Search

Begin New Search Topic Cybersecurity

331. Policing the Digital Sphere: The Impact of Palestine’s Cybercrime Legislation

Author:
Chiara Ayad
Publication Date:
10-2018
Content Type:
Working Paper
Institution:
Arab Reform Initiative (ARI)
Abstract:
This paper lays out fundamental issues about transparency in legislative processes and government accountability in establishing legal frameworks for the protection of citizens in the Palestinian context. It addresses how a protective citizen-centered cyber-security law that seeks to improve citizens’ digital security can become a tool for quashing civil dissent and silencing political opposition. Certainly, the Israeli government’s practices of mass surveillance and control of ICT infrastructure limit the protective capacity of Palestinian cybersecurity measures. However, this paper will not focus on the role of the Israeli government but rather on the role the Palestinian government has had in increasing its citizens fear of surveillance and insecurity on digital platforms. By examining the Palestinian Authority’s first cybercrime legislation, Law no. (16), the paper will discuss how such measures have backlashed, negatively impacting civil liberties and the general political climate. It will also discuss the role civil society organizations had in pressuring the government to issue new cybercrime legislation, law no. (10).
Topic:
Cybersecurity, Surveillance, Accountability, and Transparency
Political Geography:
Middle East, Israel, Palestine, Gaza, and West Bank

332. Classifying Cyber Events: A Proposed Taxonomy

Author:
Charles Harry and Nancy Gallagher
Publication Date:
02-2018
Content Type:
Working Paper
Institution:
Center for International and Security Studies at Maryland (CISSM)
Abstract:
Publicity surrounding the threat of cyber-attacks continues to grow, yet immature classification methods for these events prevent technical staff, organizational leaders, and policy makers from engaging in meaningful and nuanced conversations about the risk to their organizations or critical infrastructure. This paper provides a taxonomy of cyber events that is used to analyze over 2,431 publicized cyber events from 2014-2016 by industrial sector. Industrial sectors vary in the scale of events they are subjected to, the distribution between exploitive and disruptive event types, and the method by which data is stolen or organizational operations are disrupted. The number, distribution, and mix of cyber event types highlight significant differences by sector, demonstrating that strategies may vary based on deeper understandings of the threat environment faced across industries. EXPLORE:
Topic:
Security, Science and Technology, and Cybersecurity
Political Geography:
United States, Washington, and D.C.

333. Building Confidence in the Cybersphere: A Path to Multilateral Progress

Author:
Nancy Gallagher and Theresa Hitchens
Publication Date:
03-2018
Content Type:
Working Paper
Institution:
Center for International and Security Studies at Maryland (CISSM)
Abstract:
As use of the Internet has become critical to global economic development and international security, there is near-unanimous agreement on the need for more international cooperation to increase stability and security in cyberspace. Several multilateral initiatives over the last five years have begun to spell out cooperative measures, norms of behavior, and transparency and confidence-building measures (TCBMs) that could help improve mutual cybersecurity. These efforts have been painstakingly slow, and some have stalled due to competing interests. Nonetheless, a United Nations (UN) Group of Governmental Experts (GGE) and the Organization for Cooperation and Security in Europe (OSCE) have achieved some high-level agreement on principles, norms, and “rules of the road” for national Internet activities and transnational cyber interactions. Their agreements include commitments to share more information, improve national protective capacities, cooperate on incident response, and restrain certain destabilizing state practices. Voluntary international agreements are worth little, unless states implement their commitments. So far, implementation has been crippled by vague language, national security considerations, complex relations between public and private actors in cyberspace, and privacy concerns. This is particularly true regarding the upfront sharing of information on threats and the willingness of participants to cooperate on incident investigations, including identifying perpetrators. With multilateral forums struggling to find a way forward with norm-setting and implementation, alternate pathways are needed to protect and build on what has been accomplished so far. Different strategies can help advance implementation of measures in the UN and OSCE agreements. Some commitments, such as establishing and sharing information about national points of contact, are best handled unilaterally or through bilateral or regional inter-governmental cooperation. Other objectives, such as protecting the core architecture and functions of the Internet that support trans-border critical infrastructure and underpin the global financial system, require a multi-stakeholder approach that includes not only governments but also private sector service providers, academic experts, and nongovernmental organizations. This paper compares what the GGE and OSCE norm-building processes have achieved so far and what disagreements have impeded these efforts. It identifies several priorities for cooperation identified by participants in both forums. It also proposes three practical projects related to these priorities that members of regional or global organizations might be able to work on together despite political tensions and philosophical disputes. The first would help state and non-state actors share information and communicate about various types of cybersecurity threats using a flexible and intuitive effects-based taxonomy to categorize cyber activity. The second would develop a more sophisticated way for state and non-state actors to assess the risks of different types of cyber incidents and the potential benefits of cooperation. The third would identify aspects of the Internet that might be considered the core of a public utility, worthy of special protection in their own right and for their support of trans-border critical infrastructure.
Topic:
International Cooperation, United Nations, Infrastructure, and Cybersecurity
Political Geography:
United States and Europe

