Search

Begin New Search Topic Cybersecurity Publishing Institution School of International and Public Affairs, Columbia University

1. Natural and Quasi-Natural Experiments to Evaluate Cybersecurity Policies

Author:
Benjamin Dean
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Over the past decade, numerous countries around the world have developed and implemented national cybersecurity strategies. Yet very few of these strategies have been subject to evaluations. As a result, it is difficult to judge the performance of strategies, the programs that comprise them, and the cost-effectiveness of funds spent. Natural and quasi-natural experiments are a promising set of research methods for the evaluation of cybersecurity programs. This paper provides an overview of the methods used for natural or quasi-natural experiments, recounts past studies in other domains where the methods have been used effectively, and then identifies cybersecurity activities or programs for which these methods might be applied for future evaluations (e.g., computer emergency response teams in the EU, cybersecurity health checks in Australia, and data breach notification laws in the United States).
Topic:
National Security, Science and Technology, Cybersecurity, and Data
Political Geography:
United States and North America

2. Honing Cyber Attribution

Author:
Justin Key Canfil
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Concerns about state-directed cyber intrusions have grown increasingly prevalent in recent years. The idea that state principals can obfuscate their involvement in such attacks by delegating operational tasks to non-state agents poses a particularly significant challenge to international enforcement and remedies. Gaps in international law, coupled with obstacles to detection in such cases, may make it more difficult to bring sponsoring states to justice. This paper offers a roadmap for assessing the propensity of states to delegate to non-state actors and correct for false positives in standard (typically more technical) cyber attack attribution methods. I conclude that the conditions under which attacks are likely to have been backed by sponsoring states occupy a much narrower window than conventional wisdom suggests, and that the universe of transgressors can be identified when standard indicators overlap with specific conditions.
Topic:
Security, Elections, Cybersecurity, and Election Interference
Political Geography:
Russia, United States, Europe, and North Am

3. Is Cyber Defense Possible?

Author:
Sorin Ducaru
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Cyber issues are rapidly growing in importance to defense alliances. The Journal of International Affairs talked to Ambassador Sorin Ducaru, NATO’s assistant secretary general for emerging security challenges, about NATO’s efforts to improve its cyber defenses against emerging threats.
Topic:
NATO, Diplomacy, International Cooperation, Military Strategy, and Cybersecurity
Political Geography:
United States, Europe, North Atlantic, and North America

4. How the Next U.S. President Can Contain China in Cyberspace

Author:
Adam Segal and Rob Knake
Publication Date:
01-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
When transition planning gets underway in earnest this fall, one of the hardest memos to write will be the outbrief from the current National Security Council (NSC) team on what to do about China’s ongoing campaign of cyber espionage targeting the intellectual property of U.S. companies. While long a focus of both the president’s cyber and China teams, there is little chance that in the coming months the issue is going to be brought to any type of resolution. Instead, the next president will inherit a partially implemented plan that has produced positive results in the short term, but its long-term sustainability remains uncertain. He or she would be wise to follow the playbook left by the Obama administration, with a redoubled focus on the investigation and prosecution of cybercrime. Critics of the administration on this topic generally fall into two camps. One, summed up nicely by the title of a book by Peter Kiernan, is the Becoming China’s Bitch camp.[1] In this view, the United States is so dependent on China that the Chinese can do what they want and there is little Americans can do to stop them. They hold U.S. debt, Americans can’t manufacture anything without them, Chinese students are leaps and bounds smarter than American students, and there are millions more of them studying science and math. The Chinese are strategic, looking around the corner of history and shaping it in their interests. They are playing three-dimensional chess and President Obama has been playing checkers. They put the blame on what they would characterize as Obama’s willingness to “lead from behind.” They then quote Sun Tzu, reference Unrestricted Warfare, and drop the mic.[2] The second view is the Coming Collapse of China camp.[3] In this view, despite an aggressive anti-corruption campaign and a more assertive foreign policy, China is weak, wounded, and dangerous. The Communist Party made a deal with the devil, offering economic growth in exchange for loyalty to the regime. Now, the leadership can’t keep up with their end of the bargain. Growth is slowing, and at a faster pace than the official figures acknowledge. Over investment continues and economic reforms have stalled. Air and water pollution are a drag on the economy and a threat to citizen health. Paranoid about any dissent, the party has tightened restrictions on the Internet and the media and arrested feminists, civil rights activists, and lawyers. One spark could start protests that lead to widespread instability and perhaps the end of Communist Party rule. What’s interesting is that these divergent views of China’s place in the world similarly predict there is little chance that China will cease stealing intellectual property. In the first view, China holds all the cards, and there is simply nothing the United States can do to impose costs and stop the hacking of companies. If China is desperate and dangerous, then it can’t stop stealing technology and business secrets because they are needed to fuel the economy.
Topic:
Science and Technology, Intellectual Property/Copyright, Cybersecurity, and Conflict
Political Geography:
United States, China, Asia, and North America

