Search

Begin New Search Topic Cyberspace Political Geography Global Focus

1. The Impact of Stereotyping on International Cyber Norm‑making: Navigating Misperceptions and Building Trust

Author:
Fan Yang
Publication Date:
02-2025
Content Type:
Policy Brief
Institution:
The Geneva Centre for Security Policy
Abstract:
Over the past three decades, cyberspace – a digital realm shaped by both technological and social dynamics – has evolved into a domain where a wide range of human activities now take place. These activities are marked by their anonymity, which complicates attribution, and their instantaneity, which challenges timely regulation. To address these challenges, states focus on two approaches: applying existing laws and creating new ones. While there is a general consensus that cyberspace should be governed by the rule of law, including international law, the application of existing legal frameworks to cyberspace remains an evolving challenge both in terms of state practice and academic discourse. At the same time, the international community has consistently sought to develop new norms to promote good governance in cyberspace. Against this backdrop, states – especially those with advanced cyber capabilities – are engaging in a competitive game of norm-making, striving to exert influence in shaping international rules to govern cyberspace. As part of this process, states often categorise each other by trying to highlight their counterparts’ most distinct characteristics. While such labelling is common in diplomatic interactions, it is particularly problematic in the context of international cyber norm-making. Labels reflect and reinforce stereotypes, which often oversimplify the complexities of states’ behavioural patterns in cyberspace and their underlying logic. States are thus roughly grouped by opposing indicators, such as those viewing cyberspace as a global commons versus sovereign territory, those advocating for an interconnected free Internet versus a fragmented “splinternet”, or those favouring multistakeholderism versus multilateralism as the dominant approach to the governance of cyberspace. Once established, these stereotypes are difficult to dismantle and can lead to distorted perceptions that obstruct constructive dialogue. This GCSP Policy Brief aims to identify the potential security challenges posed by stereotyping in international cyber norm-making processes. It then illustrates the policy implications of this problem and offers policy recommendations.
Topic:
Security, Cybersecurity, Norms, Cyberspace, and Trust
Political Geography:
Global Focus

2. No end in sight to the global sprint towards digital sovereignty in 2023 (and beyond)

Author:
Katarina Vehovar
Publication Date:
01-2023
Content Type:
Special Report
Institution:
Austrian Institute for International Affairs (OIIP)
Abstract:
Even a cursory glance at headlines in Foreign Affairs – “How AI Makes Dictators More Dangerous”, “The Insidious Cyberthreat” and “The Autocrat in Your iPhone” - suggests that 2022 was not the best year for cyber optimists who profess a belief in technology’s democratising power (González 2022). Digital authoritarian systems and “spin dictatorships” continue relying just as much on information manipulation as coercion to consolidate their power (Guriev 2022). Meanwhile, concerns over the use of sophisticated mercenary surveillance systems and invasive AI technology in democracies are also mounting (Deibert 2022).
Topic:
International Relations, Science and Technology, Authoritarianism, Cyberspace, and Digital Sovereignty
Political Geography:
Global Focus

3. Mapping Cyber-related Missile and Satellite Incidents and Confidence-building Measures

Author:
Lora Saalman, Larisa Saveleva Dovgal, and Fei Su
Publication Date:
11-2023
Content Type:
Commentary and Analysis
Institution:
Stockholm International Peace Research Institute (SIPRI)
Abstract:
Cyber incidents that—whether due to human error, system malfunction or intentional targeting—impact satellite and missile systems extend beyond the ongoing war in Ukraine. These systems are essential to civilian and military operations and disrupting them has the potential to elicit conventional or even nuclear retaliation. Due to the centrality of satellite and missile-related infrastructure, cyber incidents impacting the functionality of such infrastructure have served as a catalyst for previous confidence-building measures (CBMs) that may provide a template for future ones. This paper builds on SIPRI work to map cyber-related missile and satellite incidents, as well as unilateral, bilateral and multilateral CBMs to provide takeaways meant to foster greater predictability and stability in cyberspace.
Topic:
Cybersecurity, Weapons, Cyberspace, Confidence Building Measures, and Russia-Ukraine War
Political Geography:
Ukraine and Global Focus

