Search

Begin New Search Topic Cybersecurity Publication Year within 5 Years

101. Of Ships and Cyber: Transposing the Incidents at Sea Agreement

Author:
Alexander Klimburg
Publication Date:
09-2022
Content Type:
Special Report
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Amid the geopolitical crises caused by Russia’s February 2022 invasion of Ukraine, it may seem wildly optimistic—or even bad diplomacy—to consider future arms-control scenarios for cyber operations. However, good policy needs to prepare for the day after tomorrow, and smart policy will look at what has gone wrong today and what can be learned from yesterday. Arguably, one element that may have contributed to rising geopolitical tensions over the past decade has been a lack of clear cyber signals among the main adversaries. This makes it even more urgent to consider what can be learned from past arms-control exercises such as the vaunted Incidents at Sea (INCSEA) Agreement—especially as this accord was conceived in the wake of several of its own perilous crises. In 1962, a lack of agreed signaling protocols nearly led to World War III. According to a riveting account in the 2020 book Nuclear Folly, 1 on October 27, 1962—at the height of the Cuban Missile Crisis—the U.S. Navy cornered one of the few Soviet submarines unaccounted for off Cuba. In an effort to convince the Foxtrot-class B-59 submarine to surface, the destroyer USS Cony employed practice depth charges—which were not accurately identified as such by B-59’s beleaguered crew. When, in the middle of the night, the submarine did indeed surface, a low-flying anti-submarine aircraft dropped flares and pyrotechnics so it could take better photographs. This seemed like an attack to the submarine, and the exhausted captain of B-59 ordered a crash dive and speculated that perhaps the war had already broken out. He gave orders to prepare to launch a 10-kiloton nuclear torpedo at the U.S. Navy task force. It took a near-mutiny by senior officers to stop him. This close call remained unknown until fairly recently. But several more prominent naval incidents throughout 1960s convinced the Soviet Union and the United States that a basic common agreement was necessary, and the Cold War “thaw” of the early 1970s made this possible.
Topic:
Security, Defense Policy, Cybersecurity, and Conflict
Political Geography:
Russia, Europe, North America, and United States of America

102. Hard Choices in a Ransomware Attack

Author:
Emily Harding and Harshana Ghoorhoo
Publication Date:
09-2022
Content Type:
Special Report
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Ransomware attacks started as a novelty but have now become a clear and present danger to entities of every size and function. The number of ransomware attacks and the price of demanded ransoms have escalated steeply since 2018. Legislation and policy have not kept up. Policymakers have sought to shape the incentive structure for victims to incentivize defense and disincentivize ransom payments. While they are sympathetic to businesses who fall victim to these attacks, which can sometimes be existentially threatening, few policymakers (or their staff) have ever experienced the shock of an attack firsthand and, as a result, are searching with incomplete information for the right combination of carrots and sticks that will help victims and hurt attackers. This report aims to put the reader in the shoes of the victim—the shocking, powerless moment of realization of a ransomware attack. It walks through a set of decisions that victim must make on their worst day and in the weeks to follow. How well an entity succeeds in navigating that peril depends on decisions made well before an attack, so the report also makes recommendations for both government and industry on how to encourage preparation and simple defensive steps.
Topic:
Security, Science and Technology, Cybersecurity, and Cyberspace
Political Geography:
Global Focus

103. WHO ATTACKED MONTENEGRO? THE MORAL AND STRATEGIC HAZARDS OF MISASSIGNING BLAME

Author:
Erica Lonergan and Maggie Smith
Publication Date:
09-2022
Content Type:
Commentary and Analysis
Institution:
Political Violence @ A Glance
Abstract:
A few weeks ago, Montenegro—a NATO member—was hit with a cyber attack that targeted government servers. Montenegro’s outgoing Prime Minister, Dritan Abazovic, initially hedged about potential responsibility for the attack, stating on August 26: “We do not have clear information about the organizers… Security sector authorities couldn’t confirm that there is an individual, a group, a state behind [the attack].” Nevertheless, later that same day officials from Montenegro’s national intelligence agency attributed the attack to Russia. They also implied that the attack was related to Montenegro’s support for Ukraine and push for membership in the European Union. Yet, the extent of Russian involvement in the cyber attack remains ambiguous, which poses significant political and strategic challenges.
Topic:
Security, NATO, European Union, and Cybersecurity
Political Geography:
Russia, Europe, North America, Montenegro, and United States of America

