Search

Begin New Search Topic Cybersecurity Publication Year within 5 Years

141. Safeguarding Critical Infrastructure in Kosovo

Author:
Kosovar Centre for Security Studies (KCSS)
Publication Date:
01-2022
Content Type:
Special Report
Institution:
Kosovar Centre for Security Studies (KCSS)
Abstract:
Critical infrastructure is a segment which is related to several other areas of security and defense, namely some strategic and legal documents which are in force as well as some new initiatives. This analysis provided a detailed overview of the protection of critical infrastructure in the Republic of Kosovo, becoming the first document published in this field. While the MIA has done a very good job in drafting the law on critical infrastructure, putting Kosovo one step ahead of other Western Balkan countries, the law remains unimplementable for almost 2 years following the date of its entry into force. Initially, strategic documents that are in the process of being drafted such as the draft National Security Strategy, the draft Defense Strategy, the draft Counter-Terrorism Strategy and the draft Cyber Security Strategy should include the protection of critical infrastructure by ensuring coordination of actions and by avoiding duplication or overlap of actions. The Strategic Planning Office within the Office of the Prime Minister should coordinate this process in cooperation with the relevant ministries. On the other hand, the draft law on cyber security should pay attention to the drafting of legal provisions which may cause overlap with the law on infrastructure, while the initiative for drafting the law on Security Measures for Networks and Information Systems needs to be reviewed. Moreover, the draft law on private security services should be finalized as soon as possible.
Topic:
Security, Defense Policy, Infrastructure, and Cybersecurity
Political Geography:
Eastern Europe and Kosovo

142. Cyber Challenges and Foreign Influence in the Upcoming Knesset Elections

Author:
David Siman-Tov, Tamir Hayman, and Amos Hervitz
Publication Date:
07-2022
Content Type:
Working Paper
Institution:
Institute for National Security Studies (INSS)
Abstract:
In advance of the forthcoming Knesset elections, there are heightened efforts to obstruct foreign interference. Yet while most preventive activity focuses on technological attacks on the voting process and information systems relevant to the campaign, the efforts to grapple with malign influence on internal political discourse through the spread of fake news, verbal incitement, and more are insufficient. What should Israel do to confront the threat in the most effective fashion?
Topic:
Security, Elections, Cybersecurity, and Foreign Interference
Political Geography:
Middle East and Israel

143. Chinese Surveillance Devices: Coming to a Neighborhood Near You

Author:
Jayson Browder, Valerie Shen, and Mike Sexton
Publication Date:
06-2022
Content Type:
Commentary and Analysis
Institution:
Third Way
Abstract:
The Chinese government conducts cyber espionage against the US on an unprecedented scale. Senior US intelligence officials have warned the “Internet of Things” is a US counterintelligence and cybersecurity vulnerability. Tens of billions of connected physical devices from Chinese-made webcams to “smart” appliances could be exploited at scale by the Chinese intelligence services. In 2016, the malware “Mirai” was able to weaponize more than half a million devices in a Denial-of-Service attack causing a massive East Coast Internet outage. Unaddressed, these threats will only increase as China exports surveillance devices around the world.
Topic:
Science and Technology, Cybersecurity, Surveillance, and Innovation
Political Geography:
China and Asia

144. The importance of cybersecurity for Bosnia and Herzegovina Policy recommendations to support BiH’s cyber capabilities and international aspirations

Author:
Nicolo Miotto
Publication Date:
04-2022
Content Type:
Working Paper
Institution:
The Centre for Security Studies
Abstract:
Cybersecurity is a fundamental domain for Bosnia and Herzegovina (BiH) as it impacts the country‘s national security, its economic growth and its international commitments and goals. Despite the importance of cyberspace for the country, BiH lacks a comprehensive approach to cybersecurity, having instead a jeopardised approach which hinders its cybersecurity efforts. The country‘s cybersecurity capabilities are underdeveloped, exposing governmental bodies, private companies and citizens to potential cyber threats and risks. Limited cybersecurity capabilities can undermine BiH‘s efforts to access the EU and NATO as these international organisations require states to respect and adopt specific cybersecurity standards and legislation. Hence, BiH needs to improve its cybersecurity architecture to achieve its international goals. In addition, the country must enhance its cybersecurity to accomplish international obligations deriving from the country‘s membership of international organisations and its ratification of the Budapest Convention. Although the country presents embryonic cybersecurity capabilities, BiH public institutions are improving their cybersecurity awareness by providing public employees with workshops, seminars, and training courses on cybersecurity. As of this, international and domestic cooperation represents a pivotal opportunity for BiH to build and enhance its cyber capabilities; intergovernmental organisations, research centres and partner counties are providing BiH public institutions with funds and training opportunities in the field of cybersecurity.
Topic:
NATO, Crime, European Union, and Cybersecurity
Political Geography:
Europe, Balkans, and Bosnia and Herzegovina

