Sign Up for Our Newsletter
Donate

Archive

Report

Navigating AI Compliance, Part 1: Tracing Failure Patterns in History

Report

Navigating AI Compliance, Part 1: Tracing Failure Patterns in History

What is the risk of compliance failure in AI foundation models, and how can it be mitigated? The AI Risk Reduction Initiative’s latest report analyzes the history of failures across industries in an effort to avoid future pitfalls, and offers practical frameworks and definitions for practitioners navigating the complex compliance landscape. The first of a two-part series, this report examines 11 case studies from AI-adjacent industries to identify three distinct failure categories: institutional, procedural, and performance.
artificial inteligence, compliance, cybersecurity, Future of Digital Security
December 10, 2024
Why Venture Capital Is Indispensable for U.S. Industrial Strategy: Activating Investors to Realize Disruptive National Capabilities

Report

Why Venture Capital Is Indispensable for U.S. Industrial Strategy: Activating Investors to Realize Disruptive National Capabilities

How can the U.S. realize disruptive national capabilities and establish technological leadership in the geostrategic competition with China? From IST’s Strategic Balancing Initiative, a new report calls for harnessing the power of the venture capital industry to unlock innovation, and offers insights for policymakers & practitioners.  
China, industrial strategy, quantum, research and development, techno-industrial competition, venture capital
October 15, 2024
The Implications of Artificial Intelligence in Cybersecurity: Shifting the Offense-Defense Balance

Report

The Implications of Artificial Intelligence in Cybersecurity: Shifting the Offense-Defense Balance

Advances in AI present key cybersecurity opportunities, but how might malicious actors utilize the same technology? IST’s latest report investigates the state of existing and potential integrations of AI in cybersecurity based on our research & interviews with industry stakeholders and puts forward 7 priority recommendations.
agentic, AI, artificial intelligence, cyber, cybersecurity, deepfakes, offense-defense balance, software
October 10, 2024
Plano de ação de defesa contra o ransomware

Report

Plano de ação de defesa contra o ransomware

Plano de ação para as pequenas e médias empresas em matéria de mitigação, resposta e recuperação de programas de sequestro de dados
Blueprint for Ransomware Defense, cyber attacks, defense, Future of Digital Security, Portuguese, Ransomware, RTF
September 24, 2024
Unlocking U.S. Technological Competitiveness: Proposing Solutions to Public-Private Misalignments

Report

Unlocking U.S. Technological Competitiveness: Proposing Solutions to Public-Private Misalignments

This concept paper, the third and last working paper in the series, lays out how a third round of working group meetings further explored those initial solutions, building out specific ways to operationalize them, identifying specific questions that need to be addressed to achieve these goals, and suggesting potential mechanisms for achieving them
biotech, China, energy, industrial strategy, quantum
June 28, 2024
The Phone-a-Friend Option: Use Cases for a U.S.-U.K.-French Crisis Communication Channel

Report

The Phone-a-Friend Option: Use Cases for a U.S.-U.K.-French Crisis Communication Channel

This brief outlines the case for a multilateral crisis communication channel between the heads of state of the United States, the United Kingdom, and France.
France, nuclear crisis communications, United Kingdom, United States
June 26, 2024
China: Nuclear Crisis Communications and Risk Reduction

Report

China: Nuclear Crisis Communications and Risk Reduction

In this brief, IST's Sylvia Mishra interviewed Dr. Tong Zhao for his insights on China’s approach to crisis communications and nuclear risk reduction.
China, nuclear crisis communications, nuclear risk reduction
June 26, 2024
Use-Cases of Resilient Nuclear Crisis Communications: A View from Russia

Report

Use-Cases of Resilient Nuclear Crisis Communications: A View from Russia

This report delves into resilient nuclear crisis communications from the Russian perspective, examines several documents and actions taken by Russia political leadership on both nuclear and non-nuclear instances of crisis communications, and concludes by stressing the importance of cooperation between leaders in Moscow and Washington:
nuclear crisis communications, nuclear risk reduction, Russia
June 26, 2024
Pakistan: Mitigating Nuclear Risks Through Crisis Communications

Report

Pakistan: Mitigating Nuclear Risks Through Crisis Communications

This brief explores the history of crisis communications from the perspective of Pakistan, unpacks the history of nuclear crisis communications between Pakistan and India, and calls for a multilateral crisis communication mechanism in South Asia to enhance regional stability and security, noting the necessity for neutral party engagement.
nuclear crisis communications, nuclear risk reduction, Pakistan, South Asia
June 26, 2024
Resilient Nuclear Crisis Communications: India’s Experience

Report

Resilient Nuclear Crisis Communications: India’s Experience

This short paper examines the manner in which the existing hotlines have been used in the India-Pakistan dyad. It also identifies some challenges posed to these channels and how these need to be overcome. 
India, nuclear crisis communications, nuclear risk reduction, Pakistan
June 26, 2024
A Lifecycle Approach to AI Risk Reduction: Tackling the Risk of Malicious Use Amid Implications of Openness

Report

A Lifecycle Approach to AI Risk Reduction: Tackling the Risk of Malicious Use Amid Implications of Openness

A Lifecycle Approach to AI Risk Reduction introduces a novel framework for addressing the complex risks associated with AI, and applies this framework to the risk of malicious use.
AI lifecycle, artificial intelligence, LLMs, malicious use, risk-mitigation
June 17, 2024
Ransomware Task Force: Doubling Down

Progress Report, Report

Ransomware Task Force: Doubling Down

While the U.S. government and its partners made great strides in combating ransomware in 2023, attacks have only increased. Of the 48 recommendations made in the original RTF Report, our assessment remains unchanged from a year ago: only 24 have seen significant progress.
cybersecurity, incident reporting, ransom payments, Ransomware
April 24, 2024
Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

Report

Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

IST's latest report pulls from a recent attack scenario exercise performed by the Ransomware Task Force's Payments Working Group, comparing the results to information sharing case studies including the Hive disruption operation, the Emotet botnet takedown, and the Colonial Pipeline ransom recovery.
Colonial Pipeline, cybersecurity, Emotet, Hive, ransom payments, Ransomware
April 17, 2024
Unlocking U.S. Technological Competitiveness: Evaluating Initial Solutions to Public-Private Misalignments

Report

Unlocking U.S. Technological Competitiveness: Evaluating Initial Solutions to Public-Private Misalignments

In February, Strategic Balancing Initiative working groups identified key misalignments between the public & private sectors in biotech, energy & quantum. Now, SBI draws from working group insights to outline potential solutions that can bridge gaps between emerging tech and the policy apparatus.
biotech, China, energy, quantum, technological competitiveness
March 29, 2024
Public Private Partnerships to Combat Ransomware: An inquiry into three case studies and best practices

Report

Public Private Partnerships to Combat Ransomware: An inquiry into three case studies and best practices

IST, in collaboration with the Global Forum on Cyber Expertise and in support of the International Counter Ransomware Initiative, examines three existing public-private partnerships to combat ransomware: Europol’s European Cybercrime Centre (EC3), the United States Joint Cyber Defense Collaborative (JCDC), and the Institute for Security and Technology’s Ransomware Task Force (RTF). What challenges did they face? What does an ideal public-private partnership look like?
CISA, cyber, EC3, European Cybercrime Centre, JCDC, Joint Cyber Defense Collaborative, PPPs, Public-private partnerships, Ransomware
March 27, 2024