Dondi West Defcon 18 Slides
•Download as PPT, PDF•
0 likes•316 views
The document summarizes a presentation arguing that existing international laws of war can adequately address issues raised by cyber warfare, without needing new treaties. It outlines the current legal framework, including when cyber attacks may constitute use of force or armed attacks. It also discusses challenges like attribution and dual-use networks. The presentation argues against new treaties for cyber warfare, saying adversaries would not comply and existing laws can adapt to technology changes.
Report
Share
Report
Share
![Disclaimers ,[object Object],[object Object]](data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7)
Recommended
2018 april - aba legal construct for understanding adversarial cyber activit...
A Legal Construct for Understanding Adversarial Cyber Activities. This Presentation examines the international law applicable to cyber-operations in the public policy context. It draws attention to when existing legal principles cannot readily be applied to cyber-attacks. It identifies problems presented by politicians and international lawyers not having a common vocabulary
CyberSecurity Challenge Decision Document
The document summarizes a cyber security challenge scenario involving cyber attacks on Philippine and US networks following a confrontation between Chinese and Philippine vessels in the South China Sea. It then analyzes four policy approaches: 1) A joint US-Philippines cyber security initiative, 2) Attributing attacks to China under international law, 3) Creating UN cyber norms and committees, and 4) Defining attacks as "armed attacks". The analysis chooses approach 1 due to attribution issues with approaches 2 and 4, and approach 3's long-term focus. It argues approach 1 restores networks while flexing US cyber capabilities and involving allies.
Self defence & Cyber Terrorism
Witnessing the series of attacks, debates and laws on cyber terrorisms or attacks viz- a-viz application of self-defense doctrine has become a hot button issue in global arena. Self defense per se an magnetic subjects which fascinates lawmaker and international bodies to play their active role. But as the emanation of a new threat of Cyber attacks and bit of new technologies, the issue of security has reached to its zenith. International laws, domestic laws, regulations, treaties etc. turn out to be vague and handicap to tackle this concept of cyber terrorism.
Making Sense of Cyberwar 2014
Company names mentioned herein are the property of, and may be trademarks of, their respective owners and are for educational purposes only.
Cyberware
Recent years have shown us the importance of cybersecurity. Especially, when the matter is national security, it is even more essential and crucial. Increasing cyber attacks, especially between countries in governmental level, created a new term cyber warfare. Creating some rules and regulations for this kind of war is necessary therefore international justice systems are working on it continuously. In this paper, we mentioned fundamental terms of cybersecurity, cyber capabilities of some countries, some important cyber attacks in near past, and finally, globally applied cyber warfare law for this attacks.
Reliability not Reliance.
1) The document discusses the challenges nation-states face in policing cyber-space due to its unique nature. Unlike physical domains, cyber-space was constructed by humans and threats can be anonymous and originate across borders.
2) Cooperation is necessary for nation-states to adequately police cyber-space because threats are difficult to attribute due to anonymity and lack of international laws. However, cooperation also presents challenges if states become too reliant on external actors.
3) The paper argues that states must develop reliable relationships with other actors through cooperation to police cyber-space, but also maintain independence and not become dependent on any single entity. Balance between cooperation and reliance is needed.
Pa862
The document summarizes a policy analysis paper that examines the nature of cyber conflict between states from 2000 to 2016. It finds that while cyber operations have not generally led to escalation, recent policy shifts in the US under the Trump administration increase the risk of inadvertent escalation. Specifically, the paper argues that adopting an offensive cyber strategy based on preemption is dangerous and counterproductive, as cyberspace has primarily involved covert operations for political signaling rather than direct attacks. The analysis recommends a more restrained defensive approach focused on intelligence sharing and hardening systems.
Katherine Neal_Written Brief 1
Chinese cyberattacks against the US pose long term threats to national security. The US power grid and critical infrastructure sectors are most vulnerable. While the daily number of attacks has decreased since 2015 agreements, China has increased sophistication so attacks are harder to detect. The US lacks effective countermeasures and China has no incentive to fully stop cyber espionage. Future disputes could prompt more attacks aimed at the US private sector.
Recommended
2018 april - aba legal construct for understanding adversarial cyber activit...
A Legal Construct for Understanding Adversarial Cyber Activities. This Presentation examines the international law applicable to cyber-operations in the public policy context. It draws attention to when existing legal principles cannot readily be applied to cyber-attacks. It identifies problems presented by politicians and international lawyers not having a common vocabulary
CyberSecurity Challenge Decision Document
The document summarizes a cyber security challenge scenario involving cyber attacks on Philippine and US networks following a confrontation between Chinese and Philippine vessels in the South China Sea. It then analyzes four policy approaches: 1) A joint US-Philippines cyber security initiative, 2) Attributing attacks to China under international law, 3) Creating UN cyber norms and committees, and 4) Defining attacks as "armed attacks". The analysis chooses approach 1 due to attribution issues with approaches 2 and 4, and approach 3's long-term focus. It argues approach 1 restores networks while flexing US cyber capabilities and involving allies.
Self defence & Cyber Terrorism
Witnessing the series of attacks, debates and laws on cyber terrorisms or attacks viz- a-viz application of self-defense doctrine has become a hot button issue in global arena. Self defense per se an magnetic subjects which fascinates lawmaker and international bodies to play their active role. But as the emanation of a new threat of Cyber attacks and bit of new technologies, the issue of security has reached to its zenith. International laws, domestic laws, regulations, treaties etc. turn out to be vague and handicap to tackle this concept of cyber terrorism.
Making Sense of Cyberwar 2014
Company names mentioned herein are the property of, and may be trademarks of, their respective owners and are for educational purposes only.
