Is defense winning? How would we know if we are shifting advantages away from cyber adversaries to defenders? This talk summarizes an initial framework and indicators to start answering the question. https://t.co/o6YGTaQNFP

Congrats to all!

Compete in #Cyber912 from anywhere in the world at our flagship competition in Washington DC! Last year a virtual team, Cornfidential 🌽 from @UofIllinois placed third after a challenging final round.

As crises and conflicts between cyber powers become more frequent, offensive cyber operations will continue to be used in surprising ways. https://t.co/tKuXXJJnAe

The framework also highlights how much warfare drives innovation in cyber operations. When this research began in 2019, prior to Russia’s invasion, most of these cells would have been blank, just theoretical. No longer...

This article (based on a longer, academic piece) lays a framework with examples almost entirely from the ongoing Russo-Ukrainian War. This structured approach shows that cyber operations in warfare are far more diverse than often recognized in our debates.

Lacking any framework, we could overlook whether the OCO was during an actual battle, beforehand, or in rear area Often we didn't differentiate if the target was a weapons system, infrastructure, or something else, nor whether the likely purpose was espionage or disruptions

When debating the effectiveness of offensive cyber operations in wartime, analysts could talk past one another because it was not always clear which aspects of cyber operations or of warfare we were discussing

My new piece @WarOnTheRocks - a framework to categorize and better understand the why, where, when of offensive cyber in warfare https://t.co/N66jzr9JXU

The venerable Summer Workshop on the Analysis of Military Operations and Strategy (SWAMOS), convened by @SIWPSColumbia, is now accepting applications for 2025. Further details in flyer

And thanks to @DabSamuel1 for all his hard work co-authoring and to @GoogleCloudSec and @Microsoft for their support

The inward-facing drivers pretty much always are negative, causing duplication & hurting security outcomes Outward-facing often beneficial, leading to tailoring of controls to specific companies or sectors, or shifting risks

Inward-facing drivers of disharmony are internal to each regulator (like unique authorities or precedent). Outward-facing more about the environment (such as tailoring risks to specific companies or sectors)

To harmonize cyber regulations, researchers and USG must first understand *disharmonies* & their causes New article @lawfare on 5 inward-facing and 3 outward drivers of disharmony of cyber regulations https://t.co/inmViZeSvP

Great analysis and read!

Upcoming @ColumbiaIGP & @SIWPSColumbia Rapid Response webinar: Experts will discuss the fall of Assad, the future of Syria, and the geopolitical implications for the region. 🌐 Wednesday, December 11 🌐 4:30 p.m. ET With speakers: Jon B. Alterman, @JeromeDrev, @KimGhattas, &

What do you mean you haven't registered for #Cyber912 Paris yet? 😮 The in-person event at @UnivParis8 is almost here! Registration closes December 13th, so don’t miss out. 🔒 Secure your spot and join us on January 29-31, 2025! https://t.co/WbvW72thvi

@SIWPSColumbia @CartierBeth And had time for a short visit here in Suite 1337 (yes, really) at SIPA

Here at @SIWPSColumbia we had 30+ students, like Carina Kaplan and Christine McNeill ... And great faculty and staff, including my deputy Erva Kan, @CartierBeth, Neal Pollard, Simha Sethumadhavan, and Rachel Cummings

Thanks to @CISAJen and team @CISAgov for visiting @ColumbiaSIPA this week to discuss all things cyber and infrastructure -- and for singing jingles for "We Can Secure Our World" https://t.co/u7CfwEvUUs