Cyber Warfare Research Articles

Nuclear and Radiological Material Smuggling in the Indian Ocean: Implications for India’s Coastal Security

Incidents of nuclear and radiological smuggling in the Indian Ocean are a matter of concern. Attempts to smuggle nuclear material within India have also been reported as recently as 2021. Indian security agencies previously have also seized natural uranium in coastal states such as Gujarat, Maharashtra and Bengal indicating how vulnerable the Indian coast is to radiological and nuclear smuggling. The Nuclear Security Index has also consistently ranked India below China and Pakistan despite their poor record on nuclear non-proliferation. These facts highlight concerns regarding the possible misuse of nuclear and radiological material by criminal and terrorist networks. Since India is targeted by terrorist groups and lies in the vicinity of countries and routes that see frequent nuclear and radiological trafficking, there are inevitable implications for the Indian coastal security system. This article identifies and analyses these security implications and argues for a beefing up of India’s coastal security.

REACT: Autonomous intrusion response system for intelligent vehicles

Autonomous and connected vehicles are rapidly evolving, integrating numerous technologies and software. This progress, however, has made them appealing targets for cybersecurity attacks. As the risk of cyber threats escalates with this advancement, the focus is shifting from solely preventing these attacks to also mitigating their impact. Current solutions rely on vehicle security operation centers, where attack information is analyzed before deciding on a response strategy. However, this process can be time-consuming and faces scalability challenges, along with other issues stemming from vehicle connectivity. This paper proposes a dynamic intrusion response system integrated within the vehicle. This system enables the vehicle to respond to a variety of incidents almost instantly, thereby reducing the need for interaction with the vehicle security operation center. The system offers a comprehensive list of potential responses, a methodology for response evaluation, and various response selection methods. The proposed solution was implemented on an embedded platform. Two distinct cyberattack use cases served as the basis for evaluating the system. The evaluation highlights the system’s adaptability, its ability to respond swiftly, its minimal memory footprint, and its capacity for dynamic system parameter adjustments. The proposed solution underscores the necessity and feasibility of incorporating dynamic response mechanisms in smart vehicles. This is a crucial factor in ensuring the safety and resilience of future smart mobility.

The role of cyber psychology in preventing extremism

The efforts of researchers began in the field of: psychology, sociology, anthropology. we talk about new concepts and keys in explaining extremism and the reasons for its escalation, in order to negate the idea that belonging to these groups are criminals and have criminal precedents. These studies came out with the need to search for other causes and factors that explain the transformation of a percentage of young people belonging to this ideology from the ideal dreamy psychological desire and the future for life and well-being. To the desire for extremism, murder and suicide. As well as searching for them in the digital world, which is the focus of their meetings and interactions in order to develop plans for their future terrorist projects. This article aims to clarify the role that cyber psychology can play in preventing extremism, especially as it is a science concerned with the impact of the Internet and cyberspace on human behavior and social networks, and the extent to which psychologists are able to provide assistance within the digital environment. It is interested in studying the impact of technology and modern communication technology on the individual with the study of the following issues: cyber suicide, cyber addiction, cyber terrorism and cyber-crime. We will also try to compare some concepts related to cyberspace: cybersecurity and information security. Keywords: cyber-Psychology; Protection; Extremism; Electronic Suicide; Cyber Security; Information Security.

System-level operational cyber risks identification in industrial control systems

ABSTRACT In Industrial Control Systems (ICS), where complex interdependencies abound, cyber incidents can have far-reaching consequences. Dependency modelling, a valuable technique for assessing cyber risks, aims to decipher relationships among variables. However, its effectiveness is often hampered by limited data exposure, hindering the analysis of direct and indirect impacts. We present a unique method that transforms dependency modelling data into a Bayesian Network (BN) structure and leverages causality and reasoning to extract inferences from seemingly unrelated events. Using operational ICS data, we confirm our method enables stakeholders to make better decisions about system security, stability, and reliability.

