Search

Begin New Search Topic Cybersecurity

61. Security Paradigm in the Age of Mass Surveillance

Author:
Gulshan Majeed and Muhammad Naveed Sial
Publication Date:
07-2023
Content Type:
Journal Article
Journal:
Journal of Political Studies
Institution:
Department of Political Science, University of the Punjab
Abstract:
In this age of social media and technological advancement, people are more connected than ever. People are connected to each other, to their physician, grocery and clothing store. They are shopping online and sending personal and intimate messages. People are being tracked wherever they go simply from their phones. These are the foot prints which they are leaving. The foot prints through CCTV cameras, their social media and their internet searches. Spy agencies use these foot prints for profiling and to keep citizens safe from antisocial elements. There is a draw back of these measures as they cost citizens of their fundamental right of privacy and most importantly, the breach of trust. Analytical approach has been employed to identify the risks involved into mass surveillance and data breach of the citizens. Right activists believe that this data is at risk and it might go into the hands of terrorists, populist far-right or authoritarian governments who in turn might use this data to target political opponents. In this fast-changing environment, national security paradigm is shifting in these recent times.
Topic:
National Security, Cybersecurity, Social Media, Populism, Surveillance, Data, Civil Liberties, and Edward Snowden
Political Geography:
Global Focus

62. The Ethical Character of Russia's Offensive Cyber Operations in Ukraine: Testing the Principle of Double Effect

Author:
Ian A. Clark
Publication Date:
09-2023
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
Cyber weapons have the potential to achieve strategic military aims in a manner that reduces physical harm, but they can also be used to enhance and expand the lethality of conventional weapons and tactics. When designed to collect private data, cyber weapons can facilitate assassination, kidnapping, torture, and other severe violations of human rights and international law. Russia’s invasion of Ukraine is not the first time that cyber weapons have been deployed for military purposes; however, it is likely the first example of cyber warfare tactics being deployed in a sustained and strategically significant manner in the context of conventional war. To assess the ethical character of Russia’s offensive cyber operations against Ukraine, it is helpful to leverage the principle of double effect, which enables a more precise evaluation of the relationship between the intentions that motivate an act and the effects of the act once it has been taken. Drawing on this principle, this article argues that Russia’s offensive cyber operations in Ukraine represent an unjust use of force and proposes ways of enhancing the ethical character of cyber warfare in future conflicts.
Topic:
Cybersecurity, Ethics, Russia-Ukraine War, and Just War
Political Geography:
Russia, Europe, and Ukraine

63. The Nationalization of Cybersecurity: The Potential Effects of the Cyberspace Solarium Commission Report on the Nation’s Critical Infrastructure

Author:
H. Chris Tecklenburg and José de Arimatéia da Cruz
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
The United States is susceptible to cyberattacks. The Cyberspace Solarium Commission Report provides several recommendations to prevent and respond to such attacks. However, many of these recommendations attempt to nationalize cybersecurity. This article presents a historical overview involving the Department of Homeland Security, the Cybersecurity and Infrastructure Security Agency, and the Commerce Clause, which outlines nationalization and its effects. It will note a similar trend for cybersecurity. Finally, the positive and negative consequences of nationalization are presented.
Topic:
Cybersecurity, Homeland Security, Cyberspace, Commerce, Nationalization, and Critical Infrastructure
Political Geography:
North America and United States of America

64. Sovereignty, Cyberspace, and the Emergence of Internet Bubbles

Author:
Eldar Haber and Lev Topor
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Journal of Advanced Military Studies
Institution:
Marine Corps University Press, National Defense University
Abstract:
The cyber domain emerged as a perfect platform for international struggle over power and influence. International powers are actively engaged in cyber proxy warfare due to the relatively low risk of escalation, various enforcement challenges, and the vagueness of international law within this realm. These indirect conflicts might lead some global powers to close or restrict their virtual borders to avoid or reduce the plausibility of cyber proxy warfare or unwanted foreign influence in general. The formation of such restricted networks, articulated in this article as “internet bubbles,” is already shaping within the realm of actors like Russia, China, North Korea, and Iran. The authors argue that liberal democracies like the United States might be at a severe disadvantage to fight against cyber proxy warfare due to legal and constitutional barriers. But at the same time, the emergence of platform governance and self-regulation might be proven as a new force within these proxy wars and reshape its boundaries.
Topic:
Sovereignty, Cybersecurity, Internet, Proxy War, and Cyberspace
Political Geography:
Russia, China, North America, and United States of America

