Resilio

resilio

This article is part 2 of the Blockchain train journal, start reading here: . Catching the Blockchain Train Some reading material to get started A couple of articles that I found useful when learning about decentralized storage: Decentralized Storage: The Backbone of the Third Web HTTP is obsolete. It’s time for the distributed, permanent web What is the difference between Swarm and IPFS? Comparing decentralized storage systems Our decentralized blog pages are in need of some sort of decentralized hosting. To build that from scratch seems like a lot of work and will probably result in a blockchain train crash. So let’s see what is already out there we could use for our project. I searched a bit and came up with: Storj SIA MaidSafe IPFS ZeroNet Ethereum Swarm BigchainDB did I forget a serious contender? Please . let me know I’m not yet qualified to compare these technologies (still trying to catch the train!), but I’ll add some observations for each: Storj From the home page: Blockchain-based, end-to-end encrypted, distributed object storage, where only you have access to your data. That doesn’t sound like something that is handy for a blog, where we want content to be public. Storj looks like a great product though, it is a bit like , but with a blockchain added to create a marketplace for buying or renting out disk space on the network. Resilio Sync SIA SIA is another Dropbox killer, more or less the same as Storj. MaidSafe Where Storj and SIA pitch their service as a faster and cheaper way to store your data, Maidsafe promotes their SAFE network by scaring you. Cloud providers, government, and hackers can not be trusted is the message in their video. Apart from the funny name, it is very similar to the two services above. IPFS Now, this is a different beast. The first three services are , which means they have their own cryptocurrency to support their marketplace. IPFS also has such a thing, , but it is neatly split from IPFS which is more like a decentralized storage protocol. incentive platforms FileCoin IPFS stands for , but they hide the original name from their homepage. Too funny for a serious business! interplanetary file system On the home page it says: IPFS is the Distributed Web A peer-to-peer hypermedia protocol to make the web faster, safer, and more open. IPFS seems like an great option for our project. ZeroNet ZeroNet doesn’t have a cheesy video on their home page, so I had to actually . However, their awesome presentation is 100x better than the four videos from the others combined: . read ZeroNet preso They also seem to operate a lot less like a serious business compared to the others, showing more of the idealistic open source spirit. On the home page: Open, free and uncensorable websites, using Bitcoin cryptography and BitTorrent network Oh, oh, that is what are trying to do here! A competitor! Nah, let’s just keep an eye on the code, maybe we can learn a thing or two. we Ethereum Swarm On our trip to become blockchain developers, we have no other choice than to dive into Ethereum. We will address that in a future episode. But their decentralized file storage system, named Swarm, must be considered here. It took me a while to find the source code for this project, but ! here it is From the : documentation Swarm is a distributed storage platform and content distribution service, a native base layer service of the ethereum web 3 stack. The primary objective of Swarm is to provide a sufficiently decentralized and redundant store of Ethereum’s public record, in particular to store and distribute dapp code and data as well as block chain data. It seems that Swarm is an incentive platform enforced with Ethereum smart contracts, so not the best choice for our purpose. We gotta stay hands-on here. We want to add a coin later ourselves! BigchainDB From their site: BigchainDB is complementary to decentralized storage, processing and communication building blocks. It can be used side by side with higher-level decentralized computing platforms and applications, and protocols for identity, financial assets, intellectual property and sidechains. BigchainDB fills a gap in the decentralized stack. This is a brilliant solution, almost too good to be true. It is not just decentralized storage, but a full blown database. It is built on top of MongoDB and decentralized, so data is immutable, and there is no central authority. For our current project it might be a bit overkill, but let’s keep an eye on it. The winning decentralized storage system OK, I’ll be honest, I already picked one before I did this quick research what is around :-) The winner is IPFS! Yay! The runner-up we might have a look at at a later stage: BigchainDB! Even in retrospect, IPFS seems like a good choice: all competitors have their “flaws” in the context of this project. By applying “selection by deduction”, only IPFS remains. After this very scientific approach in picking IPFS, let’s hope it is indeed useful for us. Let’s move on to part 3: Getting to know IPFS Originally published at decentralized.blog .

Picking a Decentralized Storage System

Penetration Testers’ Guide to Windows 10 Privacy & Security

Guía de los probadores de penetración para la privacidad y seguridad de Windows 10

