There are currently few things that worry CEOs worldwide as much as geopolitics. Cybersecurity is undoubtedly one of them. But what happens when you combine geopolitical conflicts and cyber threats?

Geopolitical cyber threats, that’s what.

This lethal combination threatens to disrupt economies, destabilize governments, and shatter global stability. That’s why it must be met with an ironclad cybersecurity strategy.

But what does that strategy entail?

That’s for Tom Vazdar and Venicia Solomons to answer. Tom is the chair of the Master’s Degree in Enterprise Cybersecurity program at the Open Institute of Technology (OPIT). Venicia is a seasoned cybersecurity architect and advocate who has rightfully earned the nickname “the Cyber Queen.”

Here’s what these two esteemed cyber professionals have to say about geopolitical cyber threats in their highly informative master class titled “Cyber Threat Landscape 2024: Navigating New Risks.”

What Are Geopolitical Cyber Threats?

Geopolitical threats refer to cyberattacks (or campaigns) driven by political motives. These attacks are often conducted by state-sponsored actors and have a specific strategic goal in mind.

For instance, Iran-backed hackers have recently been targeting U.S. water systems, aiming to disrupt Israeli-made equipment globally. This example also perfectly illustrates the targets of geopolitical cyberattacks – critical infrastructure, government systems, military networks, and other relevant entities.

But don’t jump to conclusions – the private sector isn’t immune to such attacks.

Cybercriminals have also targeted private companies to steal intellectual property, disrupt operations, or extort money. However, what differentiates these attacks from other cyberattacks is the motivation behind them.

Whether it’s through espionage, sabotage, or disinformation, geopolitical cyber threats always aim to achieve a political or strategic advantage for the attacker.

How Do State-Sponsored Cyber Threats Differ From Other Cyberattacks?

In their master class, Tom and Venicia specifically focus on state-sponsored cyber threats, even though they aren’t the only type of geopolitical cyber threats. Why? Because they’re the most advanced and sophisticated cyber threats.

As Venicia puts it, state-sponsored cyberattacks involve “specialist hacking techniques,” “stealthy behavior,” and “stealthy execution.” That’s why the consequences of these attacks are often only seen after significant damage has been done.

This leads us to another distinctive characteristic of state-sponsored cyberattacks – they typically involve long-term execution.

You see, other forms of cyberattacks usually want to reach their goal as soon as possible. For instance, a ransomware attack will infiltrate your system, and the hacker will ask for ransom straight away.

A state-sponsored cyberattack, on the other hand, usually plays the long game. That’s why they’re considered an advanced persistent threat (APT). Remaining undetected for a long time allows these threats to collect lots of critical data and perform long-term espionage.

Tom adds that the goal of these cyberattacks is another important distinction. As mentioned, they usually have a strategic goal in mind. “Regular” cyber threats, in contrast, typically only aim for financial profit.

Why Is Geopolitical Cybersecurity Important?

For the most part, traditional warfare was limited to three battlefields – the land, the air, and the sea. However, as Tom points out, two vital battlefields have joined the fray – space and cyberspace.

Sure, threats in cyberspace aren’t overtly visible like those on land, air, or sea. However, they can be just as devastating, if not more so – especially if they’re geopolitical cyber threats.

Here’s how Tom and Venicia break down the importance of geopolitical cybersecurity.

Protecting Against Espionage

As mentioned, espionage is one of the leading types of geopolitical cyberattacks. Since espionage aims to collect as much valuable information as possible, these attacks are typically highly refined, which allows them to remain undiscovered for months on end.

Venicia points out that the recent geopolitical tensions have led to increased cyber espionage. That’s what makes solid geopolitical cybersecurity more important than ever. Let one intruder into your network, and you’re essentially giving away all your classified information (past, present, and future).

Avoiding Manipulation

2024 is an election year. This means that “influence operations, disinformation operations, [and] deep fake operations” will run more rampant than ever, as Tom warns. Ultimately, these operations aim to shape public opinion and undermine trust in democratic institutions. These outcomes are never desirable, let alone during such a crucial time.

That’s where cybersecurity comes into play.

These measures help secure digital platforms, detect (and remove) false information, and (in this specific scenario) safeguard electoral systems.

Protecting the Economy

As mentioned, geopolitical cyberattacks aren’t typically done for financial gain. However, they can still cause massive financial losses. How? By targeting “public organizations and private entities that make a large contribution to a country’s economy,” as Venicia explains.

And a world that’s still reeling from the effects the COVID-19 pandemic had on the global economy can’t possibly handle another major disruption. That’s why any similar threat should never be taken lightly.

How to Combat Geopolitical Cyber Threats

Now that you know why geopolitical cyber threats must be combatted, let’s discuss how this can be done.

Keep All Aspects in Mind

There are numerous factors that go into protecting against geopolitical cyber threats. But for this protection to actually work, all these factors must be considered when devising a defense strategy.