65. What Does the US-China Tech Cold War Mean for the Middle East?

Author:
Alistair Taylor and Mohammed Soliman
Publication Date:
04-2023
Content Type:
Video
Institution:
Middle East Institute (MEI)
Abstract:
On this week's episode Alistair Taylor, MEI's editor-in-chief, is joined by Mohammed Soliman, director of MEI's Strategic Technologies and Cyber Security Program, to discuss the US-China tech Cold War and what it means for the Middle East. At the nexus of great power competition and rapid technological advances in areas like semiconductors and AI, the rivalry between Washington and Beijing is fuelling a longer-term process of economic and technological decoupling. Navigating this growing divide will be a key challenge for regional actors across MENA.
Topic:
Foreign Policy, Science and Technology, Cybersecurity, Economy, and Strategic Competition
Political Geography:
China, Middle East, and United States of America

66. The changing face of Russia’s information war against Ukraine and other democratic countries: Lessons and recommendations. Interview with Professor Sinan Aral

Author:
Sinan Aral
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
Aral: Pre-2020 strategies of misinformation and disinformation have evolved over the last 5 years but they have not been any less intense. In fact, they have potentially been at least as intense and sometimes more intense. The tactics have changed. Before 2020, the western world was not as cognisant or prepared to deal with Russian dis- and misinformation online. And so, Russian tactics were much more overt. In particular, what they would do was use bots and human trolls and sock pockets to spread mis- and disinformation. And bots were a big part of it.3 I think that now what you see more of is the amplification of real voices because those are harder to take down. So instead of putting a false narrative out there, they would do a search for real people creating the narrative they want to promote and then amplify that narrative through reshares, retweets, likes, and amplifications as best as they can. And when the platforms look at that, they say ‘we can’t take this down because the originator of the post is a real human being that we can verify as real, not a Russian spy etc.’
Topic:
Cybersecurity, Social Media, Disinformation, Information Warfare, and Russia-Ukraine War
Political Geography:
Russia, Europe, and Ukraine

67. Managing the financial impact of cybersecurity incidents

Author:
Zsolt Bederna and Tamás Szádeczky
Publication Date:
03-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
The complex relationships of economic actors and the high dependency on information and communication technologies make it necessary for all relevant entities to develop protection. This protection should include preventive and reactive controls in a risk-proportionate manner in relation to the business value protected. We aimed to develop a solution to support cybersecurity-related business decisions with financial analytics. The risk-based approach helps management find the optimum solution with minimal costs, where protection prevents some incidents from occurring, while the risks associated with other incidents are accepted in an informed way. The security industry developed a number of apparatuses to find the optimum security controls that enforced the fiscal aspects, which typically contain solutions used in planning. However, the actual expenditure often differs from the planned budget for several reasons, one of which is the occurrence of security incidents. We used the common methodology toolset for financial analysis (NPV, NFV, risk assessment). We developed novel metrics based on these that can be used in cybersecurity management. Within the framework thus defined, the article discusses the economic context of the effects of incidents involving Meta (previously Facebook) services from 2016 to 2020. This paper introduces the ‘Effect of incidents’ metric to measure the impact of unplanned incidents’ on actual expenditure compared to the planned budget and the ‘Incidence of incident recognition’ metric to measure deviations of an incident’s impact as perceived by owners relative to the effect on the value of the assets. The paper also proves the applicability of those metrics using the example of Meta.
Topic:
Science and Technology, Cybersecurity, Finance, and Economy
Political Geography:
Global Focus

