Sign Up for Our Newsletter
Donate

Analysis

Explore our research

Search
Filters

DoD Releases the National Defense Science and Technology Strategy

Fact Sheet

DoD Releases the National Defense Science and Technology Strategy

Bottom Line: On Tuesday, May 9, 2023, DoD released the NDSTS, expanding on what the 2022 National Defense Strategy (NDS) calls America’s “asymmetric advantages” in fourteen “critical technology areas.”
critical technologies, DOD, National Defense Strategy
June 14, 2023
Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

Report

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

This mini-pilot overlays actual threat actor behavior on the original ransomware payment ecosystem map. It seeks to identify which kinds of disruption could be the most effective and where to apply them in the payment process.
cybersecurity, mini pilot, ransom payments, Ransomware
May 22, 2023
May 2023 Progress Report: Ransomware Task Force: Gaining Ground

Progress Report

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

As of May 2023, 92% of the 48 RTF recommendations have seen some action, with 50% experiencing significant progress, including through legislation and policy adoption.This report walks readers through the RTF’s second year, acknowledging tremendous shifts in the ecosystem, especially in light of the war in Ukraine, and highlights key areas of progress.
disruption, incident reporting, progress report, ransom payments, Ransomware
May 5, 2023
Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Report

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand advocates for a fundamental shift in the open-source software ecosystem. Taking the Log4j vulnerability as a case study, the paper seeks to understand the documentation of its development, the transparent response and mitigation efforts at each stage of the disclosure cycle, and its ongoing exploitation.
cybersecurity, Log4j, open source software, vulnerability management
April 17, 2023
Cyber Incident Reporting Framework: Global Edition

Report

Cyber Incident Reporting Framework: Global Edition

Multiple industry groups, led by the Cyber Threat Alliance and IST, have come together to identify a set of principles and develop a model reporting format that governments worldwide could use. The Cyber Incident Reporting Framework: Global Edition answers questions about what conditions should be in place to make a reporting mandate effective and harmonizes suggested definitions with existing global regulations.
CIRCIA, CISA, cybersecurity, incident reporting
March 9, 2023
AI-NC3 Integration in an Adversarial Context: Strategic Stability Risks and Confidence Building Measures

Report

AI-NC3 Integration in an Adversarial Context: Strategic Stability Risks and Confidence Building Measures

AI-NC3 Integration in an Adversarial Context aims to examine the strategic stability risks posed by integrating AI technologies into nuclear command, control and communications systems across the globe.
and communications, artificial intelligence, confidence-building measures, control, NC3, nuclear command
February 27, 2023
IST pilot targets preparing hospitals, water systems for China-backed cyber threats

In the News

IST pilot targets preparing hospitals, water systems for China-backed cyber threats

Josh Corman sat down with Inside Cybersecurity’s Jacob Livesay to discuss the project and its aims. “For a long time, I’ve been saying we’re over-dependent on undependable things,” Josh explained.
A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

In the News

A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

WIRED's Lily Hay Newman interviewed Josh Corman on the launch of UnDisruptable27. "A longtime critical infrastructure security researcher is launching a project to communicate with utility operators, municipalities, and regular people in creative ways about both urgency and optimism around protecting critical infrastructure now,” writes Newman.
Unlocking U.S. Technological Competitiveness: Proposing Solutions to Public-Private Misalignments

Report

Unlocking U.S. Technological Competitiveness: Proposing Solutions to Public-Private Misalignments

This concept paper, the third and last working paper in the series, lays out how a third round of working group meetings further explored those initial solutions, building out specific ways to operationalize them, identifying specific questions that need to be addressed to achieve these goals, and suggesting potential mechanisms for achieving them
The Phone-a-Friend Option: Use Cases for a U.S.-U.K.-French Crisis Communication Channel

Report

The Phone-a-Friend Option: Use Cases for a U.S.-U.K.-French Crisis Communication Channel

This brief outlines the case for a multilateral crisis communication channel between the heads of state of the United States, the United Kingdom, and France.