Cybersecurity Concepts Overview

Study Notes

Cyber espionage involves the covert gathering of sensitive information.
Cyber sabotage focuses on the deliberate disruption or destruction of digital systems.
Cyber influence operations aim to manipulate public opinion or political processes.
Attacks on critical infrastructure, including power grids and communication networks, can lead to severe economic and societal consequences.

Stuxnet malware targeted Iran’s nuclear facilities, demonstrating the use of sophisticated cyber weapons by nation-states.
Fancy Bear, a Russian cyber espionage group, has been involved in politically motivated attacks on various countries.
The NotPetya ransomware attack caused significant financial disruptions, attributed to Russian involvement.
WannaCry ransomware affected organizations globally, with ties to North Korea, emphasizing the broad impact of cyber attacks.

Nation-state attacks are cyber operations executed by government entities against other nations or organizations.
These attacks employ advanced tactics and significant resources, often focusing on strategic or geopolitical objectives.
Targets include critical infrastructure, military systems, government agencies, and private sectors.

The attack on Iran’s Natanz facility in 2010 marked a notable shift, integrating cyber warfare with conventional military tactics.
Before Stuxnet, cyber attacks were not prominently viewed as military weapons.

USCYBERCOM focuses on maintaining an advantage over adversaries' capabilities and creating cyberspace advantages across domains.
Aims to support operational outcomes and achieve strategic impacts through information advantages and partnerships.

Large-scale, catastrophic cyberattacks are unlikely in the short term; however, smaller-scale attacks occur frequently.
Sophisticated and sustained cyberwarfare capabilities are primarily held by a few nations: the U.S., China, Iran, North Korea, Israel, and Russia.
Cyber espionage occurs on a large scale daily, often by non-state actors lacking the sophistication for sustained cyberwarfare.

Information operations refer to actions that affect adversaries' information systems while protecting one's own, including cyberattacks and psychological operations.
Information warfare encompasses information operations during crises or aimed at achieving specific goals.

The American Society of Civil Engineers (ASCE) assigned a ‘C-’ grade to the infrastructure in its 2021 Report Card, an improvement from a ‘D+’ in 2017.