The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Computer network exploitation (CNE) is a U.S. government and military term for using activity in cyberspace to gain intelligence, collect information, maneuver, or enable future military operations. It is not simply another name for a cyberattack: in the terminology, exploitation focuses on intelligence and enabling actions, while attack describes disruptive or destructive effects.
What is computer network exploitation?
NIST’s Computer Security Resource Center (CSRC) glossary defines CNE as: “Actions taken in cyberspace to gain intelligence, maneuver, collect information, or perform other enabling actions required to prepare for future military operations.” NIST attributes this wording to CNSSI 4009-2022 under “cyberspace exploitation” from DoD Joint Publication 3-12. Read the NIST CSRC glossary entry.
This current definition is broader than the older shorthand of collecting data from a target network. It includes maneuver and other actions that support future military operations. Therefore, CNE should not automatically be described as data theft, an intrusion, or an attack; the term describes a purpose and category of activity, not one specific technique.
Recommended Free Tools
How CNE differs from attack and defense
A historical U.S. government glossary distinguishes computer network exploitation from computer network attack and computer network defense by their purpose. The government-hosted glossary and a 2011 GAO report document these related terms:
#1 Best Overall
| Term | Purpose in the historical glossary |
|---|---|
| Computer network exploitation (CNE) | Enable operations and intelligence collection through networks, including gathering data from target or adversary systems. |
| Computer network attack (CNA) | Disrupt, deny, degrade, or destroy information or systems using networks. |
| Computer network defense (CND) | Protect, monitor, analyze, detect, and respond to unauthorized activity. |
The practical distinction is the intended function: intelligence or operational enablement for exploitation, disruptive effects for attack, and protection and response for defense. The terms can appear together in discussions of cyberspace operations, but they are not interchangeable.
How the terminology changed
Older U.S. Department of Defense usage defined CNE as network-enabled operations and intelligence collection used to gather data from target or adversary information systems. That historical formulation helps explain why CNE is often summarized as network-based intelligence collection.
A 2015 Committee on National Security Systems glossary reports that DoD removed CNE and related terms from JP 1-02 following JP 3-13, and describes newer terminology associated with JP 3-12, including cyberspace operations and offensive and defensive cyberspace operations. It also notes that CNE continued to be used outside military operations. See the 2015 glossary hosted by the National Security Archive. The current NIST entry still lists CNE, tied to the newer cyberspace-exploitation definition, so whether the term is current depends on the source and terminology context.
Quick Recap
Best Value
Rank #3
How to interpret CNE in context
- Check the source and date. A historical DoD glossary may use CNE in the older, collection-focused sense; NIST’s current entry associates it with cyberspace exploitation and cites CNSSI 4009-2022 and DoD JP 3-12.
- Look at the stated purpose. Intelligence collection, maneuver, and enabling future operations point to exploitation; disruption or destruction points to attack; protection and response point to defense.
- Do not assume a universal legal meaning. These definitions describe U.S. government and military terminology. They do not establish a universal legal definition for every use of “network exploitation.”
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
