Skip to section navigation
Skip to page content

RAND > Topics >

INFOSEC

Featured

Technology allows individuals and organizations access to more comprehensive and diverse information, but this access requires that electronic information, networks, data repositories, and data transmissions be adequately safeguarded. RAND has developed a large body of research focused on recognizing the potential threats to information security and data integrity, as well as implications for personal and institutional privacy.

Report

The Life and Times of Zero-Day Software Vulnerabilities

Mar 9, 2017

Zero-day software vulnerabilities—security holes that developers haven't fixed or aren't aware of—can lurk undetected for years. They are useful in cyber operations and in defensive and academic settings. Whether to disclose or stockpile them is an ongoing debate.
Article

Can Humans Survive a Faster Future?

May 1, 2018

Life is moving faster and faster. Just about everything—transportation, weapons, the flow of information—is accelerating. How will decisionmakers preserve our personal and national security in the face of hyperspeed?

Explore Cybersecurity

Commentary

Examining the Weak Spots in Tech's Supply Chain Armor

When an attack on the supply chain occurs, manufacturers and purchasers should be better positioned to respond and recover. Even the simplest devices can rely on parts from multiple suppliers, which may have their own suppliers and so on. But every supplier, no matter how small, represents a potential weak link in the chain.

Oct 16, 2018
Report

Preparing for Cybersecurity Threats to the 2020 Olympics

The Olympic Games are an attractive target for hackers. An examination of Japan's cybersecurity threat landscape and lessons from past events can help planners reduce cybersecurity risks in advance of the 2020 Tokyo Games.

Oct 4, 2018
Commentary

Have a Victim Response Plan for Data Breaches

In a large data breach, there could be a real risk to victims' financial or personal security. Though responsible organizations should do everything in their power to ensure data is protected in the first place, they also should prepare a plan to ensure prompt victim response.

Oct 2, 2018
Brochure

RAND Arroyo Center Annual Report 2017-2018

This RAND Arroyo Center report presents research-based insights and courses of action to help the U.S. Army meet five of its highest priorities.

Aug 29, 2018
Commentary

Here's How Russia Will Try to Interfere in the 2018 Elections

Russia will threaten U.S. midterm elections in November, although by how much is unclear. Moscow might be more restrained this year, but it could be wilier.

Aug 14, 2018
Report

Report

Developing Cybersecurity Capacity: A proof-of-concept implementation guide

This document is a proof-of-concept operational toolbox designed to facilitate the development of national-level cybersecurity capacity building programmes and of holistic policy and investment strategies to tackle challenges in the cyber domain.

Aug 2, 2018
Commentary

New Technologies Could Help Small Groups Wreak Large-Scale Havoc

Lone wolves or small groups could use emerging technologies, such as drones or AI, for nefarious purposes. The threat is even greater when these technologies are used along with disinformation spread over social media.

Jun 18, 2018
Report

Report

Lessons from Others for Future U.S. Army Operations in and Through the Information Environment

An examination of the evolution of both allied and adversary use of information power, alongside a comparative analysis of capability areas in which these others excel, can guide future U.S. Army force planning.

Jun 7, 2018
Report

Report

Lessons from Others for Future U.S. Army Operations in and Through the Information Environment: Case Studies

Twelve detailed case studies examine of the activities and strategic goals of allies, adversaries, and potential adversaries in and through the information environment, highlighting insights for U.S. Army planning.

Jun 7, 2018
Commentary

What Do Meltdown, Spectre, and RyzenFall Mean for the Future of Cybersecurity?

Unlike most previous cyber threats, a new wave of vulnerabilities attack a computer's hardware, rather than its software. What does this mean for cybersecurity as a whole?

May 3, 2018
Report

Speed and Security: Promises, Perils, and Paradoxes of Accelerating Everything

As new technologies and social dynamics shift society into hyperdrive, speed could catalyze security risks in areas such as transportation, communication, and health. How can policymakers devise strategies to adapt?

May 1, 2018
Report

Identifying Law Enforcement Needs for Access to Digital Evidence in Remote Data Centers

Researchers discuss the challenge of accessing data in remote data centers, summarize the discussion of an expert panel, and provide a list of needs identified and prioritized by the panel to inform concerned communities and stakeholders.

Apr 23, 2018
Multimedia

Data Thieves: The Motivations of Cyber Threat Actors and Their Use and Monetization of Stolen Data

An overview of testimony by Lillian Ablon presented before the House Financial Services Committee, Subcommittee on Terrorism and Illicit Finance.

Mar 15, 2018
Testimony

A Close Look at Data Thieves

What do cyberattackers do with the data they steal? And how do they monetize it? Grouping hackers by their goals, motivations, and capabilities can shed light on these questions.

Mar 15, 2018
Commentary

Getting Ready to Fight the Next (Cyber) War

Nation-states and their proxies are regularly spying and attacking in cyberspace across national borders. Western societies that are being targeted should do three things: Be less vulnerable, be able to recognize and mitigate the impact of attacks faster, and be prepared to respond in kind to all levels of offense.

Mar 3, 2018
Brochure

A focus on cybersecurity

Cybersecurity has risen to become a prominent issue of national and global security for governments and international organisations worldwide. A focus on cybersecurity looks at the issues and details RAND Europe's expertise and work in the area.

Feb 15, 2018
Commentary

Ensuring Cybersecurity Is Vital for a Driverless Future

High-profile accidents involving autonomous vehicles (AVs) have led to recent discussions about the physical safety of people. However, it could be argued that consumers and manufacturers should be equally, if not more, concerned about the potential cybersecurity vulnerabilities in AVs.

Feb 12, 2018
Commentary

Why the 2018 Winter Olympics Are the Perfect Storm for Cyberattacks

The Olympic Games could invite the most severe cyber threats to a major sporting event in recent years. The location of the Games and increased connectivity, both among the public and infrastructure, make them a prime target for cyberattacks.

Feb 12, 2018
Brochure

Spotlight on 2017

RAND Europe's annual review, Spotlight on 2017, features some of the objective research and analysis we do to help policy and decision makers keep pace with an ever-changing world.

Jan 29, 2018
Commentary

Bitcoin and the Dark Web: The New Terrorist Threat?

Bitcoin has become the prominent currency of the dark web, which is often used to buy illegal goods, such as weapons and drugs. Anecdotal evidence suggests terrorists are using cryptocurrency and the dark web, but further investigation is needed.

Jan 22, 2018

1
2
3
4
5
6
7
8
9
10
Next

RAND Topic:
Cybersecurity

Topic Synonyms:
Information Security;
INFOSEC

Research conducted by