{"id":67828,"date":"2020-05-04T11:30:58","date_gmt":"2020-05-04T09:30:58","guid":{"rendered":"https:\/\/www.hiig.de\/?p=67828"},"modified":"2023-03-28T17:06:15","modified_gmt":"2023-03-28T15:06:15","slug":"the-coronavirus-pandemic-and-its-impact-on-cybersecurity","status":"publish","type":"post","link":"https:\/\/www.hiig.de\/en\/the-coronavirus-pandemic-and-its-impact-on-cybersecurity\/","title":{"rendered":"The coronavirus pandemic and its impact on cybersecurity"},"content":{"rendered":"\n

The coronavirus pandemic has impacted cybersecurity in several ways. The challenges range from the infrastructure of the internet itself to the spread of disinformation online. Nevertheless, not all is lost, as, at the same time, valuable lessons can be learned for the future.<\/em><\/p>\n\n\n\n

\n\n\n\n

The coronavirus pandemic has changed society\u2019s way of life in several ways, but some of the most remarkable changes have occurred in the digital realm. Due to social distancing measures, more people have needed to go online, and several services have been forced to either digitalise or increase their online presence. This has revealed two things. On the one hand, the information society<\/a> is resilient, as it can maintain a certain degree of productivity and human interaction through digital means. Still, on the other hand, the sudden and massive move to the online environment was anything but smooth. Thus, we are experiencing a chaotic situation in the physical world and in cyberspace, a situation that involves both state and non-state actors.<\/p>\n\n\n\n

The challenges are abundant and are related to: (a) infrastructural limits, (b) the increase in cybercriminal activity (d) the growth of surveillance and espionage, and (d) the spread of disinformation online. Therefore, despite the marginal attention paid to it during the first stages of the outbreak, cybersecurity<\/a> is emerging as an essential tool to cope with society\u2019s new demands. This article will briefly discuss the form these challenges are taking and what we can learn from them to pave a better way towards the \u201cnew normal\u201d.<\/p>\n\n\n\n

\n\n\n\n

The challenges <\/strong><\/h3>\n\n\n\n

One of the first challenges that concern cybersecurity specialists relates to the cyberspace infrastructure itself. With the increasing dependence on the internet, its importance has changed, along with the possibility of its disruption. The growing numbers of people going online is increasing pressure on the internet\u2019s infrastructure. This pressure, coupled with potential bottlenecks (such as home-office Wi-Fi, national internet exchange points (IXPs), seabed cables, and cloud servers), is making it more vulnerable to directed cyberattacks (DiploFoundation, 2020). A large-scale DDoS<\/a> attack, for instance, could paralyse the provision of essential goods or services in the pandemic.<\/p>\n\n\n\n

Another challenge relates to online criminal activity. Cybercriminals are exploiting people\u2019s fear and curiosity about the coronavirus to conduct cyberattacks. These illegal activities include phishing attacks, malware distribution, and cyberattacks against remote access or remote working infrastructure (NCSC; CISA, 2020 p.3). According to Check Point (2020), since mid-February, there has been an increase in coronavirus-related cyberattacks from a few hundred daily to as high as over 5,000 on 28 March (an average of 2,600 attacks daily).<\/p>\n\n\n\n

A third challenge relates to surveillance and espionage, with governments tracking people\u2019s movement to control the spread of infections (Marson; Stupp; Hinshaw, 2020) and advanced persistent threat (APT) groups, potentially related to states, conducting espionage campaigns (Thales, 2020). This challenge demands an open debate within society on the terms of accessing data from digital devices; it also demands efforts to curb data leaks to malicious actors.<\/p>\n\n\n\n

Finally, there is what the World Health Organization (WHO) named as an \u201cinfodemic<\/a>\u201d. In other words, there has been a high spread of disinformation online related to COVID-19. According to an unpublished report from the US Global Engagement Center, \u201croughly 2 million tweets peddled conspiracy theories about the coronavirus over the three weeks when the outbreak began to spread outside China\u201d (Romm, 2020). This online disinformation may not only give rise to distrust among people and governments, or even international institutions, but may also impede efforts to contain the disease as it may lead people to make poor judgments.<\/p>\n\n\n\n

The lessons<\/strong><\/h3>\n\n\n\n

It is clear that cybersecurity is important in the current context and that the challenges to overcome are not easy ones. Thus, the first lesson is that the digitalisation of goods and services is here to stay, and the development of digital infrastructure must take security by design<\/a> as fundamental. Another lesson relates to prevention. It is much easier and cheaper to curb cyberattacks if we can prevent the cyber kill chain<\/a> from the beginning. However, for prevention to happen, a generalized cyber-hygiene<\/a> culture should be implemented, both in private and public institutions. <\/p>\n\n\n\n

A third lesson comes from observing how the joint forces of government and the private sector are being developed to tackle disinformation online. It will be possible to recalibrate what works and what does not in a post-crisis scenario, to create perhaps permanent \u201cmixed agencies\u201d that could improve security online.<\/p>\n\n\n\n

Finally, the aspect of surveillance and espionage can teach us the importance of an open and inclusive discussion on cybersecurity with diverse stakeholders. Transparency leads to trust. Trust can lead people to accept some actions better and to accord a degree of legitimacy to them. Then, as these actions are regarded as legitimate, a proportional design becomes possible, like their adaptation for use in non-crisis times.<\/p>\n\n\n\n

How these lessons will be implemented in practice remains to be seen. What we can be sure of is that we can come out of the pandemic better than we entered it,  at least when it comes to cybersecurity.<\/p>\n\n\n\n

\n\n\n\n
<\/div><\/div>
<\/div>
<\/div>
<\/div><\/div><\/div>