Digital Mapuche activism between decolonisation and digital warfare

Digital Mapuche activism between decolonisation and digital warfare

NATIONAL SECURITY AND THE TOOLS OF CYBER POWER: A REVIEW ON THE AREAS OF STATE HEGEMONIA

In the post-Cold War era, in terms of international relations, 'cyber security' emerges as a significant security issue for the spheres of state sovereignty beyond the personal sphere. In addition to the harmful effects of cyber threats on the functioning of public institutions and organizations, İt also raises a problem for states, such as managing perception operations by creating a society more open to manipulative influences. In our globalizing world, as the most important actor of the system, the States' dependence on each other has increased, and at the same time, there has been a period in which the fundamental security issues are intertwined for the States. In such a situation where it is not possible for the States to define themselves outside the system, classical realist approaches are insufficient to explain the changing -and increasingly abstracted-security areas. Nation-states must develop more complex skills and prioritize cooperation to deal with these new security threats. In our study, which focuses on the national cyber security perceptions of states, the measures taken by the States in the cyber world on priority issues, such as institutional functioning and survival problems, are analyzed in terms of national security strategies. On the theme of 'new security', the main focus is the necessity for actors to develop new defense capabilities within the framework of the 'quick response and easy adaptation' in the face of increasing and diversifying cyber threats. In our study, which deals with the efforts of digital Nation-states to increase their effectiveness in cyberspace in determining the 21st-century sovereignty areas and the increase in their tendency towards cyber warfare tools, the active/passive defense methods followed by the States in the perspective of cyber security strategies have been evaluated. In this context, it is the most acceptable method for the States to prefer the 'active defense model' in order to avoid cyber attacks against vital institutions such as education and health.

Xerox soldiers, YouTube commanders and Twitter brigades: information warfare in eastern Congo

Abstract Researching contemporary warfare requires attention to digital connectivity in contexts of crisis and conflict. This article traces the evolution of information warfare with a focus on the digitization, democratization and polarization of conflict-related communication and discourse. We argue that information warfare amplifies with the advent of social media—multiplying the scales for the conduct of hostilities, reducing distance and duration, and democratizing participation—notably in Africa, a continent often considered a trailblazer of digital innovation. Orthodox scholarship, however, tends to focus disproportionately on cases relevant to the global North. Examples include the global ‘war on terror’ or the Russian war against Ukraine. Investigating protracted violent conflict in the global South instead, our analysis fills an important gap in this literature. Through the prism of the African Great Lakes region, the world's deadliest contemporary war zone, we leverage a counterintuitive perspective of a conflict considered backwards in mainstream analysis. Drawing from long-term field research and digital ethnography, we propose the notion of ‘reciprocal warscapes’, where not only do battlefield events influence the underlying politics of conflict but where, reciprocally, digital warfare increasingly shapes the conduct of war itself.

Criminal Liability Of Actors Who Participate In Terrorism Criminal Acts In Indonesia

The crime of terrorism is a form of crime with an international dimension that is very frightening to the public. Terrorism is a crime against humanity which is classified as an extraordinary crime because it has succeeded in creating chaos based on religion, sect or organization. This crime against humanity is regulated in Law of the Republic of Indonesia Number 5 of 2018 concerning Terrorism Crimes. Terrorist networks that are difficult to trace and have wide access make the problem of terrorism difficult to eradicate. Easy access between countries is one of the reasons why it is difficult to break the chain of terrorist networks. So efforts are needed through bilateral, regional and international cooperation to eradicate terrorism. The research method used in this paper uses normative legal research based on legal theories. By taking a legislative approach through literature study. This research aims to find out what causes perpetrators to commit criminal acts of terrorism and to find out what form of criminal law accountability exists for perpetrators who participate in criminal acts of terrorism in Indonesia.

Guerra Cibernética e Terrorismo Cibernético: uma Análise da invasão Russa na Ucrânia

This article examines the complex intersection between cyber warfare and cyber terrorism, using the Russian invasion of Ukraine and the subsequent cyber attacks as a case study. It will briefly explore the historical context, the motivations behind the attacks, and the effects on the civilian population and critical infrastructure. The article will address both kinetic and non-kinetic cyber effects experienced by Ukraine, highlighting the need for a deeper understanding of these phenomena and more effective strategies for mitigating their impacts. In conclusion, it will seek to understand the correlation and peculiarities of Cyber Warfare and Cyber Terrorism.