145. Ukraine Russia Crisis: Terrorism Briefing

Author:
Institute for Economics and Peace (IEP)
Publication Date:
03-2022
Content Type:
Special Report
Institution:
Institute for Economics & Peace (IEP)
Abstract:
On 24 February 2022, Russia launched an attack on Ukraine. Figure 1 highlights that the invasion comes after a decade of deteriorating relations between Russia, Ukraine and the West. This brief covers several aspects relating to the current Ukrainian war, including the frequency of past acts of terrorism in Russia, Ukraine and Georgia and covers likely future scenarios. It also analyses cyberattacks on Ukraine over the last decade and lead up to the current war. The main finding is that terrorism increases with the intensity of conflict. Both the Georgian conflict in 2008 and the Ukrainian conflict of 2014 saw substantial spikes in terrorist activity around the wars, and as the current war intensifies increased terrorist activity should be expected. Secondly, cyberattacks on Ukraine have markedly increased over the last decade, and especially in the months and weeks leading up to the war. Further, cyberattacks have the potential to unintentionally spill over into other countries because of global connectivity, the effects of which have been seen on numerous occasions. As cyberattacks by nefarious actors are a recent phenomenon, and given the difficulty in the attribution of such attacks, the demarcation between what constitutes a cyberattack, cyber warfare or cyber terrorism are unclear. Regardless, this briefing looks at the broad phenomena of cyberattacks in Ukraine to offer background on recent events.
Topic:
Terrorism, Cybersecurity, Conflict, and Russia-Ukraine War
Political Geography:
Russia, Ukraine, Eastern Europe, and Georgia

146. Cyber Posture Trends in China, Russia, the United States and the European Union

Author:
Lora Saalman, Fei Su, and Larisa Saveleva Dovgal
Publication Date:
12-2022
Content Type:
Special Report
Institution:
Stockholm International Peace Research Institute (SIPRI)
Abstract:
Current understanding of the cyber postures of China, Russia, the United States and the European Union (EU) merits re-evaluation. It is often assumed that China and Russia are aligned, yet this is not always the case. Unlike Russia, which has an ongoing focus on information security, China’s official documents incorporate both information security and cybersecurity concerns that are similar to those of the EU and the USA. Moreover, while often paired, the EU and the USA have differing regulatory structures in cyberspace. Further, both actors increasingly mirror Chinese and Russian concerns about the impact of information warfare on domestic stability. By examining key trends in each actor’s cyber posture, this SIPRI Research Report identifies points of convergence and divergence. Its conclusions will inform a broader SIPRI project that maps cyber posture trajectories and explores trilateral cyber dynamics among China, Russia and the USA to assist the EU in navigating future cyber escalation and enhancing global cyber stability.
Topic:
European Union, Cybersecurity, Geopolitics, Regulation, and Information Security
Political Geography:
Russia, China, Eurasia, Asia, and United States of America

147. The SolarWinds Cybersecurity Case in US-Russia Relations

Author:
Hiroshi Yamazoe
Publication Date:
06-2021
Content Type:
Research Paper
Institution:
Japan Institute Of International Affairs (JIIA)
Abstract:
On April 13, 2021, US President Joe Biden held a telephone conversation with Russian President Vladimir Putin to discuss several issues that are hindering US-Russia relations. Two days later, the White House announced economic sanctions and other retaliatory measures, saying that these would impose costs for Russia's harmful activities. This statement gave a relatively detailed description of a cyberattack using SolarWinds products that surfaced in December 2020. On April 15, 2021, the same day that the retaliatory measures were announced, US and UK intelligence agencies officially designated Russia's Foreign Intelligence Service (SVR) the responsible party for the first time. This article discusses some of the cybersecurity issues in US-Russia relations, focusing on the issues surrounding SolarWinds products, and uses part of my manuscript written in February 2021 for a report by the Japan Institute of International Affairs' Russian Study Group, with some additions made based on developments in April and May.
Topic:
Science and Technology, Bilateral Relations, and Cybersecurity
Political Geography:
Russia and United States of America

