Search

Begin New Search Topic Cybersecurity

341. Honing Cyber Attribution

Author:
Justin Key Canfil
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Concerns about state-directed cyber intrusions have grown increasingly prevalent in recent years. The idea that state principals can obfuscate their involvement in such attacks by delegating operational tasks to non-state agents poses a particularly significant challenge to international enforcement and remedies. Gaps in international law, coupled with obstacles to detection in such cases, may make it more difficult to bring sponsoring states to justice. This paper offers a roadmap for assessing the propensity of states to delegate to non-state actors and correct for false positives in standard (typically more technical) cyber attack attribution methods. I conclude that the conditions under which attacks are likely to have been backed by sponsoring states occupy a much narrower window than conventional wisdom suggests, and that the universe of transgressors can be identified when standard indicators overlap with specific conditions.
Topic:
Security, Elections, Cybersecurity, and Election Interference
Political Geography:
Russia, United States, Europe, and North Am

342. Is Cyber Defense Possible?

Author:
Sorin Ducaru
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Cyber issues are rapidly growing in importance to defense alliances. The Journal of International Affairs talked to Ambassador Sorin Ducaru, NATO’s assistant secretary general for emerging security challenges, about NATO’s efforts to improve its cyber defenses against emerging threats.
Topic:
NATO, Diplomacy, International Cooperation, Military Strategy, and Cybersecurity
Political Geography:
United States, Europe, North Atlantic, and North America

343. How the Next U.S. President Can Contain China in Cyberspace

Author:
Adam Segal and Rob Knake
Publication Date:
01-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
When transition planning gets underway in earnest this fall, one of the hardest memos to write will be the outbrief from the current National Security Council (NSC) team on what to do about China’s ongoing campaign of cyber espionage targeting the intellectual property of U.S. companies. While long a focus of both the president’s cyber and China teams, there is little chance that in the coming months the issue is going to be brought to any type of resolution. Instead, the next president will inherit a partially implemented plan that has produced positive results in the short term, but its long-term sustainability remains uncertain. He or she would be wise to follow the playbook left by the Obama administration, with a redoubled focus on the investigation and prosecution of cybercrime. Critics of the administration on this topic generally fall into two camps. One, summed up nicely by the title of a book by Peter Kiernan, is the Becoming China’s Bitch camp.[1] In this view, the United States is so dependent on China that the Chinese can do what they want and there is little Americans can do to stop them. They hold U.S. debt, Americans can’t manufacture anything without them, Chinese students are leaps and bounds smarter than American students, and there are millions more of them studying science and math. The Chinese are strategic, looking around the corner of history and shaping it in their interests. They are playing three-dimensional chess and President Obama has been playing checkers. They put the blame on what they would characterize as Obama’s willingness to “lead from behind.” They then quote Sun Tzu, reference Unrestricted Warfare, and drop the mic.[2] The second view is the Coming Collapse of China camp.[3] In this view, despite an aggressive anti-corruption campaign and a more assertive foreign policy, China is weak, wounded, and dangerous. The Communist Party made a deal with the devil, offering economic growth in exchange for loyalty to the regime. Now, the leadership can’t keep up with their end of the bargain. Growth is slowing, and at a faster pace than the official figures acknowledge. Over investment continues and economic reforms have stalled. Air and water pollution are a drag on the economy and a threat to citizen health. Paranoid about any dissent, the party has tightened restrictions on the Internet and the media and arrested feminists, civil rights activists, and lawyers. One spark could start protests that lead to widespread instability and perhaps the end of Communist Party rule. What’s interesting is that these divergent views of China’s place in the world similarly predict there is little chance that China will cease stealing intellectual property. In the first view, China holds all the cards, and there is simply nothing the United States can do to impose costs and stop the hacking of companies. If China is desperate and dangerous, then it can’t stop stealing technology and business secrets because they are needed to fuel the economy.
Topic:
Science and Technology, Intellectual Property/Copyright, Cybersecurity, and Conflict
Political Geography:
United States, China, Asia, and North America

