2024/07/31 by Małecka, Agata
#APT #cyber operations #cybersecurity
paper · doi:10.34862/rbm.2024.1.4
Since cyberspace has become another dimension of state competition, the number of nation-state cyber operations has increased significantly. In the recent past, they were associated with cyber espionage (political and industrial), and this is still in use. Many of them have taken the form of ransomware attacks, blocking access to data. Over a period of several years, there were numerous instances of cyber operations aimed at manipulating the interpretation of information. These operations utilized social media to influence election outcomes in democratic political systems by shaping voter behavior. One of the biggest problems in the analysis of nation-state cyber operations is attribution. Nevertheless, the actors conducting cyber operations are becoming better known. One of them is a category of Advanced Persistent Threat (APT). The main aim of the article is to identify the direction of the development of nation-state cyber operations, which is increasingly determined by non-state actors’ behavior. This requires highlighting the implications in terms of international law and the security strategies used by specific states – in both cases, in the process of ongoing creation. The main research problem was defined as the following question: How do states use APT to conduct cyber operations, and what are and could be the effects of the APT activities (an attempt to identify the characteristics of contemporary and future nation-state cyber operations based on an analysis of nation-state cyber operations in recent years)? In order to achieve the defined goal, the author primarily used qualitative methods: content analysis – in particular, institutional analysis and statistical data analysis.