Search

Begin New Search Topic Cybersecurity Journal Security and Defence Quarterly

1. The securitization of foreign disinformation

Author:
Nicole J. Jackson
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This paper analyses the Canadian government’s foreign and security policy responses to Russian disinformation in the context of the Russo-Ukrainian war. It asks whether, how, and why the government has securitised the “crisis of Russian disinformation.” The paper first briefly reviews literature on the Copenhagen’s School’s “securitisation” theory and how it has been used to explain responses to other crises. It then adopts the framework to contextualise the Canadian federal government’s official rhetoric, and then to categorise government policies and actions. The sources consulted include government actors’ reports and stated intentions and policies from 2022 to 2024. Adopting a securitisation framework reveals that Russian disinformation has been rhetorically securitised by government actors as an existential threat to national security and democratic integrity which requires urgent action. Within a context of cascading risks, the government has taken a range of distinct yet reinforcing policies and actions, some more comprehensive than others. The paper argues that together this “pervasive rhetorical securitisation” and “ad hoc practical securitisation” comprise the Canadian government’s ongoing process of partial securitisation. This process is legitimising different methods of governance: security and warfare communications (to address threats to national defence and security), democratic resilience (to address threats to democracy), and, most controversially, blocking and sanctioning (to signal discontent to the Russian regime). The analysis further reveals that each approach has different benefits and limits. The paper concludes that the securitisation process is incomplete compared to the government's rhetoric, with no over-arching organisation or strategy. It outlines implications for future research.
Topic:
International Security, Cybersecurity, Disinformation, Securitization, and Russia-Ukraine War
Political Geography:
Russia and Canada

2. Aircraft vulnerability to politically motivated Radio Frequency Interference (RFI) in Eastern Europe

Author:
Tegg Westbrook
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Countries in Europe have experienced radio frequency interference from Russian electronic warfare units, affecting navigation systems without discrimination. Interference has been identified as coming from the Russian mainland, Kaliningrad, and in the areas where it is engaged in conflicts abroad, creating serious hazards for aircraft. Previous research has identified the technical vulnerabilities to aviation from radio frequency interference, but it has yet to be contextualised in light of the ongoing geopolitical tensions. Using literature review analysis, the aim of the article is to place the jamming and spoofing threat in the context of ongoing political tensions between Russia and the region and to establish worse-case scenarios based on the former’s motives. Focusing on the threats to aircraft, it finds that the likely motivations are to (1) complement political narratives of Western aggression; (2) to deny service for intimidation, harassment, economic loss, and to portray a dominant Russian cyber influence; and (3) to use spoofing to enable hostage diplomacy via the seizure of people and assets. It argues that reporting mechanisms for aviation risks assumes geographical staticism, which does not correspond adequately to the threat. It also creates arbitrary “predictability” in otherwise unpredictable environments, which could ultimately affect vigilance and due diligence in the areas not considered problematic.
Topic:
International Security, Cybersecurity, Geopolitics, and Satellite
Political Geography:
Eastern Europe

3. China’s security relations with Africa in the 21st century

Author:
Monika Magdalena Krukowska
Publication Date:
06-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The paper examines China’s increasing security interests in Africa. It seeks to understand the nature and scope of Chinese engagement in peace and security issues on the continent based on its engagement in international and domestic (African) politics. Through literature analysis and logical reasoning, the author intends to define the implications of China’s new role as a security provider. The paper is based on desk research using primary and secondary data and statistical and comparative analysis of official documents, academic research, and media sources. The methods include literature analysis, logical reasoning, statistical research, comparative analysis, and the inductive method to build general theorems. The paper analyses aspects of China’s security engagement on the African continent: its participation in the United Nations Peacekeeping Operations, small arms exports, and Beijing’s sharing of technology with African partners. China’s engagement in Africa’s security helps to advance its vital economic and political interests, with limited impact on African security. Key lessons for African partners are offered. The last decades have seen an extraordinary increase in China’s economic and political ties with Africa. Security cooperation followed massive Chinese investments and thousands of Chinese nationals working on the continent. China’s security engagement in Africa protects Beijing’s interests regarding access to resources, markets, political influence, and social credibility. It has little to do with a benevolent will to help Africa deal with instability or economic underdevelopment. African partners must make necessary efforts to avoid further dependence on China.
Topic:
Security, Foreign Policy, International Security, Peacekeeping, Cybersecurity, and Cooperation
Political Geography:
Africa, China, and Asia

