Cybersecurity

blog

Ukraine's Recovery, Mental Health First Aid, School Staffing: RAND Weekly Recap

This weekly recap focuses on the trade-offs of Ukraine's reconstruction, the effects of a Mental Health First Aid training program, school staffing challenges, and more.

commentary

Hybrid Work Is Here to Stay. It's Time for Security to Catch Up to Our New Normal

As hybrid work becomes the new normal, workplace practices—security-focused and otherwise—may need to reconsider whether physical presence necessarily improves either security or work outcomes.

Douglas Yeung @DouglasCYeung

blog

The War in Ukraine, Software Supply Chain Risk, 'Hacking Equity': RAND Weekly Recap

This weekly recap focuses on lessons about defense strategy from the war in Ukraine, U.S.-France cooperation in the Indo-Pacific, software supply chain risk, and more.

commentary

Software Supply Chain Risk Is Growing, but Mitigation Solutions Exist

Software supply chain security has emerged as a leading risk because of the massively fragmented and decentralized nature of modern software development. While we still have much to learn as a community about this risk, there are concrete steps we can take to better understand and mitigate it.

Sasha Romanosky

commentary

The Intelligence Community Doesn't Warn About All Attacks Against the U.S. Homeland. Why Not?

Targets for foreign threats against the United States increasingly include entities that are not part of the U.S. government or military. But too many of these potential victims are unaware of threats against them, are not warned with intelligence reporting about such threats, and lack information about options to protect themselves.

Cortney Weinbaum @cortney_dc

commentary

Preparing for a Post-Quantum Future

Future quantum computers could create a significant national security risk by enabling attackers to break a foundational element of security in America's networked communication infrastructure. The United States is taking strides to address national security risks from quantum computing, but there is a long road ahead.

Michael J. D. Vermeer @MJDVermeer

blog

Homelessness in L.A., Russia's Military Woes, Educator Morale: RAND Weekly Recap

This weekly recap focuses on breaking the cycle of incarceration and homelessness, Russia’s ongoing military struggles, NATO expansion, and more.

blog

Politicized Topics in School, the War in Ukraine, Post-Quantum Cryptography: RAND Weekly Recap

This weekly recap focuses on the intrusion of politicized topics in America's schools, where the war in Ukraine may be headed, post-quantum cryptography, and more.

commentary

Hack Post-Quantum Cryptography Now So That Bad Actors Don't Do It Later

The U.S. government should consider offering a public cash bounty to anyone who can crack the new forms of encryption that are being rolled out to defend against quantum computers. If a bounty helps catch a vulnerability before it's deployed, then the modest cost of the bounty could prevent much higher costs down the line.

Edward Parker, Michael J. D. Vermeer @MJDVermeer

commentary

The Metaverse: What It Is and Is Not

The metaverse is quickly expanding, but its meaning remains unclear. Until an agreement on a definition of “metaverse” is reached, efforts to manage the technology development and related public policy could be muddled at best.

Swaptik Chowdhury, Timothy Marler

commentary

Preparing for a Cyberattack Starts at the Local Level

The ongoing Russian war in Ukraine has highlighted the need for federal, state, and local level emergency managers to prepare to respond to a cyberattack with widespread impacts that significantly disrupt critical infrastructure.

Clara Decerbo, Grace Hindmarch, et al.

blog

RAND Commentary Highlights of 2021

Vaccine rollouts, an attack on the U.S. Capitol, massive ransomware attacks, the withdrawal from Afghanistan, record numbers of job openings and people quitting, and more. RAND researchers weighed in on all these topics and more.

commentary

The Implications for Human Rights in the Digital Age­­

As society relies more and more on digital technologies, there are growing implications for human rights and individuals' fundamental freedoms—both positive and negative.

Fiona Quimbre @FQuimbre, Sam Stockwell

blog

Defunding Prisons, Preventing Cyberattacks, Promoting COVID-19 Vaccinations: RAND Weekly Recap

This weekly recap focuses on defunding prisons, how to deter ransomware attacks, overcoming barriers to COVID-19 vaccination, and more.

commentary

How the United States Can Deter Ransomware Attacks

To rein in ransomware attacks, the United States needs to upend the risk-reward ratio for hackers and for the countries that harbor or support them. Such a strategy would make networks harder to breach, hit back harder against hackers, and claw back gains from those who succeed.

Jonathan W. Welburn @jwwelburn, Quentin E. Hodgson @QHodgson