Table of Links Abstract and I. Introduction II. Background III. Problem Definition IV. DAG-Oriented Solutions V. Game Theoretical Analysis VI. Simulation Model VII. Evaluation VIII. Countermeasures IX. Discussion and Future Work X. Related Work XI. Conclusion and References IX. DISCUSSION AND FUTURE WORK Centralization. In the scope of Experiment I (see Sec. VII-A), we demonstrated that the relative profit of greedy miners decreases as their number G increases. Therefore, greedy miners are incentivized to form a single mining pool, maximizing their relative profit. As a negative consequence, the decentralization of the blockchain network is impacted. Throughout. In our simulations, we adjusted the parameters to focus on investigating potential issues related to decreased profits and general throughput (collisions), rather than maximizing the simulated protocol’s throughput. However, we argue that this had no impact on the results of our evaluation, and similar results can be achieved even with higher throughput (i.e., τ > λ). Connectivity of Miners. In our experiments, we used γ = 1 and equally connected honest and greedy miners. However, in practice, greedy miners can be better connected since they want to include high-value transactions as the first ones, and thus profit even more. Assuming other γ than 1 can result only in lower profits of (potentially) weakly connected honest miners while it does reduce the profits of greedy miners who are incentivized to be strongly connected regardless of γ. Future Work. We plan to experiment in detail with the methods enabling DAG-PROTOCOLS to be resilient to demonstrated attacks even in the context of Proof-of-Stake protocols. As the next step in theoretical analysis, it would be interesting to examine the dynamic behavior of greedy miners who adapt their strategies (switching between multiple strategies) to the current conditions of the protocol. Last, we attributed a fee to the first miner who included a transaction in our simulations, but other schemes for distributing the fees among all miners could also be investigated. However, such schemes would not eliminate collisions (and thus decreased throughput), thereby enabling miners still to select transactions greedily due to varying fees. Authors:
(1) Martin Peresıni, Brno University of Technology, Faculty of Information Technology (iperesini@fit.vut.cz);
(2) Ivan Homoliak, Brno University of Technology, Faculty of Information Technology (ihomoliak@fit.vut);
(3) Federico Matteo Bencic, University of Zagreb, Faculty of Electrical Engineering and Computing (federico-matteo.bencic@fer.hr);
(4) Martin Hruby, Brno University of Technology, Faculty of Information Technology (hruby@fit.vut.cz);
(5) Kamil Malinka, Brno University of Technology, Faculty of Information Technology (malinka@fit.vut). This paper is available on arxiv under CC BY 4.0 DEED license. Table of Links Abstract and I. Introduction Abstract and I. Introduction II. Background II. Background III. Problem Definition III. Problem Definition IV. DAG-Oriented Solutions IV. DAG-Oriented Solutions V. Game Theoretical Analysis V. Game Theoretical Analysis VI. Simulation Model VI. Simulation Model VII. Evaluation VII. Evaluation VIII. Countermeasures VIII. Countermeasures IX. Discussion and Future Work IX. Discussion and Future Work X. Related Work X. Related Work XI. Conclusion and References XI. Conclusion and References IX. DISCUSSION AND FUTURE WORK Centralization . In the scope of Experiment I (see Sec. VII-A), we demonstrated that the relative profit of greedy miners decreases as their number G increases. Therefore, greedy miners are incentivized to form a single mining pool, maximizing their relative profit. As a negative consequence, the decentralization of the blockchain network is impacted. Centralization Throughout . In our simulations, we adjusted the parameters to focus on investigating potential issues related to decreased profits and general throughput (collisions), rather than maximizing the simulated protocol’s throughput. However, we argue that this had no impact on the results of our evaluation, and similar results can be achieved even with higher throughput (i.e., τ > λ). Throughout Connectivity of Miners . In our experiments, we used γ = 1 and equally connected honest and greedy miners. However, in practice, greedy miners can be better connected since they want to include high-value transactions as the first ones, and thus profit even more. Assuming other γ than 1 can result only in lower profits of (potentially) weakly connected honest miners while it does reduce the profits of greedy miners who are incentivized to be strongly connected regardless of γ. Connectivity of Miners Future Work. We plan to experiment in detail with the methods enabling DAG-PROTOCOLS to be resilient to demonstrated attacks even in the context of Proof-of-Stake protocols. As Future Work. the next step in theoretical analysis, it would be interesting to examine the dynamic behavior of greedy miners who adapt their strategies (switching between multiple strategies) to the current conditions of the protocol. Last, we attributed a fee to the first miner who included a transaction in our simulations, but other schemes for distributing the fees among all miners could also be investigated. However, such schemes would not eliminate collisions (and thus decreased throughput), thereby enabling miners still to select transactions greedily due to varying fees. Authors: (1) Martin Peresıni, Brno University of Technology, Faculty of Information Technology (iperesini@fit.vut.cz); (2) Ivan Homoliak, Brno University of Technology, Faculty of Information Technology (ihomoliak@fit.vut); (3) Federico Matteo Bencic, University of Zagreb, Faculty of Electrical Engineering and Computing (federico-matteo.bencic@fer.hr); (4) Martin Hruby, Brno University of Technology, Faculty of Information Technology (hruby@fit.vut.cz); (5) Kamil Malinka, Brno University of Technology, Faculty of Information Technology (malinka@fit.vut). Authors: Authors: (1) Martin Peresıni, Brno University of Technology, Faculty of Information Technology (iperesini@fit.vut.cz); (2) Ivan Homoliak, Brno University of Technology, Faculty of Information Technology (ihomoliak@fit.vut); (3) Federico Matteo Bencic, University of Zagreb, Faculty of Electrical Engineering and Computing (federico-matteo.bencic@fer.hr); (4) Martin Hruby, Brno University of Technology, Faculty of Information Technology (hruby@fit.vut.cz); (5) Kamil Malinka, Brno University of Technology, Faculty of Information Technology (malinka@fit.vut). This paper is available on arxiv under CC BY 4.0 DEED license. This paper is available on arxiv under CC BY 4.0 DEED license. available on arxiv available on arxiv

The Future of DAG Protocols: Connectivity, Centralization, and Resilience

Ethereum Meets Distributed Validator Technology: A New Era for Resilient Financial Systems

