Search

Begin New Search Topic Cybersecurity Publication Year within 25 Years

21. Foreign Intelligence Hackers and Their Place in the PRC Intelligence Community

Author:
Matthew Brazil
Publication Date:
03-2024
Content Type:
Journal Article
Journal:
China Brief
Institution:
The Jamestown Foundation
Abstract:
Leaked files from iS00N reveal deep insights into the PRC’s intelligence operations, highlighting an intensified global security offensive as well as issues within the intelligence community. iS00N’s growth is tied to Xi Jinping’s aggressive policies and demonstrates the importance of private contractors in fulfilling the PRC’s increased intelligence and security needs. The leaks expose employee dissatisfaction and underscore iS00N’s critical role in intelligence gathering and job provision, reflecting the contractor’s complex relationship with the PRC government. The exposure raises questions about the role and regulation of hacking contractors in the PRC, potentially leading to investigations and reforms that could affect the PRC’s intelligence strategy and international relations.
Topic:
International Relations, Security, Intelligence, and Cybersecurity
Political Geography:
China and Asia

22. Navigating Cybersecurity and Surveillance: Iran's Dual Strategy for National Security

Author:
Nima Khorrami
Publication Date:
03-2024
Content Type:
Commentary and Analysis
Institution:
The Washington Institute for Near East Policy
Abstract:
While Iranian officials acknowledge the significance of cyber tools and AI for foreign policy, they are acutely aware of the country’s financial and scientific limitations. Discussions and debates surrounding the utilization and significance of cyberspace and artificial intelligence in Iran primarily revolve around two key perspectives: viewing them as integral components of national security strategy, and understanding cyber capabilities and AI as essential tools for safeguarding national interests. Within the context of Tehran’s extensively publicized forward defense doctrine, it is reasonable to expect that Tehran would develop (AI assisted) offensive cyber capabilities, allowing it to infiltrate its adversaries’ systems and execute preemptive actions against perceived threats. A critical prerequisite for doing so, in turn, would be to put in place robust surveillance capabilities which can alarm the officials of any potential incoming attack. However, available evidence suggests a dire lack of such capabilities not least because Iran’s critical infrastructure has been the target of frequent cyberattacks, allegedly originating from Israel.
Topic:
Foreign Policy, National Security, Cybersecurity, and Surveillance
Political Geography:
Iran and Middle East

23. Strengthening ASEAN’s Cybersecurity: Collaborative Strategies for Enhanced Resilience and Regional Cooperation

Author:
Mahirah Mahusin and Hilmy Prilliadi
Publication Date:
11-2024
Content Type:
Policy Brief
Institution:
Economic Research Institute for ASEAN and East Asia (ERIA)
Abstract:
As ASEAN’s digital economy continues to expand, the region faces escalating cybersecurity risks with significant potential costs. This policy brief examines ASEAN’s current cybersecurity landscape, underscoring the need for enhanced cooperation and comprehensive strategies to address the rising threat of cyberattacks. The economic impact of cyberattacks in ASEAN is already substantial, affecting both public and private sectors. This brief reviews existing efforts such as the ASEAN Cybersecurity Cooperation Strategy 2021–2025 and the ASEAN Regional Computer Emergency Response Team (ASEAN CERT), recommending the establishment of a shared cybersecurity taxonomy, capacity-building initiatives, and legal framework updates to bolster cybersecurity. Key policy recommendations encourage robust multi-stakeholder collaboration at national and regional levels.
Topic:
Regional Cooperation, Cybersecurity, Regulation, Digital Economy, and ASEAN
Political Geography:
Asia

24. A Security Symphony: Harmonizing Cybersecurity Regulation

Author:
Aspen Digital
Publication Date:
05-2024
Content Type:
Special Report
Institution:
Aspen Institute
Abstract:
Global cybersecurity regulation is fragmented, inefficient, and often ineffective. More than 60 countries are implementing an array of legal frameworks, making it difficult to regulate cyber practices across borders. Costly on many levels, inconsistent regulations and varying compliance standards allow bad actors to seek out gaps in the system and facilitate attacks that span geographies. With the current amplification and intensity of cyber threats, government and industry need to share tactics, techniques, and procedures with each other as well as with partner nations. If the field doesn’t achieve a higher degree of harmony in the global regulatory landscape, multiple dimensions will remain inefficient and costly: operations, risk management, research and development, and more. In A Security Symphony, Aspen Digital’s Global Cybersecurity Group calls for establishing regulatory harmonization principles, with a focus on collaboration and standardization. The principles span the core categories of interoperability and transparency, market competition, and mutual recognition frameworks. The paper also demonstrates the real-life harms of lacking coordination as well as the benefits of harmonized models through case studies on the 2016 dismantling of the “Avalanche” network and the Factor Analysis of Information Risk (FAIR). A collective of cybersecurity experts committed to democracy and freedom online, the Global Cybersecurity Group is uniquely positioned to offer cross-border guidance to their peers and like-minded nations.
Topic:
National Security, Cybersecurity, Regulation, and Risk
Political Geography:
Global Focus

