Search

Begin New Search Topic Cybersecurity Publishing Institution Atlantic Council

1. Alliance power for cybersecurity

Author:
Kenneth Geers
Publication Date:
08-2020
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
There is only one internet and only one cyberspace connecting individuals, enterprises, and nations all over the world. Ever more frequently, this shared space is coming under attack from malicious actors, both state and non-state, who are seeking to exploit cyberspace’s shared infrastructure for their own ends. Addressing cybersecurity threats is therefore an international problem that requires an international solution. But given the myriad of threats faced in the cyber domain and the ambiguous borders that exist there, how can states best address these challenges and ensure the safety of their own networks and people? In this new report from the Scowcroft Center’s Transatlantic Security Initiative, Cyber Statecraft Initiative senior fellow Kenneth Geers argues that the best way for democratic states to defend their own cyber networks is to leverage the multinational strength of political and military alliances like NATO and the European Union. Alliances like NATO give democracies an advantage over their authoritarian rivals by providing already established mechanisms for multinational cooperation. Alliances are therefore better equipped to tackle the inherently international challenges of cybersecurity. To illustrate the impact of alliances on cybersecurity, Geers uses events in Ukraine as a case study, comparing the Ukrainian government’s efforts to defend against Russian cyberattacks shortly after the 2014 revolution with measures taken in cooperation with partners to defend the 2019 presidential election. Geers illustrates how collective action in 2019 produced improved security outcomes compared to efforts taken by Ukraine alone. Building on these lessons, Geers argues that the only structures likely to produce tangible results in cybersecurity are those within political and military alliances. Indeed, the only credible cyber superpower is a robust alliance. The report then offers a series of recommendations on how NATO and the EU can promote trust and collaboration among Allies and partners to build a more effective cyber alliance.
Topic:
Security, Defense Policy, NATO, Cybersecurity, Internet, and Non-Traditional Threats
Political Geography:
Europe and Northern Europe

2. Troubled vision: Understanding recent Israeli–Iranian offensive cyber exchanges

Author:
JD Work and Richard Harknett
Publication Date:
07-2020
Content Type:
Policy Brief
Institution:
Atlantic Council
Abstract:
Reported Iranian intrusions against Israeli critical infrastructure networks and alleged Israeli actions against Iranian proliferation-associated targets pose substantial new challenges to understanding ongoing competition and conflict in the Middle East. These cyber exchanges may be interpreted through two distinct lenses: as the struggle to achieve deterrence using the instrument of cyber operations, or as the contest for initiative in order to establish conditions for relative security advantage in a cyber-persistent environment. Either way, these ongoing incidents are best understood not as “bolt out of the blue” attacks, but rather fleeting glimpses of continuing cyber campaigns leveraging previously disclosed and newly developed capabilities as each side grapples to anticipate cyber vulnerability and shape the conditions of exploitation. The opaque nature of these interactions is further complicated by potential bureaucratic politics and interservice rivalries, as well as unknown dynamics of a counter-proliferation campaign to slow, disrupt and potentially destroy Iranian nuclear capacity. In the end, observed cyber actions may not represent reflections of accurate strategic calculation, and even if aligned to the operational environment they may not lead to intended outcomes. Continuous failure to deter, or inability to manage persistent interactions, may lead to greater dangers.
Topic:
Security, Defense Policy, Cybersecurity, and Non-Traditional Threats
Political Geography:
Iran, Middle East, and Israel

3. The reverse cascade: Enforcing security on the global IoT supply chain

Author:
Nathaniel Kim, Trey Herr, and Bruce Schneier
Publication Date:
06-2020
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
The Internet of Things (IoT) refers to the increasing convergence of the physical and digital worlds. Hundreds of “things” are being connected to the Internet and each other, with more than fifty billion devices expected to be connected by 2030. 1 These devices vary from Internet-connected power-generation equipment to wearable health trackers and smart home appliances, and generally offer some combination of new functionality, greater convenience, or cost savings to users. The Internet of Things (IoT) refers to the increasing convergence of the physical and digital worlds. Hundreds of “things” are being connected to the Internet and each other, with more than fifty billion devices expected to be connected by 2030. 1 These devices vary from Internet-connected power-generation equipment to wearable health trackers and smart home appliances, and generally offer some combination of new functionality, greater convenience, or cost savings to users.
Topic:
Security, Science and Technology, Cybersecurity, Internet, and Innovation
Political Geography:
Global Focus