334. Confronting an “Axis of Cyber”? China, Iran, North Korea, Russia in Cyberspace

Author:
Fabio Rugge
Publication Date:
10-2018
Content Type:
Special Report
Institution:
Italian Institute for International Political Studies (ISPI)
Abstract:
The year 2018 marks the thirtieth anniversary of the Morris worm, the first malware ever released in the Internet. Thirty years later, technological innovations have dramatically increased the importance of the Internet in virtually every economic, social and political endeavor, tremendously expanding the potential “surface” of cyber attacks. The cyber domain makes it possible to gather privileged information, disrupt industrial processes, create havoc by targeting, for instance, ICT supporting critical infrastructures, and to launch cyber-enabled information warfare campaigns against largely unaware foreign target audiences. Cyberspace, in sum, allows states to achieve strategic results with campaigns that fall below the threshold of the “use of force”, while offering an unprecedented level of plausible deniability, as the real perpetrator of a cyber attack is always difficult to identify with certainty. And yet, this is only the beginning: we are in the midst of a digital revolution. By 2025, with the development of the Internet of Things (IoT), the cyber domain will connect more than 75 billion devices, many of which will control key functions of our daily lives and most of our critical infrastructures.
Topic:
International Affairs and Cybersecurity
Political Geography:
Global Focus

335. Missing Figures: The Cybersecurity Gender Gap

Author:
Spencer Beall
Publication Date:
02-2018
Content Type:
Working Paper
Institution:
Women In International Security (WIIS)
Abstract:
While the cybersecurity industry will require approximately six million workers to meet its projected job demand by 2019, many positions will remain unfilled without more female cybersecurity professionals. Currently, women comprise only 11 percent of global cybersecurity professionals. Women’s underrepresentation in cybersecurity is not just an economic workplace issue, but also has a profound impact on the type of technologies being developed and hence impacts everyone in the digital age. The report will explore some of the main barriers that impede women’s entry, professional advancement, and retention in cybersecurity, including the pervasive gender discrimination in technology professions. Next, I will examine three core reasons why it is essential to get more women in cybersecurity, namely (1) to maximize innovation potential; (2)to expand usability of digital products to meet the needs of all consumers; and (3) to strengthen the global economy by fulfilling the cybersecurity industry’s rapidly growing job demand. Recommendations on how to dismantle the gender gap in cybersecurity and how to create in the digital age a global workforce that is safer, more efficient, and more prosperous are presented.
Topic:
Gender Issues, International Security, Women, and Cybersecurity
Political Geography:
Global Focus

336. EU cyber partnerships: Assessing the EU strategic partnerships with third countries in the cyber domain

Author:
Thomas Renard
Publication Date:
02-2018
Content Type:
Policy Brief
Institution:
EGMONT - The Royal Institute for International Relations
Abstract:
The European Union is increasingly active on cyber issues internationally, guided by its various foreign policy documents and strategies, including its 2013 Cybersecurity Strategy and the 2015 Council conclusions on cyber-diplomacy. In line with these documents, the EU has deepened its bilateral ties with a number of key countries, resulting in a network of cyber partnerships. This article explores these partnerships in depth. It seeks to explain the different types of purposes that they fulfil, and the various mechanisms that underpin them, based on an ambitious mapping exercise. In essence, it is argued that the EU’s cyber partnerships aim not only for bilateral cooperation, but also for ‘reflexive’ results (whereby the EU aim to develop its cyber and diplomatic agency) and ‘structural’ results (whereby bilateral partnerships aim to strengthen the multilateral fabric and global internet governance). Once assessed against these multiple and intertwined purposes, these cyber partnerships appear more useful than meets the eye.
Topic:
International Security and Cybersecurity
Political Geography:
Europe