104. The First Space-Cyber War and the Need for New Regimes and Policies

Author:
Eytan Tepper
Publication Date:
05-2022
Content Type:
Policy Brief
Institution:
Centre for International Governance Innovation (CIGI)
Abstract:
Many dubbed the Gulf War of 1991 the “first space war” due to the US Armed Forces’ extensive use of satellites. The cyberwar in Ukraine, although it is mostly playing out in the shadows, may be remembered as the first space-cyber war. This policy brief makes the case that states should adopt national policies to defend against threats to space-based assets and applications, such as communications satellites, that are both vital to national security and economic security and increasingly vulnerable to cyberattacks. It is time to explore and identify principles for responsible space-cyber behaviour that would represent a broad multilateral consensus. Identifying these principles may not prevent space-cyber hostilities but could provide “rules of the game.” States would also benefit from encouraging a space-cyber security industry that, beyond protecting against space-cyber threats, has the potential to be a significant growth engine.
Topic:
Security, Infrastructure, Cybersecurity, Space, and Cyberspace
Political Geography:
Global Focus

105. Software Power The Economic and Geopolitical Implications of Open Source Software

Author:
Alice Pannier
Publication Date:
12-2022
Content Type:
Special Report
Institution:
Institut français des relations internationales (IFRI)
Abstract:
Open source plays a central role in software development, both in parallel with proprietary software and increasingly intertwined with it. It has become a major factor for companies’ innovation processes and for the success and popularity of their products. For users, using open source software can alleviate risks stemming from proprietary solutions, including data privacy concerns or trade restrictions. Beyond that, open source is the foundation of critical software bricks and Internet languages and protocols. However, open source is a victim of its own success. It suffers of a lack of resources dedicated to the maintenance of open source components, even though vulnerabilities in open source code can have serious consequences, as illustrated by the Log4Shell vulnerability in December 2021. For these reasons, private companies are investing ever more money and human resources in the development and maintenance of open source software, and acquiring structuring roles in the governance of the ecosystem. This support, however, is not without risk for the open source ecosystem, which is increasingly shaped by the private interests of Big Tech companies. Meanwhile, governments are getting increasingly concerned with the cybersecurity implications of open source software, and with risks not only of accidental vulnerabilities, but also manipulation of codes by criminals and foreign agents. The interest of governments in open source is not new, but it is evolving: governments are no longer only seeking to adopt open source or to develop software solutions, but also to contribute to the financing or even the governance of open source ecosystems, at the national and/or global level. An analysis of the United States, Chinese and European cases show that government involvement in open source is not only pragmatic; it is increasingly politicized, and serves to uphold governments’ ambitions for national security, international influence, or digital sovereignty. The study highlights the dilemmas that emerge, for public authorities, from the tensions between the desire to secure universally used, critical open source components, the desire to develop “sovereign” technologies, and the risk of encroaching on the horizontal and decentralized functioning of open source.
Topic:
European Union, Cybersecurity, Geopolitics, Economy, Software, and Open Source
Political Geography:
China, Europe, and United States of America

106. Cyber Operations in Ukraine: Russia’s Unmet Expectations

Author:
Gavin Wilde
Publication Date:
12-2022
Content Type:
Working Paper
Institution:
Carnegie Endowment for International Peace
Abstract:
A review of academic, doctrinal, and journalistic writing covering the last three decades of Russian military theorizing on cyber-related issues yields three hypotheses that may explain the mismatch between the expectations of many Western observers and the reported impact of Russian cyber operations in the 2022 invasion of Ukraine.1 By exploring the unique and oft-overlooked facets of Moscow’s conceptualization of “cyber,” this paper provides a foundation for better assessing Russia’s performance in cyberspace in Ukraine in early 2022, along with a more nuanced understanding of its capabilities and possible expectations going forward. These hypotheses are as follows: Russia’s Information Operations Troops—a rough analog to Western military cyber commands—remains in its infancy and appears optimized more for counterpropaganda than for offensive cyber operations. The operational command structure over offensive cyber operations, meanwhile, remains murky and is possibly more political than military in nature. Russia’s premier offensive cyber capacities are housed within agencies focused on intelligence and subversion—the key tool kits used against Ukraine since 2014—rather than combined-arms warfare. Moscow’s secretive and poorly executed February 2022 invasion precluded optimal performance in the initial period of the war, which is particularly pivotal in Russian thinking about effectiveness in the information domain. These are each examined through Russia’s own information warfare prism, which differs in crucial ways from Western conceptions of “cyber”—foremost in that it is more expansive, encompassing and emphasizing the psychosocial impacts of information and communication technologies on both the polity and the public.
Topic:
Cybersecurity, Russia-Ukraine War, and Electronic Warfare
Political Geography:
Russia, Eurasia, and Ukraine

