Search

Begin New Search Topic Cybersecurity Publication Year within 25 Years

381. Roadmap for a Code of Conduct for Cyberspace

Author:
Thomas McCarthy and Alison Russell
Publication Date:
09-2015
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
Professor Martel, author of Grand Strategy in Theory and Practice: The Need for an Effective American Foreign Policy, offers three guiding principles for U.S. grand strategy: rebuilding domestic foundations of power; exercising American leadership to restrain sources of disorder that directly threaten U.S. vital interests; and forging both alliances and partnerships to confront the most pressing threats to global stability.[2] The last of Martel’s three principles foreshadows the three cyber security activities at the heart of the newly released U.S. Department of Defense Cyber Strategy. The three activities around which the new U.S. DoD cyber strategy revolves are: Information sharing and interagency coordination; building bridges to the private sector; and building alliances, coalitions, and partnerships abroad.[3] These three coordinating and collaborating activities are the key to building relationships between actors influencing the development of the cyber domain, and are necessary to identify and counter threats. To advance global cyber security, the Cyber Strategy suggests the U.S. must “build and maintain robust international alliances and partnerships to deter shared threats and increase international security and stability.”[4] As part of this effort, the United States seeks to build security relationships to respond to shifts in the international environment, including sources of disorder. These relationships are built upon trust and cooperation of many actors with varied interests and objectives in cyberspace. Given the wide variety of actors and interests within the cyber domain, establishing relationships of trust based on a shared understanding of acceptable conduct, expected behavior, and governing principles represents a daunting challenge...
Topic:
Security, Foreign Policy, Cybersecurity, and Grand Strategy
Political Geography:
North America and United States of America

382. Conflict in Cyberspace: How International Legal Norms Can Reduce Military Escalation in Cyberspace

Author:
Nikolas Ott
Publication Date:
09-2015
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
This paper examines the current technical and legal considerations around the development of international legal norms and confidence-building measures in cyberspace. With an emphasis on state-based armed attacks and the use of force in cyberspace, it summarizes the current status of international efforts within the United Nations and several regional organizations. The paper concludes with several suggestions on how policymakers can reduce the gap between technological and legal considerations.
Topic:
International Law, Military Affairs, and Cybersecurity
Political Geography:
United Nations, North America, and United States of America

383. Documenting Cyber Security Incidents

Author:
Marshall Kuypers and Elizabeth Pate-Cornell
Publication Date:
12-2015
Content Type:
Working Paper
Institution:
Center for International Security and Cooperation (CISAC), Stanford University
Abstract:
Organizations often record cyber security incidents to track employee workload, satisfy auditors, fulfill reporting requirements, or to analyze cyber risk. While security incident databases are often neglected, they contain invaluable information that can be leveraged to assess the threats, vulnerabilities, and impacts of cyber attacks, providing a detailed view of cyber risk in an organization. This paper emphasizes what data is useful for a risk assessments and how data should be recorded. When a security incident occurs, it is often unclear what information should be recorded about the incident. Currently, the data that are tracked are largely driven by compliance for reporting requirements and valuable information is not recorded, or information is not recorded in a way that makes analysis easy. For example, incidents are often documented in unstructured reports that require a manual analysis to identify trends. Explicitly recording certain data in structured form makes analysis much more accurate and efficient. This paper is focused on answering the question, ‘What should we record?’
Topic:
Cybersecurity

384. North Korea and the Sony Hack: Exporting Instability Through Cyberspace

Author:
Stephen Haggard and Jon R. Lindsay
Publication Date:
05-2015
Content Type:
Policy Brief
Institution:
East-West Center
Abstract:
The North Korean cyber attack against Sony Pictures Entertainment in connection with the planned release of The Interview raised important questions about the feasibility of deterrence in cyberspace, the protection of First Amendment values, and the responsibility of the US government to safeguard private networks. It also resulted in the unprecedented attribution of responsibility for a cyber attack to a nation state by a US president, despite public controversy over the evidence. North Korea has long engaged in provocative behavior on the Korean peninsula, recently including cyber attacks, but the probability of general war with South Korea remains quite low. Strategists describe this problem as the stability-instability paradox. North Korean coercion targeting a corporation on US soil in effect extends this dynamic into global cyberspace. It is impossible to deter all forms of cyber harassment, but policymakers can manipulate the threshold of ambiguity that makes limited aggression more or less attractive.
Topic:
Science and Technology, Law, and Cybersecurity
Political Geography:
North Korea

385. Cyber Defense: An International View

Author:
Kim Hartmann and Keir Giles
Publication Date:
09-2015
Content Type:
Working Paper
Institution:
The Strategic Studies Institute of the U.S. Army War College
Abstract:
An overview of four different national approaches to cyber defense are discussed: those of Norway, Estonia, Germany and Sweden. While providing a useful guide for engagement with the relevant governmental and other organizations in each of these countries, the Paper also compares and contrasts the advantages and drawbacks of each national approach.
Topic:
National Security, Science and Technology, Governance, and Cybersecurity
Political Geography:
Norway, Germany, Estonia, and Sweden