344. Toward Practical Cyber Counter Deception

Author:
Christopher Porter
Publication Date:
02-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Nation-states increasingly engage in strategic deception in cyberspace, frustrating traditional counter deception approaches. This paper evaluates and critiques the philosophical underpinnings and practical implications of existing military-political counter deception and computer forensic approaches. Analysts can better detect and expose strategic deception campaigns in cyberspace by focusing on the size and organizational strength threat actors need to conduct the operations.
Topic:
Security, Science and Technology, Military Strategy, and Cybersecurity
Political Geography:
Global Focus

345. Attribution of Malicious Cyber Incidents: From Soup to Nuts

Author:
Herbert Lin
Publication Date:
03-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Attribution of malicious cyber activities is a deep issue about which confusion and disquiet can be found in abundance. Attribution has many aspects—technical, political, legal, policy, and so on. A number of well-researched and executed papers cover one or more of these aspects, but integration of these aspects is usually left as an exercise for the analyst. This paper distinguishes between attribution of malicious cyber activity to a machine, to a specific perpetrator (often a human being pressing the keys) initiating that activity, and to an adversary that is deemed ultimately responsible for that activity. Which type of attribution is relevant depends on the goals of the relevant decisionmaker. Further, attribution is a multi-dimensional issue that draws on all sources of information available, including technical forensics, human intelligence, signals intelligence, history, and geopolitics, among others. From the perspective of the victim, some degree of factual uncertainty attaches to any of these types of attribution, although the last type—attribution to an ultimately responsible party—also implicates to a very large degree legal, policy, and political questions. But from the perspective of the adversary, the ability to conceal its identity from the victim with high confidence is also uncertain. It is the very existence of such risk that underpins the possibility of deterring hostile actions in cyberspace.
Topic:
Security, Intelligence, Science and Technology, and Cybersecurity
Political Geography:
Global Focus

346. A Non-State Strategy for Saving Cyberspace

Author:
Jason Healey
Publication Date:
03-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
America’s future, and that of other nations and peoples, will be most secure in the long term with an emphasis on future prosperity unlocked by the Internet. The Internet may have surpassed Johannes Gutenberg’s printing press as history’s most transformative invention because of how it has spawned parallel and simultaneous revolutions across other technologies. By making information so cheap to produce, compute, and share, the Internet enabled rapid advances in technologies as far afield as manufacturing and genetics. The problem is that there is no guarantee the future of the Internet, and the larger entirety of cyberspace, will be as rosy as its past. It is possible, even likely, that the Internet will not remain as resilient, free, secure, and awesome for future generations as it has been for ours. Imagine that twenty years after the invention of the printing press, the pope and the princes of Europe—in fact, anyone who had some basic skills and desire to do so—had the ability to determine exactly what was being printed, exactly who was printing it, and exactly to whom they were sending it. Worrying about intellectual property theft, privacy, or civil rights (had those concepts existed) would have missed the bigger picture. With no trust in the underlying communication medium, the future of Europe and the future of humanity would have been profoundly changed—not just for five years, but for 500. If the printing press was so easily compromised as computers are today, could there even have been a Renaissance or an Enlightenment? This amazing transformative technology, the Internet, is unsustainable unless we make sweeping changes. We are all becoming absolutely dependent on an unknowably complex system where threats are growing far faster than the Internet’s own defenses and resilience.
Topic:
Security, Science and Technology, Cybersecurity, and Internet
Political Geography:
Global Focus

347. The Last Straw: Responding to Russia’s Anti-Western Aggression

Author:
Mieke Eoyang, Evelyn Farkas, Ben Freeman, and Gary Ashcroft
Publication Date:
06-2017
Content Type:
Working Paper
Institution:
Third Way
Abstract:
In this paper, we argue that Russia’s interference in the 2016 presidential election is just one part of a wide-ranging effort by Moscow to undermine confidence in democracy and the rule of law throughout countries in the West. Russia has engaged in this effort because, in both economic and demographic terms, it is a declining power – the only way it can “enhance” its power is by weakening its perceived adversaries. Because Russia’s aim is to erode the health of Western nations, we argue it is time for America and its allies to employ a comprehensive, non-kinetic response to contain Russia.
Topic:
Security, Elections, Cybersecurity, Democracy, Foreign Interference, and Election Interference
Political Geography:
Russia, United States, Europe, and North America

