America world’s sole cyber superpower, ten years ahead of China, says Brit think tank
- Reference: 1624941888
- News link: https://www.theregister.co.uk/2021/06/29/international_institute_for_strategic_studies_cyber_study/
- Source link:
The institute on Monday published a document titled “ [1]Cyber Capabilities and National Power: A Net Assessment ” that covered 15 nations and considered the following criteria:
Strategy and doctrine;
Governance, command and control;
Core cyber intelligence capability;
Cyber empowerment and dependence;
Cyber security and resilience;
Global leadership in cyberspace affairs;
Offensive cyber capability.
The two-year research effort saw the institute examine 15 nations and define three tiers of capability.
America was ranked the sole Tier-One Nation, meaning it possesses “world-leading strengths in all the categories in the methodology”.
The report says America's “capability for offensive cyber operations is probably more developed than that of any other country, although its full potential remains largely undemonstrated”.
[2]
An interesting observation given the recent Colonial Pipeline ransomware incident is that “The US has moved more effectively than any other country to defend its critical national infrastructure in cyberspace”. That opinion is tempered with the observation that the United States “recognises that the task is extremely difficult and that major weaknesses remain”.
[3]
[4]
Australia, Canada, China, France, Israel, Russia, and the UK were rated Tier-Two nations, meaning they possess “world-leading strengths in some of the categories”.
A few observations on each from the institute's report:
Australia’s capability stems from its membership of the Five Eyes alliance, and while it has shown it has offensive capabilities it needs “to make dramatically greater investments in cyber-related tertiary education and carve out a more viable sovereign cyber capability”;
Canada benefits from a strong domestic tech industry and is very good at building alliances that enhance its capacities, but has unproven offensive capabilities;
China has weak defences and under-developed policies to protect key infrastructure but proven offensive capabilities. Rated as most likely challenger to the United States;
France walks a line between working with allies to enhance its capabilities and relying on its own tech that, while decent, may not be as capable but does have the benefit of creating fewer dependencies;
Israel has impressive policy frameworks, and not only possesses offensive capabilities but is willing to use them “in a wide range of circumstances”;
Russia has proven it can conduct information warfare and is trying to strengthen its tech industry and therefore its capabilities, but its underperforming economy makes it hard to realise that ambition. Trails America and China in terms of “developing the most sophisticated offensive military cyber tool”;
The UK derives strength from its many alliances and has conducted offensive cyber-ops since the early 2000s. But a lack of talent, inability to match the scale of investments made by China and the United States, and small industrial base mean it can manage risks but not export tech to the world.
Tier-Three nations are defined as possessing “strengths or potential strengths in some of the categories but significant weaknesses in others”.
Two nations often identified with offensive operations — North Korea and Iran — are named in Tier Three.
[5]
Iran earned its place because, while it invests in cyber to both counter internal dissent with surveillance and act against external enemies, it has a small talent pool and sanctions restrict its access to the best security tools.
North Korea was labelled opportunistic and lacking in organised cyber-security efforts, but nonetheless effective despite using basic tactics. However, its defensive stance is sub-par.
India was assumed to focus most of its attention on Pakistan, but to have great potential if it can harness industry and government efforts. Malaysia won praise as an early mover and has the alliances and will to ascend a tier. Vietnam has ambition and proven offensive capability, but policy is not well-aligned to realise its will and skill.
[6]
Indonesia also made the list on the grounds that it has built good alliances and is building capacity.
[7]UK tells UN that nation-states should retaliate against cyber badness with no warning
[8]Somebody's Russian to meddle with UK coronavirus vaccine efforts, but GCHQ won't take it lying down
[9]Biden to Putin: Get your ransomware gangs under control and don’t you dare cyber-attack our infrastructure
[10]Cuffed: Ukraine police collar six Clop ransomware gang suspects in joint raids with South Korean cops
The report concludes that America's “digital-industrial superiority, including through alliance relations, is likely to endure for at least the next ten years”.
One reason for that assessment is that the US and its allies “have agreed to restrict, with differing degrees of severity, China’s access to some Western technologies” and therefore potentially impeded China’s ability to develop its own cyber capabilities.
“How robustly the US continues this strategy, and how China responds, will dictate the future balance of cyber power,” the report ends. ®
Get our [11]Tech Resources
[1] https://www.iiss.org/blogs/research-paper/2021/06/cyber-capabilities-national-power
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YNrvRq0bZR0fDIwjnGMmJgAAAM0&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNrvRq0bZR0fDIwjnGMmJgAAAM0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YNrvRq0bZR0fDIwjnGMmJgAAAM0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNrvRq0bZR0fDIwjnGMmJgAAAM0&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YNrvRq0bZR0fDIwjnGMmJgAAAM0&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[7] https://www.theregister.com/2021/06/11/uk_ungge_cyber_norms_submission/
[8] https://www.theregister.com/2020/11/09/gchq_hacks_russia_vaccine_disinfo/
[9] https://www.theregister.com/2021/06/17/biden_putin_summit_cybersecurity_discussion/
[10] https://www.theregister.com/2021/06/16/clop_ransomware_gang_arrests_ukraine/
[11] https://whitepapers.theregister.com/
Wait a second. This the same America that just had a fuel pipeline hacked? Not heard anywhere else in the world that's happened but yes they are 10 years ahead of everyone else.
