Jay Healey

Is defense winning? How would we know if we are shifting advantages away from cyber adversaries to defenders? This talk summarizes an initial framework and indicators to start answering the question. youtu.be/wNXMQ-ficOc

@jonrlindsay @jststs Thanks, looks like a great read! Will check that out now. Definitely like the approach of looking at Stux as covert diplomacy.

Can you believe that it's already been 15 years since we first heard about Stuxnet? And perhaps 25 years since Stuxnet components were first developed? Cyber is no longer emerging. It has emerged. My new article in @jststs revisits this seminal case.

@philvenables In addition to SIPA's earlier work, with Trish Mosser and Katheryn Rosen, applying it to examine amplifiers and dampeners of cyber risk to financial stability! capco.com/Capco-Institut…

@philvenables Your recommendation to read Gall, back for the first NYCTF, stuck with me ... most recently leading to my applying the lessons of control theory to cyber escalation warontherocks.com/2025/03/amplif…

Security Leaders’ Reading List philvenables.com/post/leadershi…

@a_greenberg Thanks Andy, will share with students...

We've taken the paywall down for this one.

@JackieGSchneid So sorry to hear that. Your wargames are amazing work...

Feels like a good time to announce that our DoD Minerva grant that plays Wargames all over the world on space deterrence and war in space was cancelled last week with a two line email.

Congrats to all!

@C_Painter @jcanfil Glad you all connected here! Justin's research always struck me as more focused on the practice and results of actual diplomacy than broader IR...

@Jason_Healey @jcanfil Absolutely. First film where computers took over the world. I had the movie poster in my office & use the actual Colossus (the one that broke the Nazi Lorenz code and helped save the world vice the one in the movie that enslaved it) as my zoom background.

Finally got my hands on the film “Colossus: the Forbin Project” (1970). The plot is darkly prescient: we build an ASI for nuclear deterrence. Instead, it conspires with Soviet AI, checkmates its designers, & enslaves humanity for eternity. Screaming for a modern remake.

Compete in #Cyber912 from anywhere in the world at our flagship competition in Washington DC! Last year a virtual team, Cornfidential 🌽 from @UofIllinois placed third after a challenging final round.

As crises and conflicts between cyber powers become more frequent, offensive cyber operations will continue to be used in surprising ways. warontherocks.com/2022/01/prepar…

The framework also highlights how much warfare drives innovation in cyber operations. When this research began in 2019, prior to Russia’s invasion, most of these cells would have been blank, just theoretical. No longer...

My new piece @WarOnTheRocks - a framework to categorize and better understand the why, where, when of offensive cyber in warfare warontherocks.com/2025/01/unders…

The venerable Summer Workshop on the Analysis of Military Operations and Strategy (SWAMOS), convened by @SIWPSColumbia, is now accepting applications for 2025. Further details in flyer

@DrMAGomez @ghwinger Thanks Miguel! Fascinating findings...

And thanks to @DabSamuel1 for all his hard work co-authoring and to @GoogleCloudSec and @Microsoft for their support

The inward-facing drivers pretty much always are negative, causing duplication & hurting security outcomes Outward-facing often beneficial, leading to tailoring of controls to specific companies or sectors, or shifting risks

Inward-facing drivers of disharmony are internal to each regulator (like unique authorities or precedent). Outward-facing more about the environment (such as tailoring risks to specific companies or sectors)