4. Hard Choices in a Ransomware Attack

Author:
Emily Harding and Harshana Ghoorhoo
Publication Date:
09-2022
Content Type:
Special Report
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Ransomware attacks started as a novelty but have now become a clear and present danger to entities of every size and function. The number of ransomware attacks and the price of demanded ransoms have escalated steeply since 2018. Legislation and policy have not kept up. Policymakers have sought to shape the incentive structure for victims to incentivize defense and disincentivize ransom payments. While they are sympathetic to businesses who fall victim to these attacks, which can sometimes be existentially threatening, few policymakers (or their staff) have ever experienced the shock of an attack firsthand and, as a result, are searching with incomplete information for the right combination of carrots and sticks that will help victims and hurt attackers. This report aims to put the reader in the shoes of the victim—the shocking, powerless moment of realization of a ransomware attack. It walks through a set of decisions that victim must make on their worst day and in the weeks to follow. How well an entity succeeds in navigating that peril depends on decisions made well before an attack, so the report also makes recommendations for both government and industry on how to encourage preparation and simple defensive steps.
Topic:
Security, Science and Technology, Cybersecurity, and Cyberspace
Political Geography:
Global Focus

5. The First Space-Cyber War and the Need for New Regimes and Policies

Author:
Eytan Tepper
Publication Date:
05-2022
Content Type:
Policy Brief
Institution:
Centre for International Governance Innovation (CIGI)
Abstract:
Many dubbed the Gulf War of 1991 the “first space war” due to the US Armed Forces’ extensive use of satellites. The cyberwar in Ukraine, although it is mostly playing out in the shadows, may be remembered as the first space-cyber war. This policy brief makes the case that states should adopt national policies to defend against threats to space-based assets and applications, such as communications satellites, that are both vital to national security and economic security and increasingly vulnerable to cyberattacks. It is time to explore and identify principles for responsible space-cyber behaviour that would represent a broad multilateral consensus. Identifying these principles may not prevent space-cyber hostilities but could provide “rules of the game.” States would also benefit from encouraging a space-cyber security industry that, beyond protecting against space-cyber threats, has the potential to be a significant growth engine.
Topic:
Security, Infrastructure, Cybersecurity, Space, and Cyberspace
Political Geography:
Global Focus

6. Creating Accountability for Global Cyber Norms

Author:
James A. Lewis
Publication Date:
02-2022
Content Type:
Special Report
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
The year 2021 saw all UN member states agree in the Open-Ended Working Group (OEWG) on a framework for responsible state behavior in cyberspace, based on norms developed in the United Nations Group of Governmental Experts (GGE) in 2015.1 The OEWG formalized global agreement on the 2015 norms. This consensus agreement means that the framework for responsible state behavior is now politically binding for all member states. Global agreement on the obligations for responsible state behavior is a substantial step forward in building international cybersecurity in a rules-based environment. Unfortunately, international experience since 2015 has shown that agreement on norms, even when politically binding, is by itself not enough to ensure their observation or create stability in cyberspace. This has shifted discussion from what norms are needed to how to build accountability and what to do when norms are ignored. While the norms agreed to by all member states will ultimately reinforce international stability, to make progress, it will be necessary to develop a collective diplomatic strategy to improve the observation of norms and increase accountability when they are ignored. A strategy of sustained engagement and the imposition of consequences is necessary for norms to have effect. Our assumption is that accountability for malicious cyber actions can only be strengthened if there are consequences for a state’s decision not to observe norms. If nothing else, a failure to take action in response to transgressions seems to only encourage opponents. An immediate task is to define the conditions for collective action. There has been an initial and informal agreement among like-minded democratic nations that accountability requires the imposition of consequences for a failure to observe norms, but several issues must be addressed. These include agreement on standards for attribution of the source of a malicious action and agreement on a proportional, lawful, and effective response. A collective approach is essential if efforts to create accountability are to succeed, and any response to a cyber incident will require political heft and sustained engagement.
Topic:
Security, International Cooperation, United Nations, Cybersecurity, Accountability, Transparency, and Cyberspace
Political Geography:
Global Focus

