The case for cyber counterintelligence

Duvenage, Petrus; Solms, Suné von

doi:10.1109/icastech.2013.6707493

Cited by 4 publications

(3 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The discussion in this sub-section will thus aid in accomplishing the paper's objective of positioning CTH into a broader context of CCI. According to Duvenage & von Solms (2014) CCI is part of a multi-disciplinary counterintelligence that aims to deter, prevent, degrade, exploit and neutralise attempts by adversaries that seek to alter confidentiality, integrity and availability of sensitive and critical information through methods of cyber.…”

Section: Cci: Concept and Modelmentioning

confidence: 99%

See 1 more Smart Citation

Effective Cyber Threat Hunting: Where and how does it fit?

Ntingi¹,

Duvenage²,

Toit³

et al. 2022

eccws

View full text Add to dashboard Cite

Traditionally threat detection in organisations is reactive through pre-defined and preconfigured rules that are embedded in automated tools such as firewalls, anti-virus software, security information and event management (SIEMs) and intrusion detection systems/intrusion prevention systems (IDS/IPS). As the fourth industrial revolution (4IR) brings with it an exponential increase in technological advances and global interconnectivity, the cyberspace presents security risks and threats the scale of which is unprecedented. These security risks and threats have the potential of exposing confidential information, damaging the reputation of credible organisations and/or inflicting harm. The regular occurrence and complexity of cyber intrusions makes the guarding enterprise and government networks a daunting task. Nation states and businesses need to be ingenious and consider innovative and proactive means of safeguarding their valuable assets. The growth of technological, physical and biological worlds necessitates the adoption of a proactive approach towards safeguarding cyber space. This paper centers on cyber threat hunting (CTH) as one such proactive and important measure that can be adopted. The paper has a central contention that effective CTH cannot be an autonomous ‘plug in’ or a standalone intervention. To be effective CTH has to be synergistically integrated with relevant existing fields and practices. Academic work on such conceptual integration of where CTH fits is scarce. Within the confines of the paper we do not attempt to integrate CTH with many of the various relevant fields and practices. Instead, we limit the scope to postulations on CTH’s interface with two fields of central importance in cyber security, namely Cyber Counterintelligence (CCI) and Cyber Threat Monitoring and Analysis (CTMA). The paper’s corresponding two primary objectives are to position CTH within the broader field of CCI and further contextualise CTH within the CTMA domain. The postulations we advanced are qualified as tentative, exploratory work to be expanded on. The paper concludes with observations on further research.

show abstract

Section: Cci: Concept and Modelmentioning

confidence: 99%

“…Figure 1: CCI model (Duvenage & von Solms, 2015) According to Duvenage, Jaquire & von Solms (2016) defensive counterintelligence measures provide information and act as triggers to alert the offensive operations. Applied to this paper, the passive half of the CCI model (i.e.…”

Section: Cci: Concept and Modelmentioning

confidence: 99%

Effective Cyber Threat Hunting: Where and how does it fit?

Ntingi¹,

Duvenage²,

Toit³

et al. 2022

eccws

View full text Add to dashboard Cite

show abstract

“…More particularly, the threat landscape, in which threat actors of various types have expanding intelligence capabilities, is underlining the need for organisations to incorporate counterintelligence (CI) -and thus cyber counterintelligence (CCI) -as part of their security approaches (Duvenage et al, 2020a;Jelen, 2020). Duvenage (2019) defines CCI as "the subset of multi-disciplinary CI…”

Section: Introductionmentioning

confidence: 99%

A Cyber Counterintelligence Competence Framework

Sithole

Toit²

2022

eccws

View full text Add to dashboard Cite

The increased use of cyberspace and technological advancement are fundamentally changing the cyber threat landscape. Cyberattacks are becoming more sophisticated, frequent, and destructive. Internationally, there is a growing acceptance that Cyber Counterintelligence (CCI) is essential to counter cyber-attacks optimally. Therefore, in addition to government intelligence and security agencies, more companies are incorporating a CCI approach as a critical element of their posture for engaging cyber threats. However, the successful adoption of a CCI approach depends on the availability of skilled CCI professionals equipped with the requisite competences. The creation of such CCI professionals, in turn, requires a framework for developing the necessary CCI competences. At least in as far as reviewed academic literature is concerned, there is no existing postulation on a framework to develop the CCI competences, specifically for developing countries. Given the complexity and multi-disciplinary nature of the emerging CCI field, such a framework needs to provide two distinctive skillsets linked to CCI’s two distinct areas of expertise, namely cyber (security) and counterintelligence. The paper presents a high-level Cyber Counterintelligence Competence Framework (CCIC Framework) that outlines dimensions of CCI, functional areas, job roles and requisite competences (knowledge, skills, and abilities), and tasks for each CCI job role. The CCI framework also outlines five levels of proficiency expected for each job role. The identification of competences and levels of proficiency are integral to the successful implementation of the framework and workforce development. The CCIC Framework is intended to be used as a tool to retain, assess, and monitor knowledge, skills, and abilities for CCI workforce development. In addition, the CCIC Framework can be used to assist in providing the basis for individual performance management, education, training, and development pathway, as well as career progression. Therefore, this paper presents a CCIC Framework which is an overarching, integrative construct that synergistically combines different components required to develop a competent workforce for the emerging field of CCI.

show abstract