In my previous article, Managing Architectural Tech Debt, I talked about understanding and managing architectural technical debt. Architectural technical debt is the often ignored, but ironically, one of the most damaging, categories of technical debt. In this article, I want to dive deeper into one way to manage architectural technical debt (and technical debt as a whole)—architectural observability (AO). AO is a new category of observability that I believe is just as important, if not more so, as application performance management (APM). I believe we need to shift left observability—to the architectural stage—where we can not just see symptoms, but fix core problems. Let’s take a look. APM Is (Half) the Answer You already know that APM is important. Gartner defines it as “software that enables the observation and analysis of application health, performance and user experience.” And IDC reports that companies using APM solutions see a 2.5x improvement in mean time to resolution (MTTR) and a 50% reduction in the number of incidents. APM and observability: Helps to ensure better user experiences by monitoring, in real-time, performance and responsiveness.
Can help identify defects.
Can provide data to teams, such as usage patterns, bottlenecks, and overall health to keep systems healthy. Overall, APM has become a necessary tool for troubleshooting and fixing issues in enterprise environments. APM has become table stakes. And APM works! In my current role, we use APM to observe the usage of our APIs to understand the breakdown of URI (uniform resource identifier) requests across all of our consumers. When our APIs are not functioning as expected, we lean to APM in order to gain visibility into performance bottlenecks. In cases where an alert is triggered, the same interface can be utilized for initial troubleshooting efforts in order to help pin down the root cause. But even though APM works, there’s a problem. APM identifies the symptoms of the defects, but not the actual defects themselves. It’s up to the team to track down why the problems are occurring. And with the pressure we often feel in prod to “just fix the problem as fast as you can,” I often see that while symptoms may be addressed, teams don’t have the time (or organizational support) to find and fix the actual core problems. Imagine taking aspirin because you get a headache every night, but never taking the time to figure out why you keep having headaches. To find—and address—the why of our defects, we need architectural observability. Architectural Observability: Getting to the Real Answers We need to shift our processes left, stop focusing on symptoms, and instead focus on the root cause of these problems and actually reduce the number of incidents caught with APM. That’s where architectural observability comes in. Architectural observability is the ability to analyze an application’s architecture (both statically and dynamically), understand how it works, observe changes, and identify and fix architectural technical debt. Architectural observability is the next step in observability tools. Architectural observability gives you visibility into your application architecture, helping you solve problems (not just identify symptoms) earlier in the SDLC by identifying architectural issues. You probably already have the data you need to implement AO—it uses the same data sources as APM (for example, OpenTelemetry (OTel). But AO takes that data and applies a layer of intelligence that focuses on analyzing the architecture and the sources of architectural technical debt. For example, an AO tool might analyze: Architectural complexity - The interdependence and relationships of services within the architecture, the number of flows in a service, identifying multi-hop flows and circular flows. Dependency mappings - Relationships among services including circular dependencies. Architectural drift - What has changed since your last release, what new domains/services were added, what new dependencies and flows were introduced. Technical debt - Such as resource exclusivity, service dependencies, duplicate services that should be merged, and complexity. Technical debt is a huge problem in the industry. 70% of organizations say that technical debt is a major obstacle to innovation. Database-related issues - Examine if multiple services are accessing tables. Architectural observability is proactive and strategic. Where APM tools alert on the leaks in the roof when it is already raining, AO identifies architectural issues that can lead to those leaks, way before they actually occur. Using Tools to Gain Architectural Observability Used well, AO doesn’t just help you find issues earlier, but helps you: Truly discover and understand your architecture and its relationships and dependencies.
Prevent issues caused by architectural changes.
Make systems more resilient and scalable by continually monitoring, modernizing, and strengthening your architecture.
Minimize technical debt. I love that last one. As I pointed out in my last article, architectural debt is a foe of mine that I have been battling for over a decade. Architectural observability is a new field and is starting to gain traction as something teams must have. There aren’t many tools yet built around the concept, but let’s look at how your team might use one of the first AO tools—vFunction—to gain AO. Once you’ve connected to your applications (through the OTel connector or similar), the tool analyzes your system (in this case with vFunction, it’s using AI to understand and analyze your architecture). Then you get a report on the current state of your architecture. You’ll see details such as: A visualization of the architecture across your entire app portfolio
A map of services and entry points, cross services APIs, and external APIs
Exclusivity of database tables (Kafka, Redis, MongoDB) and other resources
Complexity scores
And more… And you can use architectural observability to monitor your architecture not just in the present state, but dynamically as it changes. Changes to your architecture (a.k.a., architectural drift)? You’ll know right away.
Add a dependency impacting resiliency? You’ll catch it before migrating.
Did you create a circular flow? Did you significantly increase the complexity of your system? Find out early. Incurring even more technical debt? You can’t hide from it now. With architectural observability, you now have hard proof of how architectural debt is affecting your systems and how, by using AO, you can identify and prioritize the actual problems in your systems early and often, rather than only addressing the symptoms in production. AO makes applications more resilient, more scalable, and helps your team move faster. And AO can help proactively. Is your team moving from a monolith to a microservice? AO can give you a plan to move your architecture forward. With AO, you could analyze your monolith, understand how its domains and functionality are structured and connected, and then get actionable steps on how to modularize and move the functionality to microservices. And once you have a distributed architecture (microservices or distributed monoliths), you’ll want to make sure your architecture doesn’t drift or get more complex to the point that things start to break, you lose control, and you have to slow down your engineering velocity. AO keeps your applications in check whether monolith or microservices. Architectural Observability Gives You Better Systems My readers may recall that I have been focused on the following mission statement, which I feel can apply to any IT professional: “Focus your time on delivering features/functionality that extends the value of your intellectual property. Leverage frameworks, products, and services for everything else.” - J. Vester Architectural observability adheres to my mission statement perfectly. By moving from plain vanilla observability to architectural observability, we can shift left for more reliable, more resilient, and better-performing systems. This shift affords us more time to spend on the business problems that our teams understand best. As John F. Kennedy once said: “The best time to repair the roof is when the sun is shining.” Architectural observability should be placed on the same level (or higher) as APM. With AO, teams can truly understand their architecture, have a broader and more insightful view of their applications than with APM alone, and fix problems earlier. Have a really great day! In my previous article, Managing Architectural Tech Debt , I talked about understanding and managing architectural technical debt. Architectural technical debt is the often ignored, but ironically, one of the most damaging , categories of technical debt. Managing Architectural Tech Debt architectural the most damaging In this article, I want to dive deeper into one way to manage architectural technical debt (and technical debt as a whole)— architectural observability (AO) . AO is a new category of observability that I believe is just as important, if not more so, as application performance management (APM). I believe we need to shift left observability—to the architectural stage—where we can not just see symptoms, but fix core problems. architectural observability (AO) Let’s take a look. APM Is (Half) the Answer You already know that APM is important. Gartner defines it as “software that enables the observation and analysis of application health, performance and user experience.” And IDC reports that companies using APM solutions see a 2.5x improvement in mean time to resolution (MTTR) and a 50% reduction in the number of incidents. IDC reports APM and observability: Helps to ensure