Gary Brown

Gary Brown Gary Brown serves as Professor of Cyber Law at the College of Information and Cyberspace, National Defense University. Previously, he worked as a Cyber Policy and Strategy Analyst for the U.S. Department of Defense Joint Staff J5 Cyber Policy Division. Before that, he was Professor of Cyber Security at Marine Corps University, Quantico, Virginia and Head of Communications and Congressional Affairs for the Washington Delegation, International Committee of the Red Cross (ICRC). He was with the ICRC from 2012-2015. Prior to joining the ICRC, he served for 24 years as a judge advocate with the United States Air Force. Colonel Brown has been deployed twice to the Middle East during his Air Force career, the second time for a year at the Combined Air Operations Center, Southwest Asia as the senior legal advisor for combat air operations in Afghanistan and Iraq. In his final military assignment he was the first senior legal counsel for U.S. Cyber Command, Fort Meade, Maryland, where he served for three years. 


  • “Commentary on the law of cyber operations and the DoD Law of War Manual,” in The United States Department of Defense Law of War Manual Commentary and Critique (2018);
  • “Spying and Fighting in Cyberspace,” Journal of Nat’l Security Law & Policy (2016);
  • “Easier Said Than Done: Legal Reviews of Cyber Weapons,” Journal of Nat’l Security Law & Policy (2014) (coauthor);
  • “Why Iran Didn’t Admit Stuxnet Was an Attack,” Joint Forces Quarterly (2011);
  • “On the Spectrum of Cyberspace Operations,” Small Wars Journal (2012) (coauthor).