For starters, this means protecting all critical infrastructure sectors. Tom lists just some of them –financial services, healthcare and public health, and transportation systems. However, one thing applies to all critical infrastructure sectors – they aren’t “independent islands,” as Tom puts it.

They’re all part of a larger ecosystem.

Each sector can only be protected if there’s a holistic approach to cybersecurity, one that considers interdependencies between sectors and the potential cascading effects of cyber disruptions. This way, in case of a cyberattack, every sector can provide support and respond effectively to minimize the impact.

Foster Collaboration

The collaborative approach shouldn’t only apply to critical infrastructure sectors. All stakeholders, including government agencies, cybersecurity experts, and the private sector, must work together to address geopolitical threats effectively.

This collaboration can take many forms.

However, Tom highlights the three most important ones on the global level – sharing intelligence, developing international norms and agreements, and establishing cybersecurity alliances.

Our experts list some of the most useful alliances and resources in this regard:

  • The No More Ransom Project helps organizations combat ransomware attacks by providing decryption keys, thus returning their vital information.
  • Public-Private Partnerships (PPPs) worldwide allow for sharing cyber threat intelligence among industry partners to improve defenses collectively.
  • The Budapest Convention on Cybercrime sets out international standards for combating cybercrime, promoting cooperation among countries to tackle cyber threats effectively.

Focus on Critical Infrastructure

By now, one thing’s clear – protecting critical infrastructure against geopolitical cyber threats is paramount.

According to Tom, collaboration plays a key role here as well. In his words, “The only way to protect [critical infrastructure] is that collaborative effort between government and the private sector because they cannot go without each other; they have to work together.”

Implement a Robust Cybersecurity Framework

A comprehensive and collaborative approach to combating geopolitical threats is just the preamble. The implementation of a robust cybersecurity framework is where the actual protection starts. Of course, these systems should be based on the intelligence collected through collaboration and education.

However, the system itself is just as important. After all, protecting critical infrastructure and other elements of similar importance requires more than just traditional anti-virus software!

According to Tom, a comprehensive cybersecurity framework will comprise four elements – threat detection, response tools, regular security assessments, and training. The specifics will vary by organization, and every relevant employee should be familiar with them.

Tom also emphasizes the importance of adopting a multi-layer approach to cybersecurity defenses. This way, even if one layer is breached, others will provide protection and prevent a total collapse of the system.

Stay Vigilant

Organizations should always be on the lookout for an uptick in suspicious activities, especially during times of geopolitical conflicts. This vigilance includes monitoring network traffic for anomalies, conducting regular security audits, and staying on top of the latest cyber threats and—let’s face it—the latest geopolitical conflicts.

Train Your Employees

The importance of thorough cybersecurity education can’t be understated. After all, employees are usually the first line of defense against cyber threats. So, they should be trained to handle the information system properly within the organization. They should know what to do and what not to do before, during, and after a geopolitical cyberattack.

However, there’s another type of employee crucial for the strength of cybersecurity within an organization – cybersecurity professionals themselves.

These individuals must be on top of their game at all times. One way to ensure this is to only hire professionals with ample experience and education. For instance, completing a renowned Master’s program like OPIT’s Enterprise Cybersecurity should be a huge green flag for any employer. It signals a strong commitment to cybersecurity excellence and a deep understanding of the latest trends and techniques in the field.

Invest in the education and professional development of your employees, and you stand a chance against the ever-evolving landscape of cyber threats, geopolitical and beyond.

Related posts

The Yuan: AI is childlike in its capabilities, so why do so many people fear it?
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Nov 8, 2024 6 min read

Source:

  • The Yuan, Published on October 25th, 2024.

By Zorina Alliata

Artificial intelligence is a classic example of a mismatch between perceptions and reality, as people tend to overlook its positive aspects and fear it far more than what is warranted by its actual capabilities, argues AI strategist and professor Zorina Alliata.

ALEXANDRIA, VIRGINIA – In recent years, artificial intelligence (AI) has grown and developed into something much bigger than most people could have ever expected. Jokes about robots living among humans no longer seem so harmless, and the average person began to develop a new awareness of AI and all its uses. Unfortunately, however – as is often a human tendency – people became hyper-fixated on the negative aspects of AI, often forgetting about all the good it can do. One should therefore take a step back and remember that humanity is still only in the very early stages of developing real intelligence outside of the human brain, and so at this point AI is almost like a small child that humans are raising.

AI is still developing, growing, and adapting, and like any new tech it has its drawbacks. At one point, people had fears and doubts about electricity, calculators, and mobile phones – but now these have become ubiquitous aspects of everyday life, and it is not difficult to imagine a future in which this is the case for AI as well.

