Search

Begin New Search Topic Cybersecurity

321. Sharing Classified Cyber Threat Information With the Private Sector

Author:
Robert K. Knake
Publication Date:
05-2018
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
The U.S. government and private industry have been stuck at an impasse concerning cybersecurity information sharing for over a decade. While the Barack Obama administration rolled out executive and legislative efforts to increase information sharing, many U.S. companies still argue that the federal government should do more to provide them with useful intelligence on cyber threats. But the U.S. intelligence community argues that greater declassification and sharing of information with private companies could put technical sources and methods at risk. Fixes to this problem exist. The Department of Defense already provides a classified network for cleared defense contractors to receive intelligence on threats to their companies. Replicating this network for cyber threats has long been discussed as a way to share more information with the financial sector, electricity suppliers, and other private-sector entities critical to the U.S. economy. Expanding this network requires increasing the number of cleared personnel and of facilities that can hold classified information, as well as changing intelligence collection priorities. These hurdles can be addressed by cooperative efforts between the public and private sectors. As a crucial first step, the U.S. government should begin the targeted collection of intelligence on cyber threats to critical infrastructure. To disseminate this information, the government should establish security standards different from those applicable to defense contractors to determine who may hold clearances.
Topic:
Security, Cybersecurity, Information Age, and Private Sector
Political Geography:
United States and North America

322. Protecting Electoral Integrity in Cyberspace: The US Midterm Elections in 2018

Author:
Samuele Dominioni
Publication Date:
11-2018
Content Type:
Commentary and Analysis
Institution:
Italian Institute for International Political Studies (ISPI)
Abstract:
Elections, when free and fair, are regular and legitimate occasions to vie for power in a democratic country. In order to compete and to be elected, political competitors, usually organized into parties or movements, must follow the democratic principles that rule electoral competitions. There are numerous international regulations that set worldwide standards for democratic elections, which have been adopted by many countries and that constitute the concept of electoral integrity.[1] This refers not only to management of the so-called e-day (election day), but also includes many provisions that must be respected throughout the electoral cycle.
Topic:
Elections, Cybersecurity, and Domestic politics
Political Geography:
North America and United States of America

323. "Mind Hacking": Information Warfare in the Cyber Age

Author:
Fabio Rugge
Publication Date:
01-2018
Content Type:
Commentary and Analysis
Institution:
Italian Institute for International Political Studies (ISPI)
Abstract:
The good old days of cold war disinformatia are gone. Social media are increasingly relevant in shaping the public opinion, but they are just “eco chambers”. Foreign actors with malicious intent can easily exploit this intrinsic feature of social media manipulating online information in order to influence the public opinion. Moreover, cyberspace allows a large degree of anonymity, behind which it is easy to automate propaganda, and cyber attacks may be leveraged to exfiltrate and expose sensitive content or to gain information dominance during military operations, increasing the strategic relevance of the “information space”. Operations in this domain are central in Russia’s security strategic thinking, featuring predominantly in its “New Generation War” military doctrine. But the ongoing militarization of cyberspace risks having dangerous spillovers in the conventional domain. What can we do in order to protect our open democracies while preserving a global, free and resilient Internet? The answer is multi-faceted, in as much as CEIW (cyber-enabled information warfare) is an emerging asymmetric threat that forces us to innovate our security approach in many ways.
Topic:
Security, Science and Technology, Cybersecurity, and Social Media
Political Geography:
Russia and Global Focus

324. Cyber Deterrence in Singapore: Framework & Recommendations

Author:
Eugene Eg Tan
Publication Date:
04-2018
Content Type:
Working Paper
Institution:
Centre for Non-Traditional Security Studies, S. Rajaratnam School of International Studies
Abstract:
As a small state, Singapore’s ability to create deterrence against cyberattacks is very limited. There is limited value in pursuing classic deterrence through denial and punishment because: (i) technology is relatively cheap and widely available; (ii) there is difficulty in accurately attributing blame; and (iii) there is difficulty in identifying and punishing attackers. If there is no detection or ability to punish, Singapore’s credibility suffers. The report suggests six ways that Singapore can improve its cyberattack deterrence: 1. Develop a response mechanism to guide deterrence 2. Create resilient systems 3. Share collective responsibility in cybersecurity 4. Increase capabilities through the improvement of penetration detection 5. Create norms with enforcement capabilities 6. Strengthen international law enforcement, cooperation, and legislation It is also not feasible to measure deterrence in cyberspace the same way as nuclear deterrence, where a no-attack scenario denotes that deterrence is successful. Rather, deterrence should be seen as a mitigating effort that leads potential attackers to believe it is not in their best interest to attack. These efforts at deterrence can be further enhanced by improving the accuracy of attribution, the detection of cyber incidents regardless of size, and ensuring that timely action is taken against cyberattackers.
Topic:
Non State Actors, Law Enforcement, Cybersecurity, and Deterrence
Political Geography:
Asia and Singapore