107. Russia’s Wartime Cyber Operations in Ukraine: Military Impacts, Influences, and Implications

Author:
Jon Bateman
Publication Date:
12-2022
Content Type:
Working Paper
Institution:
Carnegie Endowment for International Peace
Abstract:
This paper examines the military effectiveness of Russia’s wartime cyber operations in Ukraine,1 the reasons why these operations have not had greater strategic impact, and the lessons applicable to other countries’ military cyber efforts. It builds on previous analyses by taking a more systematic and detailed approach that incorporates a wider range of publicly available data. A major purpose of this paper is to help bridge the divide between cyber-specific and general military analysis of the Russia-Ukraine war. Most analysis of Russian cyber operations in Ukraine has been produced by cyber specialists writing for their own field, with limited integration of non-cyber military sources and concepts. Conversely, leading accounts of the war as a whole include virtually no mention of cyber operations.2 To begin filling the gap, this paper places Russian cyber operations in Ukraine within the larger frame of Moscow’s military objectives, campaigns, and kinetic activities.
Topic:
Cybersecurity, Military, and Russia-Ukraine War
Political Geography:
Russia, Europe, and Ukraine

108. Localization and China’s Tech Success in Indonesia

Author:
Gatra Priyandita, Dirk Van Der Kley, and Benjamin Herscovitch
Publication Date:
07-2022
Content Type:
Working Paper
Institution:
Carnegie Endowment for International Peace
Abstract:
On average, Indonesians distrust China and many Chinese firms. Yet Huawei and to a lesser extent ZTE have successfully positioned themselves as trusted cybersecurity providers to the Indonesian government and the Indonesian nation. This has been no easy feat given long-held Indonesian animosity toward China. Many Chinese companies have faced protests over concerns they were taking local jobs. Huawei and ZTE have suffered no such fate. Nor has there been a broad coalition of Indonesian voices against using Chinese technology in critical telecommunications infrastructure. In short, Indonesians care a lot more about Chinese cement plants than they do about Huawei involvement in 5G networks. Gatra Priyandita Gatra Priyandita is an analyst at the International Cyber Policy Centre at the Australian Strategic Policy Institute, where he leads a project researching cyber-enabled intellectual property theft. He is a political scientist by training and specializes in the study of foreign policy and security in Southeast Asia. He holds a PhD in political science from the Australian National University. This is a vastly different conversation to those happening in rich liberal democracies. Huawei and ZTE have been able to achieve success in Indonesia, despite a sense of ambivalence among the Indonesian political and defense establishment about Chinese intentions and growing Western scrutiny over the use of Chinese technology in broadband networks. As other papers in this series have demonstrated, Huawei and ZTE needed to localize their strategies. Like elsewhere in the world, available evidence suggests that part of Huawei’s and ZTE’s value proposition is cheaper prices (compared to those of competitors) for high-quality technology. But that is only part of the story. Huawei has positioned itself as Indonesia’s cybersecurity provider of choice by offering enormous cybersecurity and other related training programs across the country for groups ranging from senior government officials to students in rural Indonesia. Much of this training is technically focused on practical vocational skills with a hope that students one day will become customers. In addition, the company offers an attractive maintenance and upkeep package. Since the mid-2000s, Chinese information and communications technology (ICT) firms have created training centers in partnership with local Indonesian telecoms companies and universities to train the next generation of Indonesian engineers and tech specialists. Government agencies are also increasingly targets of training and capacity-building programs, with Huawei claiming that 7,000 government officials have participated in its training programs. The Indonesian government, corporations, and ordinary citizens alike have welcomed Huawei and ZTE as essential partners in their efforts to build both the infrastructure and human capital necessary to prosper in the twenty-first century’s digital economy. What Huawei and ZTE offer is knowledge transfer, not technology transfer. The technology is still being built in China by Chinese firms. Huawei’s role in training relates instead to capacity building. Indonesians will install, maintain, and use the networks. China will build the hardware. There is also evidence that China has had some rhetorical success in pushing its version of cyberspace governance. Beijing’s preferred cyberspace governance language was inserted into a memorandum of understanding between Indonesia’s National Cyber and Crypto Agency and the Cybersecurity Administration of China. However, it is difficult to see how the memorandum has influenced Indonesia’s cybersecurity governance in practice. One of the concerns often leveled by rich liberal democracies is that reliance on Chinese tech will end up aligning the political interests of countries like Indonesia with those of China. Other key worries are China’s pervasive espionage and the enduring (though as yet unrealized) risk that Chinese companies with a dominant role in an ICT ecosystem could be used by Beijing to apply coercive political pressure. Despite Indonesia’s embrace of Huawei and ZTE, political leaders in Jakarta have not simply disregarded the hard security questions posed by upgrading ICT equipment, especially when foreign suppliers are involved. Indonesian officials simply rate the need for development and cybersecurity-related capacity building higher than the risk of using Chinese ICT hardware in their critical infrastructure systems. If rich liberal democracies are concerned about this trend, then they need to offer workable alternatives that place Indonesia’s enormous digital development needs at the heart of any value proposition. It is unlikely that Indonesia will stop using Chinese hardware in its infrastructure, but alternatives could prevent overreliance.
Topic:
Foreign Policy, Science and Technology, Cybersecurity, Telecommunications, and Localization
Political Geography:
China, Indonesia, and Asia