Analyzing Digital Propaganda on X through Topic Modelling Approach: The Case of Afghanistan

The dissemination of propaganda has become a formidable weapon, with nation-states exploiting social media platforms to engineer narratives favorable to their geopolitical interests. This study delved into Indo-Pakistan states' orchestrated propaganda in the wake of the Taliban's recapture of Afghanistan. This period is marked by a sophisticated blend of propaganda strategies to mold online discourse. Utilizing a dataset derived from X (formerly Twitter), the research examines how Pakistan and India leveraged information warfare to advance their politico-diplomatic narratives, shedding light on the propaganda strategies of such digital warfare and the emergence of narratives and counter-narratives. The findings highlight the instrumental role of propaganda strategies in amplifying political, diplomatic, security, and humanitarian narratives and manipulating public discourse, with distinct tactics and officially approved state maneuvers identified through the topic modeling and analyzing key strategies of propaganda.

The Tightrope of Individual Liberties amid Pakistan’s Counter-Terrorism Agenda

This doctrinal research article explores the nuances, pitfalls, and opportunities within this intricate landscape. This doctrinal research delves into the intricate balance between individual liberties and Pakistan's counter-terrorism agenda, navigating the complex terrain where security imperatives intersect with fundamental rights. As Pakistan grapples with persistent security threats from terrorism, its response has often entailed the implementation of stringent measures aimed at thwarting terrorist activities and ensuring public safety. However, these measures have raised concerns about their impact on civil liberties, including freedoms of expression, association, and privacy. Drawing upon legal frameworks, policy documents, and judicial precedents, this research critically examines the evolving landscape of counter-terrorism laws and practices in Pakistan and their implications for individual liberties. It scrutinizes the compatibility of counter-terrorism measures with constitutional guarantees and international human rights standards, assessing the extent to which security imperatives have encroached upon fundamental rights and freedoms. Furthermore, this research explores the role of judicial oversight, executive discretion, and legislative reforms in reconciling the tension between security concerns and individual liberties within Pakistan's legal framework. It analyses landmark court decisions, legislative enactments, and government policies to elucidate the legal and institutional mechanisms aimed at safeguarding individual liberties while countering terrorism effectively. Moreover, this research situates Pakistan's counter-terrorism efforts within the broader context of regional security dynamics, highlighting the interconnectedness of domestic security challenges with regional conflicts, geopolitical rivalries, and transnational terrorist networks. It underscores the importance of regional cooperation, information sharing, and diplomatic engagement in addressing common security threats while respecting individual liberties across borders. By critically examining the tightrope walk between individual liberties and Pakistan's counter-terrorism agenda, this research contributes to a nuanced understanding of the challenges and trade-offs inherent in balancing security imperatives with respect for fundamental rights.

Cyber Social Disruption due to Cyber Attacks

We analyze the implications of cyber war actions directed at specific targets, such as critical infrastructures, for modern civil societies that are profoundly dependent on computer systems. These critical infrastructures, whether they are cyber-physical systems or computer systems can be paralyzed or even destroyed if the systems used to directly or remotely manage them are cyber-attacked. Cyber-attacks in the context of cyber war, can generate chaos, which combined with the domino effects caused by the impact on other computer systems, then those directly attacked but indirectly affected, can theoretically lead to major disruptions to the internal order, or even to civil war, due to the scope that such actions may reach. The disturbances caused in civil society as a whole, and in military structures and equipment can go far beyond the local effects on the targets attacked, as would happen in a conventional kinetic war action. The crisis and social disturbance caused may even put the sovereignty of the attacked state at risk. For this specific case of social disruption, which is caused by cyber war actions, we use a concept to describe the situation more adequately, which we call Cyber Social Disruption.

