Search

Begin New Search Topic Cybersecurity Political Geography Global Focus

1. Cyberspace and Geopolitics: Assessing Global Cybersecurity Norm Processes at a Crossroads

Author:
Christian Ruhl, Duncan Hollis, Wyatt Hoffman, and Tim Maurer
Publication Date:
02-2020
Content Type:
Working Paper
Institution:
Carnegie Endowment for International Peace
Abstract:
As cyber insecurity has become a growing problem worldwide, states and other stakeholders have sought to increase stability for cyberspace. As a result, a new ecosystem of “cyber norm” processes has emerged in diverse fora and formats. Today, United Nations (UN) groups (for example, the Group of Governmental Experts [GGE] and the Open-Ended Working Group [OEWG]), expert commissions (for example, the Global Commission on the Stability of Cyberspace), industry coalitions (for example, the Tech Accord, the Charter of Trust), and multistakeholder collectives (for example, the Paris Call for Trust and Security in Cyberspace) all purport to identify or operationalize various normative standards of behavior for states and/or other stakeholders in cyberspace. As some of these processes wind down (for example, the Global Commission) and others wind up (for example, the OEWG), cyber norms are at a crossroads where each process’s potential (and problems) looms large.
Topic:
Security, Science and Technology, Cybersecurity, Geopolitics, and Norms
Political Geography:
Global Focus

2. The reverse cascade: Enforcing security on the global IoT supply chain

Author:
Nathaniel Kim, Trey Herr, and Bruce Schneier
Publication Date:
06-2020
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
The Internet of Things (IoT) refers to the increasing convergence of the physical and digital worlds. Hundreds of “things” are being connected to the Internet and each other, with more than fifty billion devices expected to be connected by 2030. 1 These devices vary from Internet-connected power-generation equipment to wearable health trackers and smart home appliances, and generally offer some combination of new functionality, greater convenience, or cost savings to users. The Internet of Things (IoT) refers to the increasing convergence of the physical and digital worlds. Hundreds of “things” are being connected to the Internet and each other, with more than fifty billion devices expected to be connected by 2030. 1 These devices vary from Internet-connected power-generation equipment to wearable health trackers and smart home appliances, and generally offer some combination of new functionality, greater convenience, or cost savings to users.
Topic:
Security, Science and Technology, Cybersecurity, Internet, and Innovation
Political Geography:
Global Focus

3. A framework for an open, trusted, and resilient 5G global telecommunications network

Author:
John T. Watts
Publication Date:
03-2020
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
Recent events have seen an acceleration in the rise of reemerging great powers. This has had a profound impact on global economic, technological, and political assumptions and has created new technological realities. The potential impact and implications of artificial intelligence (AI), biotechnology innovation, and the dark sides of social media have raised new concerns for social norms. No issue is more emblematic of the competition between liberal, free-market nations and authoritarian command-economy principles than the evolution of fifth-generation (5G) telecommunications. Generational shifts between cellular telecommunications networks have profound implications for national and global economies. As data become increasingly central to every aspect of a modern economy, the shift to the next generation of cellular networks will be of even greater significance. The Chinese government identified the importance of this transition and has, for years, been aggressively investing around the world to be the purveyor of 5G infrastructure that will carry that data in the coming decades. Chinese-backed firms are currently better positioned to exploit the vast opportunity that 5G represents more effectively than corporations within free markets, for several reasons. The most significant is the high infrastructure cost of legacy cellular models and uncertain consumer demand in the short term. Capital costs are driven predominately by the technical requirements of 5G, which—in return for far higher speeds and ultra-low latency—require new hardware to be installed in many more locations than previous networks. Moreover, the legacy infrastructure model relied on proprietary and incompatible hardware components that are best suited to large, single-manufacture companies that can provide comprehensive end-to-end solutions. While consumer demand is predicted to be high, businesses are cautious in deploying such large amounts of money for unproven speculative demand. The lack of a concrete user base creates an opening that vertically integrated Chinese companies, heavily backed by the state, are exploiting by deploying the 5G technology and services at a discount of about 25 percent, along with loss-leading financing terms. Given that end-to-end network solutions can cost $10–100 billion, or more, 25-percent discounts have a major impact. While the 25-percent discount is financially enticing, the longer-term consequences are often hidden, and can include vulnerability to foreign espionage, economic leverage, and forced compliance to conditions underpinned by authoritarian principles. For the Chinese government, the financial cost is a small investment in return for potential control of the world’s data backbone for the next several decades. The reality is that questions revolving around security, as defined from the perspective of traditional “cyber” or “network security,” are ancillary to the critical challenge. If a nation builds a telecommunications network with equipment supplied from Chinese tech giants such as Huawei or ZTE, those networks will inherently be subject to Chinese laws that require compliance with many principles’ anathema to free-market, liberal views. Moreover, these networks, by design, must be managed and maintained by large services organizations, likely staffed by a vast workforce of Chinese citizens, who also must comply with Chinese law and can provide local human intelligence back to the Chinese state. These are terms that countries should not have to accept, and to which their citizens should not be involuntarily subjected. An open, innovative, safe, and reliable alternative is needed, so that people have a realistic option that allows them to freely communicate and consume information. 5G is emblematic of the competition between the new authoritarianism and free-market, liberal principles. China has executed its plan well over the last five years by driving the standards discussion, developing the leading vertically integrated solution, deploying national export finance to subsidize their offerings, and building the largest and most effective services organization in the market. Free-market economies have spent far less on research and development (R&D), have only limited export finance options, rely on semiconductor dominance, deploy severely limited services organizations, and have no integrated national or international strategy. Few governments or companies were prepared for the level of sophistication of the product and export finance offering of the authoritarian-backed commercial players.
Topic:
Science and Technology, Cybersecurity, Innovation, and 5G
Political Geography:
Global Focus