better user experiences by monitoring, in real-time, performance and responsiveness. Can help identify defects. Can provide data to teams, such as usage patterns, bottlenecks, and overall health to keep systems healthy. Helps to ensure better user experiences by monitoring, in real-time, performance and responsiveness. Can help identify defects. Can provide data to teams, such as usage patterns, bottlenecks, and overall health to keep systems healthy. Overall, APM has become a necessary tool for troubleshooting and fixing issues in enterprise environments. APM has become table stakes. And APM works! In my current role, we use APM to observe the usage of our APIs to understand the breakdown of URI (uniform resource identifier) requests across all of our consumers. When our APIs are not functioning as expected, we lean to APM in order to gain visibility into performance bottlenecks. In cases where an alert is triggered, the same interface can be utilized for initial troubleshooting efforts in order to help pin down the root cause. But even though APM works, there’s a problem. APM identifies the symptoms of the defects, but not the actual defects themselves . It’s up to the team to track down why the problems are occurring. And with the pressure we often feel in prod to “just fix the problem as fast as you can,” I often see that while symptoms may be addressed, teams don’t have the time (or organizational support) to find and fix the actual core problems. but not the actual defects themselves why Imagine taking aspirin because you get a headache every night, but never taking the time to figure out why you keep having headaches. To find—and address—the why of our defects, we need architectural observability . why architectural observability Architectural Observability: Getting to the Real Answers We need to shift our processes left, stop focusing on symptoms, and instead focus on the root cause of these problems and actually reduce the number of incidents caught with APM. root cause of these problems That’s where architectural observability comes in. Architectural observability is the ability to analyze an application’s architecture (both statically and dynamically), understand how it works, observe changes, and identify and fix architectural technical debt. Architectural observability Architectural observability is the next step in observability tools. Architectural observability gives you visibility into your application architecture, helping you solve problems (not just identify symptoms) earlier in the SDLC by identifying architectural issues. You probably already have the data you need to implement AO—it uses the same data sources as APM (for example, OpenTelemetry (OTel). But AO takes that data and applies a layer of intelligence that focuses on analyzing the architecture and the sources of architectural technical debt. For example, an AO tool might analyze: Architectural complexity - The interdependence and relationships of services within the architecture, the number of flows in a service, identifying multi-hop flows and circular flows. Architectural complexity - The interdependence and relationships of services within the architecture, the number of flows in a service, identifying multi-hop flows and circular flows. Architectural complexity Dependency mappings - Relationships among services including circular dependencies. Dependency mappings - Relationships among services including circular dependencies. Dependency mappings Architectural drift - What has changed since your last release, what new domains/services were added, what new dependencies and flows were introduced. Architectural drift - What has changed since your last release, what new domains/services were added, what new dependencies and flows were introduced. Architectural drift Technical debt - Such as resource exclusivity, service dependencies, duplicate services that should be merged, and complexity. Technical debt is a huge problem in the industry. 70% of organizations say that technical debt is a major obstacle to innovation. Technical debt - Such as resource exclusivity, service dependencies, duplicate services that should be merged, and complexity. Technical debt is a huge problem in the industry. 70% of organizations say that technical debt is a major obstacle to innovation. Technical debt major obstacle to innovation. Database-related issues - Examine if multiple services are accessing tables. Database-related issues - Examine if multiple services are accessing tables. Database-related issues Architectural observability is proactive and strategic. Where APM tools alert on the leaks in the roof when it is already raining, AO identifies architectural issues that can lead to those leaks, way before they actually occur. Using Tools to Gain Architectural Observability Used well, AO doesn’t just help you find issues earlier, but helps you: Truly discover and understand your architecture and its relationships and dependencies. Prevent issues caused by architectural changes. Make systems more resilient and scalable by continually monitoring, modernizing, and strengthening your architecture. Minimize technical debt. Truly discover and understand your architecture and its relationships and dependencies. Prevent issues caused by architectural changes. Prevent Make systems more resilient and scalable by continually monitoring, modernizing, and strengthening your architecture. Minimize technical debt. I love that last one. As I pointed out in my last article , architectural debt is a foe of mine that I have been battling for over a decade. my last article Architectural observability is a new field and is starting to gain traction as something teams must have. There aren’t many tools yet built around the concept, but let’s look at how your team might use one of the first AO tools—vFunction—to gain AO. Once you’ve connected to your applications (through the OTel connector or similar), the tool analyzes your system (in this case with vFunction, it’s using AI to understand and analyze your architecture). Then you get a report on the current state of your architecture. You’ll see details such as: A visualization of the architecture across your entire app portfolio A map of services and entry points, cross services APIs, and external APIs Exclusivity of database tables (Kafka, Redis, MongoDB) and other resources Complexity scores And more… A visualization of the architecture across your entire app portfolio A map of services and entry points, cross services APIs, and external APIs Exclusivity of database tables (Kafka, Redis, MongoDB) and other resources Complexity scores And more… And you can use architectural observability to monitor your architecture not just in the present state, but dynamically as it changes. Changes to your architecture (a.k.a., architectural drift)? You’ll know right away. Add a dependency impacting resiliency? You’ll catch it before migrating. Did you create a circular flow? Did you significantly increase the complexity of your system? Find out early. Changes to your architecture (a.k.a., architectural drift)? You’ll know right away. Add a dependency impacting resiliency? You’ll catch it before migrating. Did you create a circular flow? Did you significantly increase the complexity of your system? Find out early. Incurring even more technical debt? You can’t hide from it now. more With architectural observability, you now have hard proof of how architectural debt is affecting your systems and how, by using AO, you can identify and prioritize the actual problems in your systems early and often, rather than only addressing the symptoms in production. AO makes applications more resilient, more scalable, and helps your team move faster. And AO can help proactively. Is your team moving from a monolith to a microservice? AO can give you a plan to move your architecture forward. With AO, you could analyze your monolith, understand how its domains and functionality are structured and connected, and then get actionable steps on how to modularize and move the functionality to microservices. And once you have a distributed architecture (microservices or distributed monoliths), you’ll want to make sure your architecture doesn’t drift or get more complex to the point that things start to break, you lose control, and you have to slow down your engineering velocity. AO keeps your applications in check whether monolith or microservices. Architectural Observability Gives You Better Systems My readers may recall that I have been focused on the following mission statement, which I feel can apply to any IT professional: “Focus your time on delivering features/functionality that extends the value of your intellectual property. Leverage frameworks, products, and services for everything else.” - J. Vester “Focus your time on delivering features/functionality that extends the value of your intellectual property. Leverage frameworks, products, and services for everything else.” - J. Vester Architectural observability adheres to my mission statement perfectly. By moving from plain vanilla observability to architectural observability , we can shift left for more reliable, more resilient, and better-performing systems. This shift affords us more time to spend on the business problems that our teams understand best. architectural observability As John F. Kennedy once said: “The best time to repair the roof is when the sun is shining.” Architectural observability should be placed on the same level (or higher) as APM. With AO, teams can truly understand their architecture, have a broader and more insightful view of their applications than with APM alone, and fix problems earlier. Have a really great day!