4. Estimating the vulnerability of industrial network infrastructure in Central and Eastern Europe

Author:
Mateusz Gzegorz Twardawa, Marek Smolik, Franciszek Rakowski, Jakub Kwiatkowski, and Norbert Meyer
Publication Date:
09-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Industrial infrastructure has suffered an unprecedented number of attacks in Central and Eastern Europe (CEE). This situation can be attributed to many geopolitical factors, including hybrid military conflicts and criminal activity. Industrial networks belonging to the countries that were once under Soviet influence suffer from an elevated risk of cyberattacks. The goal of this work is to propose an easy way to estimate the vulnerabilities of industrial networks to cyber threats on a national level. Since analysis of the industrial vulnerability landscape is difficult, this study proposes an assessment based on the popularity of vulnerable technologies—VPc. This metric is composed of search volume data on keywords related to industrial network technologies and reported security vulnerabilities associated with these words. Data on 116 keywords was analysed and a country-specific VPc index was calculated for twenty states in CEE. The analysis of the popularity of industrial technologies and vendors in CEE reveals interesting information about the industrial security and vulnerability landscape. The results show that some countries (e.g. Estonia) have more resilient industrial infrastructure than others (e.g. Belarus). The results presented in this study are not in conflict with other data and estimation attempts, including the National Cyber Security Index (NCSI). As new vulnerabilities are noted every day, the industrial security landscape changes rapidly. Therefore, a new easy-to-use metric (VPc) can be successfully used for general estimations. This work shows that the VPc score agrees with other estimates and analyses, but as with any other general estimation tool, it must be used with caution.
Topic:
International Security, Infrastructure, Cybersecurity, Industry, Vulnerability, and Network Security
Political Geography:
Europe, Eastern Europe, and Central Europe

5. Leveraging competitive intelligence in offensive cyber counterintelligence: An operational approach for the shipping industry

Author:
Anastasios-Nikolaos Kanellopoulos
Publication Date:
12-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
In the contemporary landscape of rapid digitalization, the shipping industry is increasingly confronted with unparalleled cybersecurity threats, necessitating a transition towards proactive strategies to address these evolving risks. Traditional methodologies have proven inadequate, thereby necessitating the integration of Competitive Intelligence (CI) within Offensive Cyber Counterintelligence (OCCI) frameworks. This paper investigates the interdependent relationship between CI and OCCI, underscoring their combined potential to safeguard organizational interests and enhance cybersecurity resilience. The primary objectives of this study are to elucidate the foundational principles and significance of CI within business contexts, to explore the theoretical underpinnings of OCCI, and to propose a structured framework for the integration of CI into OCCI operations specifically tailored to the shipping sector. Theoretical constructs highlight the critical importance of proactive measures in mitigating cyber threats and sustaining a competitive advantage in the digital era. Through a comprehensive analysis of the literature, this interdisciplinary approach provides practitioners with the opportunity to evaluate and implement the proposed framework. The insights garnered from this study hold significant implications for both academic research and industry practice, promoting ongoing collaboration in the development of robust frameworks for integrating CI within OCCI operations.
Topic:
Intelligence, International Security, Cybersecurity, Resilience, Shipping, Strategic Management, and Counterintelligence
Political Geography:
Global Focus

6. The Copenhagen School’s widening security theory in relation to cybersecurity. Applicability and Implications

Author:
Mihai Olteanu
Publication Date:
12-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This paper critically examines the relationship between cybersecurity and Copenhagen School’s widening security theory, with the aim of assessing the possibility of applying this theoretical framework to the cyber realm. As cybersecurity is a relatively recent addition to the security discourse, this research explores whether the Copenhagen School’s traditional framework, which was primarily focused on securitisation processes in the five main sectors (military, political, economic, environmental, and societal), adequately encompasses the unique aspects and dynamics of cyber domain. The research question is: Why the cybersecurity field can’t become a separate constructivist sector? The study begins with a detailed overview of both cybersecurity landscape and Copenhagen School’s fundamental principles to provide the context for a comparative analysis of the Copenhagen theory and contemporary cybersecurity literature. In doing so, the research delves into the features of cybersecurity, with a focus on the evolving nature of cyber threats and vulnerabilities. By performing a qualitative analysis of the existing literature, the paper assesses the limitations of integrating these two concepts, ultimately concluding that cybersecurity lacks the distinct characteristics required to be considered a separate sector under the Copenhagen School’s framework. The findings contribute to the ongoing discussions regarding the adaptation of traditional security theories to address contemporary security challenges in the digital age.
Topic:
Security, Science and Technology, Cybersecurity, and Copenhagen School
Political Geography:
Global Focus

