Search

Begin New Search Topic Cybersecurity

101. Private sector cyber defence

Author:
Wyatt Hoffman and Ariel Levite
Publication Date:
06-2017
Content Type:
Special Report
Institution:
Carnegie Endowment for International Peace
Abstract:
The cyber revolution and ever-growing transfer of human activities into the virtual world are undermining the social contract between modern states and their citizens. Most governments are becoming unable and unwilling to protect citizens and private enterprises against numerous, sophisticated cyber predators seeking to disrupt, manipulate, or destroy their digital equities. Inevitably, states are focused on protecting governmental assets and national infrastructure, leaving themselves with modest residual capacity and resolve to underwrite other cybersecurity risks. Faced with this reality, private entities are reluctantly but increasingly complementing their passive cybersecurity practices with more assertive “active cyber defense” (ACD) measures. This approach carries substantial risks, but if guided by bounding principles and industry models, it also has the potential for long-term, cumulative benefits.
Topic:
International Affairs and Cybersecurity
Political Geography:
Global Focus

102. The Changing Balance of Power in the Age of Emerging Cyber Threats

Author:
Ivo Tsekov
Publication Date:
06-2017
Content Type:
Working Paper
Institution:
Institute for Security and International Studies (ISIS)
Abstract:
This paper addresses one of the key issues of the international security agenda today: the role of cyber warfare in the changing security landscape of the 21st century. Cyber warfare involves the actions by a nation-state or international organization to attack and attempt to damage another nation's computers or information networks through IT means. While a great deal has already been written on the topic, there needs to be a stronger examination of how the combination of cyber weapons with traditional strategic approaches might impact strategic choices related to cyber war. In order to understand whether there is a security competition in cyberspace, it is necessary to assess the current balance of power. Therefore, the issue of cyber warfare has relevance to practitioners, policy-makers, and scholars in the national, regional and international levels
Topic:
Power Politics and Cybersecurity
Political Geography:
Global Focus

103. Chinese Investment in Critical U.S. Technology: Risks to U.S. Security Interests

Author:
Council on Foreign Relations
Publication Date:
10-2017
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
Chinese firms, both private and state-owned, have in recent years invested billions of dollars in the U.S. technology industry, raising concerns that a powerful rival has gained or could soon gain access to sensitive and, in some cases, critical technologies that underpin American military superiority and economic might. At the workshop entitled “Chinese Investment in Critical U.S. Technology: Risks to U.S. Security Interests,” held in San Francisco, on July 18, 2017, CFR convened nearly thirty current and former government officials, academics, bankers, investors, and corporate executives to explore whether the large and growing early-stage Chinese investment in critical U.S. technology poses a threat to U.S. national security, and, if so, to outline policies that mitigate the risks of unbridled Chinese investment and to bolster U.S. competitiveness.
Topic:
Security, Science and Technology, Foreign Direct Investment, and Cybersecurity
Political Geography:
United States, China, Asia, and North America