25. Technological Innovation and Cybersecurity: The Role of the G7

Author:
Ettore Greco and Federica Marconi
Publication Date:
05-2024
Content Type:
Commentary and Analysis
Institution:
Istituto Affari Internazionali
Abstract:
In an era of unprecedented technological advancement, digital transformation is revealing its enormous potential, but also presenting new challenges. At its core, it represents a catalyst for innovation, igniting advancements that enhance productivity and propel economic growth. Thus, harnessing its transformative power holds the promise of unlocking new opportunities, solving complex challenges and ultimately shaping a more inclusive and sustainable future for humanity. However, rapid technological progress has ushered in a new era of interconnectedness and interdependence, where nations are increasingly reliant on digital systems and networks to power their economies and safeguard their national security. In this regard, the intersection of technological advancement and the amplification of geopolitical tensions has brought into sharp focus the myriad threats that countries face in the contemporary landscape. Among others, cyberattacks, in particular, have grown more sophisticated, transcending national borders and necessitating collaboration and partnerships among nations to protect against such threats. These challenges have prompted all major actors – both public and private – to intensify their efforts to protect their data and digital assets. They are devising and implementing a variety of risk management strategies. The empirical evidence shows that the most effective and resilient cybersecurity policies and approaches are those tailored to specific risks and security requirements. Individual organisations need to adopt the cybersecurity measures most appropriate for the challenges they face, based on a careful risk assessment. This requires the adoption of internationally recognised cybersecurity frameworks and standards that are based upon the principles of risk management and that are relevant across sectors to strengthen consistency and continuity among interconnected sectors and throughout global supply chains. Cybersecurity threats are transnational by definition and as such they can be countered effectively only through global mechanisms aimed at risk reduction and trust building. A primary objective of multilateral cooperation should be the adoption of interoperable policy frameworks that promote international harmonisation and consistent cybersecurity mechanisms. The G7 can provide a fundamental impulse for this cooperation at the global level by encouraging the development and implementation of risk-based, consensus-driven frameworks, standards and risk management best practices. A commitment to these internationally recognised cyber risk management approaches and frameworks can advance economic security and enhance cyber resilience across the ecosystem.
Topic:
Science and Technology, Cybersecurity, Innovation, G7, and Digital Policy
Political Geography:
Global Focus

26. The securitization of foreign disinformation

Author:
Nicole J. Jackson
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This paper analyses the Canadian government’s foreign and security policy responses to Russian disinformation in the context of the Russo-Ukrainian war. It asks whether, how, and why the government has securitised the “crisis of Russian disinformation.” The paper first briefly reviews literature on the Copenhagen’s School’s “securitisation” theory and how it has been used to explain responses to other crises. It then adopts the framework to contextualise the Canadian federal government’s official rhetoric, and then to categorise government policies and actions. The sources consulted include government actors’ reports and stated intentions and policies from 2022 to 2024. Adopting a securitisation framework reveals that Russian disinformation has been rhetorically securitised by government actors as an existential threat to national security and democratic integrity which requires urgent action. Within a context of cascading risks, the government has taken a range of distinct yet reinforcing policies and actions, some more comprehensive than others. The paper argues that together this “pervasive rhetorical securitisation” and “ad hoc practical securitisation” comprise the Canadian government’s ongoing process of partial securitisation. This process is legitimising different methods of governance: security and warfare communications (to address threats to national defence and security), democratic resilience (to address threats to democracy), and, most controversially, blocking and sanctioning (to signal discontent to the Russian regime). The analysis further reveals that each approach has different benefits and limits. The paper concludes that the securitisation process is incomplete compared to the government's rhetoric, with no over-arching organisation or strategy. It outlines implications for future research.
Topic:
International Security, Cybersecurity, Disinformation, Securitization, and Russia-Ukraine War
Political Geography:
Russia and Canada

27. Aircraft vulnerability to politically motivated Radio Frequency Interference (RFI) in Eastern Europe

Author:
Tegg Westbrook
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Countries in Europe have experienced radio frequency interference from Russian electronic warfare units, affecting navigation systems without discrimination. Interference has been identified as coming from the Russian mainland, Kaliningrad, and in the areas where it is engaged in conflicts abroad, creating serious hazards for aircraft. Previous research has identified the technical vulnerabilities to aviation from radio frequency interference, but it has yet to be contextualised in light of the ongoing geopolitical tensions. Using literature review analysis, the aim of the article is to place the jamming and spoofing threat in the context of ongoing political tensions between Russia and the region and to establish worse-case scenarios based on the former’s motives. Focusing on the threats to aircraft, it finds that the likely motivations are to (1) complement political narratives of Western aggression; (2) to deny service for intimidation, harassment, economic loss, and to portray a dominant Russian cyber influence; and (3) to use spoofing to enable hostage diplomacy via the seizure of people and assets. It argues that reporting mechanisms for aviation risks assumes geographical staticism, which does not correspond adequately to the threat. It also creates arbitrary “predictability” in otherwise unpredictable environments, which could ultimately affect vigilance and due diligence in the areas not considered problematic.
Topic:
International Security, Cybersecurity, Geopolitics, and Satellite
Political Geography:
Eastern Europe