4. The Use of Cyberspace in the Context of Hybrid Warfare. Means, Challenges and Trends

Author:
Cholpon Abdyraeva
Publication Date:
07-2020
Content Type:
Working Paper
Institution:
Austrian Institute for International Affairs (OIIP)
Abstract:
This paper aims to introduce the state of art on hybrid warfare and seeks to address the conceptual confusion regarding an ever-expanding concept of hybrid warfare. By doing so, this paper simultaneously attempts to assess the growing significance of cyber and information domains within the hybrid warfare, which can be clearly illustrated by the example of the Russian hybrid warfare strategy. The Russian approach to hybrid warfare has considerably broadened the scope of hybrid warfare and changed the focus of debates from military to non-military components of hybrid warfare. Therefore, the purpose of this paper is: 1) to produce a deeper insight into hybrid warfare, including related trends, and 2) to assess the role and impact of cyber and information warfare with a particular focus on Russia. This paper can serve as an introduction that guides policy makers with expert opinions, and as such, intends to motivate further investigation in this field.
Topic:
Science and Technology, Cybersecurity, Internet, Conflict, and Hybrid Warfare
Political Geography:
Russia and Global Focus

5. NATO and 5G: Managing “High Risk” Vendors and Other Outsourced Infrastructure

Author:
Clodagh Quain and Isabelle Roccia
Publication Date:
05-2020
Content Type:
Policy Brief
Institution:
Women In International Security (WIIS)
Abstract:
Fifth-generation telecommunications (5G) technology promises to dramatically increase the interconnectedness and efficiency of commercial and civilian communication infrastructures. 5G will also enable other advances. On the civilian side, it will improve existing applications and give rise to others, from telemedicine to connected cars. It also presents an opportunity to enhance NATO’s capabilities, improving logistics, maintenance, and communications. For instance, 5G will speed communication and improve response time in a theater of operation.
Topic:
NATO, Science and Technology, International Security, Communications, Cybersecurity, 5G, and Digital Policy
Political Geography:
Global Focus

6. Weathering TechNationalism

Author:
Alex W. Schulman
Publication Date:
05-2020
Content Type:
Working Paper
Institution:
EastWest Institute
Abstract:
eathering TechNationalism provides policymakers, regulators, and corporate executives a five-part framework for mitigating supply chain risk in a holistic way. The framework lays out measures of assurance, transparency, and accountability that ICT buyers, operators, and vendors can implement jointly. Supplementing this framework, the report recommends several balanced, risk-informed policy measures—in accordance with national and industry-specific policy goals—that may further ICT and supply chain security and avoid the negative consequences of TechNationalism he action roadmap provides a whole-of-society approach and recommends that policymakers: Enable threat and vulnerability information sharing, Require diverse sources of supply, Make strategic science and technology investments, Consider narrow national security exceptions, and Review and adapt national supply chain security goals and policies.
Topic:
Security, National Security, Science and Technology, Cybersecurity, and Information Technology
Political Geography:
Global Focus

7. NATO’s needed offensive cyber capabilities

Author:
Ion A. Iftimie
Publication Date:
05-2020
Content Type:
Policy Brief
Institution:
NATO Defense College
Abstract:
At the 2016 NATO Summit in Warsaw, cyberspace was recognized as an operational domain in which NATO military forces must be able to maneuver as effectively as they do on land, at sea and in the air. Since then, Allies have conducted several successful offensive cyber operations against non-state adversaries, such as Daesh. Due to technological transformations in recent years, cyber is no longer viewed by NATO and its member states only as a hybrid threat, but also as a weapon in its own right and as a force multiplier in current military operations. Over the next two decades, NATO will look for new ways to integrate cyber weapons (or offensive cyber capabilities) into its operations and missions.
Topic:
Defense Policy, NATO, Non State Actors, and Cybersecurity
Political Geography:
Europe, North America, and Global Focus

