Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Computer network exploitation (CNE) is a U.S. military and intelligence term for actions in cyberspace used to gain intelligence, collect information, maneuver, or enable future military operations. In the current definition listed by NIST, exploitation is not automatically an attack: attack terminology concerns disruptive effects, while defense terminology concerns protection and response.
What does computer network exploitation mean?
NIST’s Computer Security Resource Center (CSRC) glossary defines CNE as: “Actions taken in cyberspace to gain intelligence, maneuver, collect information, or perform other enabling actions required to prepare for future military operations.” NIST attributes this wording to CNSSI 4009-2022 under “cyberspace exploitation,” drawing on DoD Joint Publication 3-12. Read the NIST CSRC glossary entry.
As an Amazon Associate I earn from qualifying purchases.
The definition describes purpose, not a single technique. CNE can include intelligence gathering and other enabling actions; it should not be reduced to data theft, intrusion, or disruption. The terminology belongs to U.S. government and military usage and is not a universal legal definition for every use of “network exploitation.”
How did the earlier DoD definition describe CNE?
An older government glossary described CNE as “Enabling operations and intelligence collection capabilities conducted through the use of computer networks to gather data from target or adversary automated information systems or networks.” This historical formulation puts more emphasis on collecting data from target systems, whereas the current NIST-listed wording also expressly includes maneuver and other actions that enable future military operations. See the government-hosted glossary.
#1 Best Overall
How is CNE different from a cyberattack or network defense?
Historical DoD terminology separates exploitation, attack, and defense by their purpose. A network action is not an attack merely because it uses a computer network; the intended effect and the terminology source matter.
| Term | Purpose in historical DoD terminology |
|---|---|
| Computer network exploitation (CNE) | Use of networks for intelligence collection and enabling operations. |
| Computer network attack (CNA) | Disrupt, deny, degrade, or destroy information or systems. |
| Computer network defense (CND) | Protect, monitor, analyze, detect, and respond to unauthorized activity. |
| Computer network operations (CNO) | Older umbrella term that included CNA, CND, and related CNE enabling operations. |
These distinctions appear in a government-hosted glossary and in a U.S. Government Accountability Office report discussing historical DoD definitions. See GAO-11-421.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is CNE still an official term?
The terminology has changed over time. A 2015 Committee on National Security Systems glossary reports that DoD removed CNE and related terms from JP 1-02 following JP 3-13, and describes newer terminology associated with JP 3-12, including cyberspace operations and offensive and defensive cyberspace operations. It also notes that CNE continued to be used outside military operations. See the 2015 glossary.
NIST’s current glossary still lists “computer network exploitation (CNE),” connecting the label to cyberspace exploitation and citing CNSSI 4009-2022 and DoD JP 3-12. That means it is useful to identify the source and period when interpreting the term: older references may use CNE as a distinct doctrinal category, while newer sources may use broader cyberspace terminology.
Quick Recap
Best Value
Rank #3
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
