Analysis

Explore our research

Search

Filters

Analysis Type

Pillar / Project

Source

Topics

Author

Year

The CATALINK Brief

Learn more about the CATALINK initiative, which combines radical simplicity, open source design, formal methods for NC3, and international collaboration and outreach.

CATALINK, hotlines, Innovation and Catastrophic Risk, nuclear

August 1, 2021

Testimony: Stopping Digital Thieves: The Growing Threat of Ransomware

On July 20, 2021, Institute for Security and Technology CEO Philip Reiner testified in front of the Subcommittee on Oversight and Investigations of the Committee on Energy and Commerce for a hearing entitled, "Stopping Digital Thieves: The Growing Threat of Ransomware."

congress, Ransomware, Ransomware Task Force, testimony

July 20, 2021

In the News, Op-ed

5 Urgent Actions in the Fightback Against Ransomware

In an article for the World Economic Forum, Philip Reiner calls for global leaders to step up in the fight against ransomware, arguing that, taken together, they "would result in immediate and longer-term benefits, and show cybercriminals that ransomware is no longer an easy and safe strategy for financial gain."

collaboration, cybercrime, cybersecurity, law enforcement, Ransomware, World Economic Forum

May 12, 2021

Future Digital Threats to Democracy – Trends and Drivers

Based on a comprehensive literature review and conversations with subject matter experts, Alexa Wehsener, Vera Zakem, and M. Nina Miller identified nine trends that are likely to pose digital threats to democracy in the future.

apathy, attention, cognition, democracy, digital authoritarianism, geopolitics, ideology, information environment, privacy, surveillance, technology

May 5, 2021

Combating Ransomware: A Comprehensive Framework for Action

The Ransomware Task Force convened over 60 experts from industry, government, law enforcement, civil society, and international organizations to produce a comprehensive framework for action, with 48 actionable recommendations.

cyber, cybersecurity, defend, deter, protect, Ransomware, respond

April 21, 2021

In the News, Op-ed

Zoom Won’t Stop A Nuclear War

In an article for Foreign Policy, Sahil Shah and Leah Walker make the case that although the red telephone is gone, a new generation of nuclear hotlines is sorely needed to manage international crises.

CATALINK, crisis communications, India, Innovation and Catastrophic Risk, nuclear hotlines, nuclear war, nuclear weapons, Pakistan, Soviet Union

April 19, 2021

DoD Releases the National Defense Science and Technology Strategy

Bottom Line: On Tuesday, May 9, 2023, DoD released the NDSTS, expanding on what the 2022 National Defense Strategy (NDS) calls America’s “asymmetric advantages” in fourteen “critical technology areas.”

DOD, critical technologies, National Defense Strategy

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

This mini-pilot overlays actual threat actor behavior on the original ransomware payment ecosystem map. It seeks to identify which kinds of disruption could be the most effective and where to apply them in the payment process.

cybersecurity, Ransomware, ransom payments, mini pilot

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

Progress Report

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

As of May 2023, 92% of the 48 RTF recommendations have seen some action, with 50% experiencing significant progress, including through legislation and policy adoption.This report walks readers through the RTF’s second year, acknowledging tremendous shifts in the ecosystem, especially in light of the war in Ukraine, and highlights key areas of progress.

Ransomware, ransom payments, incident reporting, disruption, progress report

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand advocates for a fundamental shift in the open-source software ecosystem. Taking the Log4j vulnerability as a case study, the paper seeks to understand the documentation of its development, the transparent response and mitigation efforts at each stage of the disclosure cycle, and its ongoing exploitation.

cybersecurity, vulnerability management, open source software, Log4j