8. The Impact of Artificial Intelligence on Strategic Stability and Nuclear Risk, Volume III, South Asian Perspectives

Author:
Peter Topychkanov, Sanatan Kulshrestha, Yanitra Kumaraguru, Malinda Meegoda, Kritika Roy, Saima Aman Sial, Dmitry Stefanovich, and Maaike Verbruggen
Publication Date:
04-2020
Content Type:
Special Report
Institution:
Stockholm International Peace Research Institute
Abstract:
This edited volume is the third in a series of three. The series forms part of a SIPRI project that explores regional perspectives and trends related to the impact that recent advances in artificial intelligence could have on nuclear weapons and doctrines, as well as on strategic stability and nuclear risk. This volume assembles the perspectives of eight experts on South Asia on why and how machine learning and autonomy may become the focus of an arms race among nuclear-armed states. It further explores how the adoption of these technologies may have an impact on their calculation of strategic stability and nuclear risk at the regional and transregional levels.
Topic:
Arms Control and Proliferation, Nuclear Power, Cybersecurity, Political stability, Disarmament, and Artificial Intelligence
Political Geography:
Pakistan, Russia, South Asia, India, East Asia, and Global Focus

9. Cyber-incident Management: Identifying and Dealing with the Risk of Escalation

Author:
Fei Su, Dr Vincent Boulanin, and Johan Turell
Publication Date:
09-2020
Content Type:
Working Paper
Institution:
Stockholm International Peace Research Institute
Abstract:
The ever-increasing dependence on information and communication technologies (ICTs) in all aspects of society raises many challenges for national crisis management agencies. These agencies need to prepare not only for new cyberthreats and cyber vulnerabilities, but also for the fact that the aftermath of a cyber incident affecting critical infrastructure has its own challenges. On the one hand, the practical disruptions caused by an isolated incident can be hard to predict and control and, on the other hand, the consequences and perceptions of an incident whose cause is not yet determined can be equally hard to manage. Uncertainty around the cause of the incident and remedial actions being taken often lead to public speculation and political pressure to respond in ways that could create political tensions, and possibly conflict, between countries. This policy paper is the result of a nine-month research project that was jointly conducted by SIPRI and the Swedish Civil Contingencies Agency (MSB) on cyber-incident management. It explores what national crisis management authorities can do to improve their cyber-incident prevention, detection and response strategies and also how they can do better to deal with the larger societal and potentially political aftermath. It investigates why and how cyber incidents may lead to escalatory scenarios and how these scenarios can be avoided and contained using various de-escalatory approaches. It comprises an introduction providing background and the inspiration of this report (section I); four sections that explore the dynamics of escalation and de-escalation from conceptual (section II), analytical (sections III–IV) and empirical (section V) standpoints; and two sections that present the main findings and recommendations (sections VI–VII).
Topic:
Security, Science and Technology, Military Affairs, and Cybersecurity
Political Geography:
Sweden and Global Focus

10. Rebooting Congressional Cybersecurity Oversight

Author:
Carrie Cordero and David Thaw
Publication Date:
01-2020
Content Type:
Special Report
Institution:
Center for a New American Security
Abstract:
Cybersecurity oversight is due for a reboot. This paper explores the need for refreshed congressional oversight of cybersecurity. After laying out why cybersecurity oversight presents special challenges, this paper suggests that the disparate nature of the cybersecurity policymaking legal framework is mismatched to the nature of the cybersecurity problem, resulting in difficulty legislating in this space. It then provides two key recommendations to guide a congressional cybersecurity oversight reboot. Cybersecurity is a broad challenge spanning many disciplines and industries. This paper argues that the current “patchwork” legal framework is ill suited to address cybersecurity questions either for legislative oversight or effective policymaking. The paper provides an overview of the nature and scope of the cybersecurity problem, with a focus on how the complexity of the field affects congressional oversight activities. Congress has been conducting a substantial amount of oversight in this area in recent years. Those efforts, however, have not yet resulted in legislative actions that have demonstrably improved national cybersecurity. This paper seeks to aid the effort to craft legal authorities that deal with an increasingly complex set of cyberthreats. This short exposition provides a path to rebooting Congress’ approach to cybersecurity oversight in a way that would allow these issues to be addressed more comprehensively.
Topic:
Security, Science and Technology, and Cybersecurity
Political Geography:
Global Focus