From Attribution to Accountability: Upholding International Rules Online
summary
Panelists detail specific practices: governments run a three‑step process—technical telemetry and network forensics from national centers, an interagency political review, then international coordination—while industry supplies early detection (SolarWinds discovery, Microsoft STRONTIUM evidence) and court‑grade dossiers. Public attributions name states (Iran for Albania’s hit on critical infrastructure; Russia for Viasat; China for electoral targeting), back campaigns of civil court filings and sanctions plus takedowns (LockBit), and cite rapid 24‑hour turnarounds or multi‑year probes as the measure of success.
AI-written summary · about
chapters (13)
- 0:00Welcome
- 1:08Government approaches
- 9:37Private sector attribution
- 18:03Humanitarian law contexts
- 23:47Recourse and accountability
- 29:50Norms and deterrence
- 33:22Public attribution and law
- 36:56UK’s China attribution impact
- 40:08Industry-government collaboration
- 42:19Q&A on disinformation
- 45:54Live attribution case
- 48:01Criminal attribution methods
- 50:10Closing remarks
related talks
43mPanel: Cyber Operations, Doctrine, And Geo-Politics
52mThe Role of Partnerships in Advancing Cyber Diplomacy
20mThe Art of Attribution: Identifying and Pursuing your Cyber Adversaries
40mResponding to Disinformation and Influence Campaigns
15mLink by Link: Crafting the Attribution Chain
30mGlobal IR in a Fragmented World
40mTotal Security: Investigative Perspectives from Public to Private Sector
05mConceptualizing attribution and why it matters