Panel: Cyber Operations, Doctrine, And Geo-Politics
summary
Panel summarizes how attribution moves from heuristic names to a repeatable process: a new weather-based taxonomy replaces periodic table names and links campaigns to actors; analysts use three types of attribution (victim-only mapping, correlation with government statements, full kill-chain visibility) and report confidence levels. Discussion cites SolarWinds → nobelium, ransomware as ransomware as top risk driving investment, concern about zero-days traded commercially and the Vulnerability Equities Process for disclosure.
AI-written summary · about
chapters (22)
- 0:00Introduction to attribution
- 1:30Naming nation state actors
- 6:30Defender priorities in cyberattacks
- 8:34Ransomware’s global impact
- 10:42Ransomware response in India
- 12:28AES breach analysis
- 13:52State sponsored vs supported actors
- 14:35Classifying state cyber groups
- 16:46Power sector cyber threats
- 17:51Media bias in cyber reports
- 19:35Volt Typhoon in critical infra
- 22:27Geopolitics driving cyberattacks
- 24:14Political targeting in cyber
- 26:26Zero days sale vs disclosure
- 27:51Nation states and zero days
- 30:37Role of private actors like Citizen Lab
- 32:04Global private offensive actors
- 33:49India’s cyber defense ecosystem
- 34:52Cyber capability over offense
- 36:13Snowden’s impact on cyber
- 37:21Cryptography’s cyber roots
- 38:56Q&A session
related talks
50mFrom Attribution to Accountability: Upholding International Rules Online
15mLink by Link: Crafting the Attribution Chain
05mConceptualizing attribution and why it matters
12mCYBERWARCON Keynote
20mThe Art of Attribution: Identifying and Pursuing your Cyber Adversaries
42mKeynote: The Expanding Universe of Cyber Threats
27mKeynote
48mRansomware: From the Boardroom to the Situation Room