The development of AI certainly comes with relevant and real concerns that must be addressed – such as its controversial role in education, the potential job losses it might lead to, and its bias and inaccuracies. For every fear, however, there is also a ray of hope, and that is largely thanks to people and their ingenuity.

Looking at education, many educators around the world are worried about recent developments in AI. The frequently discussed ChatGPT – which is now on its fourth version – is a major red flag for many, causing concerns around plagiarism and creating fears that it will lead to the end of writing as people know it. This is one of the main factors that has increased the pessimistic reporting about AI that one so often sees in the media.

However, when one actually considers ChatGPT in its current state, it is safe to say that these fears are probably overblown. Can ChatGPT really replace the human mind, which is capable of so much that AI cannot replicate? As for educators, instead of assuming that all their students will want to cheat, they should instead consider the options for taking advantage of new tech to enhance the learning experience. Most people now know the tell-tale signs for identifying something that ChatGPT has written. Excessive use of numbered lists, repetitive language and poor comparison skills are just three ways to tell if a piece of writing is legitimate or if a bot is behind it. This author personally encourages the use of AI in the classes I teach. This is because it is better for students to understand what AI can do and how to use it as a tool in their learning instead of avoiding and fearing it, or being discouraged from using it no matter the circumstances.

Educators should therefore reframe the idea of ChatGPT in their minds, have open discussions with students about its uses, and help them understand that it is actually just another tool to help them learn more efficiently – and not a replacement for their own thoughts and words. Such frank discussions help students develop their critical thinking skills and start understanding their own influence on ChatGPT and other AI-powered tools.

By developing one’s understanding of AI’s actual capabilities, one can begin to understand its uses in everyday life. Some would have people believe that this means countless jobs will inevitably become obsolete, but that is not entirely true. Even if AI does replace some jobs, it will still need industry experts to guide it, meaning that entirely new jobs are being created at the same time as some older jobs are disappearing.

Adapting to AI is a new challenge for most industries, and it is certainly daunting at times. The reality, however, is that AI is not here to steal people’s jobs. If anything, it will change the nature of some jobs and may even improve them by making human workers more efficient and productive. If AI is to be a truly useful tool, it will still need humans. One should remember that humans working alongside AI and using it as a tool is key, because in most cases AI cannot do the job of a person by itself.

Is AI biased?

Why should one view AI as a tool and not a replacement? The main reason is because AI itself is still learning, and AI-powered tools such as ChatGPT do not understand bias. As a result, whenever ChatGPT is asked a question it will pull information from anywhere, and so it can easily repeat old biases. AI is learning from previous data, much of which is biased or out of date. Data about home ownership and mortgages, e.g., are often biased because non-white people in the United States could not get a mortgage until after the 1960s. The effect on data due to this lending discrimination is only now being fully understood.

AI is certainly biased at times, but that stems from human bias. Again, this just reinforces the need for humans to be in control of AI. AI is like a young child in that it is still absorbing what is happening around it. People must therefore not fear it, but instead guide it in the right direction.

For AI to be used as a tool, it must be treated as such. If one wanted to build a house, one would not expect one’s tools to be able to do the job alone – and AI must be viewed through a similar lens. By acknowledging this aspect of AI and taking control of humans’ role in its development, the world would be better placed to reap the benefits and quash the fears associated with AI. One should therefore not assume that all the doom and gloom one reads about AI is exactly as it seems. Instead, people should try experimenting with it and learning from it, and maybe soon they will realize that it was the best thing that could have happened to humanity.

Read the full article below:

Read the article
The European Business Review: Adapting to the Digital Age: Teaching Blockchain and Cloud Computing
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Nov 6, 2024 6 min read

Source:


By Lokesh Vij

Lokesh Vij is a Professor of BSc in Modern Computer Science & MSc in Applied Data Science & AI at Open Institute of Technology. With over 20 years of experience in cloud computing infrastructure, cybersecurity and cloud development, Professor Vij is an expert in all things related to data and modern computer science.

In today’s rapidly evolving technological landscape, the fields of blockchain and cloud computing are transforming industries, from finance to healthcare, and creating new opportunities for innovation. Integrating these technologies into education is not merely a trend but a necessity to equip students with the skills they need to thrive in the future workforce. Though both technologies are independently powerful, their potential for innovation and disruption is amplified when combined. This article explores the pressing questions surrounding the inclusion of blockchain and cloud computing in education, providing a comprehensive overview of their significance, benefits, and challenges.

The Technological Edge and Future Outlook

Cloud computing has revolutionized how businesses and individuals’ access and manage data and applications. Benefits like scalability, cost efficiency (including eliminating capital expenditure – CapEx), rapid innovation, and experimentation enable businesses to develop and deploy new applications and services quickly without the constraints of traditional on-premises infrastructure – thanks to managed services where cloud providers manage the operating system, runtime, and middleware, allowing businesses to focus on development and innovation. According to Statista, the cloud computing market is projected to reach a significant size of Euro 250 billion or even higher by 2028 (from Euro 110 billion in 2024), with a substantial Compound Annual Growth Rate (CAGR) of 22.78%. The widespread adoption of cloud computing by businesses of all sizes, coupled with the increasing demand for cloud-based services and applications, fuels the need for cloud computing professionals.