68. Trojan spoofing: A threat to critical infrastructure

Author:
Tegg Westbrook
Publication Date:
06-2023
Content Type:
Journal Article
Journal:
Security and Defence Quarterly
Institution:
War Studies University
Abstract:
This article explores the phenomenon of location spoofing—where the spoofer is able to “teleport” systems in and out of defined locations, either for the purpose of infiltration into no-go zones or for the “teleportation” out of real, defined zones in the physical world. The research relied on a qualitative methodology, utilising academic research findings, media reports, hacker demonstrations, and secondary data from these sources, to situate the spoofing threat in the context of international security. This conceptual, argumentative essay finds that signal spoofing, the methods of which can be followed via online scripts, allows users the ability to overcome geographically defined territorial restrictions. This, as this article finds, allows violent actors to weaponise systems, such as unmanned aerial systems, potentially leading to the escalation of political tensions in extreme but unfortunately ever-frequent episodes. The article concludes that, while Trojan spoofing (in particular) poses a real and an existential threat to international security, it is only a sum-of-all parts in considering other threats to critical functions in society. If geofences are used as a single point of security to protect assets against hostile actors, managers need to be aware of the vulnerability of intrusion and the resulting geopolitical consequences.
Topic:
International Security, Cybersecurity, Information Warfare, Military, GPS, and Deception
Political Geography:
Global Focus

69. Are Non-Governmental Organizations prepared to deal with Cyberthreats?- An analysis of perceptions of cybersecurity capacities among NGOs in Kosovo

Author:
Donika Elshani
Publication Date:
09-2023
Content Type:
Special Report
Institution:
Kosovar Centre for Security Studies (KCSS)
Abstract:
NGOs in Kosovo are increasingly relying on digital tools to conduct their work. From online correspondence via different applications, storing important organizational data on electronic devices and establishing an online presence through social media accounts, they are leveraging technology to streamline processes, improve communication, and engage with stakeholders. However, with the benefits of these digital tools come certain challenges and risks that, if left unaddressed, can undermine the effectiveness and security of NGOs and potentially even threaten their very existence. Malign actors are increasingly using the online sphere to perpetrate malicious activities, including stealing sensitive data, committing financial crimes, spreading falsehoods and hate speech, to name but a few. The aim of this report is to provide a analysis of perceptions of key digital threats and digital capacity-building needs of the non-governmental sector in Kosovo. It seeks to fill the existing data gap by conducting an initial assessment of the key challenges faced by NGOs in terms of digital security and identifying their specific needs for enhancing their digital capacity. The report draws on a quantitative survey conducted among 48 NGOs to assess their cybersecurity landscape. The findings reveal that NGOs in Kosovo face significant challenges in terms of their capacity to identify, mitigate, and respond to cyber threats. The analysis highlights a lack of adequate resources, expertise, and cybersecurity measures within these organizations to effectively tackle potential digital threats in the future.
Topic:
Science and Technology, Cybersecurity, NGOs, and Non-Traditional Threats
Political Geography:
Eastern Europe and Kosovo

70. Kosovo's Take on Cybersecurity

Author:
Vesa Kroci
Publication Date:
08-2023
Content Type:
Policy Brief
Institution:
Kosovar Centre for Security Studies (KCSS)
Abstract:
In 2014, there was a notable surge in cybercrimes in Kosovo. The advancement and widespread adoption of technology during this period brought about a more pronounced occurrence of cyber-related offenses. Fadil Avdyli, the head of the Cybercrime Investigation Sector in the Kosovo Police, reported that eight individuals were apprehended in 2012, eleven in 2013, and seven in 2014. The rising cyberattacks in Kosovo provided an impetus to build a new policy framework dealing with cyber security, resulting with the adoption by the Kosovo government of the National Cyber Security Strategy and Action Plan 2016 – 2019. Program of the Kosovo Government 2021-2025 notes that “cyber security is a growing problem, we will engage in professional capacity building for the prevention of cyber-attacks, completion of the legal framework and modernization of cyber protection equipment”. The Kosovo Security Strategy 2022-2027, puts significant relevance to strengthening cyber security capacities of Kosovo and notes that the government “will invest in the field of cybersecurity, critical infrastructure, innovation and technology and capacity-building”. The strategy also includes the Global Cybersecurity Index as an impact indicator, but Kosovo has not been included. In 2023 Kosovo Assembly adopted Law No. 08/L-173 on Cyber Security, which among others, foresees the establishment of the Cyber Security Agency as well as partially transposes Directive (EU) 2013/40 of the European Parliament and of the Council of 12 August 2013 on attacks against information systems.
Topic:
Security, Crime, Science and Technology, and Cybersecurity
Political Geography:
Eastern Europe and Kosovo