4. A framework for an open, trusted, and resilient 5G global telecommunications network

Author:
John T. Watts
Publication Date:
03-2020
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
Recent events have seen an acceleration in the rise of reemerging great powers. This has had a profound impact on global economic, technological, and political assumptions and has created new technological realities. The potential impact and implications of artificial intelligence (AI), biotechnology innovation, and the dark sides of social media have raised new concerns for social norms. No issue is more emblematic of the competition between liberal, free-market nations and authoritarian command-economy principles than the evolution of fifth-generation (5G) telecommunications. Generational shifts between cellular telecommunications networks have profound implications for national and global economies. As data become increasingly central to every aspect of a modern economy, the shift to the next generation of cellular networks will be of even greater significance. The Chinese government identified the importance of this transition and has, for years, been aggressively investing around the world to be the purveyor of 5G infrastructure that will carry that data in the coming decades. Chinese-backed firms are currently better positioned to exploit the vast opportunity that 5G represents more effectively than corporations within free markets, for several reasons. The most significant is the high infrastructure cost of legacy cellular models and uncertain consumer demand in the short term. Capital costs are driven predominately by the technical requirements of 5G, which—in return for far higher speeds and ultra-low latency—require new hardware to be installed in many more locations than previous networks. Moreover, the legacy infrastructure model relied on proprietary and incompatible hardware components that are best suited to large, single-manufacture companies that can provide comprehensive end-to-end solutions. While consumer demand is predicted to be high, businesses are cautious in deploying such large amounts of money for unproven speculative demand. The lack of a concrete user base creates an opening that vertically integrated Chinese companies, heavily backed by the state, are exploiting by deploying the 5G technology and services at a discount of about 25 percent, along with loss-leading financing terms. Given that end-to-end network solutions can cost $10–100 billion, or more, 25-percent discounts have a major impact. While the 25-percent discount is financially enticing, the longer-term consequences are often hidden, and can include vulnerability to foreign espionage, economic leverage, and forced compliance to conditions underpinned by authoritarian principles. For the Chinese government, the financial cost is a small investment in return for potential control of the world’s data backbone for the next several decades. The reality is that questions revolving around security, as defined from the perspective of traditional “cyber” or “network security,” are ancillary to the critical challenge. If a nation builds a telecommunications network with equipment supplied from Chinese tech giants such as Huawei or ZTE, those networks will inherently be subject to Chinese laws that require compliance with many principles’ anathema to free-market, liberal views. Moreover, these networks, by design, must be managed and maintained by large services organizations, likely staffed by a vast workforce of Chinese citizens, who also must comply with Chinese law and can provide local human intelligence back to the Chinese state. These are terms that countries should not have to accept, and to which their citizens should not be involuntarily subjected. An open, innovative, safe, and reliable alternative is needed, so that people have a realistic option that allows them to freely communicate and consume information. 5G is emblematic of the competition between the new authoritarianism and free-market, liberal principles. China has executed its plan well over the last five years by driving the standards discussion, developing the leading vertically integrated solution, deploying national export finance to subsidize their offerings, and building the largest and most effective services organization in the market. Free-market economies have spent far less on research and development (R&D), have only limited export finance options, rely on semiconductor dominance, deploy severely limited services organizations, and have no integrated national or international strategy. Few governments or companies were prepared for the level of sophistication of the product and export finance offering of the authoritarian-backed commercial players.
Topic:
Science and Technology, Cybersecurity, Innovation, and 5G
Political Geography:
Global Focus

5. A candle in the dark: US national security strategy for artificial intelligence

Author:
Tate Nurkin and Stephen Rodriguez
Publication Date:
12-2019
Content Type:
Working Paper
Institution:
Atlantic Council
Abstract:
AI is expected to have a transformational impact on the future of geopolitics, defense, and security. The emerging geopolitical and security context influencing the future of AI technology development has been driven by the erosion of traditional geopolitical frameworks, increased conflict between liberalism and authoritarianism, the pervasiveness of social media use and 4IR-driven digitization of industries, as well as the ability of more actors to affect strategic and operational environments. However, the future of AI will depend on the decisions of great power competitors—the US, China and Russia—global trends development, and the management of uncertainties associated with emerging technologies. In this fluctuating environment, where the US is engaged in a high-stakes competition with is near-peer adversaries, and AI is enabling paradigm-shifting changes in public and private sector operations, how should the US respond? In this new Atlantic Council Strategy Paper, A Candle in the Dark: US National Security Strategy for Artificial Intelligence, Tate Nurkin and Stephen Rodriguez provide an integrated strategy to respond to this key issue. According to Former US Secretary of Defense Dr. Ashton B. Carter, author of the foreword, this paper “effectively articulates the current technological landscape and offers a coherent strategic framework for the United States and its allies to harness AI’s upside potential, while mitigating downside risks and defending against emerging threats.” In a world full of uncertainties, this paper provides a holistic way forward for the US to leverage the full potential of AI while maintaining America’s technological competitiveness.
Topic:
Defense Policy, NATO, Intelligence, National Security, Science and Technology, Cybersecurity, Entrepreneurship, Drones, Conflict, and Disinformation
Political Geography:
Russia, China, Eurasia, Asia, North America, and United States of America