From Observability to Architectural Observability—Shifting Left for Resiliency

Real-World Resilient Strategies for Fintech Projects

Regte-wêreld-veerkragtige strategieë vir Fintech-projekte

ለፊንቴክ ፕሮጄክቶች የእውነተኛው ዓለም ተከላካይ ስልቶች

استراتيجيات مرنة في العالم الحقيقي لمشاريع التكنولوجيا المالية

Chiqpach Uraqpachan Estrategias Resilientes ukax Proyectos Fintech ukataki

Fintech Layihələri üçün Real Dünyada Dayanıqlı Strategiyalar

Рэальныя ўстойлівыя стратэгіі для фінтэх-праектаў

Устойчиви стратегии в реалния свят за финтех проекти

Real-World Resilient Strategies for Fintech projekte

Estratègies resilients del món real per a projectes Fintech

Odolné strategie pro fintech projekty v reálném světě

Real-World Resilient Strategies for Fintech-projekter

Ανθεκτικές στρατηγικές πραγματικού κόσμου για έργα Fintech

Mundu errealeko estrategia erresilienteak Fintech proiektuetarako

استراتژی های انعطاف پذیر در دنیای واقعی برای پروژه های فین تک

Reaalimaailman kestävät strategiat Fintech-projekteille

Estratexias resilientes do mundo real para proxectos Fintech

אסטרטגיות גמישות בעולם האמיתי עבור פרויקטי פינטק

Otporne strategije u stvarnom svijetu za Fintech projekte

Estrateji Rezilyan Monn Imobilye pou Pwojè Fintech

Valós, rugalmas stratégiák fintech projektekhez

Իրական աշխարհի ճկուն ռազմավարություններ Fintech նախագծերի համար

Strategi Ketahanan Dunia Nyata untuk Proyek Fintech

Strategie resilienti nel mondo reale per progetti Fintech

რეალურ სამყაროში გამძლე სტრატეგიები Fintech პროექტებისთვის

Fintech жобаларына арналған нақты әлемдегі тұрақты стратегиялар

យុទ្ធសាស្ត្រធន់នឹងពិភពលោកពិតប្រាកដសម្រាប់គម្រោង Fintech

Финтек долбоорлору үчүн реалдуу дүйнөлүк туруктуу стратегиялар

Stratégies Résilientes na Mokili ya solo pona ba Projets Fintech

ຍຸດທະສາດການຕ້ານທານໂລກທີ່ແທ້ຈິງສໍາລັບໂຄງການ Fintech

Realaus pasaulio atsparios Fintech projektų strategijos

Reālās pasaules elastīgas stratēģijas Fintech projektiem

Paikady Maharitra Eran-tany ho an'ny Tetik'asa Fintech

Отпорни стратегии во реалниот свет за Fintech проекти

Финтекийн төслүүдийн бодит ертөнцөд тэсвэртэй стратеги

Strategi Berdaya Tahan Dunia Sebenar untuk Projek Fintech

Fintech परियोजनाहरूको लागि वास्तविक-विश्व लचिलो रणनीतिहरू

Realistische veerkrachtige strategieën voor fintech-projecten

Maano a Lefase la Sebele a go Kgotlelela a Diprotšeke tša Fintech

Realistyczne strategie odporne na wyzwania dla projektów Fintech

د فنټیک پروژو لپاره د ریښتیني نړۍ انعطاف وړ ستراتیژیانې

Chiqap Mundopi Estrategias Resilientes nisqa Proyectos Fintech nisqapaq

Strategii rezistente în lumea reală pentru proiecte Fintech

Ingamba zifatika-zifatika kubikorwa bya Fintech

Fintech ව්යාපෘති සඳහා සැබෑ-ලෝක ඔරොත්තු දෙන උපාය මාර්ග

Odolné stratégie pre fintech projekty v reálnom svete

Real-World Resilient Strategies yeFintech Projects

Xeeladaha Adkeysiga Adduunka ee Dhabta ah ee Mashaariicda Fintech

Strategjitë elastike të botës reale për projektet Fintech

Реал-светске отпорне стратегије за Финтецх пројекте

Mikakati Halisi ya Ulimwenguni kwa Miradi ya Fintech

ஃபின்டெக் திட்டங்களுக்கான நிஜ-உலக மீள்திறன் உத்திகள்

Стратегияҳои устувори ҷаҳонии воқеӣ барои лоиҳаҳои Fintech

กลยุทธ์ที่ยืดหยุ่นในโลกแห่งความเป็นจริงสำหรับโครงการ Fintech

ኣብ ሓቀኛ ዓለም ተጻዋርነት ዘለዎም ስትራተጂታት ንፕሮጀክትታት ፊንቴክ

Fintech taslamalary üçin hakyky dünýä çydamly strategiýalary

Real-World Resilient Strategies para sa Fintech Projects

Maqhinga ya Misava ya Xiviri yo Tiyisela eka Tiphurojeke ta Fintech

Реальні стійкі стратегії для фінтех-проектів

فنٹیک پروجیکٹس کے لیے حقیقی دنیا کی لچکدار حکمت عملی

Fintech loyihalari uchun haqiqiy dunyoga chidamli strategiyalar

IziCwangciso zokwenyani zeHlabathi zoLwahlulo lweeProjekthi ze-Fintech

Amasu Okuqina Womhlaba Wangempela Wemiklamo ye-Fintech

Depending on who you asked about the outlook of the crypto industry going into 2024, you would have heard a response that ranged between cautious optimism and more of the same from 2023. The prevailing bearish macroeconomic conditions of heightened inflation and elevated interest rates tempered expectations.Even with the potential for a final Bitcoin ETF approval in the U.S. and the next Bitcoin halving, many thought the headwinds were too strong and that the explosion in popularity of AI would siphon off whatever VC money was still available.As we enter Q2 of 2024, most people are shocked at how strong and resilient the industry is proving to be. The popularity of the Bitcoin ETFs with institutional investors and the calming of the Federal Reserve’s language has spurred renewed interest in the highly volatile asset class. But what can we learn from the mistakes of the last bull run, and how can we overcome the reputational damage that crypto scandals did while navigating this new regulatory landscape? How we got here It seems like a distant memory, but 2021 was a banner year for the industry. Most crypto projects were hitting all-time highs, staking and lending protocols like the Anchor Protocoloffered over 20% returns, and charismatic founders like Do Kwon, SBF, and Alex Maschinsky were being hailed by the mainstream media as the next coming of Steve Jobs.Yet, there were warning signs that the market sentiment was about to shift and that these new wunderkinder were nothing more than grifters and charlatans preying on overhyped market sentiment. Even before the bull run in 2021, analysts were highlighting the potential pitfalls of some of the most popular projects of the last cycle. In April 2018,  former Head of Risk at MakerDAO and Research Analyst at Scaler Cyrus Younessi correctly identified the critical failure point in Terra Luna: “If Terra were to fall and break peg, then it would depend on Luna to Save Terra. But Luna would fall as investors would panic, and then Terra would continue to fall, and then they would just each keep contributing to each other’s demise.” Collapses in 2022, bear market 2023 The euphoria that was felt across the market in 2021 would come to an abrupt end in 2022 from the fall of the first of many dominoes with the collapse of Terra Luna. Terra ecosystem In one of the most remarkable collapses of this period, the Terra ecosystem’s flagship protocol, LUNA, and algorithmic stablecoin (UST) lost its peg to the U.S. dollar, causing the price to crash to zero in a matter of days. LUNA’s fall from grace was made all the more spectacular because of how arrogant its founder Do Kwon was about promoting its strength and stability. Celcius Throughout much of 2021, Celsius was considered a premium centralized lending platform. Its charismatic founder, Alex Maschinsky, aggressively promoted its more than 20% return on investment, and it became the de facto custodian for retail and institutional