337. Cyber-diplomacy: the making of an international society in the digital age

Author:
Andre Barrinha
Publication Date:
01-2018
Content Type:
Special Report
Institution:
EGMONT - The Royal Institute for International Relations
Abstract:
Cyberspace has become a major locus and focus of international relations. Most global powers have now streamlined cyber issues into their foreign policies, adopting cyber strategies, and appointing designated diplomats to pursue these strategic objectives. This article proposes to explore the concept of cyber-diplomacy, by analysing its evolution and linking it to the broader discussions of diplomacy as a fundamental institution of international society, as defined by the English School of International Relations. It argues that cyber-diplomacy is an emerging international practice that is attempting to construct a cyber-international society, bridging the national interests of states with world society dynamics – the predominant realm in which cyberspace has evolved in the last four decades.
Topic:
International Affairs and Cybersecurity
Political Geography:
Global Focus

338. The threat of cyber attacks in urban conurbations

Author:
Marta Bachor
Publication Date:
09-2018
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This paper investigates the threat of cyber attacks in urban conurbations. The first section attempts to define cyberspace and to identify potential objects of attack in the city. The second section analyses the history of past cyber attacks, and the final section gives an overview of activities performed by states and organisations with a view to countering and eliminating cyber threats.
Topic:
Security, Cybersecurity, Urban, and Non-Traditional Threats
Political Geography:
Global Focus

339. US Foreign Policy Towards Central Asia

Author:
Lance Alred, Sean Michael Kelly, Madina Rubly, Yuliya Shokh, Mariam Tsitsishvili, and Richard Weitz
Publication Date:
10-2017
Content Type:
Journal Article
Journal:
Revista UNISCI/UNISCI Journal
Institution:
Unidad de investigación sobre seguridad y cooperación (UNISCI)
Abstract:
U.S. policy faces numerous challenges in Central Asia, such as the decreasing U.S. military and economic resources in the region; Russian and Chinese hostility to a long-term U.S. military presence in Eurasia; restrictions on religious and other freedoms due partly to counterterrorism concerns; limited U.S. involvement in the region compared to other external players (like Japan as well as Russia and China); an undeveloped U.S. policy regarding regional multinational institutions; and the indifference and ignorance of U.S. business toward regional commercial opportunities beyond the energy sector. However, advocates of “America First” in the Trump administration do not see these threats as sufficiently serious to garner U.S. military intervention beyond occasional training, equipping, and intelligence sharing. Terrorism, drug trafficking, economic isolation, and human rights restrictions in Central Asia do not present an immediate existential threat to the United States, sowing ambivalence over the future of U.S. foreign policy in the region.
Topic:
Terrorism, Cybersecurity, Trafficking, and Donald Trump
Political Geography:
Russia, China, Central Asia, and United States of America

340. Why Cyber Operations Do Not Always Favor the Offense

Author:
Rebecca Slayton
Publication Date:
02-2017
Content Type:
Policy Brief
Institution:
Belfer Center for Science and International Affairs, Harvard University
Abstract:
Bottom Lines: Creating unnecessary vulnerabilities. Making offensive cyber operations a national priority can increase instabilities in international relations and worsen national vulnerabilities to attack. But because the skills needed for offense and defense are similar, military offensive readiness can be maintained by focusing on defensive operations that make the world safer, rather than on offensive operations. Managing complexity. The ease of both offense and defense increases as organizational skills and capability in managing complex technology improve; it declines as the complexity of cyber operations rises. What appears to be offensive advantage is primarily a result of the offense’s relatively simple goals and the defense’s poor management. Assessing kinetic effects. It is often more expensive for the offense to achieve kinetic effects—for instance, sabotaging machinery—than for the defense to prevent them. An empirical analysis of the Stuxnet cyberattacks on Iran’s nuclear enrichment facilities shows that Stuxnet likely cost the offense more than the defense and was relatively ineffective.
Topic:
International Relations, Security, Foreign Policy, Defense Policy, International Security, Nuclear Power, and Cybersecurity
Political Geography:
Middle East and North America