Search

Begin New Search Topic Cybersecurity Journal Security and Defence Quarterly

11. Protection of Polish critical infrastructure (CI) against air threats

Author:
Michał Piekarski and Karolina Wojtasik
Publication Date:
09-2022
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The goal of this paper is to analyse challenges related to protecting Polish critical infrastructure (CI) against air threats, such as UAVs, as a case study in a wider discussion on protection of critical infrastructure worldwide. The Polish legal definition of critical infrastructure and laws regarding the protection of such facilities are explained in the article in order to provide context. A review of scientific literature and open-source analysis of known air attacks on CI and the capabilities of air platforms are also included, with special attention being paid to unmanned systems. The threats themselves have been divided into two groups of scenarios: peacetime threats and crisis situations that have hybrid wartime scenarios. Depending on the scenario, the different capabilities of actors must be taken into account. Peacetime air threats include the use of commercially available drones. Those devices have limited capabilities, in terms of weaponisation, due to the limited weight of their cargo and the flight range. More advanced devices, including custom–built drones and military systems, can be supplied and used by state actors. Therefore, there are different requirements regarding protection systems. In peacetime, anti-drone systems are certainly recommended due to their capabilities and safety of use for bystanders. In more dangerous scenarios, typical military systems, including Very Short-Range Air Defence, Short-Range Air Defence and Medium Range Air Defence systems have to be employed or dedicated kinetic counter-drone systems deployed.
Topic:
Security, Terrorism, Infrastructure, Cybersecurity, Hybrid Warfare, Non-Traditional Threats, and Military
Political Geography:
Europe and Poland

12. Protection of critical infrastructure in Norway – factors, actors and systems

Author:
Jakub M. Godzimirski
Publication Date:
09-2022
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The main aim of this article is to examine how the issue of protecting critical infrastructure is addressed in Norway. To answer this question, the article addresses two important sub-questions – what is to be understood in the current historical and the specific Norwegian context as important elements of national critical infrastructure and what is the current understanding of risks and threats that this infrastructure should be protected against? This article is based on a detailed quantitative and qualitative examination of the official Norwegian documents and statements on questions related to various aspects of protecting critical infrastructure in Norway. In section one, structural factors that have played a major part in shaping Norwegian thinking about critical infrastructure are discussed. Section two provides a short summary of the current discussion on elements of critical infrastructure in Norway. In section three, the article discusses official Norwegian perceptions of threats and how they address questions related to critical infrastructure. The fourth section looks at the current official approach to protection of critical infrastructure in the country. The process of building the existing system for protecting critical infrastructure in Norway has been driven by both domestic and international concerns. The system should make it possible for citizens to meet their needs through access to various important societal functions, but it also needs to make it possible to address challenges that stem from the international environment.
Topic:
National Security, Science and Technology, International Security, Infrastructure, Cybersecurity, and Economic Security
Political Geography:
Europe and Norway

13. Intelligent terrorism as a security threat to critical infrastructure

Author:
Ossi Heino
Publication Date:
09-2022
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This paper considers terrorism as potentially ‘intelligent’, as a threat capable of abusing the critical infrastructures of societies and the related methods for knowledge production. Respectively, it sees critical infrastructures as attractive mediums for terrorist influence. The paper describes the contrast between the logic of providing security and certainty for critical infrastructures and the threat of terrorism, which is evolving in terms of its systemic capacities and intelligence. The way security is provided within critical infrastructures and the way intelligent terrorism could operate seem to separate from each other, thereby creating vulnerability. The paper seeks to enhance the conceptual understanding of this question by describing and closing the gap created by the intellectual separation. By doing so, the article will shed light on the conceptual dimension of the (in)security that has gone unnoticed in the interface between critical infrastructures and terrorism. It outlines the aforementioned dilemma and provides conceptual understanding that makes it easier to grasp and communicate further. The paper shows that the intellectual separation has weakened the possibilities for theoretically understanding and practically recognising terrorism as a phenomenon that is becoming systemically more conscious, more intelligent and potentially increasingly capable in a form of violence that exploits the basic structures of societies and the related knowledge methods for its own purposes. As a conclusion, the paper stresses the importance of profoundly critical tools. Such tools are often perceived as being undesirable or even counter-productive in figuring out the mechanism through the very means utilised in providing for security.
Topic:
Security, Terrorism, Infrastructure, Cybersecurity, and Rationality
Political Geography:
Global Focus