348. Chinese Investment in Critical U.S. Technology: Risks to U.S. Security Interests

Author:
Council on Foreign Relations
Publication Date:
10-2017
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
Chinese firms, both private and state-owned, have in recent years invested billions of dollars in the U.S. technology industry, raising concerns that a powerful rival has gained or could soon gain access to sensitive and, in some cases, critical technologies that underpin American military superiority and economic might. At the workshop entitled “Chinese Investment in Critical U.S. Technology: Risks to U.S. Security Interests,” held in San Francisco, on July 18, 2017, CFR convened nearly thirty current and former government officials, academics, bankers, investors, and corporate executives to explore whether the large and growing early-stage Chinese investment in critical U.S. technology poses a threat to U.S. national security, and, if so, to outline policies that mitigate the risks of unbridled Chinese investment and to bolster U.S. competitiveness.
Topic:
Security, Science and Technology, Foreign Direct Investment, and Cybersecurity
Political Geography:
United States, China, Asia, and North America

349. Countering Russian Information Operations in the Age of Social Media

Author:
Keir Giles
Publication Date:
11-2017
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
As investigations into attempts to influence the 2016 U.S. presidential election continue, more aspects of Russia’s approach to information warfare are coming to light. A steady stream of new disclosures is revealing a complex blend of hacking, public disclosures of private emails, and use of bots, trolls, and targeted advertising on social media designed to interfere in political processes and heighten societal tensions. Moscow’s hostile actions are driven by the belief that Russia is already in a state of conflict with the West, led by the United States, and that the internet is a domain for waging this conflict. From the earliest stages of the internet’s development, Russia has held a starkly different view from the West of its benefits and its potential. Russia’s national security establishment immediately saw connectivity as a threat and a potential weapon—and eventually as one that could help achieve regime change and deprive a country of its sovereignty—rather than as an enabler of economic development. The organization of Russia’s information-warfare capabilities, which include cyber operators, media outlets, and false flag entities, is shrouded in secrecy. In the West, generally only the intelligence community has a clear picture of how Russian capabilities are directed. Barring the sudden appearance of a Russian counterpart to Edward Snowden, the only view into Russia’s information toolbox is provided by cybersecurity companies and criminal prosecutions. The picture is further muddied because the Russian government keeps many of its cyberwarfare actors at arm’s length by employing contractors and former criminals through middlemen, giving Moscow a degree of deniability if caught. Nevertheless, both Western governments and private industry can take steps to mitigate Russian influence operations. Western governments should swiftly and decisively denounce Russian information activities as soon as they are identified, and their counterintelligence agencies should identify quantitative means to measure the effectiveness of Russia’s methods. Social media companies should more aggressively police their platforms for malicious state-sponsored content, and they should work with news organizations to promote verified and fact-checked content on their platforms.
Topic:
Cybersecurity, Political stability, Disinformation, and Election Interference
Political Geography:
Russia, United States, Europe, and North America

350. Natural and Quasi-Natural Experiments to Evaluate Cybersecurity Policies

Author:
Benjamin Dean
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Over the past decade, numerous countries around the world have developed and implemented national cybersecurity strategies. Yet very few of these strategies have been subject to evaluations. As a result, it is difficult to judge the performance of strategies, the programs that comprise them, and the cost-effectiveness of funds spent. Natural and quasi-natural experiments are a promising set of research methods for the evaluation of cybersecurity programs. This paper provides an overview of the methods used for natural or quasi-natural experiments, recounts past studies in other domains where the methods have been used effectively, and then identifies cybersecurity activities or programs for which these methods might be applied for future evaluations (e.g., computer emergency response teams in the EU, cybersecurity health checks in Australia, and data breach notification laws in the United States).
Topic:
National Security, Science and Technology, Cybersecurity, and Data
Political Geography:
United States and North America