Cyberware
Recent years have shown us the importance of cybersecurity. Especially, when the matter is national security, it is even more essential and crucial. Increasing cyber attacks, especially between countries in governmental level, created a new term cyber warfare. Creating some rules and regulations for this kind of war is necessary therefore international justice systems are working on it continuously. In this paper, we mentioned fundamental terms of cybersecurity, cyber capabilities of some countries, some important cyber attacks in near past, and finally, globally applied cyber warfare law for this attacks.
Reliability not Reliance.
1) The document discusses the challenges nation-states face in policing cyber-space due to its unique nature. Unlike physical domains, cyber-space was constructed by humans and threats can be anonymous and originate across borders.
2) Cooperation is necessary for nation-states to adequately police cyber-space because threats are difficult to attribute due to anonymity and lack of international laws. However, cooperation also presents challenges if states become too reliant on external actors.
3) The paper argues that states must develop reliable relationships with other actors through cooperation to police cyber-space, but also maintain independence and not become dependent on any single entity. Balance between cooperation and reliance is needed.
Pa862
The document summarizes a policy analysis paper that examines the nature of cyber conflict between states from 2000 to 2016. It finds that while cyber operations have not generally led to escalation, recent policy shifts in the US under the Trump administration increase the risk of inadvertent escalation. Specifically, the paper argues that adopting an offensive cyber strategy based on preemption is dangerous and counterproductive, as cyberspace has primarily involved covert operations for political signaling rather than direct attacks. The analysis recommends a more restrained defensive approach focused on intelligence sharing and hardening systems.
Katherine Neal_Written Brief 1
Chinese cyberattacks against the US pose long term threats to national security. The US power grid and critical infrastructure sectors are most vulnerable. While the daily number of attacks has decreased since 2015 agreements, China has increased sophistication so attacks are harder to detect. The US lacks effective countermeasures and China has no incentive to fully stop cyber espionage. Future disputes could prompt more attacks aimed at the US private sector.
About cyber war
Cyber war, cyber terrorism, and cyber espionage were discussed. The document began by noting some disclaimers from the author about their expertise and intentions. It then discussed how cyber war is often misunderstood and does not refer to things like cybercrime or hacking. The document went on to discuss how cyber attacks could potentially lead to accidental nuclear war by degrading decision making systems. It also provided a real example of how access was gained to a strategic nuclear system, highlighting the risks of cyber threats in this domain.
Cyber Security, Cyber Warfare
This document discusses cyber security threats including cyber warfare, cyber crime, cyber terrorism, and cyber espionage. It outlines India's steps to secure cyberspace such as establishing the National Cyber Security Policy and National Critical Information Infrastructure Protection Centre. The document also analyzes how the "Clausewitzian Trinity" of the people, military, and government of a nation are increasingly dependent on information systems, making these elements susceptible to strategic cyber attacks that could paralyze a victim nation. It asserts that cyberspace has become the "fifth domain of war" alongside land, air, sea and space, compelling countries to develop cyber attack and defense capabilities.
Cyberwarfare
The document discusses different types of cyberwarfare attacks that range from minor web vandalism to more dangerous attacks like equipment disruption and targeting critical infrastructure. It also covers the use of smart weapons guided by GPS for precision targeting and how combat training is increasingly using virtual simulations. Precision of satellite-guided weapons relies on the accuracy of the GPS coordinates provided for the target.
Cyber terrorism fact or fiction - 2011
The document discusses the topics of cyber terrorism, hacktivism, cyber war, and cyber command. It provides examples of different cyber conflicts between nations and groups, such as the Pakistani-Indian cyberwar, Israeli-Palestinian cyberwar, and U.S.-al Qaeda cyberwar. The document also examines definitions of cyber terrorism, potential scenarios, and examples like attacks on the German and Mexican stock exchanges. It analyzes how governments have established cyber commands to address cyber threats and concludes that while cyber terrorism is possible, terrorists have not yet demonstrated the capability for significant cyber attacks.
Understanding the Methods behind Cyber Terrorism
Cyber security has become a matter of national, international, economic, and societal importance that affects multiple nations (Walker, 2012). Since the 1990s users have exploited vulnerabilities to gain access to networks for malicious purposes. In recent years the number of attacks on U.S. networks has continued to grow at an exponential rate. This includes malicious embedded code, exploitation of backdoors, and more. These attacks can be initiated from anywhere in the world from behind a computer with a masked Internet Protocol (IP) address. This type of warfare, cyber warfare, changes the landscape of war itself (Beidleman, 2009). This type of warfare removes the need to have a physically capable military and requires the demand for a force that has a strong technical capacity e.g. computer science skills. The U.S. and other countries have come to understand that this is an issue and has developed policies to handle this in an effort to mitigate the threats.
In Estonia and Georgia there were direct attacks on government cyber infrastructure (Beildleman, 2009). The attacks in Estonia rendered the government’s infrastructure useless. The government and other associated entities heavily relied upon this e-government infrastructure. These attacks help lead to the development of cyber defense organizations within Europe.
Kenneth geers-sun-tzu-and-cyber-war
This document discusses how Sun Tzu's classic work The Art of War can provide a framework for understanding cyber warfare, though it is not a perfect fit. It summarizes key concepts from The Art of War related to strategic thinking, cultivating success on defense, and gaining foreknowledge of adversaries. While cyber warfare is an unconventional threat, nations should still make strategic preparations and investments in network security to prevent being caught off guard by attacks.
Vol7no2 ball
China has developed extensive cyber warfare capabilities since the mid-1990s. They have intelligence and military organizations dedicated to cyber warfare and conduct frequent exercises. These capabilities include penetrating other networks and planting viruses. However, China's own networks remain vulnerable. As a result, China has adopted a pre-emptive cyber strategy of unleashing its capabilities at the start of potential conflicts to disrupt enemy systems, though these are still relatively unsophisticated. It is difficult to attribute many Chinese cyber activities to official agencies due to use of private actors.