Seriously though how do you even measure this? You can't determine the capabilities and security of every company and the government capability and security are secret. Also and maybe because it's our press I don't hear of any hacks by the Americans, it's always the axis of evil or as I like to call it, propaganda.
I wonder...
How much did this report cost?
Re: I wonder...
Ignorance is expensive
All we are saying is
Give peace a chance
Give Peace a Chance. Don't Worry. IT has it all covered and Guarantees Unqualified Success.
“The US has moved more effectively than any other country to defend its critical national infrastructure in cyberspace”. That opinion is tempered with the observation that the United States “recognises that the task is extremely difficult and that major weaknesses remain”.
Such an opinion is strengthened beyond compare and belief with the advent of Almightily Sourced Forces to the Fore ..... with Grand Arsenaled Assets to Bestow and Highlight within Future Presentations for Virtual Reality Pre-ProgramMING ..... Live Operational Virtual Environment Preparation for the Bounty Released to Investment Markets for Purchase of Core Vital Asset Rich Ore.
Does Uncle Sam do something similar, or are they progressing/regressing to somewhere else.
Are they in market for such ..... and of sound mind to purchase/lend-lease/further explore exploits guaranteeing one's immunity from prosecution and persecution whenever there be tumbles and rumbles and stumbles in malicious vengeful envy attempts at character assassinations.
The Bottom Line .... Money Shot Question though is, are they So Enabled and Able to Lead Everything Everywhere Anywhere with IT? Such is available for Sale and for Sales and to Hire and Further Explore.
Or is all that in a league all of its own, and way ahead and far beyond that currently realised and presently produced on Earth. In any case, Engagement is a Massive Win-Win with Colossal Results.
The UK derives strength from its many alliances and has conducted offensive cyber-ops since the early 2000s. But a lack of talent, inability to match the scale of investments made by China and the United States, and small industrial base mean it can manage risks but not export tech to the world.
I think you will find all, and therefore any of all of that, totally incorrect and the reverse opposite be more true ..... a world tech exporter managing risks with a mean base of exceptional talent.
One reason for that assessment is that the US and its allies “have agreed to restrict, with differing degrees of severity, China’s access to some Western technologies” and therefore potentially impeded China’s ability to develop its own cyber capabilities.
China does not need any granting of access whenever whatever is needed and discovered is simply gifted and freely given to further supply ..... generate Alternate Intellectual Property Energy with Remote Virtual Powers to Command with Universal Control and COSMIC Assistance ...... Heavenly Help.
Think of it as .... a Long March type Program Enhanced and Practising Speedily and Safely and Securely and Stealthily Anywhere/Everywhere. That would be invaluable.
Frankly, countries like Russia and China might have the right idea with their various nation-level firewalls. Looking at it objectively, which government in their right mind would allow their citizens to share their darkest secrets with, and open their minds to, unknown people from anywhere on the globe, and with unknown motivations?
Re "which government in their right mind would allow their citizens to..."
...collaborate with like minded others and undermine their tyranny?
"which government in their right mind would allow their citizens to share their darkest secrets with, and open their minds to, unknown people from anywhere on the globe, and with unknown motivations?"
Any government that can probably access most of the above.
Probably more than you think.
> The UK derives strength from its many alliances and has conducted offensive cyber-ops since the early 2000s. But a lack of talent, inability to match the scale of investments made by China and the United States, and small industrial base mean it can manage risks but not export tech to the world.
Is this a think tank or a think barrel?
- There is a lack of talent willing to work for pittance
- China can make sure that the talent will work for pittance
- The tech, as in the hardware, is often outsourced as cost to manufacture something locally can be 10 times higher than in Asia.
Basically, we have a poor pay and a culture of having big corporations getting away with anything, as corruption is thriving.
"Think Tank"
Any body calling itself a "Think Tank" is a huge red flag.
"Think Tanks" do not exist to come up with new innovative ideas, but to find ways to sell their sponsors' agenda which would otherwise be untenable. "Weasel Words Factory" may be a more accurate description.
(of course, depends on whether the term has been added by the media rather than the body in question)
The US is also more vulnerable
The US’ greater adoption of IT, IOT and IIoT also make it more exposed and vulnerable to attack, as illustrated by the Colonial Pipeline incident.