325. Is Use of Cyber-Based Technology in Humanitarian Operations Leading to the Reduction of Humanitarian Independence?

Author:
Martin Stanley Searle
Publication Date:
06-2018
Content Type:
Working Paper
Institution:
Centre for Non-Traditional Security Studies, S. Rajaratnam School of International Studies
Abstract:
Technologies of the Fourth Industrial Revolution (4IR) are being tested and adopted at a significant rate in humanitarian emergency response. However, the crossing of physical, biological, and cyber domains that characterises these technologies threatens the independence of humanitarian organisations. This is occurring in an environment in which the value and purpose of independence is already seriously questioned, both in practice, and in principle. This paper argues that the loss of independence stems from two related trends. First, several 4IR technologies are improving the capacity of humanitarian organisations to gather, synthesise, and analyse data, resulting in the production of information of increasingly strategic, political or military value. Second, the cyber component of these technologies simultaneously renders that information more vulnerable to unauthorised access by third parties with relevant political, military or economic agendas. This parallels the “capability/ vulnerability paradox” identified in literature discussing cybersecurity in relation to the military or so-called “smart cities”. In conflict and disaster settings, this paradox increases the likelihood of humanitarian actors functioning as appendages of other organisations. This loss of independence potentially has operational implications relating to access, and material impact on the ongoing debate around the importance of independence in humanitarian work.
Topic:
Science and Technology, Cybersecurity, Humanitarian Intervention, and Independence
Political Geography:
Global Focus

326. Rethinking Cybersecurity Strategy, Mass Effect, and States

Author:
James Andrew Lewis
Publication Date:
01-2018
Content Type:
Working Paper
Institution:
Center for Strategic and International Studies (CSIS)
Abstract:
Despite all the attention, cyberspace is far from secure. Why this is so reflects conceptual weaknesses as much as imperfect technologies. Two questions highlight shortcomings in the discussion of cybersecurity. The first is why, after more than two decades, we have not seen anything like a cyber Pearl Harbor, cyber 9/11, or cyber catastrophe, despite constant warnings. The second is why, despite the increasing quantity of recommendations, there has been so little improvement, even when these recommendations are implemented. These questions share an answer: the concepts underlying cybersecurity are an aggregation of ideas conceived in a different time, based on millennial expectations about governance and international security. Similarly, the internet of the 1990s has become “cyber,” a portmanteau term that encompassed the broad range of global economic, political, and military activities transformed by the revolution created by digital technologies. If our perceptions of the nature of cybersecurity are skewed, so are our defenses. This report examines the accuracy of our perceptions of cybersecurity. It attempts to embed the problem of cyber attack (not crime or espionage) in the context of larger strategic calculations and effects. It argues that policies and perceptions of cybersecurity are determined by factors external to cyberspace, such as political trends affecting relations among states, by thinking on the role of government, and by public attitudes toward risk. We can begin to approach the problem of cybersecurity by defining attack. While public usage calls every malicious action in cyberspace an attack, it is more accurate to define attacks as those actions using cyber techniques or tools for violence or coercion to achieve political effect. This places espionage and crime in a separate discussion (while noting that some states use crime for political ends and rampant espionage creates a deep sense of concern among states). Cyber attack does not threaten crippling surprise or existential risk. This means that the incentives for improvement that might motivate governments and companies are, in fact, much smaller than we assume. Nor is cyber attack random and unpredictable. It reflects national policies for coercion and crime. Grounding policy in a more objective appreciation of risk and intent is a first step toward better security.
Topic:
Science and Technology, Governance, Cybersecurity, and Digital Economy
Political Geography:
Global Focus

327. A Strategy for Cybersecurity Governance in Brazil

Author:
Louise Marie Hurel and Luisa Cruz Lobato
Publication Date:
09-2018
Content Type:
Special Report
Institution:
Igarapé Institute
Abstract:
This study explores the institutionalization of the cybersecurity agenda in Brazil and seeks to identify opportunities for multi-stakeholder cooperation. It analyzes the key moments and processes that marked the development of the country’s current cybersecurity architecture, highlighting the tensions which arose with the introduction of the agenda as a national security priority. The description of the cybersecurity governance ecosystem in Brazil opens up new avenues for the identification of solid opportunities for cooperation between different sectors inherently involved in the construction of this agenda — as much in the technical field (cryptography and incident response) as in the elaboration of legislation, policies, and awareness campaigns.
Topic:
Security, National Security, Regional Cooperation, Governance, Cybersecurity, and Legislation
Political Geography:
Brazil and Latin America