104. Countering Russian Information Operations in the Age of Social Media

Author:
Keir Giles
Publication Date:
11-2017
Content Type:
Working Paper
Institution:
Council on Foreign Relations
Abstract:
As investigations into attempts to influence the 2016 U.S. presidential election continue, more aspects of Russia’s approach to information warfare are coming to light. A steady stream of new disclosures is revealing a complex blend of hacking, public disclosures of private emails, and use of bots, trolls, and targeted advertising on social media designed to interfere in political processes and heighten societal tensions. Moscow’s hostile actions are driven by the belief that Russia is already in a state of conflict with the West, led by the United States, and that the internet is a domain for waging this conflict. From the earliest stages of the internet’s development, Russia has held a starkly different view from the West of its benefits and its potential. Russia’s national security establishment immediately saw connectivity as a threat and a potential weapon—and eventually as one that could help achieve regime change and deprive a country of its sovereignty—rather than as an enabler of economic development. The organization of Russia’s information-warfare capabilities, which include cyber operators, media outlets, and false flag entities, is shrouded in secrecy. In the West, generally only the intelligence community has a clear picture of how Russian capabilities are directed. Barring the sudden appearance of a Russian counterpart to Edward Snowden, the only view into Russia’s information toolbox is provided by cybersecurity companies and criminal prosecutions. The picture is further muddied because the Russian government keeps many of its cyberwarfare actors at arm’s length by employing contractors and former criminals through middlemen, giving Moscow a degree of deniability if caught. Nevertheless, both Western governments and private industry can take steps to mitigate Russian influence operations. Western governments should swiftly and decisively denounce Russian information activities as soon as they are identified, and their counterintelligence agencies should identify quantitative means to measure the effectiveness of Russia’s methods. Social media companies should more aggressively police their platforms for malicious state-sponsored content, and they should work with news organizations to promote verified and fact-checked content on their platforms.
Topic:
Cybersecurity, Political stability, Disinformation, and Election Interference
Political Geography:
Russia, United States, Europe, and North America

105. Natural and Quasi-Natural Experiments to Evaluate Cybersecurity Policies

Author:
Benjamin Dean
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Over the past decade, numerous countries around the world have developed and implemented national cybersecurity strategies. Yet very few of these strategies have been subject to evaluations. As a result, it is difficult to judge the performance of strategies, the programs that comprise them, and the cost-effectiveness of funds spent. Natural and quasi-natural experiments are a promising set of research methods for the evaluation of cybersecurity programs. This paper provides an overview of the methods used for natural or quasi-natural experiments, recounts past studies in other domains where the methods have been used effectively, and then identifies cybersecurity activities or programs for which these methods might be applied for future evaluations (e.g., computer emergency response teams in the EU, cybersecurity health checks in Australia, and data breach notification laws in the United States).
Topic:
National Security, Science and Technology, Cybersecurity, and Data
Political Geography:
United States and North America

106. Honing Cyber Attribution

Author:
Justin Key Canfil
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Concerns about state-directed cyber intrusions have grown increasingly prevalent in recent years. The idea that state principals can obfuscate their involvement in such attacks by delegating operational tasks to non-state agents poses a particularly significant challenge to international enforcement and remedies. Gaps in international law, coupled with obstacles to detection in such cases, may make it more difficult to bring sponsoring states to justice. This paper offers a roadmap for assessing the propensity of states to delegate to non-state actors and correct for false positives in standard (typically more technical) cyber attack attribution methods. I conclude that the conditions under which attacks are likely to have been backed by sponsoring states occupy a much narrower window than conventional wisdom suggests, and that the universe of transgressors can be identified when standard indicators overlap with specific conditions.
Topic:
Security, Elections, Cybersecurity, and Election Interference
Political Geography:
Russia, United States, Europe, and North Am

107. Is Cyber Defense Possible?

Author:
Sorin Ducaru
Publication Date:
07-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Cyber issues are rapidly growing in importance to defense alliances. The Journal of International Affairs talked to Ambassador Sorin Ducaru, NATO’s assistant secretary general for emerging security challenges, about NATO’s efforts to improve its cyber defenses against emerging threats.
Topic:
NATO, Diplomacy, International Cooperation, Military Strategy, and Cybersecurity
Political Geography:
United States, Europe, North Atlantic, and North America