Blockchain, a distributed ledger technology, has paved the way by providing a secure, transparent, and tamper-proof way to record transactions (highly resistant to hacking and fraud). In 2021, European blockchain startups raised $1.5 billion in funding, indicating strong interest and growth potential. Reports suggest the European blockchain market could reach $39 billion by 2026, with a significant CAGR of over 47%. This growth is fueled by increasing adoption in sectors like finance, supply chain, and healthcare.

Addressing the Skills Gap

Reports from the World Economic Forum indicate that 85 million jobs may be displaced by a shift in the division of labor between humans and machines by 2025. However, 97 million new roles may emerge that are more adapted to the new division of labor between humans, machines, and algorithms, many of which will require proficiency in cloud computing and blockchain.

Furthermore, the World Economic Forum predicts that by 2027, 10% of the global GDP will be tokenized and stored on the blockchain. This massive shift means a surge in demand for blockchain professionals across various industries. Consider the implications of 10% of the global GDP being on the blockchain: it translates to a massive need for people who can build, secure, and manage these systems. We’re talking about potentially millions of jobs worldwide.

The European Blockchain Services Infrastructure (EBSI), an EU initiative, aims to deploy cross-border blockchain services across Europe, focusing on areas like digital identity, trusted data sharing, and diploma management. The EU’s MiCA (Crypto-Asset Regulation) regulation, expected to be fully implemented by 2025, will provide a clear legal framework for crypto-assets, fostering innovation and investment in the blockchain space. The projected growth and supportive regulatory environment point to a rising demand for blockchain professionals in Europe. Developing skills related to EBSI and its applications could be highly advantageous, given its potential impact on public sector blockchain adoption. Understanding the MiCA regulation will be crucial for blockchain roles related to crypto-assets and decentralized finance (DeFi).

Furthermore, European businesses are rapidly adopting digital technologies, with cloud computing as a core component of this transformation. GDPR (Data Protection Regulations) and other data protection laws push businesses to adopt secure and compliant cloud solutions. Many European countries invest heavily in cloud infrastructure and promote cloud adoption across various sectors. Artificial intelligence and machine learning will be deeply integrated into cloud platforms, enabling smarter automation, advanced analytics, and more efficient operations. This allows developers to focus on building applications without managing servers, leading to faster development cycles and increased scalability. Processing data closer to the source (like on devices or local servers) will become crucial for applications requiring real-time responses, such as IoT and autonomous vehicles.

The projected growth indicates a strong and continuous demand for blockchain and cloud professionals in Europe and worldwide. As we stand at the “crossroads of infinity,” there is a significant skill shortage, which will likely increase with the rapid adoption of these technologies. A 2023 study by SoftwareOne found that 95% of businesses globally face a cloud skills gap. Specific skills in high demand include cloud security, cloud-native development, and expertise in leading cloud platforms like AWS, Azure, and Google Cloud. The European Commission’s Digital Economy and Society Index (DESI) highlights a need for improved digital skills in areas like blockchain to support the EU’s digital transformation goals. A 2023 report by CasperLabs found that 90% of businesses in the US, UK, and China adopt blockchain, but knowledge gaps and interoperability challenges persist.

The Role of Educational Institutions

This surge in demand necessitates a corresponding increase in qualified individuals who can design, implement, and manage cloud-based and blockchain solutions. Educational institutions have a critical role to play in bridging this widening skills gap and ensuring a pipeline of talent ready to meet the demands of this burgeoning industry.

To effectively prepare the next generation of cloud computing and blockchain experts, educational institutions need to adopt a multi-pronged approach. This includes enhancing curricula with specialized programs, integrating cloud and blockchain concepts into existing courses, and providing hands-on experience with leading technology platforms.

Furthermore, investing in faculty development to ensure they possess up-to-date knowledge and expertise is crucial. Collaboration with industry partners through internships, co-teach programs, joint research projects, and mentorship programs can provide students with invaluable real-world experience and insights.

Beyond formal education, fostering a culture of lifelong learning is essential. Offering continuing education courses, boot camps, and online resources enables professionals to upskill or reskill and stay abreast of the latest advancements in cloud computing. Actively promoting awareness of career paths and opportunities in this field and facilitating connections with potential employers can empower students to thrive in the dynamic and evolving landscape of cloud computing and blockchain technologies.

By taking these steps, educational institutions can effectively prepare the young generation to fill the skills gap and thrive in the rapidly evolving world of cloud computing and blockchain.

Read the full article below:

Read the article