Archive

2023

How Does Access Impact Risk? Assessing AI Foundation Model Risk Along a Gradient of Access

How Does Access Impact Risk? Assessing AI Foundation Model Risk Along a Gradient of Access

Uninhibited access to powerful AI models and their components significantly increases the risk these models pose across a range of categories, as well as the ability for malicious actors to abuse AI capabilities and cause harm.

artificial inteligence, bias, capability overhang, compliance failure, foundation model, human out of the loop, LLMs, malicious use, risk-mitigation

December 13, 2023

DOD and SBA Launch the Small Business Investment Company Critical Technology (SBICCT) Initiative

DOD and SBA Launch the Small Business Investment Company Critical Technology (SBICCT) Initiative

The U.S. government continues its push to create access to government-backed financing to reduce risk for investing in emerging technologies. On Friday, September 29, 2023, the Department of Defense (DOD) and Small Business Administration (SBA) announced the launch of the Small Business Investment Company Critical Technology (SBICCT) Initiative.

DOD, emerging technologies, SBA, techno-industrial competition

October 6, 2023

White House Releases Outbound Investment Executive Order

White House Releases Outbound Investment Executive Order

Strategic Balancing Initiative Fact Sheet: On Wednesday, August 9, 2023, the White House released an Executive Order (EO) on Addressing United States Investments in Certain National Security Technologies and Products in Countries of Concern, laying the groundwork for the development of a U.S. Outbound Investment Program.

Department of the Treasury, outbound investment, techno-industrial competition

August 16, 2023

Strengthening Resilience in 21st Century Crisis Communications

Strengthening Resilience in 21st Century Crisis Communications

In Strengthening Resilience in 21st Century Crisis Communications, authors Alexa Wehsener and Sylvia Mishra draw on insight from a group of high-level policymakers, diplomats, and technical experts in attendance at IST's London workshop earlier this year to examine the vulnerabilities of existing crisis communications channels and offer possible solutions.

after action report, CATALINK, diplomacy, nuclear, nuclear risk reduction

July 20, 2023

DoD Releases the National Defense Science and Technology Strategy

Bottom Line: On Tuesday, May 9, 2023, DoD released the NDSTS, expanding on what the 2022 National Defense Strategy (NDS) calls America’s “asymmetric advantages” in fourteen “critical technology areas.”

critical technologies, DOD, National Defense Strategy

June 14, 2023

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

Mapping Threat Actor Behavior in the Ransomware Payment Ecosystem: A Mini-Pilot

This mini-pilot overlays actual threat actor behavior on the original ransomware payment ecosystem map. It seeks to identify which kinds of disruption could be the most effective and where to apply them in the payment process.

cybersecurity, mini pilot, ransom payments, Ransomware

May 22, 2023

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

Progress Report

May 2023 Progress Report: Ransomware Task Force: Gaining Ground

As of May 2023, 92% of the 48 RTF recommendations have seen some action, with 50% experiencing significant progress, including through legislation and policy adoption.This report walks readers through the RTF’s second year, acknowledging tremendous shifts in the ecosystem, especially in light of the war in Ukraine, and highlights key areas of progress.

disruption, incident reporting, progress report, ransom payments, Ransomware

May 5, 2023

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand: Towards Securing the Open-Source Software Ecosystem

Castles Built on Sand advocates for a fundamental shift in the open-source software ecosystem. Taking the Log4j vulnerability as a case study, the paper seeks to understand the documentation of its development, the transparent response and mitigation efforts at each stage of the disclosure cycle, and its ongoing exploitation.

cybersecurity, Log4j, open source software, vulnerability management

April 17, 2023

Cyber Incident Reporting Framework: Global Edition

Cyber Incident Reporting Framework: Global Edition

Multiple industry groups, led by the Cyber Threat Alliance and IST, have come together to identify a set of principles and develop a model reporting format that governments worldwide could use. The Cyber Incident Reporting Framework: Global Edition answers questions about what conditions should be in place to make a reporting mandate effective and harmonizes suggested definitions with existing global regulations.

CIRCIA, CISA, cybersecurity, incident reporting

March 9, 2023

AI-NC3 Integration in an Adversarial Context: Strategic Stability Risks and Confidence Building Measures

AI-NC3 Integration in an Adversarial Context: Strategic Stability Risks and Confidence Building Measures

AI-NC3 Integration in an Adversarial Context aims to examine the strategic stability risks posed by integrating AI technologies into nuclear command, control and communications systems across the globe.

and communications, artificial intelligence, confidence-building measures, control, NC3, nuclear command

February 27, 2023

The Nuclear Risk Reduction Approach: A Useful Path Forward for Crisis Mitigation

The Nuclear Risk Reduction Approach: A Useful Path Forward for Crisis Mitigation

In an article for Asia-Pacific Leadership Network, IST’s Sylvia Mishra highlights the importance of advancing the nuclear risk reduction approach and explains why IST’s CATALINK Initiative should be incorporated as a component of such an approach.

crisis communications, NC3, nuclear, nuclear risk reduction, Russo-Ukraine War

January 27, 2023

Nuclear Crisis Communications: Mapping Risk Reduction Implementation Pathways

Nuclear Crisis Communications: Mapping Risk Reduction Implementation Pathways

Nuclear Crisis Communications: Mapping Risk Reduction Implementation Pathways underscores the importance of nuclear risk reduction and the growing need for modern crisis communications and outlines two scalable pathways to integrate a crisis communications system like CATALINK.

CATALINK, crisis communications, nuclear risk reduction, P5

January 23, 2023