bianca maria @gicat@nanao.cybtex.fr
.o>
Inscrit·e en fév. 2021
D3FEND, a MITRE research project funded by the NSA, improves the #cyber security of NSS, DoD, and the DIB by providing defensive countermeasures for common offensive techniques.
Integrating Gender into Cybersecurity & New Technologies in the Fight Against Terrorism
Battling terrorists resulted in knowledge to fight near-peer adversaries.
Lessons learned in combating terrorist organizations have proved valuable to tailoring national defense techniques to use against #cyber attacks from near-peer adversaries, including China and Russia.
« It's easy to see how the scale of the challenge has increased over that time from non-nation-state actors to nation-state adversaries, and how we're going to prosecute our operations in competition, crisis and, if necessary, conflict in the future » ( Gen. Paul M. Nakasone )
Recent experience demonstrates that the threats to data and networks has changed dramatically in scope, scale and sophistication.
« Think about the past 150 days :
- We've seen supply chain attacks.
- We've seen zero-day vulnerabilities.
- We've seen #ransomware #malware »
Technology is key to #cybersecurity.
« We have a lot of work to do, but we have good partnerships. » ( Gen. Paul M. Nakasone )
https://www.afcea.org/content/past-can-profit-cyber-planning #terrorism
The interview focused on European Defense industry, blue water cooperation, cyber and even space, and included Florence Parly's opinion on what the French take is on this on the eve of the French presidency of the EU.
« We can see that the players in that domain are testing us by attacking an IT hospital system and step by step they will probably attack more vital, even more vital organization or systems. There is absolutely no borders for cyber attacks. » ( Florence Parly )
Extrait relatif au volet cyber de l'interview du 25 juin 2021 à l'ambassade de France aux Pays-Bas.
Planned for 2023, Exercise Orion is a full-scale divisional exercise that will last several days, based probably out of camps at Suippes, Mailly & Mourmelon.
In the forests and plains of the Champagne-Ardenne region, where once the great powers went into battle, the French armed forces are beginning to prepare for the return of a major conflict.
It will involve the full range of French military capacity on a scale not tested for decades.
The drill will include command-post exercises, hybrid scenarios, simulation and live-fire drills.
That represents a seismic shift for French forces.
« We absolutely have to prepare for a more dangerous world » ( General Thierry Burkhard )
- A revoir : Supériorité opérationnelle 2030
Actualisation de la LPM 2019-2025
Le périmètre d'ajustement 2021 s'établit à 1 milliard €
Les surcoûts non prévus sont associés à un nombre restreint de PEM, comme par exemple l'accélération de programmes dans le renseignement et le cyber, la pérennisation Leclerc, la cession de Rafale d'occasion consécutivement à l'export grec, le plan ministériel en faveur du plan de soutien à l'aéronautique et du service de santé des armées suite aux enseignements tirés de la crise de la Covid.
ParisAirForum - Bourget
Defense Industry Base (DIB) / Base Industrielle & Technologique de Défense (BITD)
China has now taken its place, alongside Russia, Iran and North Korea… providing a safe haven for cyber criminals in exchange for those criminals being « on call » to work for the benefit of the state.
The lines between nation-state objectives and financially-motivated cybercrime have continued to blur as the relationship between profit and espionage has grown, particularly within the cybercrime underground.
https://www.intel471.com/blog/cybercrime-russia-china-iran-nation-state
RUSI Land Warfare Conference 2021
If war breaks out, states will need to leverage emerging technologies and prioritise speed, range and precision-strike.
As the complexity of military systems increases, allies will need to work collaboratively to remain at the cutting edge of manned-unmanned teaming and artificial intelligence.
There is a critical need for armies to be able to integrate their capabilities and people to be more than the sum of their parts, and to integrate with partners, allies and industry.
« Transformation from mechanisation to digitisation is going to be significant ; from hardware to software. Conventional and unconventional capabilities will come together in hybrid combination ; boots to bots, proxies to pixels. »
https://www.army.mod.uk/news-and-events/news/2021/06/cgs-rusi-speech/
flashcard learning apps are popular digital learning tools that show questions on one side and answers on the other.
By simply searching online for terms publicly known to be associated with nuclear weapons, Bellingcat, an independent international collective of researchers, investigators and citizen journalists, was able to discover cards used by military personnel serving at all six European military bases reported to store nuclear devices.
However, the flashcards studied by soldiers tasked with guarding these devices reveal not just the bases, but even identify the exact shelters with « hot » vaults that likely contain nuclear weapons.
They also detail intricate security details and protocols such as the positions of cameras, the frequency of patrols around the vaults, secret duress words that signal when a guard is being threatened and the unique identifiers that a restricted area badge needs to have.
These findings represented serious breaches of security protocols and raised renewed questions about U.S nuclear weapons deployment in Europe.
China and Russia are conducting malicious cyber campaigns to erode U.S. military advantages, threaten U.S. infrastructure and reduce U.S. economic prosperity.
