Collective Behavior and Cyber Strategy Quiz

A collective expectation for how actors should behave in a particular situation.

These strategies aim to establish guidelines for acceptable cyber behavior and promote cooperation among nations.

The inability to definitively identify the source of cyber attacks, making it difficult to hold perpetrators accountable.

The capacity to cause persistent damage and disruption to an adversary's systems.

The ability to make an adversary's systems fail and stay failed. Minor damage that is quickly repaired has no deterrent effect.

Cyber attacks are treated like any other threat against a nation's security.

A statement of purpose, scope, and methodology; Problem definition and risk assessment; Goals, objectives, activities, and performance measures; Resources, investments, and risk management; Organizational roles, responsibilities, and coordination; Integration and implementation.

To guide government departments and agencies in budgeting, planning, executing, organizing, training, and equipping personnel.

Cyberattacks targeting critical infrastructure, such as energy grids, healthcare systems, and water supplies, should be avoided by states.

States should work together to manage and respond to cyber incidents.

The challenge of proving with certainty that a specific state was responsible for a cyberattack.

Data used for attribution might be collected through espionage, making it difficult to disclose evidence.

States might avoid disclosing evidence to prevent future attacks.

States must prove their attribution claims to justify countermeasures.

The legal framework for holding states accountable for their cyberattacks.

Proving a cyberattack requires strong evidence and convincing arguments to hold a state accountable.

A model emphasizing market forces and minimal government intervention to encourage innovation. It allows companies to thrive through competition and risk-taking, minimizing regulations.

A European approach to regulating tech that prioritizes user rights and data protection, often leading to stricter rules than the US model

US law shielding online platforms from liability for user-generated content, encouraging greater freedom of expression but raising concerns about misinformation and harmful content.

China's effort to spread its technology and regulatory norms internationally, often through infrastructure projects and partnerships.

The practice of using government policies to protect domestic businesses from foreign competition, often through regulations or subsidies.

A situation where a company has a dominant position in a market, giving it undue power and potentially stifling competition.

The EU's enforcement of competition rules, often targeting large tech companies for anti-competitive practices like price manipulation or data exploitation.

The process of scrutinizing and removing harmful content from online platforms, raising issues of censorship and freedom of expression.

A business strategy where companies outsource their chip manufacturing to specialized foundries, allowing them to focus on chip design.

Companies solely focused on designing chips without their own manufacturing facilities.

Taiwan Semiconductor Manufacturing Company (TSMC) - established in 1987, a pioneer in the foundry model, serving major chip designers.

Semiconductor Manufacturing International Corporation (SMIC) - established in 2000, a key competitor to TSMC, based in China.

Morris Chang's vision and leadership were key to establishing Taiwan's semiconductor industry and popularizing the foundry model.

The ability to produce extremely precise patterns on silicon wafers, crucial for chip manufacturing, dominated by ASML.

From the 1990s, companies focused on specific parts of the semiconductor supply chain, creating a specialized and dominant industry structure.

Intel's dominance in microprocessors in the late 20th century, resulting in a highly profitable oligopoly and influencing the company's future decisions.

These security measures are solely defensive and operate within the defender's network, without any active offensive capabilities.

The private sector's vital role in maintaining critical infrastructure, making it essential for cybersecurity due to its ownership and reliance

Inadequate private cybersecurity can harm national defense and internal security due to the use of civilian infrastructure for transmitting military data, like cables and satellites.

Private companies provide in-house cybersecurity, while dedicated specialist firms offer services to companies, governments, and others.

The increasing privatization of cyber security, where private companies play a larger role, compared to traditional military and security services.

The development of the cyber domain happened primarily in the private sector, unlike traditional military and security services which were initially under public control.

The inherent challenges of relying on private companies for cybersecurity due to potential negative effects on equality and democratic accountability.

This refers to the potential for unequal access to cybersecurity resources, with some entities having greater protection than others.

Private security companies (PMSCs) offering cybersecurity services create a 'Swiss Cheese Model' where only those who can afford them are protected, leaving the vulnerable and disadvantaged exposed.

The introduction of market logic into cybersecurity can lead to a decline in support for general public protection measures, as influential actors may prioritize private security solutions.

The lack of democratic oversight and control over private cybersecurity companies presents a significant challenge, as the secrecy surrounding their operations, limited public understanding, and lack of contract transparency raise concerns about accountability.

Cybercrime encompasses a wide range of criminal activities utilizing electronic communication networks and information systems.

Cyber-enabled crime refers to traditional offenses like fraud or forgery that have been amplified or transformed by the internet.

Cyber-dependent crime relies on digital systems as both the target and the means of attack, often involving malware or hacking.

Cybercrime falls into two broad categories: Cyber-enabled crime and Cyber-dependent crime.

The lack of a universal definition for cybercrime highlights its complexity, influenced by various actors, technologies, and socioeconomic factors.