FOCAL POINT: DILEMMAS OF CYBERSECURITY
Strategic documents of the Russian Federation consider opportunities created by digital economy as one of the key factors capable of ensuring economic growth and national sovereignty as well as of stimulating production in all spheres of social and economic activities. However, the author stresses, that uncontrolled digitalization of economy can drastically increase its vulnerability to cyberthreats. In that context, it is necessary to address more specifically challenges and threats associated with the digitalization process in the economic sphere.
The paper examines key approaches to the definition of the phenomenon of ‘digital economy’ as well as the most promising directions for global information infrastructure development in general and its hardware/software elements in particular. The author notes that in this context the quest for the most effective management mechanisms of sociotechnological systems (STS) that make up the digital economy, is of special importance. At the same time one can observe a rapid expansion of cyberthreats realized by means of various infotechnological impacts. The paper provides a detailed analysis of the main types of cyberattacks and outlines their potential impact on critical infrastructures of the digital economy. The author emphasizes that the high level of interdependence of its elements significantly increases destructiveness of the so called chained effects of cyberattacks. In view of the impossibility of reaching complete protection of the digital economy from the cyberthreats resilience of the sociotechnological systems is of particular importance. Cybersustainability implies the ability of a system to perform its functions under successful attacks on its resources (probably less effectively within in a short period of time necessary to neutralize cyberthreats and their impacts).
Turning to the issue of ensuring cybersustainability of the emerging digital economy of the Russian Federation, the author examines the main types of system-destructing cyberattacks and highlights the steps taken by the Russian government to tackle these threats. The author concludes that it will impossible to achieve independence and resilience of the Russian information infrastructure without relevant capacity-building in science and technology as well as without training a new generation of S&T personnel.
The unique nature of cyberspace, characterized by interdependence between material and social objects as well as the complexity of its structures, urges leading actors of world politics to seek new strategies of organizing their activities within this area. In the European Union, cybersecurity issues are debated on the basis of the resilience category. In this context the latter is understood as a system’s ability to adjust to new challenges, flexibly respond to threats, and successfully recover after blows. Using a discourse analysis approach the authors examine the genesis of the resilience discourse and the logic of its development in the EU cybersecurity policy, reveal nuances of how this category is interpreted in official documents as well as point out difficulties regarding practical application of this category.
The authors trace a gradual evolution of the EU approach towards cybersecurity from the well-established definitions of cyberspace to the ecosystem terms and concepts, which are particularly relevant to the resilience-based concept of cybersecurity. Within this approach, the Internet is considered not as a static object but as a complex heterogeneous system where a state of security is inextricably linked to a state of insecurity.
There is no single and coherent definition of resilience in the EU official documents yet. Nevertheless, it is stressed that one can see a gradual transformation of the official discourse from purely technical definitions to inclusion of a wider range of socio-political factors. However, the EU official discourse on this issue remains highly controversial. This refers, for instance, to the lack of a unified understanding of the ‘cyberresilience’ and ‘cybersecurity’ concepts. The authors highlight a tendency towards increasing securitization of the cybersphere in the EU cybersecurity discourse, which might lead to the narrowing of the concept of ‘cyberresilience’ and its transformation into a common euphemism. At the same time the authors conclude that the EU itself is not interested in oversecuritization of the cybersphere, and thus the EU cybersecurity policy will eventually evolve towards resilience-based approaches.