Mobilizing A Collective Cyber Defense
As the constant news of yet another enterprise data breach becomes the norm, the private sector and government agencies must increase collaboration to increase resiliency and defenses to these attacks.…
Avast Blog: “Avast CEO Vince Steckler Gives a Q&A on His Ten Years at the Top”
Q: What does being a UC Irvine alum mean to you? A: I’m on the Executive Committee of the UCI Cybersecurity Policy & Research Institute, and if you look at the people…
What a Mess: Complying with the New California Privacy & IoT Laws and the GDPR
June 18, 2019@ The Cove at UCI Applied Innovation As numerous new privacy and security laws come into force, it’s not just large companies that need to comply. Small and…
IoT Security & Privacy Conference 2019
This event was sponsored by UCI’s Cybersecurity Policy and Research Institute (cpri.uci.edu) and UCI’s Institute for Software Research (isr.uci.edu) features a special keynote by Professor Kevin Fu from the University…
IoT Security & Privacy Conference 2019
This Free Event, sponsored by UCI’s Cybersecurity Policy and Research Institute (cpri.uci.edu) and UCI’s Institute for Software Research (isr.uci.edu) features a special keynote by Professor Kevin Fu from the University…
Researcher Spotlight: Qi Alfred Chen
Qi Alfred ChenAssistant Professor of Computer Science at UCI Donald Bren School of Information and Computer Sciences Researcher Spotlight: Qi Alfred Chen What brought you to UCI?I joined UCI right…
Researcher Spotlight: Zhou L
Zhou LiAssistant Professor of Electrical Engineering and Computer Science at UCI Samueli School of Engineering Researcher Spotlight: Zhou Li What brought you to UCI?I was a principal research scientist at an…
Researcher Spotlight: Joshua Garcia
Joshua GarciaAssistant Professor of Informatics at UCI Donald Bren School of Information and Computer SciencesPh.D., Computer Science, USC Researcher Spotlight: Joshua Garcia What brought you to UCI?UCI is an amazing…
A Buckeye Bounce? New Ohio Approach Might Just Catch On
National Cybersecurity Month 2018 has been, appropriately, an active time in cybersecurity law and regulation. Our state of California has passed a first-of-its-kind law to begin to regulate Internet of Things (IoT) devices – smart thermostats, implantable medical devices, etc. Watch this space for much more on this important development. California is often the first state out of the blocks with landmark innovations in cybersecurity and privacy regulation.
Often, but not always.
On November 2nd 2018, a groundbreaking new cybersecurity law will go into effect in Ohio of all places. Ohio’s new approach hopefully will serve as a bellwether for cybersecurity law and data breach liability legislation across the country.
Ohio Senate Bill 220, grants “safe harbor” to companies taking reasonable measures to implement a standards-based cybersecurity program. Not to be confused with the US-EU data transfer agreement of the same name that was struck down by Europe’s highest court, the Ohio “safe harbor” law provides significant protection from legal liability for companies that implement a reasonable written cybersecurity plan.
CPRI Executive Director Bryan Cunningham introducing participants to the half-day cyber crisis simulation at UCI.
CPRI Cyber Crisis Simulation: Understanding the Rules and Risks of Cyber Conflicts
UCI’s Cybersecurity Policy & Research Institute (CPRI) recently partnered with the Atlantic Council and the Marine Corps University Foundation (MCUF) to provide a half-day cyber simulation event, approximating adership decision-making during a crisis with cyber actions. Event participants were notified of cyber activity related to an “escalating crisis” with a rival nation. They had to choose between a number of options to de-escalate the crisis, conduct a proportionate response or escalate the situation. They then had to recommend a coordinated response, ranging from “publicly call for third-party mediation” to “use exploit chains to erode rival military navigation.”
“Having participated in a number of actual national security crisis meetings,” said CPRI Executive Director Bryan Cunningham, welcoming everyone to the event, “I can tell you that the [scenario] is pretty accurate.” The former White House lawyer and adviser warned the participants prior to the exercise, “You will find that you have not anywhere near enough information and not anywhere near enough time, and that is how reality works in many crisis situations.”
. 
