Improving the strategy execution for cyber crisis management at the national security

다국어 초록 (Multilingual Abstract)

The U.S.-China competition, which has recently intensified, is changing the national security paradigm by showing a pattern of high-tech hegemony competition rather than traditional military matches. In particular, cyber threats have a significant impact on damage, influence transnationality, and lead to national crises. This is because cyberattacks have the characteristics of asymmetric power, such as nuclear weapons. Therefore, many countries have begun utilizing cyberspace strategically, and the securitization of cyberspace is progressing rapidly. Accordingly, cyber crisis management capability is emerging as an essential element at the national level. As a result, the establishment of an executable cyber crisis management system for quick response and minimization of damage is becoming a significant issue for many countries.
Therefore, this paper proposes a method to improve the execution of the national cyber crisis management system. The high execution of the strategy is greatly influenced by the situation and unique characteristics of the country. Therefore, this paper approaches three stages to reflect national characteristics when establishing a cyber crisis management system: methodology setting, case study, and derivation of implications.
First, looking at the methodology, the target country is selected. To clearly understand the characteristics of non-technical factors, countries with similar ICT levels and different national characteristics are chosen. Four international indicators, such as the ICT Development Index (IDI), are used for this purpose. In addition, to select countries with high interest, middle-power countries in the Indo-Pacific region and the Middle East were targeted. Through this, four countries were selected: Australia, Israel, Singapore, and South Korea. The following identifies areas of analysis for analyzing the characteristics of cyber crisis management systems by country. Analysis areas are composed of governmental institutions, public-private partnerships, and international cooperation, and detailed elements are identified for governmental institutions to limit the scope. And identify non-technical factors to identify national characteristics. Non-technical factors are composed of size, history, political philosophy, threat landscape, and digital dependence, and detailed elements are identified for each factor.
The second case study analyzes the characteristics of the cyber crisis management system and non-technical elements using the previously selected analysis criteria for Australia, Israel, Singapore, and South Korea. Based on this, we analyze the relationship between the cyber crisis management system and non-technical factors by country.
The third implications derivation presents guidelines at a higher conceptual level by synthesizing the relationship between the cyber crisis management system and non-technical factors by country. The guidelines provide a foundation for establishing an executable cyber crisis management system optimized for the national environment.
Consequently, this thesis will facilitate a scientific and systematic approach when establishing a national cyber crisis management system and reduce a lot of trial and error in establishing an actionable policy.

목차 (Table of Contents)

• 1 Introduction 1
• 1.1 The necessity of research 1
• 1.2 The goal of the research 5
• 1.3 Methods for conducting research 5
• 2 Background and related works 8
• 2.1 Paradigm shift of national security 8
• 2.1.1 Concept of national security 8
• 2.1.2 Emergence of new threats 10
• 2.1.3 The U.S.-China hegemony competition and the securitization of cyberspace 12
• 2.2 Importance of national cyber crisis management capabilities 15
• 2.3 Improving the execution of cyber crisis management system 19
• 3 Methodology 22
• 3.1 Selection of target countries 22
• 3.2 Analysis methods of cyber crisis management system 26
• 3.3 Analysis methods of national characteristics 28
• 4 Case study 32
• 4.1 Characteristics of cyber crisis management system 32
• 4.1.1 Australia 32
• 4.1.2 Israel 41
• 4.1.3 Singapore 51
• 4.1.4 South Korea 60
• 4.2 Analysis of relations between national characteristics and cyber crisis management system 68
• 4.2.1 Size 68
• 4.2.2 History 72
• 4.2.3 Political philosophy 76
• 4.2.4 Threat landscape 81
• 4.2.5 Digital dependence 85
• 5 Discussion 90
• 5.1 Relationship between two factors 90
• 5.2 A way to utilize the relationship 94
• 6 Conclusion 98