investors. However, the model became unsustainable as the market shifted and the underlying assets began to lose value. It was revealed that Celcius was using Ponzi economics to prop up the platform. It was borrowing new deposits to make up for the lack of funds to pay out the high returns, and the whole platform collapsed under the weight, taking with it investors' deposits. FTX No project was as popular or successful during the 2021 bull run as the centralized exchange FTX. It rose to prominence because of its founder, Sam Bankman Fried’s reputation as a dominant arbitrage trader in his first company, Alameda Research. He was an enigma that the media fawned over as he embraced the lifestyle of a humble billionaire by spouting the benefits of the philosophical lifestyle of effective altruism. FTX became the number one exchange globally, signing massive celebrity endorsements from Larry David, Tom Brady, and Steph Curry. FTX had entrenched itself so deeply into the industry by requiring projects it supported to hold their assets on the platform that when it collapsed, it impacted just about everyone in the space. The once dominant exchange was ultimately undermined by Binance’s founder CZ, after he publicly sold Binance’s entire stake in the FTX utility token FTT after it was revealed SBF had been using customers' deposits to cover Alameda’s losses and using FTT to make up the difference on the balance sheet. Shifting Regulatory Landscape 2022 plunged the crypto industry into a deep bear market that we are only starting to emerge from today. The industry had largely been left to self-regulate, with the SEC only intervening in cases of clear criminality. Yet, the experiences of 2022 left many people heavily criticizing the SEC’s approach, specifically Chairman Gary Gensler and the close relationship he had with SBF and Alameda Research’s CEO Caroline Ellison.In a change of tone, the SEC and Chairman Gensler began pursuing legal action against anyone and everyone it could in an aggressive shift to a regulation policy by enforcement. The shift impacted individual projects like Ripple, Library, and Tornado Cash. The shift also meant constant deferral delays on SEC regulatory decisions, specifically in relation to Bitcoin ETF approvals, as well as targeting good faith actors like centralized exchanges__Kraken__ and Coinbase. Kraken and Coinbase had been asking for clear regulations for years to operate within. For their troubles of trying to remain compliant, the SEC filed lawsuits against each for operating unregistered security exchanges To end 2023, the SEC went trophy hunting and emerged with the arrest of the CEO of the world’s largest crypto exchange (Binance), CZ. CZ pled guilty to anti-money laundering charges and now faces over ten years in prison, while the exchange was fined $ 4 billion. The shift in policy by the SEC represented a direct attack on the industry. Still, it ultimately did more damage by undermining these firms' ability to operate in the U.S. by creating confusion and an environment of ever-shifting regulatory goalposts. Ongoing hacks and heists Despite the SEC's new approach to the industry, heists and hacks throughout the industry remained rampant throughout the course of 2023, totaling over $ 1.7 billion. While 2024 is again proving to be a hotbed for crypto hacks and scams, the first three months totaling over $437 million. With the looming Bitcoin halving and the historical trend of it spurring the next bull run, it is relatively safe to say that this problem will get worse before it gets better. Outlook for 2024 So, with all the negative sentiment built up in the industry from the last cycle. How can we emerge and market the industry in a positive light?If we learned anything from the last cycle it's that the product needs to be centerstage rather than any charismatic leader. It is easy to get swept up in the excitement when the market moves, but we need to remember the fundamentals of DYOR. Accountability for those bad actors of the last cycle is also key. We are beginning to see how the criminal activity of those wunderkind founders was not because they were in crypto but because they were criminals. SBF and Maschinsky committed embezzlement and financial crimes because they took advantage of user funds, not because of anything inherent with the technology. They are more akin to Bernie Madoff than Satoshi Nakamoto. Explaining the difference will be key. We should also take comfort in the fact that despite Chairman Gensler’s disdain for the industry, he will be limited to his term, other chairmen and women in the SEC have dissenting opinions (Hester Pierce) to the SEC, and his legal challenges to reign in the industry often fail. Depending on who you asked about the outlook of the crypto industry going into 2024, you would have heard a response that ranged between cautious optimism and more of the same from 2023. The prevailing bearish macroeconomic conditions of heightened inflation and elevated interest rates tempered expectations. Even with the potential for a final Bitcoin ETF approval in the U.S. and the next Bitcoin halving, many thought the headwinds were too strong and that the explosion in popularity of AI would siphon off whatever VC money was still available. As we enter Q2 of 2024, most people are shocked at how strong and resilient the industry is proving to be. The popularity of the Bitcoin ETFs with institutional investors and the calming of the Federal Reserve’s language has spurred renewed interest in the highly volatile asset class. But what can we learn from the mistakes of the last bull run, and how can we overcome the reputational damage that crypto scandals did while navigating this new regulatory landscape? How we got here It seems like a distant memory, but 2021 was a banner year for the industry. Most crypto projects were hitting all-time highs, staking and lending protocols like the Anchor Protocol offered over 20% returns, and charismatic founders like Do Kwon, SBF, and Alex Maschinsky were being hailed by the mainstream media as the next coming of Steve Jobs. Yet, there were warning signs that the market sentiment was about to shift and that these new wunderkinder were nothing more than grifters and charlatans preying on overhyped market sentiment. Anchor Protocol Anchor Protocol Even before the bull run in 2021, analysts were highlighting the potential pitfalls of some of the most popular projects of the last cycle. In April 2018,  former Head of Risk at MakerDAO and Research Analyst at Scaler Cyrus Younessi correctly identified the critical failure point in Terra Luna: correctly identified correctly identified “If Terra were to fall and break peg, then it would