6. Aviation cybersecurity: Scoping the challenge

Author:
Pete Cooper, Simon Handler, and Safa Shahwan Edwards
Publication Date:
12-2019
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
In the past decade, the aviation industry has reaped the benefits of digitization. With the aircraft efficiency gains and enhancements to the passenger experience catalyzed by new technologies, we have to acknowledge the corresponding new risks, including social and technical vulnerabilities never before addressed. In 2017, the Atlantic Council released its ground-breaking report, Aviation Cybersecurity—Finding Lift, Minimizing Drag. The report raised awareness on the state of cybersecurity in the aviation industry, sparking public dialogue on the intersection of cybersecurity and aviation. This created a foundation for the aviation community to convene around protecting the traveling public. Since then, it has become evident that anticipating, identifying, and mitigating cyberspace vulnerabilities in aviation will require the buy-in of all stakeholders in this ecosystem. Two years on, Thales is honored to continue its support for the Atlantic Council and this crucial initiative that aims to map perspectives on cybersecurity across this diverse industry and highlight the growing need for collaboration across stakeholders. Ultimately, there is no silver bullet for aviation cybersecurity, and confronting cyber risk in aviation will require a global approach, working across safety, security, cybersecurity, and enterprise IT. This report and the accompanying global survey developed by the Atlantic Council will increase our holistic understanding of aviation cyber risk and drive meaningful engagement across the aviation community. This effort to broaden the community of stakeholders examining cybersecurity in aviation will increase our collective security, safety, and resilience. When it comes to the trust of travelers, we are all only as strong as those most vulnerable among us. It is only through mutual understanding and collaboration that we can continue to challenge one another, grow, and improve. I applaud the Atlantic Council for embracing this topic and am proud Thales has the chance to support this work.
Topic:
International Organization, Science and Technology, Infrastructure, Cybersecurity, Innovation, and Aviation
Political Geography:
Global Focus

7. US-China collaboration on the Internet of Things safety: What next?

Author:
Karl Frederick Rauscher
Publication Date:
12-2019
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
The Internet of Things describes a future world with pervasive connectivity. While IoT offers a range of humanitarian, commercial, and national security benefits, its pervasive nature has many concerned over its impacts on safety and security in society. A great disservice is done when national security, commercial, and humanitarian interests are conflated. In a new report by the Atlantic Council’s Scowcroft Center for Strategy and Security, Karl Rauscher notes that the world’s two largest powers are at a crossroads with regard to their level and scope of cooperation in continued IoT advances. United States–China Collaboration on the Internet of Things Safety: What’s Next? analyzes possibilities for the United States and China to work together to establish consensus policies and standards to make their societies safer and provide a model for the world.
Topic:
National Security, Power Politics, Cybersecurity, and Internet of Things
Political Geography:
China, Asia, North America, and United States of America

8. What do we know about cyber escalation? Observations from simulations and surveys

Author:
Benjamin Jensen and Brandon Valeriano
Publication Date:
11-2019
Content Type:
Policy Brief
Institution:
Atlantic Council
Abstract:
Do cyber operations alter how states respond to international crises in a way that creates incentives for decision makers to cross the Rubicon and use military force to settle disputes? This question is central to current cyber strategy debates and the idea of persistent engagement and defending forward in cyberspace. The answer is surprising: no. Based on the evidence, cyber operations offer a valuable escalatory offramp.
Topic:
Security, Science and Technology, Cybersecurity, and Crisis Management
Political Geography:
Global Focus

9. Cyber and Deterrence: The Military-Civil Nexus in High-End Conflict

Author:
Franklin Kramer, Robert J Butler, and Catherine Lotrionte
Publication Date:
01-2017
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
This paper analyzes cyber’s role in deterrence and defense—and specifically the military-civil nexus and the relationship between the Department of Defense (DoD), the civil agencies, and the key private operational cyber entities, in particular the Internet Service Providers (ISPs) and electric grid operators. The focus of the paper is on high-end conflict including actions by an advanced cyber adversary, whether state or nonstate, and not on the “day-to-day” intrusions and attacks as regularly occur and are generally dealt with by governmental agencies and the private sector without military involvement. High-end conflict can be expected to include attacks within the United States homeland as well as in forward theatres.
Topic:
Civil Society, International Security, Military Strategy, Military Affairs, and Cybersecurity
Political Geography:
America and Global Focus

10. Risk Nexus: Overcome by cyber risks? Economic benefits and costs of alternate cyber futures

Publication Date:
09-2015
Content Type:
Working Paper
Institution:
Atlantic Council
Abstract:
In 2030, will the Internet and related information and communications technologies (ICTs) continue to drive global innovation and prosperity? Or will that bright promise be swamped by an unstable and insecure Internet, so overwhelmed by non-stop attacks that it has become an increasing drag on economic growth? The answers, as far as we can predict, are not promising and mean the difference in tens of trillions of dollars in global economic growth over the next fifteen years.
Topic:
Economics, Science and Technology, Communications, and Cybersecurity
Political Geography:
Global Focus