Search

Begin New Search Topic Cybersecurity Political Geography United States of America

11. Examining the Roles of Army Reserve Component Forces in Military Cyberspace Operations

Author:
Jeffrey L. Caton
Publication Date:
01-2019
Content Type:
Special Report
Institution:
The Strategic Studies Institute of the U.S. Army War College
Abstract:
Cyberspace operations have become pervasive in the United States, and they enable many aspects of modern life for the average citizen, such as entertainment, communication, education, transportation, banking, and voting. The continuing development of the U.S. Army and Department of Defense (DoD) Reserve component cyberspace units can leverage the capabilities and experience of industry and academia to help protect critical information infrastructure and enhance national security. What opportunities and challenges surround the integration of these forces into a still-evolving joint cyberspace force?
Topic:
Defense Policy, Armed Forces, Military Affairs, Cybersecurity, and Army
Political Geography:
North America and United States of America

12. The Need for Countries to Establish Robust and Transparent Vulnerabilities Equities Processes

Author:
Sharon Bradford Franklin
Publication Date:
07-2019
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
In 2017, leaders of the U.S. Intelligence Community warned that “more than 30 nations are developing offensive cyberattack capabilities.”1 This means that more than 30 countries may be conducting hacking operations as a method for surveillance, disruption, or destruction. Unregulated cyber surveillance and cyberattacks by government actors can pose risks not only to a government’s foreign adversaries, but also to its own citizens. Thus, as the United States and other nations work to enhance their own offensive cyber capabilities, as well as to develop strategies to defend against potential attacks, it is critical that these countries establish legal regimes to govern such conduct in cyberspace. Although Germany has established a legal framework to regulate government hacking activities,[2] few countries have done so.[3] ​ To bring government hacking operations within the rule of law, a crucial step is to design rules regarding the management of vulnerabilities that governments discover or acquire. As with other cyber actors, when governments conduct hacking operations, this frequently involves exploiting vulnerabilities in computer hardware and software systems. But these same flaws can also be manipulated by a government’s foreign adversaries or other malicious actors. Therefore, when countries consider their abilities to rely on hacking as an investigative tool, as well as their interests in exploiting vulnerabilities for military and intelligence operations, they must also evaluate the capacity of information and communications technology providers to repair bugs and protect the cybersecurity of all users. Determining whether to exploit a vulnerability or disclose it to a vendor for patching involves balancing a variety of different security concerns against each other. ​ Some countries have made progress in formalizing the rules for making these decisions and in publicizing these rules to promote public accountability. In November 2017, the United States released a charter governing its Vulnerabilities Equities Process (VEP), which outlines how the U.S. government weighs the various competing equities.[4] The charter delineates which components of the government will participate in determinations regarding whether to disclose or retain each newly discovered vulnerability, and it sets forth the criteria to be used and the process to be followed in making such assessments. One year later, the United Kingdom (UK) announced its Equities Process, which follows a similar approach.5 Most recently, in March 2019, Australia released its “Responsible Release Principles for Cyber Security Vulnerabilities,”[6] and Germany is currently working to develop a VEP and is expected to make information about its process public in early 2019.[7] However, as described below, the VEP procedures revealed to date need further improvement,[8] and most of the nations with offensive cyber capabilities have not developed—or at least have not announced—any such framework...
Topic:
Security, Intelligence, Science and Technology, and Cybersecurity
Political Geography:
North America and United States of America

13. How Much Does a “Privacy” Weigh?

Author:
Paul Rosenzweig
Publication Date:
07-2019
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
Benjamin Franklin is famous, in part, for having said, “Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety.” Though historical evidence suggests Franklin’s quote has been misinterpreted,[1] the aphorism has come to stand for the proposition that privacy and security stand in opposition to each other, where every increase in security likely results in a commensurate decrease in privacy, and vice versa. ​ Couched in those terms, the privacy/security trade-off is a grim prospect. We naturally want both privacy and security to the greatest extent possible. But Franklin tells us this is impossible — that privacy and security are locked in a zero-sum game where the gain of one comes only at the loss of the other. ​ Of course, this characterization is assuredly flawed; it is certainly possible to adopt systems that maximize both privacy and security in a Pareto optimal way. That is one of the reasons why so many privacy and security experts simply revile the “balancing” metaphor — it obscures more than it illuminates... ​
Topic:
Security, Science and Technology, Cybersecurity, and Privacy
Political Geography:
Global Focus and United States of America

