Analysis

Explore our research

Search

Filters

Analysis Type

Pillar / Project

Source

Topics

Author

Year

Strengthening Resilience in 21st Century Crisis Communications

Strengthening Resilience in 21st Century Crisis Communications

In Strengthening Resilience in 21st Century Crisis Communications, authors Alexa Wehsener and Sylvia Mishra draw on insight from a group of high-level policymakers, diplomats, and technical experts in attendance at IST's London workshop earlier this year to examine the vulnerabilities of existing crisis communications channels and offer possible solutions.

after action report, CATALINK, diplomacy, nuclear, nuclear risk reduction

July 20, 2023

DoD Releases the National Defense Science and Technology Strategy

Bottom Line: On Tuesday, May 9, 2023, DoD released the NDSTS, expanding on what the 2022 National Defense Strategy (NDS) calls America’s “asymmetric advantages” in fourteen “critical technology areas.”

critical technologies, DOD, National Defense Strategy

June 14, 2023

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

This mini-pilot overlays actual threat actor behavior on the original ransomware payment ecosystem map. It seeks to identify which kinds of disruption could be the most effective and where to apply them in the payment process.

cybersecurity, mini pilot, ransom payments, Ransomware

May 22, 2023

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

Progress Report

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

As of May 2023, 92% of the 48 RTF recommendations have seen some action, with 50% experiencing significant progress, including through legislation and policy adoption.This report walks readers through the RTF’s second year, acknowledging tremendous shifts in the ecosystem, especially in light of the war in Ukraine, and highlights key areas of progress.

disruption, incident reporting, progress report, ransom payments, Ransomware

May 5, 2023

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand advocates for a fundamental shift in the open-source software ecosystem. Taking the Log4j vulnerability as a case study, the paper seeks to understand the documentation of its development, the transparent response and mitigation efforts at each stage of the disclosure cycle, and its ongoing exploitation.

cybersecurity, Log4j, open source software, vulnerability management

April 17, 2023

Cyber Incident Reporting Framework: Global Edition

Cyber Incident Reporting Framework: Global Edition

Multiple industry groups, led by the Cyber Threat Alliance and IST, have come together to identify a set of principles and develop a model reporting format that governments worldwide could use. The Cyber Incident Reporting Framework: Global Edition answers questions about what conditions should be in place to make a reporting mandate effective and harmonizes suggested definitions with existing global regulations.

CIRCIA, CISA, cybersecurity, incident reporting

March 9, 2023

IST’s Efforts in an Age of AI: An Overview

IST’s Efforts in an Age of AI: An Overview

IST began exploring the transformative impact of artificial intelligence on national security and global stability in 2017. Since then, we have engaged with a diverse array of stakeholders across the AI ecosystem to produce risk mitigation strategies, useful tools and frameworks, and recommendations.

AI, national security, risk-mitigation, recommendations

UnDisruptable27 Project Wants to Shore Up Critical Infrastructure Security

UnDisruptable27 Project Wants to Shore Up Critical Infrastructure Security

In Dark Reading, IST’s Josh Corman & Megan Stifel and funder Craig Newmark explain the need for UnDisruptable27. “Whether it’s food or shelter or warmth, everyone relies on infrastructure to live. Bad actors know that,” Craig said. “This isn’t alarmism.”

cyber attacks, Cyber Civil Defense, security, infrastructure

Cyber Initiative Pegs 2027 as Infrastructure Defense Deadline

Cyber Initiative Pegs 2027 as Infrastructure Defense Deadline

“The project, which is called UnDisruptable27, wants society to prepare for near-future geopolitical conflicts in which cyber attacks are aimed at Americans’ access to water, medical care, power and food,” writes Government Technology’s Jule Pattison-Gordon.

critical infrastructure, cyber attacks, 2027, geopolitical conflict

IST pilot targets preparing hospitals, water systems for China-backed cyber threats

IST pilot targets preparing hospitals, water systems for China-backed cyber threats

Josh Corman sat down with Inside Cybersecurity’s Jacob Livesay to discuss the project and its aims. “For a long time, I’ve been saying we’re over-dependent on undependable things,” Josh explained.

critical infrastructure, cyber, water, hospital cybersecurity