28. China’s security relations with Africa in the 21st century

Author:
Monika Magdalena Krukowska
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The paper examines China’s increasing security interests in Africa. It seeks to understand the nature and scope of Chinese engagement in peace and security issues on the continent based on its engagement in international and domestic (African) politics. Through literature analysis and logical reasoning, the author intends to define the implications of China’s new role as a security provider. The paper is based on desk research using primary and secondary data and statistical and comparative analysis of official documents, academic research, and media sources. The methods include literature analysis, logical reasoning, statistical research, comparative analysis, and the inductive method to build general theorems. The paper analyses aspects of China’s security engagement on the African continent: its participation in the United Nations Peacekeeping Operations, small arms exports, and Beijing’s sharing of technology with African partners. China’s engagement in Africa’s security helps to advance its vital economic and political interests, with limited impact on African security. Key lessons for African partners are offered. The last decades have seen an extraordinary increase in China’s economic and political ties with Africa. Security cooperation followed massive Chinese investments and thousands of Chinese nationals working on the continent. China’s security engagement in Africa protects Beijing’s interests regarding access to resources, markets, political influence, and social credibility. It has little to do with a benevolent will to help Africa deal with instability or economic underdevelopment. African partners must make necessary efforts to avoid further dependence on China.
Topic:
Security, Foreign Policy, International Security, Peacekeeping, Cybersecurity, and Cooperation
Political Geography:
Africa, China, and Asia

29. Estimating the vulnerability of industrial network infrastructure in Central and Eastern Europe

Author:
Mateusz Gzegorz Twardawa, Marek Smolik, Franciszek Rakowski, Jakub Kwiatkowski, and Norbert Meyer
Publication Date:
09-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Industrial infrastructure has suffered an unprecedented number of attacks in Central and Eastern Europe (CEE). This situation can be attributed to many geopolitical factors, including hybrid military conflicts and criminal activity. Industrial networks belonging to the countries that were once under Soviet influence suffer from an elevated risk of cyberattacks. The goal of this work is to propose an easy way to estimate the vulnerabilities of industrial networks to cyber threats on a national level. Since analysis of the industrial vulnerability landscape is difficult, this study proposes an assessment based on the popularity of vulnerable technologies—VPc. This metric is composed of search volume data on keywords related to industrial network technologies and reported security vulnerabilities associated with these words. Data on 116 keywords was analysed and a country-specific VPc index was calculated for twenty states in CEE. The analysis of the popularity of industrial technologies and vendors in CEE reveals interesting information about the industrial security and vulnerability landscape. The results show that some countries (e.g. Estonia) have more resilient industrial infrastructure than others (e.g. Belarus). The results presented in this study are not in conflict with other data and estimation attempts, including the National Cyber Security Index (NCSI). As new vulnerabilities are noted every day, the industrial security landscape changes rapidly. Therefore, a new easy-to-use metric (VPc) can be successfully used for general estimations. This work shows that the VPc score agrees with other estimates and analyses, but as with any other general estimation tool, it must be used with caution.
Topic:
International Security, Infrastructure, Cybersecurity, Industry, Vulnerability, and Network Security
Political Geography:
Europe, Eastern Europe, and Central Europe

30. Leveraging competitive intelligence in offensive cyber counterintelligence: An operational approach for the shipping industry

Author:
Anastasios-Nikolaos Kanellopoulos
Publication Date:
12-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
In the contemporary landscape of rapid digitalization, the shipping industry is increasingly confronted with unparalleled cybersecurity threats, necessitating a transition towards proactive strategies to address these evolving risks. Traditional methodologies have proven inadequate, thereby necessitating the integration of Competitive Intelligence (CI) within Offensive Cyber Counterintelligence (OCCI) frameworks. This paper investigates the interdependent relationship between CI and OCCI, underscoring their combined potential to safeguard organizational interests and enhance cybersecurity resilience. The primary objectives of this study are to elucidate the foundational principles and significance of CI within business contexts, to explore the theoretical underpinnings of OCCI, and to propose a structured framework for the integration of CI into OCCI operations specifically tailored to the shipping sector. Theoretical constructs highlight the critical importance of proactive measures in mitigating cyber threats and sustaining a competitive advantage in the digital era. Through a comprehensive analysis of the literature, this interdisciplinary approach provides practitioners with the opportunity to evaluate and implement the proposed framework. The insights garnered from this study hold significant implications for both academic research and industry practice, promoting ongoing collaboration in the development of robust frameworks for integrating CI within OCCI operations.
Topic:
Intelligence, International Security, Cybersecurity, Resilience, Shipping, Strategic Management, and Counterintelligence
Political Geography:
Global Focus