14. The Perfect Weapon: War, Sabotage, and Fear in the Cyber Age by David Sanger

Author:
David Sanger and Travis Frederick
Publication Date:
07-2019
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
In The Perfect Weapon, David Sanger argues that the nature of global power itself is undergoing dramatic changes, brought about by the proliferation of highly advanced cyber capabilities. Today, internet access is nearly ubiquitous, the cost of entry is low, and, particularly in the domain of cyberwarfare, there is one fundamental fact: offensive capabilities have critically outpaced cyber defenses. A weak and impoverished nation like North Korea can hold large swaths of public and private infrastructure in America at risk, steal military OpPlans, and pilfer millions of dollars from foreign banks. A Kremlin reeling from sanctions, low oil prices, and historically low public trust is able to threaten the very foundations of American democracy through targeted social media campaigns and hacking and leaking the emails of a major political party. But while the offensive advantage has given weaker powers greater capacity to pursue their geopolitical objectives, U.S. leadership has found that their response options have not similarly benefitted. America’s offensive cyber prowess so exceeds its own defensive capabilities that officials often hesitate to strike back for fear of establishing norms of retaliation against vulnerable infrastructure or inciting unintended escalation. Sanger argues that without an open public debate among government policy makers, military planners, and academics to coordinate a grand strategy, the United States will be forced to accept a world of constant cyberattacks, limited response options, and the greater risk of capitulating to foreign coercion...
Topic:
Security, Intelligence, Science and Technology, Cybersecurity, and Book Review
Political Geography:
North America and United States of America

15. Future Scenarios: What To Expect From a Nuclear North Korea

Author:
Daniel R. Russel
Publication Date:
04-2019
Content Type:
Working Paper
Institution:
Asia Society Policy Institute
Abstract:
After decades of broken promises and failed diplomatic efforts, North Korea has become a nuclear power. Kim Jong Un’s charm offensive over the past year, as seen in summit meetings with U.S. President Donald Trump and other leaders, has enabled him to shed his pariah status without shedding his nuclear weapons. While Kim has frozen testing, he continues to expand the country’s nuclear arsenal, defy and evade Security Council resolutions, and is now getting support from China in his call for sanctions relief. In the wake of the failed February 2019 Hanoi Summit, North Korea is warning of a return to testing by year’s end. But even if Kim were to reverse course and agree to freeze his entire nuclear and missile program, North Korea’s capacity to threaten the U.S. and its allies with a formidable arsenal would be undiminished. What’s worse, Kim seems to be turning to a powerful new weapon of mass destruction to gain leverage. Asia Society Policy Institute (ASPI) Vice President for International Security and Diplomacy Daniel Russel asserts in this ASPI issue paper that North Korea’s next weapon of choice is likely to be cyber: a high-impact, low-cost, and low-risk digital-age weapon that North Korea already can and does use to steal money, hack secrets, and terrorize nations. In the 5G era, developed nations such as the United States are particularly vulnerable. North Korean cyber-attacks have already succeeded in crippling critical overseas infrastructure and stealing hundreds of millions of dollars, reducing the efficacy of international sanctions. Future Scenarios: What to Expect from a Nuclear North Korea details the consequences of North Korea’s slow but steady trajectory toward acceptance as a nuclear power. The report highlights the urgency of focusing U.S. national security efforts against the threat from North Korea’s rapidly growing cyber warfare capability. Russel writes that the combined threat from North Korea’s nuclear and cyber programs can only be reduced through “coercive containment” — a multi-pronged strategy of diplomacy, defense, deterrence, and denial that will require substantial cooperation among key international players.
Topic:
International Relations, Diplomacy, Nuclear Power, Cybersecurity, Donald Trump, and Kim Jong-un
Political Geography:
Asia, North Korea, and United States of America

16. A candle in the dark: US national security strategy for artificial intelligence

Author:
Tate Nurkin and Stephen Rodriguez
Publication Date:
12-2019
Content Type:
Working Paper
Institution:
Atlantic Council
Abstract:
AI is expected to have a transformational impact on the future of geopolitics, defense, and security. The emerging geopolitical and security context influencing the future of AI technology development has been driven by the erosion of traditional geopolitical frameworks, increased conflict between liberalism and authoritarianism, the pervasiveness of social media use and 4IR-driven digitization of industries, as well as the ability of more actors to affect strategic and operational environments. However, the future of AI will depend on the decisions of great power competitors—the US, China and Russia—global trends development, and the management of uncertainties associated with emerging technologies. In this fluctuating environment, where the US is engaged in a high-stakes competition with is near-peer adversaries, and AI is enabling paradigm-shifting changes in public and private sector operations, how should the US respond? In this new Atlantic Council Strategy Paper, A Candle in the Dark: US National Security Strategy for Artificial Intelligence, Tate Nurkin and Stephen Rodriguez provide an integrated strategy to respond to this key issue. According to Former US Secretary of Defense Dr. Ashton B. Carter, author of the foreword, this paper “effectively articulates the current technological landscape and offers a coherent strategic framework for the United States and its allies to harness AI’s upside potential, while mitigating downside risks and defending against emerging threats.” In a world full of uncertainties, this paper provides a holistic way forward for the US to leverage the full potential of AI while maintaining America’s technological competitiveness.
Topic:
Defense Policy, NATO, Intelligence, National Security, Science and Technology, Cybersecurity, Entrepreneurship, Drones, Conflict, and Disinformation
Political Geography:
Russia, China, Eurasia, Asia, North America, and United States of America