7. SCADvanceXP—an intelligent Polish system for threat detection and monitoring of industrial networks

Author:
Mateusz Gzegorz Twardawa, Marek Smolik, Franciszek Rakowski, Jakub Kwiatkowski, and Norbert Meyer
Publication Date:
12-2024
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
SCADvanceXP is an industrial network intrusion detection system that scans and monitors data exchange between engineering stations, field divides, controllers, supervisory control and data acquisition (SCADA), and other elements of the operational technology network in detail. SCADvanceXP has the potential to detect advanced attacks on industrial infrastructures with the use of rulebased, signature-based, and behavioural detection methods, which are supported by sophisticated machine and deep learning models. As a system developed in Poland, it addresses the needs of industry in that region of Europe. The goal of this work was to assess SCADvanceXP’s potential to detect common industrial threats. In order to check SCADvanceXP’s potential, an effort was undertaken to evaluate its functionality on major industrial threats. For that purpose, twelve malware strains interfering with industrial systems were described. Later, the SCADvanceXP functionality was overlapped on malware behavioural and detection markers, pointing out exact mechanisms in SCADvanceXP that would detect analysed threats. The results show that SCADvanceXP is able to detect a wide range of attacks on industrial networks. SCADvanceXP’s rich functionality is able to provide a high standard of security. However, if a threat is affecting systems not directly connected with industrial networks, SCADvanceXP will not be able to detect it. SCADvanceXP only monitors industrial systems; hence, corporate networks must be protected by a different solution to provide the required level of security. Nonetheless, SCADvanceXP is dedicated to operating within industrial networks and does not have access to regular IT networks. It can be concluded that SCADvanceXP is a specialist tool providing desired security for industrial networks.
Topic:
International Security, Cybersecurity, Malware, and Industrial Networks
Political Geography:
Europe and Poland

8. The changing face of Russia’s information war against Ukraine and other democratic countries: Lessons and recommendations. Interview with Professor Sinan Aral

Author:
Sinan Aral
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Aral: Pre-2020 strategies of misinformation and disinformation have evolved over the last 5 years but they have not been any less intense. In fact, they have potentially been at least as intense and sometimes more intense. The tactics have changed. Before 2020, the western world was not as cognisant or prepared to deal with Russian dis- and misinformation online. And so, Russian tactics were much more overt. In particular, what they would do was use bots and human trolls and sock pockets to spread mis- and disinformation. And bots were a big part of it.3 I think that now what you see more of is the amplification of real voices because those are harder to take down. So instead of putting a false narrative out there, they would do a search for real people creating the narrative they want to promote and then amplify that narrative through reshares, retweets, likes, and amplifications as best as they can. And when the platforms look at that, they say ‘we can’t take this down because the originator of the post is a real human being that we can verify as real, not a Russian spy etc.’
Topic:
Cybersecurity, Social Media, Disinformation, Information Warfare, and Russia-Ukraine War
Political Geography:
Russia, Europe, and Ukraine

9. Managing the financial impact of cybersecurity incidents

Author:
Zsolt Bederna and Tamás Szádeczky
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The complex relationships of economic actors and the high dependency on information and communication technologies make it necessary for all relevant entities to develop protection. This protection should include preventive and reactive controls in a risk-proportionate manner in relation to the business value protected. We aimed to develop a solution to support cybersecurity-related business decisions with financial analytics. The risk-based approach helps management find the optimum solution with minimal costs, where protection prevents some incidents from occurring, while the risks associated with other incidents are accepted in an informed way. The security industry developed a number of apparatuses to find the optimum security controls that enforced the fiscal aspects, which typically contain solutions used in planning. However, the actual expenditure often differs from the planned budget for several reasons, one of which is the occurrence of security incidents. We used the common methodology toolset for financial analysis (NPV, NFV, risk assessment). We developed novel metrics based on these that can be used in cybersecurity management. Within the framework thus defined, the article discusses the economic context of the effects of incidents involving Meta (previously Facebook) services from 2016 to 2020. This paper introduces the ‘Effect of incidents’ metric to measure the impact of unplanned incidents’ on actual expenditure compared to the planned budget and the ‘Incidence of incident recognition’ metric to measure deviations of an incident’s impact as perceived by owners relative to the effect on the value of the assets. The paper also proves the applicability of those metrics using the example of Meta.
Topic:
Science and Technology, Cybersecurity, Finance, and Economy
Political Geography:
Global Focus

10. Trojan spoofing: A threat to critical infrastructure

Author:
Tegg Westbrook
Publication Date:
06-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This article explores the phenomenon of location spoofing—where the spoofer is able to “teleport” systems in and out of defined locations, either for the purpose of infiltration into no-go zones or for the “teleportation” out of real, defined zones in the physical world. The research relied on a qualitative methodology, utilising academic research findings, media reports, hacker demonstrations, and secondary data from these sources, to situate the spoofing threat in the context of international security. This conceptual, argumentative essay finds that signal spoofing, the methods of which can be followed via online scripts, allows users the ability to overcome geographically defined territorial restrictions. This, as this article finds, allows violent actors to weaponise systems, such as unmanned aerial systems, potentially leading to the escalation of political tensions in extreme but unfortunately ever-frequent episodes. The article concludes that, while Trojan spoofing (in particular) poses a real and an existential threat to international security, it is only a sum-of-all parts in considering other threats to critical functions in society. If geofences are used as a single point of security to protect assets against hostile actors, managers need to be aware of the vulnerability of intrusion and the resulting geopolitical consequences.
Topic:
International Security, Cybersecurity, Information Warfare, Military, GPS, and Deception
Political Geography:
Global Focus