Cyber Primer

Cyber threats
(such as financial, logistics, or personnel data) to provide false
readings.
v. Changing the system’s functionality – for example,
changing permissions, controlling hardware (such as webcams)
or implanting malicious programmes. Functionality changes
may also allow onward connectivity to other, potentially more
interesting and valuable, information.
Properties of cyber threats
2.16. Cyber offers additional vectors for an adversary to conduct traditional
operations in support of espionage, subversion, and sabotage. Reach,
asymmetric effect, anonymity/attribution, timing and versatility are the
main properties that differentiate cyber threats and attacks from
conventional ones.
a. Reach. Compared to the other environments, the relatively
pervasive and borderless nature of cyber activities enables both
global and local operations. 32 It enables access to targets spanning
the tactical to strategic.
b. Asymmetric effect. Cyberspace is able to reach many
organisations and specific individuals. An individual, or relatively
small organisation with appropriate motivation, limited resources
and high technical capability could conduct an attack with strategic
and/or large-scale effect (for example, disrupting communication
channels).
c. Anonymity/attribution/deniability. The process of attribution
identifies the actor who conducted or sponsored a cyber action
against another state, organisation or individual and the intent
behind it. Non-attributable attacks increase uncertainty and
potentially reduce political risk and the opportunity for retaliation.
32 Cyber cannot truly be pervasive or borderless as not all devices are interconnected;
some countries and geographical locations have limited to no cyber presence and are
therefore difficult or impossible to effect with cyber capabilities.
28
Cyber Primer (2nd Edition)