109. Cybersecurity culture in the public and private sector area in the Central European region

Author:
Borta Górka-Winter
Publication Date:
12-2022
Content Type:
Journal Article
Journal:
Nowa Polityka Wschodnia
Institution:
Faculty of Political Science and International Studies, Nicolaus Copernicus University in Toruń
Abstract:
Cyber security is a growing problem associated with everything a citizen or organisation does in cyberspace. The problem thus outlined fits into a multifaceted programme that can be addressed through cyber security management. The analysis in the article compares the level of cyber security awareness among the staff of public institutions and the private sector in four Central European countries, namely Poland, the Czech Republic, Slovakia and Hungary. Public institutions are by nature open, decentralised and rich in a wide range of data about the state, society, economy, economics and research and innovation. For this reason, they are often exposed to serious cyber threats. This study examines the relationship between cyber security culture and the urgent need for preventive action against possible cyber threats. The main thesis of the study is that an adequate understanding of cyber security culture and improved awareness among employees about digital threats is key to achieving cyber security growth. The research illustrates breaches in so-called digital hygiene, which are caused by a lack of knowledge, skills and errors in employee behaviour. Following a survey of staff employed in both public and private organisations, an identification of key cyber security risk factors is made. Increasing staff competencies can help improve cyber resilience.
Topic:
Cybersecurity, Public Sector, Innovation, Private Sector, Management, and Organizational Culture
Political Geography:
Europe, Poland, Hungary, Czech Republic, Central Europe, and Slovakia

110. Securing the energy transition against cyber threats

Author:
Atlantic Council Task Force on Cybersecurity and the Energy Transition
Publication Date:
07-2022
Content Type:
Special Report
Institution:
Atlantic Council
Abstract:
As the US energy sector’s reliance on digitalization grows, its vulnerability to cyberattacks also increases. To better understand current and future threats, the Atlantic Council Global Energy Center convened the Atlantic Council Task Force on Cybersecurity and the Energy Transition to develop a cybersecurity framework designed to protect US energy infrastructure—and by extension, national security—against cyberattacks. Former Secretary of the US Department of Homeland Security Michael Chertoff and former General Wesley Clark served as co-chairmen of the task force, which produced this report, “Securing the Energy Transition against Cyber Threats.” The task force found that existing efforts to strengthen cybersecurity are insufficient to meet the demands the energy transition will bring. The fragmented, sometimes rivalrous set of institutions regulating and coordinating current cyber defenses leaves many gaps, ambiguities, and weak links. This report recommends a suite of key actions that government can take to shore up the US energy sector against future cyber threats.
Topic:
Environment, Science and Technology, Cybersecurity, Innovation, Energy, and Green Transition
Political Geography:
Global Focus