Framing cyber warfare: an analyst’s perspective

Ween, A.; Dortmans, Peter J.; Thakur, Nitin; Rowe, Cayt

doi:10.1177/1548512917725620

Cited by 3 publications

(3 citation statements)

References 19 publications

(28 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The framing effect is one of the many different cognitive biases that we can be susceptible to. Framing strategies (i.e., strategies for communicating a complex societal problem in such a way that the main arguments are clearly understandable and cannot be easily challenged [62]) have been studied extensively in the context of cyber risk [63][64][65] and cyber warfare [66,67]. A situation that is framed differently may elicit different responses [68].…”

Section: Groupsmentioning

confidence: 99%

Systematically Understanding Cybersecurity Economics: A Survey

2021

View full text Add to dashboard Cite

Insights in the field of cybersecurity economics empower decision makers to make informed decisions that improve their evaluation and management of situations that may lead to catastrophic consequences and threaten the sustainability of digital ecosystems. By drawing on these insights, cybersecurity practitioners have been able to respond to many complex problems that have emerged within the context of cybersecurity over the last two decades. The academic field of cybersecurity economics is highly interdisciplinary since it combines core findings and tools from disciplines such as sociology, psychology, law, political science, and computer science. This study aims to develop an extensive and consistent survey based on a literature review and publicly available reports. This review contributes by aggregating the available knowledge from 28 studies, out of a collection of 628 scholarly articles, to answer five specific research questions. The focus is how identified topics have been conceptualized and studied variously. This review shows that most of the cybersecurity economics models are transitioning from unrealistic, unverifiable, or highly simplified fundamental premises toward dynamic, stochastic, and generalizable models.

show abstract

Section: Groupsmentioning

confidence: 99%

Systematically Understanding Cybersecurity Economics: A Survey

2021

View full text Add to dashboard Cite

show abstract

“…However, one complexity of incorporating cyber effects into whole-of-force capability analysis is that it is both an enabling capability and a warfighting domain. 13 The vulnerability of our information and communication technology (ICT) infrastructure (enablers) to cyber attack is well-suited to analysis using the SRF, as illustrated.…”

Section: Risk Analysis Supporting Whole-of-force Capability Analysismentioning

confidence: 99%

Prioritizing investment in military cyber capability using risk analysis

Rowe

Zadeh

Garanovich

et al. 2017

Journal of Defense Modeling & Simulation

Self Cite

View full text Add to dashboard Cite

Defense capability planning traditionally uses scenario-based war-gaming to support force design decision making and to prioritize investment. Some aspects of cyber warfare are problematic for war-gaming, such as poor characterization of cyber effects and difficulty estimating the true capability of own and opposing forces. In addition, strategic-level assessments typically draw on the expert judgment of senior officers, whose tactical experience likely precedes cyber warfare, and this will limit their intuition in the emerging cyber domain. Risk analysis, and specifically the strategic risk framework, is an alternative approach to prioritizing investment in cyber capabilities, which is well-suited to analysis of cross-domain and whole-of-government functions. This paper illustrates the application of risk analysis to cyber risk for the novel purpose of developing insights for whole-of-force capability analysis.

show abstract

“…Attribution, in the context of cyber warfare, presents unique difficulties that are not apparent in other conventional means and methods of armed conflict. For example, cyber weapons are easy to conceal because they are just abstract patterns of bits, looking just like legitimate data and programs until subjected to detailed inspection (Ween et al, 2017). Furthermore, cyber weapons do not require physical proximity of the attacker to the victim since information is automatically and quickly forwarded on the Internet and most of times it will be unlikely to come with intrinsic attribution data due to cyber weapons capabilities to leave no traces (Brenner, 2007).…”

Section: Research Statement and Approachmentioning

confidence: 99%

A new systematic modelling methodology for improving cyber - attack evaluation on states Critical Information Infrastructure (CII)

Pipyros¹,

Πιπύρος²

View full text Add to dashboard Cite

Η αύξηση του αριθμού και της πολυπλοκότητας των κυβερνοεπιθέσεων στις κρίσιμες υποδομές ενός κράτους έχει μετατρέψει τον κυβερνοχώρο σε ένα νέο πεδίο διεξαγωγής επιχειρήσεων σε συνέχεια της ξηράς, της θάλασσας, του αέρα και του διαστήματος. Η παρούσα διατριβή παρουσιάζει μια νέα μεθοδολογία για την αξιολόγηση των επιπτώσεων των κυβερνοεπιθέσεων στις κρίσιμες υποδομές ενός κράτους. Η ανάλυση επικεντρώνεται στο Χάρτη των Ηνωμένων Εθνών και πιο συγκεκριμένα στο υπάρχον κανονιστικό πλαίσιο της «χρήσης βίας» (‘use of force’) προκειμένου να καθοριστεί πότε οι εν λόγω κυβερνοεπιθέσεις συνιστούν παραβίαση του υπάρχοντος κανόνος δικαίου κατά το διεθνές δίκαιο. Η εν λόγω μεθοδολογία στηρίζεται αφενός στα ποιοτικά κριτήρια αξιολόγησης των επιπτώσεων των κυβερνοεπιθέσεων, όπως αυτά έχουν προταθεί από το Συμβούλιο των Εμπειρογνωμόνων στο Νατοϊκό «Εγχειρίδιο του Ταλλίν» (το οποίο διαπραγματεύεται το θέμα του διεθνούς δικαίου των επιχειρήσεων κυβερνοχώρου) και αφετέρου στη χρησιμοποίηση πολύ-παραγοντικών μεθόδων λήψης αποφάσεων (Multi-attribute Decision Making Systems). Η νέα μεθοδολογία συνδυάζει τη χρήση αλγορίθμων λήψης αποφάσεων και των κριτηρίων αξιολόγησης των κυβερνοεπιθέσεων του Συμβουλίου των Εμπειρογνωμόνων, προτείνοντας ωστόσο ένα διαφορετικό τρόπο χρησιμοποίησής τους βασιζόμενο στα ποιοτικά τους χαρακτηριστικά και ιδιότητες. Για την αξιολόγηση της νέας μεθοδολογίας χρησιμοποιούνται δύο παραδείγματα επιθέσεων στις κρίσιμες υποδομές ενός κράτους. Το πρώτο με τη χρήση συμβατικών όπλων και το δεύτερο με τη χρήση κυβερνοεπιθέσεων. Ο συνδυασμός ποιοτικών και ποσοτικών μεθοδολογιών ανάλυσης μας οδηγεί σε μια πιο ολοκληρωμένη και ακριβή αξιολόγηση και κατηγοριοποίηση των κυβερνοεπιθέσεων.

show abstract

Framing cyber warfare: an analyst’s perspective

Cited by 3 publications

References 19 publications

Systematically Understanding Cybersecurity Economics: A Survey

Systematically Understanding Cybersecurity Economics: A Survey

Prioritizing investment in military cyber capability using risk analysis

A new systematic modelling methodology for improving cyber - attack evaluation on states Critical Information Infrastructure (CII)

Contact Info

Product

Resources

About