Asia & the Pacific

"But what about deterring operations that are not equivalent to an armed attack? There are grey areas in which important targets, say, a free political process, are not strategically vital in the same way as the electrical grid or the financial system. Destroying the latter two could damage lives and property; interference with the former threatens deeply held political values."

"...[A]ctors that employ gray tactics in cyber operations need not be successful in actually infiltrating a system to further their revisionist ambitions. Rather, the sheer ramifications from the cyber action itself, has the power to disturb a nation's psyche and challenge the geopolitical status quo."

This paper addresses a growing concern to one of the most fundamental components of our democracy: how cybersecurity risks can influence the integrity of our elections.

"Admittedly, international norms do not blossom into fully-grown gardens overnight. What the CEPP Test does offer, however, is a proverbial seed, which if properly cultivated could take root in the international legal system."

"As the U.S. Congress considers the appropriate role for the federal government in the encryption debate, policymakers should be mindful of the impact of their actions both within and beyond the United States. To date, the U.S. and Europe are on one side of an Internet governance spectrum favoring the multi-stakeholder status quo with India in the middle, followed by China, and Russia undertaking the most state-centric approach to both Internet governance generally and encryption specifically."

"In little more than a generation, the Internet has become the substrate of the global economy and governance worldwide. Several billion more human users will be added in the next decade, as will tens of billions of devices, ranging from thermostats to industrial control systems (the 'Internet of Things'). All of this burgeoning interdependence implies vulnerabilities that governments and non-governmental actors can exploit. At the same time, we are only beginning to come to terms with the national-security implications of this. Strategic studies of the cyber domain resemble nuclear strategy in the 1950s: analysts are still not clear about the meaning of offense, defense, deterrence, escalation, norms, and arms control."