17. US-China collaboration on the Internet of Things safety: What next?

Author:
Karl Frederick Rauscher
Publication Date:
12-2019
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
The Internet of Things describes a future world with pervasive connectivity. While IoT offers a range of humanitarian, commercial, and national security benefits, its pervasive nature has many concerned over its impacts on safety and security in society. A great disservice is done when national security, commercial, and humanitarian interests are conflated. In a new report by the Atlantic Council’s Scowcroft Center for Strategy and Security, Karl Rauscher notes that the world’s two largest powers are at a crossroads with regard to their level and scope of cooperation in continued IoT advances. United States–China Collaboration on the Internet of Things Safety: What’s Next? analyzes possibilities for the United States and China to work together to establish consensus policies and standards to make their societies safer and provide a model for the world.
Topic:
National Security, Power Politics, Cybersecurity, and Internet of Things
Political Geography:
China, Asia, North America, and United States of America

18. Arrests in Poland Contribute to the International Controversies Surrounding Huawei

Author:
John Dotson
Publication Date:
02-2019
Content Type:
Journal Article
Journal:
China Brief
Institution:
The Jamestown Foundation
Abstract:
The December 1, 2018, arrest of Huawei chief financial officer Meng Wanzhou, and the arrest of another Huawei employee in Poland, come on the heels of a series of escalating measures—or measures under consideration—by governments in North America and the Pacific Region to restrict the use of Chinese-manufactured telecommunications equipment. Such measures are now increasingly under consideration in Europe, as well, with major implications not only for the international profile of companies such as Huawei, but also for the construction of advanced communications infrastructure throughout much of the world.
Topic:
Science and Technology, Cybersecurity, Economy, and Research
Political Geography:
China, Europe, Asia, Poland, North America, and United States of America

19. The Privatisation of Security and the Market for Cyber Tools and Services

Author:
Tim Maurer and Wyatt Hoffman
Publication Date:
01-2019
Content Type:
Working Paper
Institution:
Geneva Centre for Security Sector Governance (DCAF)
Abstract:
This paper seeks to identify the emerging and expanding gaps in the governance of private cybersecurity companies and activities and to explore ways forward and policy options for governments. The first section of the paper will explore the characteristics of typical cyber operations and challenges related to their conduct by private actors. Section two will address the governance challenges around cybersecurity and three main departure points for regulation: the fact that geographic scope does not limit cybersecurity companies, that cyber operations can slide from defensive to offensive very quickly; and that cybersecurity services are often exported for the purpose of (or with the knowledge they will be) violating human rights. This section will also integrate perspectives of international law. Section three will lay out suggestions for policy options in relation to international law and existing international normative frameworks. In conclusion, the paper will offer a framework and way forward as food for thought in order to address cybersecurity operations in relation to PMSCs.
Topic:
International Law, Science and Technology, Cybersecurity, and Internet
Political Geography:
North America, Global Focus, and United States of America

20. The Impact of Artificial Intelligence on Strategic Stability and Nuclear Risk, Volume I, Euro-Atlantic perspectives

Author:
Dr Vincent Boulanin, S. M. Amadae, Jean-Marc Rickli, Shahar Avin, Frank Sauer, John Borrie, Dimitri Scheftelowitsch, Justin Bronk, Page O. Stoutland, Magnus Hagström, Petr Topychkanov, Michael Horowitz, Anja Kaspersen, and Chris King
Publication Date:
05-2019
Content Type:
Book
Institution:
Stockholm International Peace Research Institute
Abstract:
This edited volume focuses on the impact on artificial intelligence (AI) on nuclear strategy. It is the first instalment of a trilogy that explores regional perspectives and trends related to the impact that recent advances in AI could have nuclear weapons and doctrines, strategic stability and nuclear risk. It assembles the views of 14 experts from the Euro-Atlantic community on why and how machine learning and autonomy might become the focus of an armed race among nuclear-armed states; and how the adoption of these technologies might impact their calculation of strategic stability and nuclear risk at the regional level and trans-regional level.
Topic:
Nuclear Weapons, Cybersecurity, Risk, Artificial Intelligence, and Strategic Stability
Political Geography:
Europe and United States of America