386. Bridging the Planning Gap: Incorporating Cyberspace Into Operational Planning

Author:
Colonel Martha S. H. VanDriel
Publication Date:
05-2015
Content Type:
Working Paper
Institution:
The Strategic Studies Institute of the U.S. Army War College
Abstract:
Cyberspace operations have a far-reaching, permanent impact on military operations. At the conceptual level, the U.S. Department of Defense (DoD) now recognizes five warfighting domains: land, maritime, air, space, and cyber.1 While there are examples of how cyberspace support to military operations have advanced over the past decade, one gap has not been addressed in detail—operational planning. It is clear that in U.S. military operations, the land, maritime, air, and space domains rely heavily on cyberspace. Therefore, cyberspace operations must be viewed in the context of all domains and be included as part of the overall operational scheme of maneuver. For if a commander postures his or her command to fight an adversary in the first four domains but ignores cyberspace, not only will that commander have ceded the cyberspace domain to the adversary, but the adversary can then proceed to undermine that commander’s effectiveness in the other four domains.
Topic:
National Security, Science and Technology, War, and Cybersecurity
Political Geography:
United States of America

387. Confidence Building in Cyberspace: A Comparison of Territorial and Weapons-Based Regimes

Author:
Dr. Mary Manjikian
Publication Date:
04-2015
Content Type:
Working Paper
Institution:
The Strategic Studies Institute of the U.S. Army War College
Abstract:
An analysis of weapons-based confidence-building measures shows how academics can work together to self-police their research for national security implications, socialize new members of the academic community into the importance of considering security issues, and develop and disseminate norms regarding what is and is not a moral and ethical use of these technologies. It may be possible for academics and policymakers to come together to work for a ban or build-down on cyber weapons patterned on international efforts to ban chemical and biological weapons and implement export regimes to control the export of code which may form the components of cyber weapons. If we conceptualize cyberspace as territory, we can also learn from the example of territorially-based confidence-building measures such as those implemented along the Indo-Pakistan border. This approach stresses the importance of developing notification procedures to prevent misperceptions and the escalation spiral, as well as communicating regularly to establish trust between all parties. The case studies presented here illustrate the promises and pitfalls of each approach and offer valuable warnings to policymakers seeking to implement such measures in cyberspace. They show what happens when not everyone in a regime is equally committed to a specific outcome by illustrating the difficulties of monitoring compliance in confidence-building regimes, and show the ways in which doctrines and confidence-building measures may not be perfectly aligned.
Topic:
Security, National Security, Science and Technology, War, Weapons of Mass Destruction, and Cybersecurity
Political Geography:
United States and Global Focus

388. A Framework for Categorizing Disruptive Cyber Activity and Assessing its Impact

Author:
Charles Harry
Publication Date:
08-2015
Content Type:
Working Paper
Institution:
Center for International and Security Studies at Maryland (CISSM)
Abstract:
While significant media attention has been given to the volume and range of cyber attacks, the inability to measure and categorize disruptive events has complicated efforts of policy makers to push comprehensive responses that address the range of cyber activity. While organizations and public officials have spent significant time and resources attempting to grapple with the complex nature of these threats, a systematic and comprehensive approach to categorize and measure disruptive attacks remains elusive. This paper addresses this issue by differentiating between exploitive and disruptive cyber events, proposes a formal method to categorize five types of disruptive events, and measures their impact along three dimensions of analysis. Scope, magnitude, and duration of disruptive cyber events are analyzed to locate each event on a Cyber Disruption Index (CDI) so organizations and policymakers can estimate the aggregated effect of a malicious act aimed at impacting their operations. Using the five different event classes and the CDI estimation method makes it easier for organizations and policy makers to disaggregate a complex topic, contextualize and process individual threats to their network, target where increased investment can reduce the risk of specific disruptive cyber events, and distinguish between events that represent a private-sector problem from those that merit a more serious public-sector concern.
Topic:
Mass Media and Cybersecurity
Political Geography:
United States, North America, Washington, and D.C.

389. Risk Nexus: Overcome by cyber risks? Economic benefits and costs of alternate cyber futures

Publication Date:
09-2015
Content Type:
Working Paper
Institution:
Atlantic Council
Abstract:
In 2030, will the Internet and related information and communications technologies (ICTs) continue to drive global innovation and prosperity? Or will that bright promise be swamped by an unstable and insecure Internet, so overwhelmed by non-stop attacks that it has become an increasing drag on economic growth? The answers, as far as we can predict, are not promising and mean the difference in tens of trillions of dollars in global economic growth over the next fifteen years.
Topic:
Economics, Science and Technology, Communications, and Cybersecurity
Political Geography:
Global Focus

390. Combatting Cyber Threats: CSIRTs and Fostering International Cooperation on Cybersecurity

Author:
Samantha Bradshaw
Publication Date:
12-2015
Content Type:
Working Paper
Institution:
Centre for International Governance Innovation (CIGI)
Abstract:
This paper examines the role of computer security incident response teams (CSIRTs) in the emerging cyber regime complex and asks what might be driving the lack of trust and information sharing within the community. ThePow commercialization of cyber security and threat vulnerabilities, the Internet’s development as a new power domain, the growth of the CSIRT community and the emergence of a cyber regime complex are examined as factors that are giving rise to and exacerbating existing problems around information sharing and trust.
Topic:
National Security, Science and Technology, International Security, and Cybersecurity
Political Geography:
Global Focus