North Korea poses a significant threat to the international financial and commercial sectors by sponsoring cyber exploitation of financial institutions to illicitly acquire funding and evade U.S. and United Nations sanctions.
Iran has demonstrated the capability and intent to strike in its region and against the United States in cyberspace.
By operating in cyberspace, adversaries can cause damage while operating below the level of armed conflict, and they are targeting economies, critical infrastructure and electoral processes.
Adversaries have launched persistent malicious cyber campaigns to erode military advantages and increasingly leverage social media to carry out and influence operations. They also steal defense secrets, intellectual property and personally identifiable information.
We must raise the bar. We must be resilient, and we must act.
Our success in the new era of strategic competition will rely, in part, on our ability to develop partnerships of all kinds that acknowledge shared risks, shared goals and shared solutions.
Many countries have incorporated offensive cyber operations into their overall geopolitical strategies, but North Korea was among the first nations to leverage its government hacking capabilities in the cybercrime arena.
Pyongyang uses it as an all-purpose sword to carry out a range of interconnected geopolitical and financial objectives.
North Korea is already cut off from most forms of international commerce by U.S. and global economic sanctions, so it have little to lose by engaging in aggressive offensive operations against other nations.
In the early 2000s, North Korean intelligence agencies like the Reconnaissance General Bureau « pioneered » the concept of destructive cyberattacks.
The country's innovation can even fool some cybersecurity experts..
2021 RSA Conference - What makes North Korean hacking groups more creative ?
President Biden has made strengthening U.S. cybersecurity capabilities a top priority and has already taken action to advance it, including with last week's Executive Order. The American Jobs Plan will build on that work and deliver resilient infrastructure for the American people, including a renewed electric grid. Cybersecurity is a core part of resilience and building infrastructure of the future, and the American Jobs Plan will allocate opportunities and resources to bolster cyber defenses.
In China & Russia, the teams that work on cyber warfare against our nation are full-time in-house, dedicated scientist-soldiers, who stay with their teams for decades. Their management infrastructure is not nearly so dispersed and vulnerable to turn-over, corruption, and other counter-intelligence operations.
In this Defence Innovation Talks webinar, Emmanuel Chiva explained how the agency seeks to generate, capture, amplify and ultimately integrate disruptive technologies in the French military structures and forces.
The Defence Innovation Talks is sponsored by Microsoft.
https://www.iiss.org/events/2021/04/defence-innovation-french-perspective
L'exercice de cyberdéfense qui s'est tenu à Tallinn (Estonie) du 13 au 16 avril 2021 a réuni 2000 spécialistes occidentaux issus de 22 pays.
La Suède a remporté l’édition 2021, suivie par la Finlande et la République Tchèque. Les grandes puissances de l'OTAN n'ont pas particulièrement brillé.
Le prochain exercice de cyberdéfense, qui aura lieu en 2022, s'adaptera sans doute aux nouvelles menaces comme le PSYOPS par moyens cyber.
https://air-cosmos.com/article/cyber-inquitudes-aprs-lexercice-locked-shields-2021-24713
Full transcript of Director GCHQ Jeremy Fleming's speech for the 2021 Vincent Briscoe Lecture for the Institute for Security, Science & Technology
- Developing and protecting key technologies will be vital to guarantee our future security and prosperity.
https://www.gchq.gov.uk/news/directors-2021-vincent-brisoe-lecture
Annual report of worldwide threats to the national security of the U.S responds to Section 617 of the FY21 Intelligence Authorization Act (P.L. 116-260).
In the coming year, the U.S and its allies will face a diverse array of threats that are playing out amidst the global disruption resulting from the COVID-19 pandemic and against the backdrop of great power competition, the disruptive effects of ecological degradation and a changing climate, an increasing number of empowered non-state actors, and rapidly evolving technology. The complexity of the threats, their intersections, and the potential for cascading events in an increasingly interconnected and mobile world create new challenges for the IC.
https://www.odni.gov/files/ODNI/documents/assessments/ATA-2021-Unclassified-Report.pdf
The Militarization of China's Internet Trolls
Today, the CCP relies on an expansive network of more than 20 million « network civilization volunteers » to serve as « an amplifier of positive online voices, a collector of online public opinion information and a reducer of negative voices on the Internet. »
They operate in concert with a professionalized corps of 2 million internet commentators, employed directly by Cyberspace Affairs Commissions (CAC) and Propaganda Departments nationwide.
Volunteers are supposed to « stop the spread of various illegal and harmful information on the internet, and contribute to the construction of a clean cyberspace. »
Each commentator team follows unique guidelines, but volunteers are generally asked to post between 1–25 comments per month and are governed by a merit-based point system that determines whether they may be promoted or fired.
The bottom line is that China's internet trolls are here to stay. And if the past twenty years are any indication, foreigners should expect the CCP's online influence operations to continue growing in size and sophistication, alongside the objectives of its public opinion war.
https://jamestown.org/program/a-different-kind-of-army-the-militarization-of-chinas-internet-trolls/
.o>
Inscrit·e en fév. 2021