108. How the Next U.S. President Can Contain China in Cyberspace

Author:
Adam Segal and Rob Knake
Publication Date:
01-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
When transition planning gets underway in earnest this fall, one of the hardest memos to write will be the outbrief from the current National Security Council (NSC) team on what to do about China’s ongoing campaign of cyber espionage targeting the intellectual property of U.S. companies. While long a focus of both the president’s cyber and China teams, there is little chance that in the coming months the issue is going to be brought to any type of resolution. Instead, the next president will inherit a partially implemented plan that has produced positive results in the short term, but its long-term sustainability remains uncertain. He or she would be wise to follow the playbook left by the Obama administration, with a redoubled focus on the investigation and prosecution of cybercrime. Critics of the administration on this topic generally fall into two camps. One, summed up nicely by the title of a book by Peter Kiernan, is the Becoming China’s Bitch camp.[1] In this view, the United States is so dependent on China that the Chinese can do what they want and there is little Americans can do to stop them. They hold U.S. debt, Americans can’t manufacture anything without them, Chinese students are leaps and bounds smarter than American students, and there are millions more of them studying science and math. The Chinese are strategic, looking around the corner of history and shaping it in their interests. They are playing three-dimensional chess and President Obama has been playing checkers. They put the blame on what they would characterize as Obama’s willingness to “lead from behind.” They then quote Sun Tzu, reference Unrestricted Warfare, and drop the mic.[2] The second view is the Coming Collapse of China camp.[3] In this view, despite an aggressive anti-corruption campaign and a more assertive foreign policy, China is weak, wounded, and dangerous. The Communist Party made a deal with the devil, offering economic growth in exchange for loyalty to the regime. Now, the leadership can’t keep up with their end of the bargain. Growth is slowing, and at a faster pace than the official figures acknowledge. Over investment continues and economic reforms have stalled. Air and water pollution are a drag on the economy and a threat to citizen health. Paranoid about any dissent, the party has tightened restrictions on the Internet and the media and arrested feminists, civil rights activists, and lawyers. One spark could start protests that lead to widespread instability and perhaps the end of Communist Party rule. What’s interesting is that these divergent views of China’s place in the world similarly predict there is little chance that China will cease stealing intellectual property. In the first view, China holds all the cards, and there is simply nothing the United States can do to impose costs and stop the hacking of companies. If China is desperate and dangerous, then it can’t stop stealing technology and business secrets because they are needed to fuel the economy.
Topic:
Science and Technology, Intellectual Property/Copyright, Cybersecurity, and Conflict
Political Geography:
United States, China, Asia, and North America

109. Toward Practical Cyber Counter Deception

Author:
Christopher Porter
Publication Date:
02-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Nation-states increasingly engage in strategic deception in cyberspace, frustrating traditional counter deception approaches. This paper evaluates and critiques the philosophical underpinnings and practical implications of existing military-political counter deception and computer forensic approaches. Analysts can better detect and expose strategic deception campaigns in cyberspace by focusing on the size and organizational strength threat actors need to conduct the operations.
Topic:
Security, Science and Technology, Military Strategy, and Cybersecurity
Political Geography:
Global Focus

110. Attribution of Malicious Cyber Incidents: From Soup to Nuts

Author:
Herbert Lin
Publication Date:
03-2017
Content Type:
Journal Article
Journal:
Journal of International Affairs
Institution:
School of International and Public Affairs, Columbia University
Abstract:
Attribution of malicious cyber activities is a deep issue about which confusion and disquiet can be found in abundance. Attribution has many aspects—technical, political, legal, policy, and so on. A number of well-researched and executed papers cover one or more of these aspects, but integration of these aspects is usually left as an exercise for the analyst. This paper distinguishes between attribution of malicious cyber activity to a machine, to a specific perpetrator (often a human being pressing the keys) initiating that activity, and to an adversary that is deemed ultimately responsible for that activity. Which type of attribution is relevant depends on the goals of the relevant decisionmaker. Further, attribution is a multi-dimensional issue that draws on all sources of information available, including technical forensics, human intelligence, signals intelligence, history, and geopolitics, among others. From the perspective of the victim, some degree of factual uncertainty attaches to any of these types of attribution, although the last type—attribution to an ultimately responsible party—also implicates to a very large degree legal, policy, and political questions. But from the perspective of the adversary, the ability to conceal its identity from the victim with high confidence is also uncertain. It is the very existence of such risk that underpins the possibility of deterring hostile actions in cyberspace.
Topic:
Security, Intelligence, Science and Technology, and Cybersecurity
Political Geography:
Global Focus