Share these talks and lectures with your colleagues
Invite colleaguesPractice paper
The new offensive cyber security: Strategically using asymmetrical tactics to promote information security
Cyber Security: A Peer-Reviewed Journal,
5
(4),
286-293
(2022)
Abstract
Since the very first hack, cyber security professionals have sought to take the fight back to the hackers. Offensive cyber security operations usually focus upon proactive technical attacks on hackers to disrupt their operations and deter future attacks, and there are currently efforts by governments to expand these capabilities. Cyber security professionals are locked in an unfair, asymmetrical conflict with hackers, but they need not confine their thinking to historical rules of engagement. This paper briefly traces the theories of asymmetrical warfare in the 21st century, including its cyber security dimensions, to explore how companies and cyber security decision makers can learn from the lessons of the past while changing the rules of the conflict in their favour.
Keywords: cyber security; asymmetrical warfare; offensive cyber security; active cyber security defence; cyber security theories
The full article is available to subscribers to the journal.
Author's Biography
Christopher Ott Chris Ott leverages his experience of more than 13 years at the U.S. Department of Justice (DOJ), including successfully litigating complex data security matters, conducting hundreds of investigations and winning dozens of appeals’ Chris, CIPP/US, works with Rothwell Figg clients on disputes, investigations and strategy relating to data security, privacy, blockchain and artificial intelligence (AI) issues. Chris has been the lead attorney on hundreds of matters involving the intersection between white collar matters (accounting, securities, money laundering) and cybercrimes (from international criminal gangs to state actors). Prior to entering private practice, Chris held various influential positions at DOJ. In these roles, he investigated and charged the largest known computer hacking and securities fraud scheme and the hack of Yahoo by Russian intelligence operatives, the largest data breach in history, as well as driving other notable cyber investigations and white-collar investigations. He led multi-attorney and multi-agency law enforcement and regulatory investigations into securities fraud, wire fraud, hacking, health care fraud, privacy intrusions, money laundering, money transmitting and Foreign Corrupt Practices Act (FCPA) violations. He consulted extensively with the intelligence community while advancing cyber investigations. Chris also acted as Senior Trial Counsel of the Business and Securities Fraud Unit in the Eastern District of New York (EDNY), Assistant United States Attorney in the Business and Securities Fraud Unit in EDNY and Assistant United States Attorney in the Southern District of California (SDCA). Throughout his time at the DOJ he won multiple awards, including the 2018 Assistant Attorney General’s Award for Excellence.