The National Cyber Security Strategy: Success Through Cooperation
The document outlines the Netherlands' National Cyber Security Strategy. It discusses how society has become increasingly dependent on ICT and vulnerable to cyber threats. The strategy aims to improve cyber security through cooperation between public and private sectors. It establishes basic principles such as linking initiatives, public-private partnerships, individual responsibility, and proportional responses. The goal is to create a resilient digital infrastructure while respecting privacy and civil liberties.
In cyber, the generals should lead from behind - College of Air Warfare - Puk...
Pukhraj Singh's presentation delivered at the College of Air Warfare, Secunderabad, on 17th Dec, 2019.
A US Cybersecurity Strategy for 2030
The document outlines a proposed 2030 US Cybersecurity Strategy. It discusses current cyber threats and concerns, including from terrorist groups and state actors. Four potential future scenarios are presented based on the uncertainty of terrorist groups and global polarity in 2030. The document recommends shaping actions like international cooperation and hedging actions such as developing resilient infrastructure to protect critical systems and data under the potential scenarios.
Asymmetric threat 5_paper
The document discusses cyber threats facing the US industrial base from sources like rogue states and insider threats. It notes that critical infrastructure remains vulnerable despite administration progress on cybersecurity. Securing cyberspace and protecting industry requires a strategy combining agile national security policies with market incentives to develop technological protections. Any strategy also needs flexible legislation balancing security, privacy, and international agreements establishing cyber norms. With aware citizens, responsible agencies, a skilled workforce, and public-private cooperation, the US can safeguard its industrial base within cyberspace.
Understanding the 'physics' of cyber-operations - Pukhraj Singh
The document discusses several key ideas about cyber operations:
1) Cyber capabilities shift rapidly, with assumptions needing reevaluation every 5 years. The nature of cyberweapons and thresholds for cyber conflict remain ambiguous.
2) Offense and defense in cyber are indistinguishable and symbiotic, challenging traditional notions of proportionality and legality in conflict. Nation-state operations are also supplemented by powerful non-state actors.
3) Escalation dynamics in cyber are difficult to predict, as seen in wargaming exercises, increasing uncertainty for decision-makers regarding responses to cyber attacks. Bureaucracy may provide the most identifiable signature of state-backed operations.
Computers as weapons of war
This document discusses how warfare has shifted from focusing on physical occupation of territory during the industrial era to also including cyber defense in the modern era. It provides examples of how cyber attacks have been used militarily, such as Russia's attacks on Georgia in 2008. The document also outlines potential offensive cyber operations that could be conducted by militaries, such as inserting logic bombs to sabotage critical infrastructure systems of adversaries or increasing speeds in nuclear centrifuges to cause failures. While cyber attacks provide advantages of remote targeting, they also face challenges in producing consistent, quantifiable results.
Katherine Neal_Written Brief 2
China poses the biggest long-term threat to U.S. cybersecurity through frequent cyberattacks. While attacks have decreased in recent years due to an agreement between the U.S. and China, the threat is expected to increase again over the long term as China has no incentive to fully stop attacks. The U.S. private sector and critical infrastructure are most vulnerable. A major international dispute could prompt a large-scale Chinese cyberattack against the U.S. as retaliation.
Raduenzel_Mark_ResearchPaper_NSEC506_Fall2015
The document discusses the United States' current cyber strategy and whether it supports offensive cyber operations. It analyzes several scholarly articles on cyber warfare doctrine and strategy. While the articles provide examples of states conducting offensive cyber attacks, the document's hypothesis is that the US cyber strategy focuses on defense and does not explicitly support offensive computer network attacks to achieve national security objectives. The purpose is to examine US cyber strategy and determine if it should incorporate offensive operations to help achieve national goals.
Cyberdefense strategy - Boston Global Forum - 2017
This document discusses principles for developing an effective national cyber defense strategy. It notes the increasing threats from state and non-state actors conducting cyber attacks that disrupt infrastructure and steal data and money. An effective strategy should streamline government cyber operations, increase public support through education, and strongly collaborate with the private sector. Key principles include characterizing thresholds for considering attacks a national security risk, resolving issues around hack back authority between government and industry, and connecting national strategy to local governance for response.
BSides Delhi-2018 Keynote by Pukhraj Singh (Politics & Power in Cybersecurity)
This document discusses power and politics in cybersecurity. It argues that cyber offense relies more on political subterfuge than technical skills. Nation-state offensive cyber teams use partnerships with telecom and technology companies as well as influence over standards bodies and research grants to maintain structural dominance. Code reuse and targeting restrictions reveal the technical signatures of bureaucratic politics. Politics shapes the cybersecurity industry and influences choices around standards, vulnerabilities, and defensive strategies. Cybersecurity is ultimately a function of power between states in this contested domain.
The death of enterprise security as we know it - Pukhraj Singh - RootConf 2018
The speaker discusses how enterprise security as we know it is dying due to increased complexity, unpredictability from emergent behaviors, and an overemphasis on offense over defense. Political and organizational factors also influence security more than technical issues. True situational awareness is difficult to achieve given these challenges. Defenders need to think differently and adopt more open and collaborative approaches to have a chance of keeping pace with adaptive attackers.
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...Cyber Security Alliance
This presentation will analyze the Information Warfare scenarios, technical and legal backgrounds, highlighting as well the importance of the terminologies and bringing to the audience real-life examples and known incidents. The last part of the talk will focus on two theorical case studies and on one, very special, theorical case study.Cyberwar threat to national security
The document discusses the threat of cyberwar and the lack of established definitions and international agreements regarding cyber conflict. There are differing definitions of cyberwar between countries like China/Russia and the US. The document also notes the difficulty of attribution in cyber attacks and challenges in applying existing laws of war to the digital domain. Overall, the document argues that internationally agreed rules and standards are needed to address the growing threats in cyberspace and avoid escalating conflicts between nations.
