Cyber Warfare: From Conventional through the Grey Zone to Hybrid Warfare. Countering the emerging threat though Threat Informed Resilience
Event Start:
Wed 29 Nov 12:00 PM ACST
Event Finish:
Wed 29 Nov 01:30 PM ACST
Registration End Date: Tue 28 Nov 10:32 AM
This presentation aims to explore the emergence of cyber warfare to its current prevalence, taking into account well known state based grey zone activity such as espionage, through to the deployment of destructive cyber warfare capabilities such as wiper malware.<br> <br>Glenn will commence by providing an overview of cyber warfare, articulating the strategic fit in current definitions. This overview will define the largely agreed definitions and scope of conventional warfare, grey zone warfare and hybrid warfare. To fully articulate the scope, we will discuss the major activities that may be engaged within these definitions, such as conventional kinetic strikes, mis/disinformation, political and economic coercion, propaganda, and espionage through to deployment of destructive cyber weapons.<br> <br>Glenn will also describe the relative advantages of cyber warfare to the attacker, from the difficulty of attribution, geographic advantages; as well as other less considered benefits like cost and return on investment.<br> <br>We will then explore anecdotal case studies highlighting the integration of cyber warfare into hybrid operations, including the use of cyber tools for intelligence gathering, deception, and coordination of kinetic attacks. Glenn will illustrate known examples of hybrid warfare, starting with NotPetya in 2017, through to the current impact of wiper malware like HermeticWiper in 2022. The discussion will examine examples of hybrid warfare activity: including network intrusions, denial-of-service attacks, and data manipulation.<br> <br>This analysis will be based upon both Open-Source Intelligence and data from FortiGuard Labs telemetry – which clearly depicts the global emergence and variance of cyber warfare elements such as wiper malware.<br> <br>It is certain that most nations are already experiencing Grey Zone activity. Adversaries are exploiting the ambiguity of cyber operations, hiding within the blurred lines between state-sponsored and criminal activities.<br> <br>Grey zone activities are critical in the execution of hybrid warfare elements, as the enable the adversary to perform deep reconnaissance and intelligence gathering. The adversary will understand system architectures, structures, processes, and people within their target organisation. This gives the adversary intelligence on the attack surface and defence systems they must defeat. This activity within the grey zone also facilitates proactive prepositioning – enabling access for subsequent activity.<br> <br>Finally, the presentation will investigate the boundary and linkages between offensive activities in the perspective of a strategic, offensive cyber operation. This presentation will use the Kill Chain and MITRE ATT&CK frameworks to model a hybrid warfare operation, isolate the key defensive points, propose defensive strategies, and explain the critical importance of proactive resilience.<br><br>* If you are experiencing trouble when registering please email Lauren Hall at Lauren.Hall@acs.org.au<br><br>
Professional Development
Event Terms and Conditions
Registration
Cancellation and Refund
All cancellations must be processed through the website, a refund will only be considered if it is at least 3 working days prior to the event.
Disclaimer
COVID-19 Event Attendance Compliance
By registering to attend an ACS in person event you are agreeing to the below terms and conditions
Personal information collection notice
By registering for this event, you are providing personal information to the Australian Computer Society. In accordance with the ACS Privacy Policy, ACS collects personal information through registrations and attendances at its events for the purposes of:
If the required information is not provided, we or any involved third parties, may not be able to respond to you, update you, or provide appropriate services or events to you.
We may obtain personal information directly from you or from someone who registers for the event on your behalf. If you provide us with personal information about another person, you must do so only with their consent and agree to make them aware of this privacy notice.
ACS may share your personal information with third parties for the collection purposes noted above or as set out in our Privacy Policy, where it is reasonably necessary for, or directly related to, one or more of our activities, or required by law.
When you register to participate in an overseas event, we may send personal information we collect overseas.
See our Privacy Policy at https://www.acs.org.au/privacy-policy.html for more information about our privacy practices.
