Articles

David Eaves and Ben McGuire detail what Canada can learn from a tiny country that devised a coordinated, efficient system to serve its citizens using what's called platform government.

This article analyzes the congressional history of so-called "Internet kill switch" bills and two domestic cases of a denial-of-access to local Internet connections.

"...[A]ctors that employ gray tactics in cyber operations need not be successful in actually infiltrating a system to further their revisionist ambitions. Rather, the sheer ramifications from the cyber action itself, has the power to disturb a nation's psyche and challenge the geopolitical status quo."

"Admittedly, international norms do not blossom into fully-grown gardens overnight. What the CEPP Test does offer, however, is a proverbial seed, which if properly cultivated could take root in the international legal system."

On 22 November 2013, the Federal Energy Regulatory Commission approved the latest version of mandatory cybersecurity regulations for the bulk electric system—known as Critical Infrastructure Protection (CIP) Reliability Standards. The CIP standards are relatively unique: they are developed through an unusual model of industry-led regulation that places industry, and not federal regulators, at the center of regulatory design and enforcement. The CIP regulations have received a significant amount of criticism. Critics argue that the regulations are incomplete at best and irreparably flawed at worst. The author examines the lessons we can learn from the CIP standards and poses a provocative question: Are the regulations actually a secret success?

"Today, opportunities exist to manage most collaboration with good enough security using some combination of social media, mobility and the cloud. It's critical that enterprise security and business units collaborate to make this possible."

"I met ProFellow Vivek Mohan when he was on the hunt for his next fellowship. Having carved a niche career in cybersecurity and technology policy and research, Vivek pursued a series of fellowships that gave him a wide range of exposure to leaders in public policy, law, government and academia in Washington, DC and beyond."

"...[Y]es, I think Stuxnet had a few down sides. One of those down sides was that the actual attack code became publicly available. As far as I can tell the attack code was supposed to die and not get out onto the Internet, but apparently the same way it got into Natanz [Iranian nuclear enrichment facility], it got out...."