Journal
JOURNAL OF INFORMATION TECHNOLOGY & POLITICS
Volume 18, Issue 1, Pages 1-20Publisher
ROUTLEDGE JOURNALS, TAYLOR & FRANCIS LTD
DOI: 10.1080/19331681.2020.1776658
Keywords
Cybersecurity; public goods; civil society; threat intelligence; cyber conflict; market failure
Categories
Funding
- Carnegie Corporation of New York
- Ford Foundation
- John D. and Catherine T. MacArthur Foundation
- Oak Foundation
- Open Society Foundations
- Sigrid Rausing Trust
Ask authors/readers for more resources
Public and academic knowledge of cyber conflict heavily relies on commercial threat reporting data, which may provide a distorted view of cyber threat activity, neglecting threats to civil society organizations. The commercial interests of firms result in a systematic bias in reporting, hindering cybersecurity scholarship and distorting academic debates.
Public and academic knowledge of cyber conflict relies heavily on data from commercial threat reporting. There are reasons to be concerned that these data provide a distorted view of cyber threat activity. Commercial cybersecurity firms only focus on a subset of the universe of threats, and they only report publicly on a subset of the subset. High end threats to high-profile victims are prioritized in commercial reporting while threats to civil society organizations, which lack the resources to pay for high-end cyber defense, tend to be neglected or entirely bracketed. This selection bias not only hampers scholarship on cybersecurity but also has concerning consequences for democracy. We present and analyze an original dataset of available public reporting by the private sector together with independent research centers. We also present three case studies tracing reporting patterns on a cyber operation targeting civil society. Our findings confirm the neglect of civil society threats, supporting the hypothesis that commercial interests of firms will produce a systematic bias in reporting, which functions as much as advertising as intelligence. The result is a truncated sample of cyber conflict that underrepresents civil society targeting and distorts academic debate as well as public policy.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available