دانلود کتاب عملیات سایبری روسیه – تهدیدی برای امنیت ملی آمریکا

A 1960s research project at the Advanced Research Projects Agency (ARPA) began a technology revolution never anticipated and the most significant paradigm change since the invention of movable type. Today, most communications and information operations take place on systems connected to the Internet infrastructure. Dependence on this infrastructure makes users vulnerable to hostile attacks by criminal enterprises and foreign intelligence and military organizations. Russia stands out as one of the most significant threats, having greatly expanded its cyber capabilities with respect to intelligence collection, espionage, and cyber warfare as it engages in these activities on a continuing basis.

Russia views cyber differently than its western counterparts. Russia’s leadership sees itself as engaged in an ongoing, existential struggle in every realm, including the information space. Moscow views the Internet as a threat to regime security and a weapon to be used against Russia’s enemies and does not use the term “cyber” or “cyber warfare” except in reference to Western concepts, preferring to see cyber operations in the broader framework of information security and information warfare. This holistic concept includes computer network operations, electronic warfare, psychological operations, and information operations. Consistent with Soviet notions of combating ongoing threats from abroad and within, the present Russian regime views the struggle over “information space” as unending.

Offensive cyber operations play a large and increasing role in Russian military operations and in Russia’s strategic deterrence framework. While, for structural and doctrinal reasons, the Russian military and intelligence services were slow to embrace cyber operations, the government now plans to bolster the offensive and defensive cyber capabilities of the armed forces and other security institutions. As Russia’s cyber operations grow at a pace and on a scale well beyond what has been widely reported, there is a great opportunity to use open-source information and data to understand the nature of these operations and the threat they constitute.

A central objective of the DARPA Social Cyber program is to utilize a comprehensive approach to understand the culture and the anthropology of the software development process with regard to malicious code and open-source software (OSS). Russia’s cyber threats and operational components have resisted identification by traditional intelligence methods: the source data is not part of the usual collection regime, and the AI analytical tools, such as those utilized for this study, rely on a major software development effort integral to the DARPA program. The present analysis looks at how malicious code is distributed; AI tools search open-source source materials and extract and analyze the data obtained.