Search

Begin New Search Topic Cybersecurity Political Geography North America

31. Countering Russian Information Operations in the Age of Social Media

Author:
Keir Giles
Publication Date:
11-2017
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
As investigations into attempts to influence the 2016 U.S. presidential election continue, more aspects of Russia’s approach to information warfare are coming to light. A steady stream of new disclosures is revealing a complex blend of hacking, public disclosures of private emails, and use of bots, trolls, and targeted advertising on social media designed to interfere in political processes and heighten societal tensions. Moscow’s hostile actions are driven by the belief that Russia is already in a state of conflict with the West, led by the United States, and that the internet is a domain for waging this conflict. From the earliest stages of the internet’s development, Russia has held a starkly different view from the West of its benefits and its potential. Russia’s national security establishment immediately saw connectivity as a threat and a potential weapon—and eventually as one that could help achieve regime change and deprive a country of its sovereignty—rather than as an enabler of economic development. The organization of Russia’s information-warfare capabilities, which include cyber operators, media outlets, and false flag entities, is shrouded in secrecy. In the West, generally only the intelligence community has a clear picture of how Russian capabilities are directed. Barring the sudden appearance of a Russian counterpart to Edward Snowden, the only view into Russia’s information toolbox is provided by cybersecurity companies and criminal prosecutions. The picture is further muddied because the Russian government keeps many of its cyberwarfare actors at arm’s length by employing contractors and former criminals through middlemen, giving Moscow a degree of deniability if caught. Nevertheless, both Western governments and private industry can take steps to mitigate Russian influence operations. Western governments should swiftly and decisively denounce Russian information activities as soon as they are identified, and their counterintelligence agencies should identify quantitative means to measure the effectiveness of Russia’s methods. Social media companies should more aggressively police their platforms for malicious state-sponsored content, and they should work with news organizations to promote verified and fact-checked content on their platforms.
Topic:
Cybersecurity, Political stability, Disinformation, and Election Interference
Political Geography:
Russia, United States, Europe, and North America

32. Natural and Quasi-Natural Experiments to Evaluate Cybersecurity Policies

Author:
Benjamin Dean
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Over the past decade, numerous countries around the world have developed and implemented national cybersecurity strategies. Yet very few of these strategies have been subject to evaluations. As a result, it is difficult to judge the performance of strategies, the programs that comprise them, and the cost-effectiveness of funds spent. Natural and quasi-natural experiments are a promising set of research methods for the evaluation of cybersecurity programs. This paper provides an overview of the methods used for natural or quasi-natural experiments, recounts past studies in other domains where the methods have been used effectively, and then identifies cybersecurity activities or programs for which these methods might be applied for future evaluations (e.g., computer emergency response teams in the EU, cybersecurity health checks in Australia, and data breach notification laws in the United States).
Topic:
National Security, Science and Technology, Cybersecurity, and Data
Political Geography:
United States and North America

33. Is Cyber Defense Possible?

Author:
Sorin Ducaru
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Cyber issues are rapidly growing in importance to defense alliances. The Journal of International Affairs talked to Ambassador Sorin Ducaru, NATO’s assistant secretary general for emerging security challenges, about NATO’s efforts to improve its cyber defenses against emerging threats.
Topic:
NATO, Diplomacy, International Cooperation, Military Strategy, and Cybersecurity
Political Geography:
United States, Europe, North Atlantic, and North America

