2024/08/15 by Adam Shostack, Josiah Dykstra · 3 voices · 2 citations
Computer Science · Medicine · Social Sciences · #2019-20 coronavirus outbreak #Cartography #Computer science #Computer security #Coronavirus disease 2019 (COVID-19) #Cybercrime and Law Enforcement Studies #Geography #Infectious disease (medical specialty) #Information and Cyber Security #Medicine #Misinformation and Its Impacts #Outbreak #Pandemic #Scale (ratio) #Severe acute respiratory syndrome coronavirus 2 (SARS-CoV-2) #Virology #cs.CR #cs.CY
paper · pdf · open access · doi:10.1145/3703465.3703466
arxiv published 2024/08/15 · arxiv updated 2024/08/15 · openalex publication_date 2024/09/16 · openalex created_date 2025/01/17 · openalex updated_date 2026/07/29
The devastating health, societal, and economic impacts of the COVID-19 pandemic illuminate potential dangers of unpreparedness for catastrophic pandemic-scale cyber events. While the nature of these threats differs, the responses to COVID-19 illustrate valuable lessons that can guide preparation and response to cyber events. Drawing on the critical role of collaboration and pre-defined roles in pandemic response, we emphasize the need for developing similar doctrine and skill sets for cyber threats. We provide a framework for action by presenting the characteristics of a pandemic-scale cyber event and differentiating it from smaller-scale incidents the world has previously experienced. The framework is focused on the United States. We analyze six critical lessons from COVID-19, outlining key considerations for successful preparedness, acknowledging the limitations of the pandemic metaphor, and offering actionable steps for developing a robust cyber defense playbook. By learning from COVID-19, government agencies, private sector, cybersecurity professionals, academic researchers, and policy makers can build proactive strategies that safeguard critical infrastructure, minimize economic damage, and ensure societal resilience in the face of future cyber events.