Dr William Boothby
This presentation was delivered by Dr William Boothby at the RUSI Cyber Conference on 16 September 2015.
More Related Content
What's hot
About cyber war
Cyber war, cyber terrorism, and cyber espionage were discussed. The document began by noting some disclaimers from the author about their expertise and intentions. It then discussed how cyber war is often misunderstood and does not refer to things like cybercrime or hacking. The document went on to discuss how cyber attacks could potentially lead to accidental nuclear war by degrading decision making systems. It also provided a real example of how access was gained to a strategic nuclear system, highlighting the risks of cyber threats in this domain.
Cyber Security, Cyber Warfare
This document discusses cyber security threats including cyber warfare, cyber crime, cyber terrorism, and cyber espionage. It outlines India's steps to secure cyberspace such as establishing the National Cyber Security Policy and National Critical Information Infrastructure Protection Centre. The document also analyzes how the "Clausewitzian Trinity" of the people, military, and government of a nation are increasingly dependent on information systems, making these elements susceptible to strategic cyber attacks that could paralyze a victim nation. It asserts that cyberspace has become the "fifth domain of war" alongside land, air, sea and space, compelling countries to develop cyber attack and defense capabilities.
Cyberwarfare
The document discusses different types of cyberwarfare attacks that range from minor web vandalism to more dangerous attacks like equipment disruption and targeting critical infrastructure. It also covers the use of smart weapons guided by GPS for precision targeting and how combat training is increasingly using virtual simulations. Precision of satellite-guided weapons relies on the accuracy of the GPS coordinates provided for the target.
Cyber terrorism fact or fiction - 2011
The document discusses the topics of cyber terrorism, hacktivism, cyber war, and cyber command. It provides examples of different cyber conflicts between nations and groups, such as the Pakistani-Indian cyberwar, Israeli-Palestinian cyberwar, and U.S.-al Qaeda cyberwar. The document also examines definitions of cyber terrorism, potential scenarios, and examples like attacks on the German and Mexican stock exchanges. It analyzes how governments have established cyber commands to address cyber threats and concludes that while cyber terrorism is possible, terrorists have not yet demonstrated the capability for significant cyber attacks.
Understanding the Methods behind Cyber Terrorism
Cyber security has become a matter of national, international, economic, and societal importance that affects multiple nations (Walker, 2012). Since the 1990s users have exploited vulnerabilities to gain access to networks for malicious purposes. In recent years the number of attacks on U.S. networks has continued to grow at an exponential rate. This includes malicious embedded code, exploitation of backdoors, and more. These attacks can be initiated from anywhere in the world from behind a computer with a masked Internet Protocol (IP) address. This type of warfare, cyber warfare, changes the landscape of war itself (Beidleman, 2009). This type of warfare removes the need to have a physically capable military and requires the demand for a force that has a strong technical capacity e.g. computer science skills. The U.S. and other countries have come to understand that this is an issue and has developed policies to handle this in an effort to mitigate the threats.
In Estonia and Georgia there were direct attacks on government cyber infrastructure (Beildleman, 2009). The attacks in Estonia rendered the government’s infrastructure useless. The government and other associated entities heavily relied upon this e-government infrastructure. These attacks help lead to the development of cyber defense organizations within Europe.
Kenneth geers-sun-tzu-and-cyber-war
This document discusses how Sun Tzu's classic work The Art of War can provide a framework for understanding cyber warfare, though it is not a perfect fit. It summarizes key concepts from The Art of War related to strategic thinking, cultivating success on defense, and gaining foreknowledge of adversaries. While cyber warfare is an unconventional threat, nations should still make strategic preparations and investments in network security to prevent being caught off guard by attacks.
Vol7no2 ball
China has developed extensive cyber warfare capabilities since the mid-1990s. They have intelligence and military organizations dedicated to cyber warfare and conduct frequent exercises. These capabilities include penetrating other networks and planting viruses. However, China's own networks remain vulnerable. As a result, China has adopted a pre-emptive cyber strategy of unleashing its capabilities at the start of potential conflicts to disrupt enemy systems, though these are still relatively unsophisticated. It is difficult to attribute many Chinese cyber activities to official agencies due to use of private actors.
The National Cyber Security Strategy: Success Through Cooperation
The document outlines the Netherlands' National Cyber Security Strategy. It discusses how society has become increasingly dependent on ICT and vulnerable to cyber threats. The strategy aims to improve cyber security through cooperation between public and private sectors. It establishes basic principles such as linking initiatives, public-private partnerships, individual responsibility, and proportional responses. The goal is to create a resilient digital infrastructure while respecting privacy and civil liberties.
In cyber, the generals should lead from behind - College of Air Warfare - Puk...
Pukhraj Singh's presentation delivered at the College of Air Warfare, Secunderabad, on 17th Dec, 2019.
A US Cybersecurity Strategy for 2030
The document outlines a proposed 2030 US Cybersecurity Strategy. It discusses current cyber threats and concerns, including from terrorist groups and state actors. Four potential future scenarios are presented based on the uncertainty of terrorist groups and global polarity in 2030. The document recommends shaping actions like international cooperation and hedging actions such as developing resilient infrastructure to protect critical systems and data under the potential scenarios.
Asymmetric threat 5_paper
The document discusses cyber threats facing the US industrial base from sources like rogue states and insider threats. It notes that critical infrastructure remains vulnerable despite administration progress on cybersecurity. Securing cyberspace and protecting industry requires a strategy combining agile national security policies with market incentives to develop technological protections. Any strategy also needs flexible legislation balancing security, privacy, and international agreements establishing cyber norms. With aware citizens, responsible agencies, a skilled workforce, and public-private cooperation, the US can safeguard its industrial base within cyberspace.