depend on Luna to Save Terra. But Luna would fall as investors would panic, and then Terra would continue to fall, and then they would just each keep contributing to each other’s demise.” “If Terra were to fall and break peg, then it would depend on Luna to Save Terra. But Luna would fall as investors would panic, and then Terra would continue to fall, and then they would just each keep contributing to each other’s demise.” “If Terra were to fall and break peg, then it would depend on Luna to Save Terra. But Luna would fall as investors would panic, and then Terra would continue to fall, and then they would just each keep contributing to each other’s demise.” Collapses in 2022, bear market 2023 The euphoria that was felt across the market in 2021 would come to an abrupt end in 2022 from the fall of the first of many dominoes with the collapse of Terra Luna. Terra ecosystem In one of the most remarkable collapses of this period, the Terra ecosystem’s flagship protocol, LUNA, and algorithmic stablecoin (UST) lost its peg to the U.S. dollar, causing the price to crash to zero in a matter of days. LUNA’s fall from grace was made all the more spectacular because of how arrogant its founder Do Kwon was about promoting its strength and stability. price to crash to zero price to crash to zero Celcius Throughout much of 2021, Celsius was considered a premium centralized lending platform. Its charismatic founder, Alex Maschinsky, aggressively promoted its more than 20% return on investment, and it became the de facto custodian for retail and institutional investors. However, the model became unsustainable as the market shifted and the underlying assets began to lose value. It was revealed that Celcius was using Ponzi economics to prop up the platform. It was borrowing new deposits to make up for the lack of funds to pay out the high returns, and the whole platform collapsed under the weight , taking with it investors' deposits. collapsed under the weight collapsed under the weight FTX No project was as popular or successful during the 2021 bull run as the centralized exchange FTX. It rose to prominence because of its founder, Sam Bankman Fried’s reputation as a dominant arbitrage trader in his first company, Alameda Research. He was an enigma that the media fawned over as he embraced the lifestyle of a humble billionaire by spouting the benefits of the philosophical lifestyle of effective altruism. FTX became the number one exchange globally, signing massive celebrity endorsements from Larry David, Tom Brady, and Steph Curry. FTX had entrenched itself so deeply into the industry by requiring projects it supported to hold their assets on the platform that when it collapsed , it impacted just about everyone in the space. The once dominant exchange was ultimately undermined by Binance’s founder CZ, after he publicly sold Binance’s entire stake in the FTX utility token FTT after it was revealed SBF had been using customers' deposits to cover Alameda’s losses and using FTT to make up the difference on the balance sheet. when it collapsed when it collapsed Shifting Regulatory Landscape 2022 plunged the crypto industry into a deep bear market that we are only starting to emerge from today. The industry had largely been left to self-regulate, with the SEC only intervening in cases of clear criminality. Yet, the experiences of 2022 left many people heavily criticizing the SEC’s approach, specifically Chairman Gary Gensler and the close relationship he had with SBF and Alameda Research’s CEO Caroline Ellison. In a change of tone, the SEC and Chairman Gensler began pursuing legal action against anyone and everyone it could in an aggressive shift to a regulation policy by enforcement. The shift impacted individual projects like Ripple, Library, and Tornado Cash. The shift also meant constant deferral delays on SEC regulatory decisions, specifically in relation to Bitcoin ETF approvals, as well as targeting good faith actors like centralized exchanges__ Kraken __ and Coinbase . Kraken and Coinbase had been asking for clear regulations for years to operate within. For their troubles of trying to remain compliant, the SEC filed lawsuits against each for operating unregistered security exchanges Kraken Coinbase Coinbase filed lawsuits filed lawsuits operating unregistered security exchanges operating unregistered security exchanges To end 2023, the SEC went trophy hunting and emerged with the arrest of the CEO of the world’s largest crypto exchange (Binance), CZ. CZ pled guilty to anti-money laundering charges and now faces over ten years in prison, while the exchange was fined $ 4 billion. The shift in policy by the SEC represented a direct attack on the industry. Still, it ultimately did more damage by undermining these firms' ability to operate in the U.S. by creating confusion and an environment of ever-shifting regulatory goalposts. Ongoing hacks and heists Despite the SEC's new approach to the industry, heists and hacks throughout the industry remained rampant throughout the course of 2023, totaling over $ 1.7 billion. totaling over $ 1.7 billion. totaling over $ 1.7 billion. While 2024 is again proving to be a hotbed for crypto hacks and scams, the first three months totaling over $437 million . With the looming Bitcoin halving and the historical trend of it spurring the next bull run, it is relatively safe to say that this problem will get worse before it gets better. totaling over $437 million totaling over $437 million Outlook for 2024 So, with all the negative sentiment built up in the industry from the last cycle. How can we emerge and market the industry in a positive light? If we learned anything from the last cycle it's that the product needs to be centerstage rather than any charismatic leader. It is easy to get swept up in the excitement when the market moves, but we need to remember the fundamentals of DYOR. Accountability for those bad actors of the last cycle is also key. We are beginning to see how the criminal activity of those wunderkind founders was not because they were in crypto but because they were criminals. SBF and Maschinsky committed embezzlement and financial crimes because they took advantage of user funds, not because of anything inherent with the technology. They are more akin to Bernie Madoff than Satoshi Nakamoto. Explaining the difference will be key. We should also take comfort in the fact that despite Chairman Gensler’s disdain for the industry, he will be limited to his term, other chairmen and women in the SEC have dissenting opinions (Hester Pierce) to the SEC, and his legal challenges to reign in the industry often fail. dissenting opinions dissenting opinions often fail. often fail.