7. The UN norms of responsible state behaviour in cyberspace

Author:
Bart Hogeveen
Publication Date:
03-2022
Content Type:
Special Report
Institution:
Australian Strategic Policy Institute (ASPI)
Abstract:
Global digital growth is continuing to fundamentally transform the lives of people, businesses and institutions, bringing people out of poverty, increasing wider prosperity, welfare and enabling new ways for governments and citizens to engage with each other. It is also creating a more connected world and supporting globalisation with greater access to free markets, democratic systems, prosperity and innovation. But as we become more reliant on cyberspace, malicious cyber activity has grown in intensity, complexity and severity over recent years, with rising incidents of cybercrime and hostile states targeting critical national infrastructure, democratic institutions, business and media. There is too much at risk to allow cyberspace to become a lawless world and we need to continue to work together to identify the rules of the road in how international law applies to state behaviour in cyberspace just as it does to activities in other domains. The 11 norms, as part of the UN framework of responsible state behaviour in cyberspace, is a way to help develop those rules of the road and the UK, as part of our outreach, is committed to supporting partners across all continents be better able to both implement the norms but also be better empowered to join in the international debate in the UN. This ASPI programme has provided an insight into meaningful measures being put in place across ASEAN to deliver the norms, showcasing the region as trailblazing good practice and policies. Sharing and communicating these is in itself a confidence building measure and the examples shared in this report will have an impact across the global debate. The UK, as a responsible democratic cyber power is proud to have supported this report and we look forward to future activity in the ASEAN region and globally to help shape the future frontiers of an open and stable international order in cyberspace.
Topic:
United Nations, Norms, and Cyberspace
Political Geography:
Australia and Global Focus

8. Cyberspace and Naval Power

Author:
Matthew J. Flynn
Publication Date:
09-2022
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
Seapower has come to cyberspace as a measure of the so-called greatest transfer of wealth in history given the efforts of China and other states to steal intellectual property online. But the first greatest transfer of wealth comprised Europe’s rise to prominence post-1500 ACE. What historians call the “rise of the West” came to fruition with a forfeiture of the ideological promise of sharing the benefits of Western civilization worldwide. Cyberspace promises to align both threads of the new naval power, economic gain, and ideological conviction, a novel change in the history of conflict at sea all made possible by the technical marvel of cyberspace.
Topic:
Sovereignty, Navy, Seapower, and Cyberspace
Political Geography:
China, Europe, and Global Focus

9. Like the Sea, So Cyberspace: A Brief Exploration of Establishing Norms through a Maritime Lens

Author:
Travis D. Howard and Dr. Jose de Arimateia da Cruz
Publication Date:
09-2022
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
This article compares the history of establishing maritime laws, norms, customs, and standards of conduct with the rise of cyberspace as an artificial domain akin to a digital sea. A brief history of how humanity established enduring norms and standards at sea is described, followed by a comparative analysis of the world’s physical maritime domain to digital cyberspace. Recommendations are made for contextualizing cyber threats and policy issues within a naval framework. Finally, the authors offer some brief conclusions.
Topic:
Piracy, Cybersecurity, Maritime, Norms, and Cyberspace
Political Geography:
Global Focus

10. Exfiltrate, encrypt, extort

Author:
Rachael Falk and Anne-Louise Brown
Publication Date:
07-2021
Content Type:
Special Report
Institution:
Australian Strategic Policy Institute (ASPI)
Abstract:
As the Covid-19 pandemic has swept across the world, another less visible epidemic has occurred concurrently—a tsunami of cybercrime producing global losses totalling more than US$1 trillion. While cybercrime is huge in scale and diverse in form, there’s one type that presents a unique threat to businesses and governments the world over: ransomware. Some of the most spectacular ransomware attacks have occurred offshore, but Australia hasn’t been immune. Over the past 18 months, major logistics company Toll Holdings Ltd has been hit twice; Nine Entertainment was brought to its knees by an attack that left the company struggling to televise news bulletins and produce newspapers; multiple health and aged-care providers across the country have been hit; and global meat supplies were affected after the Australian and international operations of the world’s largest meat producer, JBS Foods, were brought to a standstill. It’s likely that other organisations have also been hit but have kept it out of the public spotlight. A current policy vacuum makes Australia an attractive market for these attacks, and ransomware is a problem that will only get worse unless a concerted and strategic domestic effort to thwart the attacks is developed. Developing a strategy now is essential. Not only are Australian organisations viewed as lucrative targets due to their often low cybersecurity posture, but they’re also seen as soft targets. The number of attacks will continue to grow unless urgent action is taken to reduce the incentives to target Australian companies and other entities.
Topic:
Crime, National Security, Cybersecurity, Internet, Information Technology, and Cyberspace
Political Geography:
Australia and Global Focus