Understanding the 'physics' of cyber-operations - Pukhraj Singh
The document discusses several key ideas about cyber operations:
1) Cyber capabilities shift rapidly, with assumptions needing reevaluation every 5 years. The nature of cyberweapons and thresholds for cyber conflict remain ambiguous.
2) Offense and defense in cyber are indistinguishable and symbiotic, challenging traditional notions of proportionality and legality in conflict. Nation-state operations are also supplemented by powerful non-state actors.
3) Escalation dynamics in cyber are difficult to predict, as seen in wargaming exercises, increasing uncertainty for decision-makers regarding responses to cyber attacks. Bureaucracy may provide the most identifiable signature of state-backed operations.
Computers as weapons of war
This document discusses how warfare has shifted from focusing on physical occupation of territory during the industrial era to also including cyber defense in the modern era. It provides examples of how cyber attacks have been used militarily, such as Russia's attacks on Georgia in 2008. The document also outlines potential offensive cyber operations that could be conducted by militaries, such as inserting logic bombs to sabotage critical infrastructure systems of adversaries or increasing speeds in nuclear centrifuges to cause failures. While cyber attacks provide advantages of remote targeting, they also face challenges in producing consistent, quantifiable results.
Katherine Neal_Written Brief 2
China poses the biggest long-term threat to U.S. cybersecurity through frequent cyberattacks. While attacks have decreased in recent years due to an agreement between the U.S. and China, the threat is expected to increase again over the long term as China has no incentive to fully stop attacks. The U.S. private sector and critical infrastructure are most vulnerable. A major international dispute could prompt a large-scale Chinese cyberattack against the U.S. as retaliation.
Raduenzel_Mark_ResearchPaper_NSEC506_Fall2015
The document discusses the United States' current cyber strategy and whether it supports offensive cyber operations. It analyzes several scholarly articles on cyber warfare doctrine and strategy. While the articles provide examples of states conducting offensive cyber attacks, the document's hypothesis is that the US cyber strategy focuses on defense and does not explicitly support offensive computer network attacks to achieve national security objectives. The purpose is to examine US cyber strategy and determine if it should incorporate offensive operations to help achieve national goals.
Cyberdefense strategy - Boston Global Forum - 2017
This document discusses principles for developing an effective national cyber defense strategy. It notes the increasing threats from state and non-state actors conducting cyber attacks that disrupt infrastructure and steal data and money. An effective strategy should streamline government cyber operations, increase public support through education, and strongly collaborate with the private sector. Key principles include characterizing thresholds for considering attacks a national security risk, resolving issues around hack back authority between government and industry, and connecting national strategy to local governance for response.
BSides Delhi-2018 Keynote by Pukhraj Singh (Politics & Power in Cybersecurity)
This document discusses power and politics in cybersecurity. It argues that cyber offense relies more on political subterfuge than technical skills. Nation-state offensive cyber teams use partnerships with telecom and technology companies as well as influence over standards bodies and research grants to maintain structural dominance. Code reuse and targeting restrictions reveal the technical signatures of bureaucratic politics. Politics shapes the cybersecurity industry and influences choices around standards, vulnerabilities, and defensive strategies. Cybersecurity is ultimately a function of power between states in this contested domain.
The death of enterprise security as we know it - Pukhraj Singh - RootConf 2018
The speaker discusses how enterprise security as we know it is dying due to increased complexity, unpredictability from emergent behaviors, and an overemphasis on offense over defense. Political and organizational factors also influence security more than technical issues. True situational awareness is difficult to achieve given these challenges. Defenders need to think differently and adopt more open and collaborative approaches to have a chance of keeping pace with adaptive attackers.
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...Cyber Security Alliance
This presentation will analyze the Information Warfare scenarios, technical and legal backgrounds, highlighting as well the importance of the terminologies and bringing to the audience real-life examples and known incidents. The last part of the talk will focus on two theorical case studies and on one, very special, theorical case study.What's hot (20)
The National Cyber Security Strategy: Success Through Cooperation
The National Cyber Security Strategy: Success Through Cooperation
In cyber, the generals should lead from behind - College of Air Warfare - Puk...
In cyber, the generals should lead from behind - College of Air Warfare - Puk...
Understanding the 'physics' of cyber-operations - Pukhraj Singh
Understanding the 'physics' of cyber-operations - Pukhraj Singh
Cyberdefense strategy - Boston Global Forum - 2017
Cyberdefense strategy - Boston Global Forum - 2017
BSides Delhi-2018 Keynote by Pukhraj Singh (Politics & Power in Cybersecurity)
BSides Delhi-2018 Keynote by Pukhraj Singh (Politics & Power in Cybersecurity)
The death of enterprise security as we know it - Pukhraj Singh - RootConf 2018
The death of enterprise security as we know it - Pukhraj Singh - RootConf 2018
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...
ASFWS 2012 - Cybercrime to Information Warfare & “Cyberwar”: a hacker’s persp...
Similar to Dondi West Defcon 18 Slides
Cyberwar threat to national security
The document discusses the threat of cyberwar and the lack of established definitions and international agreements regarding cyber conflict. There are differing definitions of cyberwar between countries like China/Russia and the US. The document also notes the difficulty of attribution in cyber attacks and challenges in applying existing laws of war to the digital domain. Overall, the document argues that internationally agreed rules and standards are needed to address the growing threats in cyberspace and avoid escalating conflicts between nations.
Dr William Boothby
This presentation was delivered by Dr William Boothby at the RUSI Cyber Conference on 16 September 2015.
CYBERWAR: THE NEXT THREAT TO NATIONAL SECURITY
Cyber is a real threat and we can not keep our eyes shut to the same. Most of the countries surrounding us are involved in cyberwar covertly and we need to take steps to counter the same at the earliest.