Understanding the contexts in which female sex workers sell sex in Kampala, Uganda: a qualitative study

BackgroundStructural, interpersonal and individual level factors can present barriers for HIV prevention behaviour among people at high risk of HIV acquisition, including women who sell sex. In this paper we document the contexts in which women selling sex in Kampala meet and provide services to their clients.MethodsWe collected qualitative data using semi-structured interviews. Women were eligible to participate if they were 18 years or older, self-identified as sex workers or offered sex for money and spoke Luganda or English. Ten women who met clients in venues and outdoor locations were selected randomly from a clinic for women at high risk of HIV acquisition. Ten other women who met clients online were recruited using snowball sampling. Interviews included demographic data, and themes included reasons for joining and leaving sex work, work locations, nature of relationships with clients and peers, interaction with authorities, regulations on sex work, and reported stigma. We conducted interviews over three months. Data were analysed thematically using a framework analysis approach. The coding framework was based on structural factors identified from literature, but also modified inductively with themes arising from the interviews.ResultsWomen met clients in physical and virtual spaces. Physical spaces included venues and outdoor locations, and virtual spaces were online platforms like social media applications and websites. Of the 20 women included, 12 used online platforms to meet clients. Generally, women from the clinic sample were less educated and predominantly unmarried, while those from the snowball sample had more education, had professional jobs, or were university students. Women from both samples reported experiences of stigma, violence from clients and authorities, and challenges accessing health care services due to the illegality of sex work. Even though all participants worked in settings where sex work was illegal and consequently endured harsh treatment, those from the snowball sample faced additional threats of cybersecurity attacks, extortion from clients, and high levels of violence from clients.ConclusionsTo reduce risk of HIV acquisition among women who sell sex, researchers and implementers should consider these differences in contexts, challenges, and risks to design innovative interventions and programs that reach and include all women.

Intrusion Detection Using Machine Learning and Deep Learning Models on Cyber Security Attacks

Intrusion Detection Using Machine Learning and Deep Learning Models on Cyber Security Attacks

Christopher Whyte and Brian M. Mazanec: Understanding cyber warfare. Politics, Policy and Strategy. Second edition.

-

Cyber Warfare Is The Newest Challenge To Support Indonesian National Resilience

Cyber Warfare Is The Newest Challenge To Support Indonesian National Resilience

An Analysis of Cyberwarfare Attribution Techniques and Challenges

Identifying the source of cyber-attacks is crucial to ensuring cybersecurity. This study examines different attribution techniques, obstacles, and real-world examples in the context of cyber warfare. It explores challenges such as incorrect attributions, ethical concerns, legal barriers, and complexities in the digital environment. The discussed topic includes modern techniques such as malware analysis, network traffic study, digital forensics, and the implementation of AI/ML. These methods help improve cybersecurity and shape cyber warfare strategies. Case studies on the Standard Bank South Africa ATM fraud and the TransUnion South Africa cyber-attack illustrate the importance of attributing cyber incidents, especially with global cyber criminals. The analysis emphasizes the need for a comprehensive approach that takes into account legal, technical, ethical, and geopolitical considerations relevant to the evolution of computing and cyber warfare. It stresses the need for cybersecurity tools enhancement and global cooperation. The study pairs attribution challenges with techniques to deepen our understanding of threats. It underlines the need for ongoing cybersecurity research and adaptation, sustained innovation, and collaboration to fortify global cyber defenses.

