Balancing on the rail – considering responsibility and restraint in the July 2021 Iran railways incident

JD Work [1], [2] An intrusion against a railway network, resulting in destructive effects leading to disruption of cargo and passenger transportation, would in previous decades likely have been considered a major strategic attack. Early writings on cyber warfare posited such actions only in theory, within the context of adapting ideas of other long-range strikeContinue reading “Balancing on the rail – considering responsibility and restraint in the July 2021 Iran railways incident”

What If the Best Defense Is a Good Defense (Instead of Offense Rebranded as Active Defense)?

Josephine Wolff In cybersecurity, the difference between offense and defense is at once extremely straightforward and incredibly difficult to pin down. It is straightforward because defending your own networks and data and attacking someone else’s look completely different: the former involves implementing security controls and detection systems within the confines of your own computer systems,Continue reading “What If the Best Defense Is a Good Defense (Instead of Offense Rebranded as Active Defense)?”

CS Alert – Offensive Cyber in 1914

Image: An undated photograph of CS Alert. Source: Wikipedia. By Neil Ashdown On 5 August 1914 – the day after Great Britain declared war on Germany – CS Alert, a British cable ship, severed the submarine telegraph cables connecting Germany to the United States. The first post on The Alert, the blog of the OffensiveContinue reading “CS Alert – Offensive Cyber in 1914”

Why ‘Cyber Pearl Harbor’ matters for democracy

Dr Andrew Dwyer Recently, I was struck by a front cover to the magazine, Newsweek, which declared that we are (again) facing the potential for a ‘Cyber Pearl Harbor’. For many within both the practitioner and academic ‘cyber’[1] community, this is manifest of a long shadow of the hyperbole that characterised the popular recognition ofContinue reading “Why ‘Cyber Pearl Harbor’ matters for democracy”

Offensive cyber in the age of ransomware

Ciaran Martin  When the United States launched Cyber Command twelve years ago, the word ‘ransomware’ was not in widespread use. Nor did countering the threat from computer-based racketeering feature in the lengthy deliberations leading up to the formation in the UK of the National Cyber Force, announced in November last year.   But in the courseContinue reading “Offensive cyber in the age of ransomware”