Application of IHL to Computer Network Attacks
Discussing various views on applying International Humanitarian Law to Computer Network Attacks for Yerevan International Conference on IHL held at RAU - Russian-Armenian (Slavonic) University, November 2012 and used for a class on International Humanitarian Law at Yerevan State University within MA in Human Rights and Democratization for Eastern Partnership countries
CyberTerrorismACaseOfAliceInWonderland
This document discusses cyberterrorism and the challenges around defining it. It provides definitions of cyberterrorism from different sources, which vary in their descriptions of the perpetrator, motive, target, and intent. Specifically, the definitions differ most in their characterizations of the perpetrator and intent. The lack of a clear, agreed-upon definition has made it difficult to establish governance and laws around cyberterrorism. Having a shared understanding of what cyberterrorism is would help address this growing threat in a more coordinated way.
VFAC REVIEW issue12_extract_2016
The document discusses two articles related to cybercrime issues. The first article examines the possibility of establishing an international agreement or declaration for cyberspace to address cyber conflict and retaliation. The second article analyzes the legal and technical uncertainties surrounding strategic retaliatory countermeasures to cyber attacks for both nation-states and private entities. It discusses challenges in attributing attacks and risks of escalation, as well as limitations of applying international laws on use of force to the digital domain. The document also provides background on debates around active defense strategies following large-scale cyber attacks.
Tema 5.cybersecurity
The document discusses the debate around cybersecurity, politics, and interests. It summarizes that the threat of cyber attacks has driven increased spending on security by states and corporations. However, critics argue the threats are exaggerated and that the response is overly militarized and risks wasting resources. The debate has implications for the future of internet governance and privacy as states consider greater regulation and monitoring of internet traffic.
RULES OF THE GAME IN CYBERWAR
CYBERWAR IS NOT A CONVENTIONAL WAR. NATIONS ARE YET TO ENTER INTO ANY INTERNATIONAL TREATY IN THE FIELD OF CYBERWAR. RULES ARE REQUIRED TO BE FRAMED IN THIS FIELD KEEPING IN VIEW THE POTENTIAL OF DAMAGE WHICH CAN BE CAUSED IN THE EVENT OF CYBERWAR.
Why Great Powers Launch Destructive Cyber Operations and What to Do About It ...
Here we have the German Council on Foreign Relations (DGAP), those paragons of geopolitical insight, serving up a dish of the obvious with a side of "tell me something I don't know" in their publication. It's a riveting tale of how big, bad countries flex their digital muscles to wreak havoc on the less fortunate. The whole DGAP article looks like a story about a midlife crisis: with the cybersecurity aspects of smart cities and the existential fear of technological addiction. To enhance the effect, they link cyberwarfare and the proliferation of weapons of mass destruction and here we learn that great powers launch cyberattacks for the same reasons they do anything else: power, money, other things everyone loves. And of course, the author decided to hype and remind about the role of machine learning in cyber operations.
Ames -- Memo (Cyber)
1. The memorandum discusses the legal status of individuals conducting cyber operations and whether cyber attacks can be considered a "use of force" under international law.
2. There are differing views on how existing international law applies to cyber attacks. Some argue any attack that causes damage should be prohibited, while others argue only attacks using kinetic, physical means were intended in existing treaties.
3. A third approach advocates analyzing cyber attacks on a case-by-case basis considering factors like severity of damage, immediacy of impact, and whether responsibility is claimed to determine if it constitutes a prohibited "use of force." Applying this framework to examples could help clarify the legal status of cyber operations going forward.
Honeypots in Cyberwar
Honeypots and honeynets are used to study cyber attacks. A honeypot is a computer system set up to attract cyber attacks so threats can be observed and analyzed. A honeynet contains multiple honeypots and allows attacks on an entire network to be monitored. Deploying honeypots provides benefits like risk mitigation, intrusion detection, and research opportunities to study attacker techniques. However, honeypots also have downsides like limited visibility and potential additional security risks if compromised.
Systemic cybersecurity risk
Presentation to OECD project group on Global Risk. Expanded version presented to British Computer Society, Deutsche Bank and University of Southern Denmark.
Cyber(in)security: systemic risks and responses
Presented at National Security 2008 in Brussels. Updated for British Computer Society, Deutsche Bank, Oxford University, and University of Southern Denmark.
OTI Cyber warefare
Cyber warfare involves actions by a nation to penetrate another nation's computers or networks to cause damage or disruption across military, economic, political and social systems. While some experts argue for counterattacks in response to cyber harm, attribution of attacks is challenging due to spoofing of technical data. Existing international law does not fully cover cyber warfare. Other-than-internet attacks using vectors like USB devices or altered hardware present new ethical issues for policymakers seeking to prevent attacks while maintaining legitimacy of responses. A workable international treaty on cyber warfare will likely not be possible for over a decade.
The Hacked World Order By Adam Segal
This document discusses key terms related to information security and their interpretations in English, Chinese, and Russian. While English terms like "information space", "cyberspace", "information warfare", and "cyber warfare" focus on the technological aspects, their Chinese and Russian equivalents place more emphasis on the human/mental dimensions. Specifically, Russia and China see the mind and information systems as essential components of information security, unlike the US which separates cybersecurity from the human element. This highlights fundamental differences in how these countries approach and understand information security.
Global Security Challenges of the 21st Century: Workshop on Cyber Crimes
This document summarizes a workshop on cybersecurity challenges in the 21st century. It discusses definitions of cybercrime, examples like cyber attacks on Estonia in 2007, and international regulations and norms around internet governance, data protection, and the open/democratic nature of the internet. Key international agreements discussed include the UN Charter, Geneva Conventions, and Tallinn Manual. It concludes that the changing nature of cyber attacks creates a grey area that challenges traditional distinctions between crime and war under international law.
Cyber war as a modern war weapon
This article aims to show how science and technology are used in cyber warfare as one of the weapons of modern warfare and what to do to use it solely for the good of humanity.
