Skip to page content

Cybersecurity

Featured

Technology allows individuals and organizations access to more comprehensive and diverse information, but this access requires that electronic information, networks, data repositories, and data transmissions be adequately safeguarded. RAND has developed a large body of research focused on recognizing the potential threats to information security and data integrity, as well as implications for personal and institutional privacy.

Commentary
Cyber Attacks Reveal Uncomfortable Truths About U.S. Defenses
Without government investments and policies to drive transparency and a clear understanding of what cybersecurity tools do, how well they work, and how securely they are built, the United States risks continuing to offer its adversaries the means to undermine its systems and, ultimately, its security.
Sep 21, 2023
Commentary
When a Quantum Computer Is Able to Break Our Encryption, It Won't Be a Secret
Policymakers and cybersecurity analysts should avoid messaging that emphasizes the risk that cryptanalytically relevant quantum computers developed in secret could be imminent or already operational. There is already more than enough reason to upgrade our communications systems to resist attacks from quantum computers as soon as possible.
Sep 13, 2023

Explore Cybersecurity

Report
Identifying and Prioritizing Systemically Important Entities: Advancing Critical Infrastructure Security and Resilience
This report helps the Cybersecurity and Infrastructure Security Agency codify the concept of systemically important critical infrastructure by documenting the work surrounding systemic risks and cyber risks in software supply chains.
Nov 20, 2023
Report
Quantifying Vulnerability Lifespans for U.S. Marine Corps Joint Cyber Weapons
The authors generated novel vulnerability life span and software update cadence datasets. Datasets were used to quantify cost and operational time uncertainties, and estimate life-cycle costs of the U.S. Marine Corps Joint Cyber Weapons program.
Nov 14, 2023
Commentary
Supporting the Future Effectiveness of Post-Quantum Cryptography
The authors of this Perspective describe the search for quantum-resistant cryptographic methods, explain options for securing communication from quantum attacks, and argue that research will benefit from open access to results.
Nov 2, 2023
Report
Industry and Government Collaboration on Security Guardrails for AI Systems: Summary of the AI Safety and Security Workshops
These conference proceedings capture the industry and government perspectives emerging from a series of workshops in 2023 to inform policymakers and the broader public discussion about artificial intelligence safety and security.
Oct 31, 2023
Multimedia
Keeping Up with the Joneses: How Can DoD Address Its Technical Talent Shortage?
The U.S. Department of Defense recognizes that it is struggling to recruit and retain the technical talent it needs. An October 2023 panel discussion examined the factors behind the department’s current shortage of technical talent.
Oct 30, 2023
Commentary
The United States Isn't Ready for the New Age of AI-Fueled Disinformation
Generative AI offers China and other bad actors the potential to fulfill longstanding desires to shape the global conversation. It is vital that the U.S. government and social media platforms recognize this threat and work together to address it immediately.
Oct 5, 2023
Report
Evaluating Cryptographic Vulnerabilities Created by Quantum Computing in Industrial Control Systems
Migration to post-quantum cryptography to prepare for future capabilities of quantum computing has implications for industrial control and operational technology systems. These implications affect how system owners should prepare for the migration.
Oct 4, 2023
Blog
Trauma in the Intelligence Community, Climate Change, Cybersecurity: RAND Weekly Recap
This weekly recap focuses on the toll that trauma takes in the intelligence community, how climate change will affect the federal budget, why it may be time for a new cybersecurity standard, and more.
Sep 29, 2023
Report
Proposals to Address Political Interference: Outcomes of a Trilateral Dialogue
These proceedings reflect discussions among U.S., Russian, and European Union nongovernmental experts who were convened in 2020–2021 to discuss mutual concerns regarding political interference and to find common ground on measures to address them.
Sep 5, 2023
Commentary
Money, Markets, and Machine Learning: Unpacking the Risks of Adversarial AI
The consequences of ignoring the problem of adversarial attacks in algorithmic trading are potentially catastrophic. In a world increasingly reliant on machine learning models, the financial sector needs to shift from being reactive to proactive to ensure the security and integrity of our financial system.
Aug 31, 2023
Commentary
Embracing the Messiness of Public-Private Collaboration in the Fight Against Botnets
Botnets are networks of computers infected with malware that an attacker controls and uses to fulfill malicious cyber activities. Decisionmakers could incorporate a complex adaptive systems perspective to assess if their organization and immediate network, as well as the overall ecosystem, are adaptable and resilient enough to respond to botnet activities.
Aug 16, 2023
Commentary
How Taiwan Can Build 'Digital Resilience'
If China were to attack Taiwan, it is very likely to attempt to control all communications on the island and block contact with the rest of the world. What actions can Taiwan take to maintain contact with allies, supporters, and its own people in the event of such an invasion?
Jul 6, 2023
Blog
The Wagner Revolt, Housing in L.A., Cyberstalking: RAND Weekly Recap
This weekly recap focuses on the Wagner Group's power play against Russian leadership, how Truth Decay affects national security, why the U.S. legal system is underprepared to handle cyberstalking cases, and more.
Jun 30, 2023
Report
Cyberstalking: A Growing Challenge for the U.S. Legal System
As online platforms have multiplied, cyberstalking has become more prevalent. What are the most common or contrasting characteristics of federal cyberstalking cases? And what are the main challenges to prosecuting such cases?
Jun 29, 2023
Q&A
Keeping America Safe in an Age of Danger: Q&A with Andrew Hoehn and Thom Shanker
In their new book, Andrew Hoehn and Thom Shanker argue that America has entered an age of danger that may come to rival anything in its history. They explain why the national security system needs an overhaul as we face a growing array of threats, from cyber attacks to climate change.
Jun 26, 2023
Multimedia
Ensuring That Government Use of Technology Serves the Public
Testimony presented before the U.S. House of Representatives Committee on Oversight and Accountability, Subcommittee on Cybersecurity, Information Technology, and Government Innovation, on June 22, 2023.
Jun 22, 2023
Journal Article
Enterprise Risk Management: How Do Firms Integrate Cyber Risk?
Cyber risk has attracted boardroom-level attention. However, many cyber incidents cost companies less than 1% of annual revenues. Therefore, we examine how companies integrate cyber risk into their enterprise risk management practices.
May 26, 2023
Commentary
The Metaverse and Homeland Security: Opportunities and Risks of Persistent Virtual Environments
This Perspective provides an initial review of the metaverse concept and its relevance to the U.S. Department of Homeland Security. The authors map department objectives to key metaverse characteristics and identify areas for proactive efforts.
May 22, 2023

1
2
3
4
5
6
7
8
9
10
Next

RAND Topic:
Cybersecurity

Topic Synonyms:
Information Security;
INFOSEC

Research conducted by

Researcher Spotlight

Chryssa Politi

Research Assistant

Chryssa Politi is a research assistant at RAND Europe working in the area of science and emerging technology. She studied political science and international relations at the University of Peloponnese in Greece. Simultaneously, she worked as an intern at the Ministry of Foreign Affairs and…
Bethany Saunders-Medina

Policy Analyst

Bethany Saunders-Medina (she/her) is a policy analyst and coordinator for the RAND Institute for Civil Justice (ICJ) and the Kennth R. Feinberg Center for Catastrophic Risk Management and Compensation where she helps manage research portfolios and overall center operations. Her work focuses on…

Explore Our People »