CSS Blog Network
Image courtesy of Franklin Ramos/DVIDS.
This article was originally published by Lawfare on 28 May 2019.
Much has been written about the fundamental changes in U.S. cyber strategy. U.S. Cyber Command’s vision of “persistent engagement” and the Department of Defense’s new strategy of “defend forward” have, in particular, led to numerous critical remarks about the risks of escalation between the U.S. and its main adversaries in cyberspace.
This blog belongs to the CSS’ coronavirus blog series, which forms a part of the center’s analysis of the security policy implications of the coronavirus crisis. See the CSS special theme page on the coronavirus for more.
Millions are now working from home with unfamiliar software, providing massive opportunities for malicious actors. In response, volunteers from the information security sector have formed collaborative initiatives to disseminate urgently needed information to the public. This post examines how the current crisis conditions enabled the formation of the COVID-19 Cyber Threat Coalition (CTC), the largest of these initiatives, based on an interview with the founder. It also identifies an opportunity to institutionalize a similar, need-based threat information platform through government action.
This graphic provides an overview of the nations in which major cyber theft incidents were initiated, as well as the countries affected by these attacks between 2000 and 2018. To find out what this highlights about the eclipse of Western military-technological superiority, read Michael Haas’ chapter for Strategic Trends 2019 here. Strategic Trends 2020 is out on 30 April.
This article was originally published by the Real Elcano Institute on 17 March 2020.
Theme
With cyber operations serving as an instrument of foreign policy, it is fair to posit that cognitive factors that account for behavior in the physical domain are equally applicable to cyberspace.
This article was originally published by the Elcano Royal Institute on 27 February 2020.
Theme
While national cyber security strategies have proliferated worldwide in the past decade, most have been overwhelmingly focused on resilience at the expense of political values. This paper addresses the challenges that have arisen from an overly technical focus on cyber security that has failed to consider the application of value sets in strategy creation.