. Department of Defense’s Joint Publication 3-12 (R), Cyberspace Operations defines cyberspace as “a global domain within the information environment consisting of the interdependent network of information technology infrastructures and resident data, including the Internet, telecommunications networks, computer systems, and embedded processors and controllers.” Read JP 3-12 (R).
As an Amazon Associate I earn from qualifying purchases.
The scope is wider than websites, online services, or the public Internet. The definition encompasses the infrastructure and data involved in networked information systems, including telecommunications, computer systems, and embedded processors and controllers. Joint doctrine treats cyberspace as one of five interdependent domains, alongside air, land, maritime, and space.
What are the three layers of cyberspace?
JP 3-12 describes cyberspace through three connected layers. They are analytical ways of understanding the domain, not three separate places.
#1 Best Overall
| Layer | What it describes |
|---|---|
| Physical network | The physical network components and their geographic locations. |
| Logical network | Relationships among network elements considered apart from a particular physical path or node. |
| Cyber-persona | The digital identities associated with people or entities. |
Considering the layers separately helps distinguish where equipment is located, how network relationships operate, and which digital identities are involved. They remain connected aspects of cyberspace.
What are cyberspace operations?
JP 3-12 defines cyberspace operations as “the employment of cyberspace capabilities where the primary purpose is to achieve objectives in or through cyberspace.” JP 3-12 (R) also says these operations should be integrated with the joint force commander’s plan and synchronized with other operations during execution.
The definition turns on the operation’s primary purpose: achieving an objective in or through cyberspace. It is not simply a label for any activity that involves a computer or network.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What does “defensive cyberspace operations” mean?
NIST’s Computer Security Resource Center (CSRC) glossary records this source-attributed definition of defensive cyberspace operations: “Passive and active cyberspace operations intended to preserve the ability to utilize friendly cyberspace capabilities and protect data, networks, net-centric capabilities, and other designated systems.” The glossary attributes the wording to CNSSI 4009-2022 and DoD JP 3-12. See the NIST CSRC entry.
This is a mission category, not a replacement definition for cyberspace itself. Its stated purpose is to preserve friendly capabilities and protect designated systems and data.
Why do definitions differ between sources?
Military terminology depends on the issuing authority, the concept being defined, and the publication or glossary source. NIST CSRC is a searchable terminology index, and its entries retain citations to their underlying sources; the glossary should not be treated as if every entry were an independent, universal NIST definition.
| Source | What it establishes | How to read it |
|---|---|---|
| U.S. joint doctrine: JP 3-12 (R) | Definitions of cyberspace and cyberspace operations, the three-layer model, and guidance on integrating operations with joint plans. | Use it when describing the U.S. joint-doctrine formulation. |
| NIST CSRC glossary | Searchable, source-attributed terminology entries. Its cyberspace-operations entry points to CNSSI 4009-2022 from DoD JP 3-0; its defensive cyberspace operations entry points to CNSSI 4009-2022 from DoD JP 3-12. | Name the entry and its cited source rather than presenting glossary wording as universal. |
| NATO allied doctrine: AJP-3.20, Edition A Version 1 | A NATO publication on planning, executing, and assessing cyberspace operations in Allied joint operations. | It provides NATO context, but the reviewed material does not establish that every NATO term matches U.S. joint terminology. |
The UK government identifies AJP-3.20 as NATO doctrine and notes that cyberspace extends beyond the Internet, including wired, wireless, and apparently disconnected devices in its discussion. Its page was first published on 10 July 2020 and last updated on 17 March 2023. See the UK government’s AJP-3.20 page. That page identifies Edition A Version 1; it does not establish whether a later edition has superseded it.
How to use these terms precisely
- For the domain, say cyberspace and identify the doctrine or glossary whose definition you are using.
- For activity intended to achieve an objective in or through cyberspace, use cyberspace operations in the JP 3-12 sense.
- For defensive activity, specify defensive cyberspace operations and attribute the wording to its cited source.
- When comparing U.S. and NATO usage, name the jurisdiction and publication edition rather than assuming the terms are interchangeable.
For a historical statement associated with the terminology, JP 3-12 credits then-Secretary of Defense Robert Gates with saying in 2011: “Cyberspace and its associated technologies offer unprecedented opportunities to the US and are vital to our Nation’s security, and by extension, to all aspects of military operations.” The statement appears in JP 3-12 (R).
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