5. Toward Practical Cyber Counter Deception

Author:
Christopher Porter
Publication Date:
02-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Nation-states increasingly engage in strategic deception in cyberspace, frustrating traditional counter deception approaches. This paper evaluates and critiques the philosophical underpinnings and practical implications of existing military-political counter deception and computer forensic approaches. Analysts can better detect and expose strategic deception campaigns in cyberspace by focusing on the size and organizational strength threat actors need to conduct the operations.
Topic:
Security, Science and Technology, Military Strategy, and Cybersecurity
Political Geography:
Global Focus

6. Attribution of Malicious Cyber Incidents: From Soup to Nuts

Author:
Herbert Lin
Publication Date:
03-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Attribution of malicious cyber activities is a deep issue about which confusion and disquiet can be found in abundance. Attribution has many aspects—technical, political, legal, policy, and so on. A number of well-researched and executed papers cover one or more of these aspects, but integration of these aspects is usually left as an exercise for the analyst. This paper distinguishes between attribution of malicious cyber activity to a machine, to a specific perpetrator (often a human being pressing the keys) initiating that activity, and to an adversary that is deemed ultimately responsible for that activity. Which type of attribution is relevant depends on the goals of the relevant decisionmaker. Further, attribution is a multi-dimensional issue that draws on all sources of information available, including technical forensics, human intelligence, signals intelligence, history, and geopolitics, among others. From the perspective of the victim, some degree of factual uncertainty attaches to any of these types of attribution, although the last type—attribution to an ultimately responsible party—also implicates to a very large degree legal, policy, and political questions. But from the perspective of the adversary, the ability to conceal its identity from the victim with high confidence is also uncertain. It is the very existence of such risk that underpins the possibility of deterring hostile actions in cyberspace.
Topic:
Security, Intelligence, Science and Technology, and Cybersecurity
Political Geography:
Global Focus

7. A Non-State Strategy for Saving Cyberspace

Author:
Jason Healey
Publication Date:
03-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
America’s future, and that of other nations and peoples, will be most secure in the long term with an emphasis on future prosperity unlocked by the Internet. The Internet may have surpassed Johannes Gutenberg’s printing press as history’s most transformative invention because of how it has spawned parallel and simultaneous revolutions across other technologies. By making information so cheap to produce, compute, and share, the Internet enabled rapid advances in technologies as far afield as manufacturing and genetics. The problem is that there is no guarantee the future of the Internet, and the larger entirety of cyberspace, will be as rosy as its past. It is possible, even likely, that the Internet will not remain as resilient, free, secure, and awesome for future generations as it has been for ours. Imagine that twenty years after the invention of the printing press, the pope and the princes of Europe—in fact, anyone who had some basic skills and desire to do so—had the ability to determine exactly what was being printed, exactly who was printing it, and exactly to whom they were sending it. Worrying about intellectual property theft, privacy, or civil rights (had those concepts existed) would have missed the bigger picture. With no trust in the underlying communication medium, the future of Europe and the future of humanity would have been profoundly changed—not just for five years, but for 500. If the printing press was so easily compromised as computers are today, could there even have been a Renaissance or an Enlightenment? This amazing transformative technology, the Internet, is unsustainable unless we make sweeping changes. We are all becoming absolutely dependent on an unknowably complex system where threats are growing far faster than the Internet’s own defenses and resilience.
Topic:
Security, Science and Technology, Cybersecurity, and Internet
Political Geography:
Global Focus