Similar to Dondi West Defcon 18 Slides (17)
Why Great Powers Launch Destructive Cyber Operations and What to Do About It ...
Why Great Powers Launch Destructive Cyber Operations and What to Do About It ...
Global Security Challenges of the 21st Century: Workshop on Cyber Crimes
Global Security Challenges of the 21st Century: Workshop on Cyber Crimes
Recently uploaded
Video Streaming: Then, Now, and in the Future
In his public lecture, Christian Timmerer provides insights into the fascinating history of video streaming, starting from its humble beginnings before YouTube to the groundbreaking technologies that now dominate platforms like Netflix and ORF ON. Timmerer also presents provocative contributions of his own that have significantly influenced the industry. He concludes by looking at future challenges and invites the audience to join in a discussion.
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Discover the seamless integration of RPA (Robotic Process Automation), COMPOSER, and APM with AWS IDP enhanced with Slack notifications. Explore how these technologies converge to streamline workflows, optimize performance, and ensure secure access, all while leveraging the power of AWS IDP and real-time communication via Slack notifications.
20240607 QFM018 Elixir Reading List May 2024
Everything I found interesting about the Elixir programming ecosystem in May 2024
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
ABSTRACT: A prima vista, un mattoncino Lego e la backdoor XZ potrebbero avere in comune il fatto di essere entrambi blocchi di costruzione, o dipendenze di progetti creativi e software. La realtà è che un mattoncino Lego e il caso della backdoor XZ hanno molto di più di tutto ciò in comune.
Partecipate alla presentazione per immergervi in una storia di interoperabilità, standard e formati aperti, per poi discutere del ruolo importante che i contributori hanno in una comunità open source sostenibile.
BIO: Sostenitrice del software libero e dei formati standard e aperti. È stata un membro attivo dei progetti Fedora e openSUSE e ha co-fondato l'Associazione LibreItalia dove è stata coinvolta in diversi eventi, migrazioni e formazione relativi a LibreOffice. In precedenza ha lavorato a migrazioni e corsi di formazione su LibreOffice per diverse amministrazioni pubbliche e privati. Da gennaio 2020 lavora in SUSE come Software Release Engineer per Uyuni e SUSE Manager e quando non segue la sua passione per i computer e per Geeko coltiva la sua curiosità per l'astronomia (da cui deriva il suo nickname deneb_alpha).
Essentials of Automations: The Art of Triggers and Actions in FME
In this second installment of our Essentials of Automations webinar series, we’ll explore the landscape of triggers and actions, guiding you through the nuances of authoring and adapting workspaces for seamless automations. Gain an understanding of the full spectrum of triggers and actions available in FME, empowering you to enhance your workspaces for efficient automation.
We’ll kick things off by showcasing the most commonly used event-based triggers, introducing you to various automation workflows like manual triggers, schedules, directory watchers, and more. Plus, see how these elements play out in real scenarios.
Whether you’re tweaking your current setup or building from the ground up, this session will arm you with the tools and insights needed to transform your FME usage into a powerhouse of productivity. Join us to discover effective strategies that simplify complex processes, enhancing your productivity and transforming your data management practices with FME. Let’s turn complexity into clarity and make your workspaces work wonders!
Securing your Kubernetes cluster_ a step-by-step guide to success !
Today, after several years of existence, an extremely active community and an ultra-dynamic ecosystem, Kubernetes has established itself as the de facto standard in container orchestration. Thanks to a wide range of managed services, it has never been so easy to set up a ready-to-use Kubernetes cluster.
However, this ease of use means that the subject of security in Kubernetes is often left for later, or even neglected. This exposes companies to significant risks.
In this talk, I'll show you step-by-step how to secure your Kubernetes cluster for greater peace of mind and reliability.
Removing Uninteresting Bytes in Software Fuzzing
Imagine a world where software fuzzing, the process of mutating bytes in test seeds to uncover hidden and erroneous program behaviors, becomes faster and more effective. A lot depends on the initial seeds, which can significantly dictate the trajectory of a fuzzing campaign, particularly in terms of how long it takes to uncover interesting behaviour in your code. We introduce DIAR, a technique designed to speedup fuzzing campaigns by pinpointing and eliminating those uninteresting bytes in the seeds. Picture this: instead of wasting valuable resources on meaningless mutations in large, bloated seeds, DIAR removes the unnecessary bytes, streamlining the entire process.
In this work, we equipped AFL, a popular fuzzer, with DIAR and examined two critical Linux libraries -- Libxml's xmllint, a tool for parsing xml documents, and Binutil's readelf, an essential debugging and security analysis command-line tool used to display detailed information about ELF (Executable and Linkable Format). Our preliminary results show that AFL+DIAR does not only discover new paths more quickly but also achieves higher coverage overall. This work thus showcases how starting with lean and optimized seeds can lead to faster, more comprehensive fuzzing campaigns -- and DIAR helps you find such seeds.
- These are slides of the talk given at IEEE International Conference on Software Testing Verification and Validation Workshop, ICSTW 2022.
Full-RAG: A modern architecture for hyper-personalization
Mike Del Balso, CEO & Co-Founder at Tecton, presents "Full RAG," a novel approach to AI recommendation systems, aiming to push beyond the limitations of traditional models through a deep integration of contextual insights and real-time data, leveraging the Retrieval-Augmented Generation architecture. This talk will outline Full RAG's potential to significantly enhance personalization, address engineering challenges such as data management and model training, and introduce data enrichment with reranking as a key solution. Attendees will gain crucial insights into the importance of hyperpersonalization in AI, the capabilities of Full RAG for advanced personalization, and strategies for managing complex data integrations for deploying cutting-edge AI solutions.
