Cyber Primer

Cyber threats
2.7. Threat actors exploit cyberspace’s characteristics through innovative
approaches that often have a low-entry cost and they are helped by the
ease of access often presented to them. Such malevolent actors may seek to
create uncertainty and mistrust through:
• direct access to people and systems;
• attacking and exploiting our national and economic infrastructures;
and
• attacking military capabilities including command and control
systems, logistical support and personnel.
2.8. Nation states. The most sophisticated threat is likely to come from
established, capable states (or their proxies) who exploit cyberspace to
gather intelligence on government, military, industrial and economic targets.
Defence is particularly concerned when states:
• seek intelligence about UK military plans;
• steal intellectual property and intelligence on UK military
capabilities;
• exploit UK military capabilities using their military and intelligence
services with knowledge of the vulnerabilities of our capabilities;
• deny the UK use of its cyberspace communications channels;
• conduct subversive activities using their intelligence services; and
• use proxies or large numbers of synchronised and coordinated
partisans to cover the true origin of their activities within
cyberspace.
The theft of personal data from the United States Office of Personnel
Management shows the alleged use of cyber operations by a state. 23
23 Details on this case study can be found at Annex 2A on pages 36-37.
24
Cyber Primer (2nd Edition)