Networking (Formerly Newsmedia) May 30, 2023

Safeguarding Cyberspace: The Imperative for Reform & Rebalance

The United States (US) will most likely continue to suffer unacceptable losses in strategic competition with autocracies in cyberspace until it shapes the cyberspace domain by improving cyberspace attention, leadership, and governance, fostering a more collaborative relationship with private industry to advance digital literacy and cybersecurity, and involving more offensive cyberspace operations through integrated deterrence via defend forward and persistent engagement strategies. Allies and partners should be engaged to ensure synchronous policies. The 2023 National Cybersecurity Strategy (NCS), though appropriately advancing cybersecurity, will unlikely bend the positive slope of Intellectual Property (IP) theft, ransomware loss, malign cyber information operations (CIO), and ongoing cyberspace threats to US critical infrastructure by Russia and China. The US remains largely timid in cyberspace, especially in punishing malign actors, fearing escalation to kinetic conflict, and limits itself to cybersecurity. To date, US operations involving denial capabilities have not resulted in escalation to military conflict. To shape the cyberspace domain to protect US and allied interests and protect US political and economic sovereignty, the United States must: 1. Shape the cyberspace domain and out-compete its adversaries, who view their relationships with the US as zero sum. 2. Afford the National Cyber Director (NCD) the authorities to synchronize and integrate US efforts to shape the cyberspace domain, including combating foreign information operations (IO). 3. Invest in emerging technology and public-private partnerships to out-compete adversaries in the cyberspace domain, including expanding cyber resilience, advancing private sector cooperation through a broader cyber incident reporting base, establishing a non-DoD cyberspace Reserve Force, establishing a Federal “Hack Us” program through the Office of the NCD (ONCD) and Cybersecurity and Infrastructure Security Agency (CISA), and enacting bipartisan legislation to protect Americans from malign, foreign cyber information activities. 4. Provide certain Federal government agencies with pre-approved authorities to engage cyberspace threats with proportional, defensive cyberspace operations to deter, disrupt, and destroy malicious cyberspace activity at its source.

Networking (Formerly Newsmedia, Information Communications and Technology) May 30, 2022

Networked Power: Addressing the role of networking & communication technologies in 21st-century influence operations

The paper discusses how adversaries use propaganda, disinformation, and deception through modern networking and communication technology (NCT) to gain strategic advantages, with social media emerging as a powerful tool. NCT has made it easier and cheaper to influence large populations, shifting power from governments to individuals, creating new national security concerns. These methods are often used alongside diplomatic, military, or economic tools, but future strategies may prioritize information as a key instrument of power. While NCT can defend against malign influence and protect democratic values, it also poses risks, including threats to civil liberties. The U.S. and its allies are unprepared to address these challenges, risking ineffective responses that could harm free speech and privacy. The paper outlines research on NCT, providing recommendations for securing the benefits of a connected world through regulatory reform, partnerships, education, and national strategy.

Networking and Media (Formerly NewsMedia) May 31, 2024

Advancing Cyber Defense and Information Integrity: A Comprehensive Approach to Securing U.S. National Security

Despite significant efforts in legislation, strategy, and policy, current defenses against cyber and information operations are likely inadequate to counter the growing threat of malign cyberspace activities. The U.S. faces considerable challenges in protecting critical infrastructure and democratic processes from sophisticated cyber threats and disinformation campaigns. Adversaries, including China, Russia, North Korea, and Iran, use cyber-attacks, economic espionage, and influence operations to disrupt government functions, destabilize democracy, and challenge U.S. global leadership. Cyberspace’s appeal to malign actors lies in its low cost, scalability, and deniability, allowing easy manipulation of digital environments, from social media to critical infrastructure. Cyber tools exploit vulnerabilities in software, hardware, and human factors, making everything connected to the internet a potential target. The increasing use of artificial intelligence and algorithms further complicates defense efforts. To address these threats, a comprehensive "whole-of-government and society" approach is necessary. This includes strengthening cybersecurity defenses, promoting digital and media literacy, regulating social media, and fostering public resilience. Greater collaboration with industry, academia, and citizens is essential to implement successful strategies. Additionally, U.S. strategy must expand offensive cyber capabilities to deter adversaries when defense and deterrence fail. The paper recommends four main actions: 1) Expanding education and messaging to combat cyber and disinformation threats. 2) Strengthening partnerships for sharing intelligence and coordinating defense strategies. 3) Enhancing cybersecurity regulations for critical infrastructure and digital platforms. 4) Modernizing infrastructure and cyber defenses while using cyber compellence to deter malign activities. In conclusion, the U.S. must adopt a whole-of-society approach to strengthen its cyber and information operation defenses, involving allies, the private sector, and the public to safeguard national security, protect democracy, and secure America's global role.