Climate Impact of Software Testing at Nordic Testing Days
My slides at Nordic Testing Days 6.6.2024
Climate impact / sustainability of software testing discussed on the talk. ICT and testing must carry their part of global responsibility to help with the climat warming. We can minimize the carbon footprint but we can also have a carbon handprint, a positive impact on the climate. Quality characteristics can be added with sustainability, and then measured continuously. Test environments can be used less, and in smaller scale and on demand. Test techniques can be used in optimizing or minimizing number of tests. Test automation can be used to speed up testing.
TrustArc Webinar - 2024 Global Privacy Survey
How does your privacy program stack up against your peers? What challenges are privacy teams tackling and prioritizing in 2024?
In the fifth annual Global Privacy Benchmarks Survey, we asked over 1,800 global privacy professionals and business executives to share their perspectives on the current state of privacy inside and outside of their organizations. This year’s report focused on emerging areas of importance for privacy and compliance professionals, including considerations and implications of Artificial Intelligence (AI) technologies, building brand trust, and different approaches for achieving higher privacy competence scores.
See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar will review:
- The top 10 privacy insights from the fifth annual Global Privacy Benchmarks Survey
- The top challenges for privacy leaders, practitioners, and organizations in 2024
- Key themes to consider in developing and maintaining your privacy program
20 Comprehensive Checklist of Designing and Developing a Website
Dive into the world of Website Designing and Developing with Pixlogix! Looking to create a stunning online presence? Look no further! Our comprehensive checklist covers everything you need to know to craft a website that stands out. From user-friendly design to seamless functionality, we've got you covered. Don't miss out on this invaluable resource! Check out our checklist now at Pixlogix and start your journey towards a captivating online presence today.
20240609 QFM020 Irresponsible AI Reading List May 2024
Everything I found interesting about the irresponsible use of machine intelligence in May 2024
UiPath Test Automation using UiPath Test Suite series, part 5
Welcome to UiPath Test Automation using UiPath Test Suite series part 5. In this session, we will cover CI/CD with devops.
Topics covered:
CI/CD with in UiPath
End-to-end overview of CI/CD pipeline with Azure devops
Speaker:
Lyndsey Byblow, Test Suite Sales Engineer @ UiPath, Inc.
“I’m still / I’m still / Chaining from the Block”
“An Outlook of the Ongoing and Future Relationship between Blockchain Technologies and Process-aware Information Systems.” Invited talk at the joint workshop on Blockchain for Information Systems (BC4IS) and Blockchain for Trusted Data Sharing (B4TDS), co-located with with the 36th International Conference on Advanced Information Systems Engineering (CAiSE), 3 June 2024, Limassol, Cyprus.
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Dr. Sean Tan, Head of Data Science, Changi Airport Group
Discover how Changi Airport Group (CAG) leverages graph technologies and generative AI to revolutionize their search capabilities. This session delves into the unique search needs of CAG’s diverse passengers and customers, showcasing how graph data structures enhance the accuracy and relevance of AI-generated search results, mitigating the risk of “hallucinations” and improving the overall customer journey.
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Monitoring and observability aren’t traditionally found in software curriculums and many of us cobble this knowledge together from whatever vendor or ecosystem we were first introduced to and whatever is a part of your current company’s observability stack.
While the dev and ops silo continues to crumble….many organizations still relegate monitoring & observability as the purview of ops, infra and SRE teams. This is a mistake - achieving a highly observable system requires collaboration up and down the stack.
I, a former op, would like to extend an invitation to all application developers to join the observability party will share these foundational concepts to build on:
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
The choice of an operating system plays a pivotal role in shaping our computing experience. For decades, Microsoft's Windows has dominated the market, offering a familiar and widely adopted platform for personal and professional use. However, as technological advancements continue to push the boundaries of innovation, alternative operating systems have emerged, challenging the status quo and offering users a fresh perspective on computing.
One such alternative that has garnered significant attention and acclaim is Nitrux Linux 3.5.0, a sleek, powerful, and user-friendly Linux distribution that promises to redefine the way we interact with our devices. With its focus on performance, security, and customization, Nitrux Linux presents a compelling case for those seeking to break free from the constraints of proprietary software and embrace the freedom and flexibility of open-source computing.
Recently uploaded (20)
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Let's Integrate MuleSoft RPA, COMPOSER, APM with AWS IDP along with Slack
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Cosa hanno in comune un mattoncino Lego e la backdoor XZ?
Essentials of Automations: The Art of Triggers and Actions in FME
Essentials of Automations: The Art of Triggers and Actions in FME
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Climate Impact of Software Testing at Nordic Testing Days
Climate Impact of Software Testing at Nordic Testing Days
20 Comprehensive Checklist of Designing and Developing a Website
20 Comprehensive Checklist of Designing and Developing a Website
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
UiPath Test Automation using UiPath Test Suite series, part 5
UiPath Test Automation using UiPath Test Suite series, part 5
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Dondi West Defcon 18 Slides
- 1. Presented by: Dondi West, M.Sc., J.D. Associate, Booz Allen Hamilton Def Con 18 July 30 th – August 1 st 2010 Las Vegas, Nevada A paper arguing that the current rules of war can address the emerging issues raised by cyber warfare A Survey and Examination of the Adequacy of the Laws Related to Cyber Warfare
- 5. I. Introduction to Computer Network Operations and the Actors Involved
- 6. Introduction to CNO Joint Pub 3-13 Categorizes Cyber Acts Under the Domain of Computer Network Operations (CNO)
- 16. III. Popular Issues Intensifying Cyber Warfare Debate
- 21. IV. Arguments Against Creating a Distinct Body of and International Treaty for Cyber Warfare Law
- 25. The rate of technology will outpace the ability for an international cyber regime to produce responsive policy, while the flexibility allotted by the UN Charter are able to absorb technological advances.
- 27. Question and Answers Contact Information: Email: [email_address] Twitter: @dondiwest BLOG: www.cyberwarandlaw.com