34. How the Next U.S. President Can Contain China in Cyberspace

Author:
Adam Segal and Rob Knake
Publication Date:
01-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
When transition planning gets underway in earnest this fall, one of the hardest memos to write will be the outbrief from the current National Security Council (NSC) team on what to do about China’s ongoing campaign of cyber espionage targeting the intellectual property of U.S. companies. While long a focus of both the president’s cyber and China teams, there is little chance that in the coming months the issue is going to be brought to any type of resolution. Instead, the next president will inherit a partially implemented plan that has produced positive results in the short term, but its long-term sustainability remains uncertain. He or she would be wise to follow the playbook left by the Obama administration, with a redoubled focus on the investigation and prosecution of cybercrime. Critics of the administration on this topic generally fall into two camps. One, summed up nicely by the title of a book by Peter Kiernan, is the Becoming China’s Bitch camp.[1] In this view, the United States is so dependent on China that the Chinese can do what they want and there is little Americans can do to stop them. They hold U.S. debt, Americans can’t manufacture anything without them, Chinese students are leaps and bounds smarter than American students, and there are millions more of them studying science and math. The Chinese are strategic, looking around the corner of history and shaping it in their interests. They are playing three-dimensional chess and President Obama has been playing checkers. They put the blame on what they would characterize as Obama’s willingness to “lead from behind.” They then quote Sun Tzu, reference Unrestricted Warfare, and drop the mic.[2] The second view is the Coming Collapse of China camp.[3] In this view, despite an aggressive anti-corruption campaign and a more assertive foreign policy, China is weak, wounded, and dangerous. The Communist Party made a deal with the devil, offering economic growth in exchange for loyalty to the regime. Now, the leadership can’t keep up with their end of the bargain. Growth is slowing, and at a faster pace than the official figures acknowledge. Over investment continues and economic reforms have stalled. Air and water pollution are a drag on the economy and a threat to citizen health. Paranoid about any dissent, the party has tightened restrictions on the Internet and the media and arrested feminists, civil rights activists, and lawyers. One spark could start protests that lead to widespread instability and perhaps the end of Communist Party rule. What’s interesting is that these divergent views of China’s place in the world similarly predict there is little chance that China will cease stealing intellectual property. In the first view, China holds all the cards, and there is simply nothing the United States can do to impose costs and stop the hacking of companies. If China is desperate and dangerous, then it can’t stop stealing technology and business secrets because they are needed to fuel the economy.
Topic:
Science and Technology, Intellectual Property/Copyright, Cybersecurity, and Conflict
Political Geography:
United States, China, Asia, and North America

35. The Dispatch (Spring 2016)

Author:
David J. Bercuson, Jean-Christophe Boucher, J. L. Granatstein, David Carment, Teddy Samy, Paul Dewar, Roy Rempel, Eric Miller, Anthony Cary, Chris Westdal, Rolf Holmboe, Randolf Mank, Marius Grinius, P. Whitney Lackenbauer, and Adam Lajeunesse
Publication Date:
03-2016
Content Type:
Journal Article
Journal:
The Global Exchange
Institution:
Canadian Global Affairs Institute (CGAI)
Abstract:
The Dispatch (later called The Global Exchange) is the Canadian Global Affairs Institute’s quarterly magazine featuring topical articles written by our fellows and other contributing experts. Each issue contains approximately a dozen articles exploring political and strategic challenges in international affairs and Canadian foreign and defence policy. This Spring 2016 issue includes articles on Canada's international reputation, foreign relations, defense policy and more.
Topic:
International Relations, Security, Defense Policy, Peacekeeping, Cybersecurity, Weapons, Brexit, Nonproliferation, Syrian War, Trans-Pacific Partnership, and Peace
Political Geography:
Britain, Russia, China, Canada, Israel, Asia, North Korea, Syria, North America, and Arctic

36. The Dispatch (Fall 2016)

Author:
David J. Bercuson, Julian Lindley-French, Alan Stephenson, Neil Desai, John Adams, Charity Weeden, Elinor Sloan, Mike Day, Stephen M. Saideman, Kyle Matthews, and David McLaughlin
Publication Date:
09-2016
Content Type:
Journal Article
Journal:
The Global Exchange
Institution:
Canadian Global Affairs Institute (CGAI)
Abstract:
The Dispatch (later called The Global Exchange) is the Canadian Global Affairs Institute’s quarterly magazine featuring topical articles written by our fellows and other contributing experts. Each issue contains approximately a dozen articles exploring political and strategic challenges in international affairs and Canadian foreign and defence policy. This Fall 2016 issue includes articles on climate change, digital security, Brexit and more.
Topic:
Security, Defense Policy, Climate Change, Diplomacy, Cybersecurity, Brexit, Military Spending, Alliance, and Space
Political Geography:
Britain, Turkey, Canada, North America, and United States of America

37. North Korea: The Myth of Maxed-Out Sanctions

Author:
Joshua Stanton
Publication Date:
01-2015
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
On December 19, 2014, President Obama publicly blamed North Korea for the cyberattack against Sony Pictures and for the subsequent cyberterrorism against the American people, and promised to "respond proportionally." Almost immediately thereafter, one could hear a familiar narrative repeated, typified by New York Times correspondent David Sanger, who wrote that "North Korea is under so many sanctions already that adding more seems futile." One could have heard similar arguments in 2006, after North Korea's first nuclear test, and in 2013, after its third nuclear test. A variation of this argument is that “Washington … can do little ... without the cooperation of China.” ​ For years, journalists have quoted “experts” who insisted that U.S. sanctions options against North Korea were exhausted and had failed as an instrument of policy. As a matter of both fact and law, however, that is false; it even suggests that these experts have not read and understood the sanctions authorities. Why does this view persist, then? Some scholars may accept and propagate it because they oppose sanctions as a matter of policy. Others have simply ceased to question a myth that has entered the received wisdom. A true understanding of the potential effectiveness of sanctions first requires an understanding of what these sanctions are, what they are not, and how they work. This article will first summarize the sanctions authorities – U.N. Security Council resolutions, and the U.S. sanctions that should be an important part of the effective enforcement of the measures that the U.N. Security Council has adopted. It will also explain the role of the Treasury Department in regulating the international financial system, and the power this gives the United States to isolate the North Korean government from that system. It will explain which U.S. and U.N. sanctions against North Korea have succeeded and failed, and why. Finally, it will explain what current U.S. national sanctions do, and what they do not do. Only after one understands how little the current sanctions do – and how much they could do – can one begin to understand how to strengthen them into an effective part of a coherent foreign policy... ​
Topic:
Science and Technology, United Nations, Sanctions, Cybersecurity, and Economy
Political Geography:
Asia, North Korea, North America, and United States of America

