WHATARECYBERPROXIES?

POL370A

PROF.BENJAMINBARTLETT

MIAMI UNIVERSITY

AGENDA

1. What is a “cyber proxy”?
2. Whoare“cyberproxies”?
3. Whatcancyberproxiesdo?
4. Typesofrelationshipsbetweenstatesandcyberproxies.
5. Howcanstatesusecyberproxies?

WHAT IS A “CYBER PROXY”?

1. Non-state actor.
2. Commit cyber operations in pursuit of the goals of astate.
3. Havethe“backing” ofthestate.
• Mayjustmeanthestatelookstheotherway.

WHO ARE “CYBER PROXIES”?

1. Individual hackers.
2. Small,informalgroupofhackers (may or may not knoweach other in real life).
3. Formal,hierarchicalgroupofpeople.
• Example: private companies, “cyber militia”

WHAT CAN CYBER PROXIES DO?

• Varies alot,butingeneral,greaterorganizationalcomplexity→greater capabilities.
• Ex.A companycandomorethanan individual hacker.
• Maybemorecapablethansomestates(butnot“top”stateslikeU.S.,China,Russia).

RELATIONSHIPS BETWEENSTATESANDCYBERPROXIES

Three types of relationships between proxies and states:

1. Sanctioning: state enables but does not control proxyactivity (e.g., “looks the other way”).
2. Orchestrating: state provides support but not specificinstructions (ex. Russia’s Cozy Bear, Fancy Bear)
3. Delegation: state exercises considerable control over proxy

HOW CAN STATES USE PROXIES?

• Canessentially use them for any part (or all) of a cyberoperation.
• Ex.Couldhaveahackinggroupcarryoutanentireoperationonitsown.
• Ex. Could pay a company to design a cyber weapon, which thestate then deploys itself.

CONCLUSION