14. The role of citizens and geoinformation in providing alerts and crisis information to the public

Author:
Fatime Balog and Tibor Babos
Publication Date:
12-2022
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Mankind has been facing constant threats and challenges from natural and civilisational disasters for centuries. The fundamental responsibility of states is to protect the lives, health, and property of their citizens. However, protection against natural and civilisational disasters is a complex task in which the population also has to take part, and the availability of geoinformation is a prerequisite for effective protection. The aim of this study is to demonstrate the combined power of both citizens and technology in the task of alerting and informing the public of the opportunities offered by virtual crowdsourcing, Web 2.0, the role of geoinformation, crisis maps, and drones through the application of a qualitative method, by analysing case studies and by searching for internal connections between different phenomena. Citizens around the world can collaborate and contribute to the sharing and collection of geoinformation to create real-time, interactive maps. These so-called crisis maps support intervention organisations in obtaining information, and they can also be used as sources of information. The use of Web 2.0, crisis maps and drones, as well as the emergence of digital humanitarian volunteering, have fundamentally changed the role of the public when it comes to responding to disasters, including alerting them using geoinformation.
Topic:
Cybersecurity, Citizenship, Crisis Management, and Crowdsourcing
Political Geography:
Global Focus

15. Effects of botnets – a human-organisational approach

Author:
Zsolt Bederna and Tamás Szádeczky
Publication Date:
09-2021
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Botnets, the remotely controlled networks of computers with malicious aims, have significantly affected the international order from Ukraine to the United States in recent years. Disruptive software, such as malware, ransomware, and disruptive services, provided by those botnets has many specific effects and properties. Therefore, it is paramount to improve the defences against them. To tackle botnets more or less successfully, one should analyse their code, communication, kill chain, and similar technical properties. However, according to the Business Model for Information Security, besides technological attributes, there is also a human and organisational aspect to their capabilities and behaviour. This paper aims to identify the aspects of different attacks and present an analysis framework to identify botnets’ technological and human attributes. After researching the literature and evaluating our previous findings in this research project, we formed a unified framework for the human-organisational classification of botnets. We tested the defined framework on five botnet attacks, presenting them as case studies. The chosen botnets were ElectrumDoSMiner, Emotet, Gamover Zeus, Mirai, and VPNFilter. The focus of the comparison was motivation, the applied business model, willingness to cooperate, capabilities, and the attack source. For defending entities, reaching the target state of defending capabilities is impossible with a one-time development due to cyberspace’s dynamic behaviour and botnets. Therefore, one has to develop cyberdefence and conduct threat intelligence on botnets using such methodology as that presented in this paper. This framework comprises people and technological attributes according to the BMIS model, providing the defender with a standard way of classification.
Topic:
Defense Policy, Science and Technology, Cybersecurity, and Botnets
Political Geography:
Global Focus

16. Simulation framework for practical cybersecurity training in the public service sector

Author:
Veronika Deák
Publication Date:
03-2021
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The public service sector is a key target of cyberattacks. In order to prevent and effectively tackle such attacks, organisations should continuously develop their defence capabilities. As part of developing such capabilities, public service cybersecurity training is required to teach students about cyberattacks. The present study uses quantitative research techniques including (i) how to identify key requirements for the practical aspects of public service cybersecurity training and (ii) sampling to utilise international best practices from cybersecurity education and conceptual architectures from existing public service organisations. A schematic structure with a two-level practical training course is proposed. On the first level, the students learn about the defence mechanisms of their own info-communication devices and try to prevent attacks in a simulated environment. On the second level, the students apply protection strategies against cyberattacks in organisational infrastructure. Finally, a technical framework is defined to simulate cyberattacks against (a) personal devices and (b) a fictional organisational infrastructure. The specification of a public service cybersecurity training programme should not only focus on theoretical education but also provide practical knowledge to students. By simulating specific attacks, theoretical and practical knowledge can be combined. As a result, students will be able to recognise threats and potential risks from cyberspace.
Topic:
Education, Cybersecurity, Training, Public Service, and Simulation
Political Geography:
Global Focus

17. Mechanisms for providing cybersecurity during the COVID-19 pandemic: Perspectives for Ukraine

Author:
Oleksandr Karpenko, Aleksander Kuczabski, and Vitalii Havryliak
Publication Date:
03-2021
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The article analyses key cybersecurity trends against the background of the COVID-19 pandemic, trends that could lead to an increase in cyber threats. It also looks at cyber threats related to remote work in this period. Foreign experience in counteracting the spread of disinformation online, about COVID-19, has been studied. A global trend for strengthening law enforcement control over cyberspace content, network traffic, and digital devices of users has been identified. It has been established that some states are finding it difficult to counteract the spread of coronavirus-related threats and are sometimes resorting to violating the traditional balance of rights and freedoms of citizens in cyberspace, in fact, legalising cyber-surveillance of citizens. The paper investigates the limits of state intervention in the lives of citizens in the face of a real threat to national security. In matters of cybersecurity in the medical sphere, a shift of emphasis from the problem of protection of personal data of patients to the protection of key functions of the medical sphere is revealed. Mechanisms for implementing cybersecurity to counter the spread of fake news (misinformation) on the internet, about COVID-19, are substantiated. Practical tools and cybersecurity measures used during the COVID-19 pandemic are recommended for Ukrainian authorities. The importance of creating appropriate conditions for ensuring the balance between the implementation of restrictive policies in the field of cybersecurity and ensuring freedom of speech and openness of the internet is proven.
Topic:
Cybersecurity, Pandemic, COVID-19, and Fake News
Political Geography:
Ukraine and Eastern Europe