Threat Modeling for Cyber Warfare Against Less Cyber-Dependent Adversaries

Cyber warfare poses a substantial threat in today's interconnected world, where digital attacks can transcend physical boundaries and affect targets globally. Technologically, less advanced adversaries, such as smaller nations or organizations with limited resources, face unique challenges in defending against sophisticated cyber attacks from more advanced entities. This paper explores the threat landscape for these adversaries and proposes a tailored threat modeling framework to address their specific vulnerabilities and needs. By examining the evolution of cyber warfare, including historical incidents and the increasing sophistication of cyber attacks, the study highlights the limitations of existing threat modeling approaches like the Cyber Kill Chain, MITRE ATT&CK Framework, and SWOT analysis when applied to less advanced adversaries. A comprehensive literature review underscores the gaps in current research, particularly the necessity for frameworks tailored to asymmetric technological capabilities. Employing a mixed methods approach, the research combines qualitative and quantitative data from primary sources, such as interviews with cybersecurity experts, and secondary sources, including existing literature and case studies. The proposed framework focuses on asset identification and classification, vulnerability assessment, threat analysis, and risk assessment. Proactive measures, such as basic cyber hygiene practices, advanced threat detection systems, and collaboration with technologically advanced allies, are recommended alongside reactive measures like incident response planning and disaster recovery. The importance of international cooperation and information sharing is also emphasized. Case studies of cyber incidents involving less advanced adversaries, such as the attacks on Estonia, Georgia, and Ukraine, validate the framework and demonstrate its practical application. The findings indicate that the tailored threat modeling framework effectively addresses the unique challenges faced by less advanced adversaries, enhancing their ability to mitigate risks and improve their cybersecurity posture. This study provides valuable insights and offers a practical framework to bolster defenses against cyber warfare, with future research needed to explore emerging threats and technologies further.

A Theory of Offensive Cyberspace Operations and Its Policy and Strategy Implications

The significance of Offensive Cyberspace Operations (OCO) in cyber warfare and national security is increasingly recognised, yet academic literature lacks a dedicated theoretical framework to fully articulate its unique aspects and strategic dimensions. Traditionally enveloped within the broader context of information warfare, OCO's distinct characteristics have often been overlooked. Addressing this gap, our paper aims to delineate the specificities of OCO and establish a structured conceptual model that enhances understanding and operational clarity. To achieve this, the study adopts an interpretive approach, drawing from existing literature on information warfare and cyberspace, alongside official U.S. government and military publications on cyberspace operations. Employing the theory-building method, we focus primarily on conceptualization. This involves creating a coherent conceptual framework through abstraction, synthesis, and diagramming, informed by seminal works in the field. Among the paper's key contributions are detailed conceptual models that shed light on OCO's integration within the broader cyber domain, the influence of U.S. policy and strategy on OCO, and the critical triad for successful operations: access, vulnerabilities, and payloads. Furthermore, we elucidate the primary and secondary components of OCO, specifically cyberspace attack and exploitation, offering new insights into their roles and implications. Thus, the framework includes conceptual maps highlighting OCO's key elements, relationships, and challenges, aiming to advance academic discourse, practical strategies, and policy in cyberspace operations. This effort marks a significant step forward in both theoretical engagement and practical application within the field.

‘It Takes a (Global) Village’: Towards a Multi-Actor Networked Conception of Security

On December 4th 2023, Oliver Dowden, the British Deputy Prime Minister, issued his first annual resilience statement, outlining the range of threats faced by the United Kingdom, natural, economic, military, and technological. The purpose of this paper is to examine the contemporary threat landscape through the critical lens of complex interdependency (cf Keohane and Nye), and to consider the way in which approaches and theoretical models of threat and threat mitigation can and should (or should not) be applied in different domains. Multi-Domain conflict shows how the modern battlefield is a highly complex realm of interlinked environments (including the non-physical); in the same way, ‘unrestricted warfare’ (Qiao and Wang) collapses the traditional DIME concept of discrete arms of state power. How may a liberal democracy protect itself and its citizens against mis/disinformation, cyber warfare, hacktivism, NSAs and foreign powers ready and able to to wage ‘war’ in a wide range of ways, using IW both as a specific methodology and as a force multiplier for other forms of destabilization. Focusing largely but not overwhelmingly on the informational realm, the paper will consider models of threat mitigation applied in other domains, from the elite innovative force of the Rifle Brigade to the public health response to the COVID-19 pandemic to the behavioural science-based influence campaigns devised by the UK ‘Nudge Unit’ and beyond. It will ultimately argue that a nation which faces a range of internal and external threats to its stability must devise policy and strategy which themselves operate internally and externally. Any approach which is not based on action at all levels of society – civil, military, educational, technical, diplomatic – is doomed to failure before it starts. However, the key challenge will be how to build this in societies which have grown ever more atomised, divided, and opposed to cooperation.