38. Roadmap for a Code of Conduct for Cyberspace

Author:
Thomas McCarthy and Alison Russell
Publication Date:
09-2015
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
Professor Martel, author of Grand Strategy in Theory and Practice: The Need for an Effective American Foreign Policy, offers three guiding principles for U.S. grand strategy: rebuilding domestic foundations of power; exercising American leadership to restrain sources of disorder that directly threaten U.S. vital interests; and forging both alliances and partnerships to confront the most pressing threats to global stability.[2] The last of Martel’s three principles foreshadows the three cyber security activities at the heart of the newly released U.S. Department of Defense Cyber Strategy. The three activities around which the new U.S. DoD cyber strategy revolves are: Information sharing and interagency coordination; building bridges to the private sector; and building alliances, coalitions, and partnerships abroad.[3] These three coordinating and collaborating activities are the key to building relationships between actors influencing the development of the cyber domain, and are necessary to identify and counter threats. To advance global cyber security, the Cyber Strategy suggests the U.S. must “build and maintain robust international alliances and partnerships to deter shared threats and increase international security and stability.”[4] As part of this effort, the United States seeks to build security relationships to respond to shifts in the international environment, including sources of disorder. These relationships are built upon trust and cooperation of many actors with varied interests and objectives in cyberspace. Given the wide variety of actors and interests within the cyber domain, establishing relationships of trust based on a shared understanding of acceptable conduct, expected behavior, and governing principles represents a daunting challenge...
Topic:
Security, Foreign Policy, Cybersecurity, and Grand Strategy
Political Geography:
North America and United States of America

39. Conflict in Cyberspace: How International Legal Norms Can Reduce Military Escalation in Cyberspace

Author:
Nikolas Ott
Publication Date:
09-2015
Content Type:
Journal Article
Journal:
Fletcher Security Review
Institution:
The Fletcher School, Tufts University
Abstract:
This paper examines the current technical and legal considerations around the development of international legal norms and confidence-building measures in cyberspace. With an emphasis on state-based armed attacks and the use of force in cyberspace, it summarizes the current status of international efforts within the United Nations and several regional organizations. The paper concludes with several suggestions on how policymakers can reduce the gap between technological and legal considerations.
Topic:
International Law, Military Affairs, and Cybersecurity
Political Geography:
United Nations, North America, and United States of America

40. A Framework for Categorizing Disruptive Cyber Activity and Assessing its Impact

Author:
Charles Harry
Publication Date:
08-2015
Content Type:
Working Paper
Institution:
Center for International and Security Studies at Maryland (CISSM)
Abstract:
While significant media attention has been given to the volume and range of cyber attacks, the inability to measure and categorize disruptive events has complicated efforts of policy makers to push comprehensive responses that address the range of cyber activity. While organizations and public officials have spent significant time and resources attempting to grapple with the complex nature of these threats, a systematic and comprehensive approach to categorize and measure disruptive attacks remains elusive. This paper addresses this issue by differentiating between exploitive and disruptive cyber events, proposes a formal method to categorize five types of disruptive events, and measures their impact along three dimensions of analysis. Scope, magnitude, and duration of disruptive cyber events are analyzed to locate each event on a Cyber Disruption Index (CDI) so organizations and policymakers can estimate the aggregated effect of a malicious act aimed at impacting their operations. Using the five different event classes and the CDI estimation method makes it easier for organizations and policy makers to disaggregate a complex topic, contextualize and process individual threats to their network, target where increased investment can reduce the risk of specific disruptive cyber events, and distinguish between events that represent a private-sector problem from those that merit a more serious public-sector concern.
Topic:
Mass Media and Cybersecurity
Political Geography:
United States, North America, Washington, and D.C.