The Hague Program for Cyber Norms Podcast Episode 2: Threat intel and cyber research – a troubled relationship?
Jan 22, 2021
In this episode, Juan Andres Guerrero-Saade, a security researcher and adjunct professor at Johns Hopkins, Florian Egloff, a cybersecurity researcher at ETH Zurich, and Frédérick Douzet, a professor at the University of Paris 8, dive into the complex world of cyber research. They explore the difficulties academics face accessing private sector data and the resulting impact on understanding cyber threats. The discussion also addresses the importance of academia in correcting cybersecurity imbalances globally and how ethical research can combat disinformation in cyber conflict.
AI Snips
Chapters
Transcript
Episode notes
Trust and Expertise Barriers
- Trust issues and short academic tenure hinder long-term collaboration with private threat intel companies.
- Threat intelligence is a young discipline rarely taught at universities, limiting natural expertise pools for collaboration.
Trust Lost with Staff Turnover
- Frederic shared that building trust with private sector contacts often fails when those contacts leave companies.
- This loss forces restarting trust-building process from scratch, delaying data sharing collaborations.
Skewed Public Cyber Incident Reporting
- Commercial incentives skew which cyberattacks are publicly reported, creating an incomplete picture of cyber conflict.
- Attribution costs and political factors limit visibility into many cyber incidents, especially for less profitable victims.