18. Assessment of the effectiveness of the security features of personal wireless networks

Author:
Janusz Gierszewski and Michał Matuśkiewicz
Publication Date:
12-2020
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Wireless network communication standards have become very common due to the huge benefits of their application. The use of radio waves to create networks has reduced infrastructure costs and increased the mobility of devices. The advantages of wireless communication (WLAN) also pose a challenge to the security of transmitted data. However, the use of a wireless signal poses certain threats to network security. The aim of the study was to analyse problems related to the security of WLAN 802.11. and assess its resistance to various attack strategies. It was assumed that wireless networks have an insufficient level of security. The assumed assumption is verifiable due to the ability to monitor events in networks. In order to verify the hypothesis, a number of experiments have been carried out in laboratory conditions, concerning the currently used WLAN protections from the IEEE 802.11 family of standards. The electromagnetic waves used for communication are available to the public at a distance of a few / several dozen metres from the communicating devices. It is easy to monitor air traffic using a network card that operates in monitor mode. The communication itself cannot be secured in any way, so data encryption is one way of secure transmission. During the research, the applied security features were successfully broken with the help of publicly available tools. The obtained results are distinguished by a high level of objectivity and reliability in the assessment of applied wireless network security. It was shown that there are still imperfections in the security and it is possible to break the security measures. The consequences of attacks are very serious and lead to a breach of each of the attributes of secure information. Practice has shown that it is impossible to create a wireless network that is fully secure. The findings of the study should be used to develop methods to improve information security, as well as to raise users’ awareness of existing threats. Not all users of wireless networks are aware of how easy some of the commonly used security features are to break.
Topic:
Security, Cybersecurity, and Networks
Political Geography:
Global Focus

19. Wars in the later 21st century: Forecast developments in the methods of warfare

Author:
Marcin Gornikiewicz
Publication Date:
12-2019
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Objectives: This paper attempts to forecast the future of warfare methods in the forthcoming decades of the 21st century. The predictions reflect on the current trends observed in the development of military and civil (dual-use) technologies and changes in thought constructs developed for hostilities. Methods: Empirical and theoretical research methods were utilised in the study. The research data, obtained from the review of source materials, were subsequently subjected to examination through analysis, synthesis and comparison. Results: The methods of warfare at the turn of the 21st century are likely to reflect the technological evolution of the modern age. Considering the present-day trends, there is a good probability that our technology-driven lives will transform people into hybrids of biological organisms merged with the technological environment, integrated with the body. Therefore, hostile action against human soldiers could be taken on three major levels: the biological organism, the mass communication technology integrated into the body, and the mental level – both in the conscious and the subconscious sphere. The study into how the soldier’s mental sphere can be influenced to anticipate and shape behaviours may contribute to further research on the third level impact on enemy soldiers. Conclusions: The conclusions formulated in this analysis may carry significant implications for the works on an innovative methodology of the future warfare, accounting for the technological progress in the next decades of the 21st century, and a methodology for countering future military threats.
Topic:
Science and Technology, War, International Security, Cybersecurity, History, and Military
Political Geography:
Global Focus

20. Wargaming the cyber resilience of structurally and technologically different networks

Author:
Heikki Lantto, Bernt Åkesson, Marko Suojanen, Topi Tuukkanen, Simo Huopio, Juha-Pekka Nikkarila, and Mari Ristolainen
Publication Date:
06-2019
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Based on a review of different analytical frameworks, it is suggested to run a table top cyber wargame when trying to analyse the effects of closed national networks being imposed in the near future. The scope of the wargame is to extract results to show how the resilience of an open national network differs from a closed national network. It is self-evident that the formation process of resilience is different between the diverse systems. The proposed wargame is a two-sided cyber table top wargame. The wargame is based on at least two blue teams, at least one red team and a control team (namely a white team). One blue team is located in the closed national networks and its system relies on closed national network infrastructure. The other blue team operates its system within open network society. By designing, constructing and executing the proposed cyber wargame we argue it is possible to find these diff erences and similarities as well. Current research improves cyber situation awareness and proposes a direction to be followed when trying to understand the changing circumstances of the cyber space. It also suggests how the research resources could be directed when trying to improve the situation awareness of the closing process.
Topic:
Defense Policy, Science and Technology, Cybersecurity, Networks, and Resilience
Political Geography:
Russia and Eurasia