148. Sharpening the Blunt Tool: Why Deterrence Needs an Update in the Next U.S. National Security Strategy

Author:
Kyle J Wolfley
Publication Date:
04-2021
Content Type:
Research Paper
Institution:
Department of Social Sciences at West Point, United States Military Academy
Abstract:
The 2017 U.S. National Security Strategy appeared to bring deterrence back: departing from its predecessor, the document prioritized the concept by including “preserving peace through strength” as a vital national interest. From nuclear weapons to cyberspace, the strategy emphasized the logics of denial and punishment, which were hallmarks of the classical deterrence theory that emerged after World War II. However, recent thinking on deterrence has evolved beyond these simple logics. Now emerging concepts such as tailored deterrence, cross-domain deterrence, and dissuasion offer new ideas to address criticisms of deterrence in theory and practice. Therefore, the most vital question for the new administration is: how should the U.S. revise its deterrence policy to best prevent aggression in today’s complex environment? A review of the problems and prospects in deterrence thinking reveals that in addition to skillfully tailoring threats and risks across domains, U.S. policymakers should dissuade aggression by offering opportunities for restraint to reduce the risk of escalation.
Topic:
Security, Nuclear Weapons, Military Strategy, Cybersecurity, and Deterrence
Political Geography:
North America and United States of America

149. Trying to govern the ungovernable: International Law on cyber and information operations in Russian

Author:
Asbjørn Thranov and Flemming Splidsboel Hansen
Publication Date:
05-2021
Content Type:
Policy Brief
Institution:
Danish Institute for International Studies (DIIS)
Abstract:
Russia has proposed an international regime governing the use of cyber and information operations. However, ‘digital sovereignty’ means something very different in Moscow than it does in Washington. In September 2020, the Russian authorities launched a new initiative to regulate the use of cyber and information operations by states. The Russian President, Vladimir Putin, introduced the debate by suggesting that Russia and the USA lead the way by signing a bilateral agreement restricting their activities in the field of Information and Communication Technologies (ICTs). The two states, so Putin suggested, should establish regular dialogue and set up a ‘hot line’. Putin also proposed a new agreement on cyber and information operations that should ‘exchange guarantees against interference in the internal affairs of the other side, including into electoral processes, inter alia, by means of the ICTs and high-tech methods’. Shortly afterwards, the Russian Foreign Minister, Sergei Lavrov, added more details. In a statement, he drew a dark picture of the world ‘facing a real cyber pandemic’, pointing to the risk of cyber attacks against critical infrastructure and the interference by some states in the internal affairs of other states. ‘It is high time’, so he claimed, that the international community agreed on a regime to regulate the use of ICTs. Russia has proceeded to promote the new initiative at the current 75th session of the UN General Assembly, which has responded with a decision to renew the mandate of the open-ended working group on the security and use of ICTs in 2021-2025.
Topic:
Security, Defense Policy, Diplomacy, International Organization, Science and Technology, Cybersecurity, Internet, and Cyberspace
Political Geography:
Russia, Eurasia, North America, and United States of America

150. Exfiltrate, encrypt, extort

Author:
Rachael Falk and Anne-Louise Brown
Publication Date:
07-2021
Content Type:
Special Report
Institution:
Australian Strategic Policy Institute (ASPI)
Abstract:
As the Covid-19 pandemic has swept across the world, another less visible epidemic has occurred concurrently—a tsunami of cybercrime producing global losses totalling more than US$1 trillion. While cybercrime is huge in scale and diverse in form, there’s one type that presents a unique threat to businesses and governments the world over: ransomware. Some of the most spectacular ransomware attacks have occurred offshore, but Australia hasn’t been immune. Over the past 18 months, major logistics company Toll Holdings Ltd has been hit twice; Nine Entertainment was brought to its knees by an attack that left the company struggling to televise news bulletins and produce newspapers; multiple health and aged-care providers across the country have been hit; and global meat supplies were affected after the Australian and international operations of the world’s largest meat producer, JBS Foods, were brought to a standstill. It’s likely that other organisations have also been hit but have kept it out of the public spotlight. A current policy vacuum makes Australia an attractive market for these attacks, and ransomware is a problem that will only get worse unless a concerted and strategic domestic effort to thwart the attacks is developed. Developing a strategy now is essential. Not only are Australian organisations viewed as lucrative targets due to their often low cybersecurity posture, but they’re also seen as soft targets. The number of attacks will continue to grow unless urgent action is taken to reduce the incentives to target Australian companies and other entities.
Topic:
Crime, National Security, Cybersecurity, Internet, Information Technology, and Cyberspace
Political Geography:
Australia and Global Focus