328. Grooming Tomorrow’s National Security Leaders: State’s Partnership with the National Defense University

Author:
Michael A. Hammer
Publication Date:
03-2018
Content Type:
Journal Article
Journal:
The Ambassadors Review
Institution:
Council of American Ambassadors
Abstract:
America’s ability to lead in the world depends on a strong economy at home, unparalleled military might and a skilled diplomatic corps. And for the United States to remain the preeminent global power, it is essential that we educate and prepare the next generation of national security leaders: —leaders who are strategic in every sense: creative, innovative, technologically savvy, flexible, inclusive, ethical and resilient; —leaders who commit to life-long learning to stay current and who venture to look beyond the horizon; —leaders who are voracious consumers of information and effective communicators; —humble leaders who always seek to do better than the status quo. The new National Security Strategy recognizes the critical role of the State Department’s proclaiming that “across the competitive landscape, America’s diplomats are our forward-deployed political capability, advancing and defending America’s interests abroad.” Therefore, to remain relevant and in order to continue to succeed, State’s finest need professional development. Whether to lead peace negotiations or trade talks, combat terrorism or cyberattacks, promote democratic values or defend human rights, engage media or youth, we must ensure that rising officers are knowledgeable of history, well-versed on theory, fluent in current practice and in-tune with future trends. But as they are caught in high-stress jobs with little time to reflect, where should our best talent go to grow their skills and enhance their ability to think critically and lead effectively? The answer is right here in Washington D.C., the National Defense University (NDU) at Fort McNair.
Topic:
National Security, Science and Technology, Military Strategy, and Cybersecurity
Political Geography:
United States and North America

329. The Increasing Importance of Hybrid Politics in Europe: Cyber Power Is Changing the Nature of Politics

Author:
Gabriel Cederberg and Jarno limnéll
Publication Date:
03-2018
Content Type:
Commentary and Analysis
Institution:
The Geneva Centre for Security Policy
Abstract:
This paper examines the concepts of cyber politics and cyber-enabled hybrid warfare. It pays specific attention to the vulnerabilities of modern Western societies from a strategic-political perspective. The paper concludes that instead of cyber politics as such, a new kind of politics is needed – hybrid politics. Hybrid politics will be presented as a potentially winning concept for European security. Key Points: Issues related to cyberspace and its uses have risen to the highest levels of international politics, creating an area and discipline known as cyber politics. Protecting critical infrastructure and services from cyber threats is a complicated matter. The cyber domain is a central part of modern hybrid warfare, and malicious cyber-technical and cyber-psychological threats have both increased. Hybrid politics is a useful concept to describe both the importance of a holistic approach and the nature of high politics in the modern security reality. Hybrid politics is constantly changing the modern political process. The European Union (EU) should primarily understand hybrid politics as a potentially “winning concept” and take active steps to implement and sustain this understanding.
Topic:
Security, Science and Technology, War, and Cybersecurity
Political Geography:
Europe and European Union

330. Cyber-Threats to Strategic Networks: Challenges for Pakistan’s Security

Author:
Rizwan Naseer and Musarat Amin
Publication Date:
01-2018
Content Type:
Journal Article
Journal:
South Asian Studies
Institution:
Department of Political Science, University of the Punjab
Abstract:
Nuclear weapons revolutionized security affairs after Hiroshima and Nagasaki annihilation. States went nuclear eventually after the United States, Russia, UK, France and China but India and Pakistan joined that exclusive club too in 1974 and 1998 respectively. Nuclear weapons a source of security motivated Israel, Iran and North Korea too. Another development that started undermining nuclear security itself was cyber warfare. Pakistan being developing country in the list of Global Innovation Index finds it hard to catch up with other leading nations in science and technology. Leading countries including US, Russia, China, UK, Germany, France etc are not safe from cyber-threats they face then how Pakistan can be considered safe against cybersabotaging to its strategic weapons. Pakistan‟s nuclear security though has gained better levels but cyber security is the field that requires comprehensive strategy to establish cyber nuclear doctrine. China being reliable strategic partner can be a resourceful partner unlike other great powers. This strategy would add much security to Pakistan‟s already existing nuclear security and would open new avenues of cooperation with international organizations to gain next milestone of Nuclear Suppliers‟ Group membership.
Topic:
Nuclear Weapons, Science and Technology, Nuclear Power, Cybersecurity, Internet, and Grand Strategy
Political Geography:
Pakistan, South Asia, India, and Punjab