• Ten legislative proposals to defend America against foreign influence operations

    More than a year after Russia’s broad hacking and disinformation campaign of interference in the 2016 presidential election, and with midterm elections looming on the horizon, Congress and the Trump administration have not taken any clear action to increase U.S. defenses against the foreign interference threat. There are important steps we can, and must, take to defend our institutions against adversaries who seek to undermine them. Many of Russia’s tactics have exploited vulnerabilities in our societies and technologies, and loopholes in our laws. Some of the steps necessary to defend ourselves will involve long-term work, others will require clear action by the Executive Branch to ensure Americans are united against the threat we face, and steps to both deter and raise the costs on such actions.

  • Accelerating detection of zero-day vulnerabilities

    Today, commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and free and open-source (FOSS) software support nearly all aspects of DoD, military, and commercial operations. Securing this diverse technology base requires highly skilled hackers who reason about the functionality of software and identify novel vulnerabilities. To address the challenges facing our abilities to scale and accelerate vulnerability detection, DARPA last week announced the Computers and Humans Exploring Software Security (CHESS) program.

  • New strategies for countering Russian social media influence in Eastern Europe

    Russia is waging a social media campaign in the Baltics, Ukraine, and nearby states to sow dissent against neighboring governments, as well as NATO and the European Union. “Nowhere is this threat more tangible than in Ukraine, which has been an active propaganda battleground since the 2014 Ukrainian revolution,” said the lead author of a new RAND report. “Other countries in the region look at Russia’s actions and annexation of Crimea and recognize the need to pay careful attention to Russia’s propaganda campaign.”

  • It’s not just Facebook: Countering Russia’s social media offensive

    Russian influence operations exploit the vulnerabilities of social media platforms to disseminate false narratives and amplify divisive content in order to undermine democracies, divide societies, and weaken Western alliances. In conducting these operations, the Kremlin employs a variety of tools across the social media space, including fake accounts/personas, political advertisements, bot networks, and traditional propaganda outlets. Additionally, Russian influence operations utilize a range of social media platforms, each with a different role, to distract public discussion, foment social unrest, and muddle the truth.

  • Hackers can steal data via power lines

    Researchers have shown once again that air-gapped PCs are not safe from a determined and patient attacker. The researchers have already devised several techniques to extract data from isolated or air-gapped computers that store highly sensitive data.

  • Broad action required to combat disinformation on social media: Experts

    The business model of American social media allows foreign adversaries to exploit our open society by spreading disinformation and amplifying disagreements, turning citizens against one another, speakers said at a Princeton University forum. Gen. Michael V. Hayden, former director of the Central Intelligence Agency and National Security Agency, said that taken as a whole, the cyberattacks during the 2016 presidential election have a lot in common with 9/11 — an attack from an unexpected direction, exploiting a previously unknown weakness. The nation rallied in response to the 2001 attacks in large part because President George W. Bush set the tone, he said. “We gotta go extraordinary,” Hayden said about the cyberattacks. “We as a nation don’t go extraordinary unless the president says ‘do it’,” and so far, that hasn’t happened, Hayden said.

  • Developing secure mobile apps

    Mobile devices such as smartphones and tablets and the applications (apps) we load onto them have become indispensable to our daily lives—both personal and professional. However, mobile apps are susceptible to malware, ransomware, spyware, coding flaws and other attacks that could compromise personal data stored on the device. Apps also can be used to gain access to sensitive enterprise resources.

     

  • Women in cybersecurity are making a difference

    Women in the cybersecurity industry may not make an impact in terms of numbers, but their work speaks for itself. Shimrit Tzur-David, Ph.D., is the co-founder and chief technology officer of Secret Double Octopus, a cybersecurity company which uses secret sharing, which is used to protect nuclear codes, to enable companies to do away with passwords all together. She was recently interviewed by Information Age.

  • Now that Russia has apparently hacked America’s grid, shoring up security is more important than ever

    Hackers taking down the U.S. electricity grid may sound like a plot ripped from a Bruce Willis action movie, but the Department of Homeland Security and the FBI recently disclosed that Russia has infiltrated “critical infrastructure” like American power plants, water facilities and gas pipelines. There is no time to waste in shoring up the grid’s security. Yet getting that done is not easy, as I’ve learned through my research regarding efforts in to stave off outages in hurricane-prone Florida.

  • Ruble falls further, Russian officials seek to calm nerves

    The Russian ruble is falling for a second straight day following the imposition of new U.S. sanctions, while the Central Bank chief and other officials are seeking to calm investors in the wake of a big sell-off in shares of Russian companies a day earlier.

  • The oligarch designations: Assets in the West are on the table

    The 6 April decision to freeze the assets of seven Russian oligarchs on 6 April raises the stakes of the Russia sanctions program, as it targets individuals and their companies who hold large investments in the West and who have important relationships with Western businesses and financial institutions — and who are in Vladimir Putin’s inner circle.

  • NYC Secure launched: Cybersecurity initiative to protect New Yorkers online

    NYC Mayor de Blasio last week announced the launch of NYC Secure, a cybersecurity initiative aimed at protecting New Yorkers online. Using an evolving suite of solutions, NYC Secure will defend New Yorkers from malicious cyber activity on mobile devices, across public Wi-Fi networks, and beyond. The first NYC Secure programs will include a free City-sponsored smartphone protection app which, when installed, will issue warnings to users when suspicious activity is detected on their mobile devices.

  • Paper trails and random audits could secure all elections – don’t save them just for recounts in close races

    As states begin to receive millions of federal dollars to secure the 2018 primary and general elections, officials around the country will have to decide how to spend it to best protect the integrity of the democratic process. If voters don’t trust the results, it doesn’t matter whether an election was actually fair or not. Right now, the most visible election integrity effort in the U.S. involves conducting recounts in especially close races. A similar approach could be applied much more broadly.

  • How the U.S. can better counter political warfare

    Political warfare is a term often used to describe measures that fall short of conventional warfare. These can include political, informational, military and economic measures to influence, coerce, intimidate or undermine U.S. interests or those of friends and allies. These efforts can include cyber warfare, propaganda and disinformation campaigns, economic sanctions and even a Russian state-sponsored biker gang. The United States needs to improve the ways it combats adversaries adept at using political warfare tactics to achieve their goals and undermine U.S. interests and allies, according to a new RAND study.

  • Outgoing U.S. national security adviser: West has “failed to impose sufficient costs” on Russia

    Outgoing White House national security adviser H. R. McMaster has called for stronger measures against Russian “threats” and “provocations,” arguing that Russian President Vladimir Putin is mistaken in thinking the West will not push back against the Kremlin’s “hybrid warfare.” The comments were some of the strongest to date on Russia by McMaster, whose last day at the White House will be next week.