Resilient Strategies for Crypto Marketing Success in 2024: Overcoming Regulations and Scandals

2024 সালে ক্রিপ্টো বিপণন সাফল্যের জন্য স্থিতিস্থাপক কৌশল: প্রবিধান এবং কেলেঙ্কারি কাটিয়ে ওঠা

Belastbare Strategien für erfolgreiches Krypto-Marketing im Jahr 2024: Regulierungen und Skandale überwinden

Estrategias resilientes para el éxito del cripto marketing en 2024: superación de regulaciones y escándalos

Stratégies résilientes pour réussir le marketing cryptographique en 2024 : surmonter les réglementations et les scandales

2024 में क्रिप्टो मार्केटिंग की सफलता के लिए लचीली रणनीतियाँ: विनियमनों और घोटालों पर काबू पाना

2024 年に暗号通貨マーケティングを成功させるための強靭な戦略: 規制とスキャンダルを克服する

2024년 암호화폐 마케팅 성공을 위한 탄력적 전략: 규제 및 스캔들을 극복

Estratégias resilientes para o sucesso do marketing criptográfico em 2024: superando regulamentações e escândalos

Устойчивые стратегии успеха криптомаркетинга в 2024 году: преодоление регулирования и скандалов

2024'te Kripto Pazarlama Başarısı için Dayanıklı Stratejiler: Düzenlemelerin ve Skandalların Üstesinden Gelmek

Các chiến lược kiên cường để tiếp thị tiền điện tử thành công vào năm 2024: Vượt qua các quy định và vụ bê bối

2024 年加密货币营销成功的弹性策略：克服监管和丑闻

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 37 of 38. Line of Effort 3: Develop New Tools to Deliver Digital and Cyber Assistance Quickly and Efficiently The demand for cybersecurity and cybercrime assistance, in particular cyber defense, incident response, and skills to combat criminal misuse of cryptocurrency, is growing in scale. After cyberattacks against Ukraine, Costa Rica, and Albania, the United States and its allies shared threat intelligence; facilitated operational collaboration; enabled access to commercial cybersecurity companies’ services, including hardware, software, and embedded technical support; and funded longer term capacity building. From these and other cases, the State Department has learned the importance of regular and close coordination across the U.S. government and with international partners, as well as the importance of mobilizing private-sector technology and expertise. Modernizing authorities and mechanisms to provide technology-related foreign assistance at the speed and scale necessary is crucial. We must adapt our foreign assistance resources and authorities to support long-term U.S. leadership and foster digital solidarity. Recognizing the urgent and growing need for additional tools to advance U.S. cyber and digital foreign policy, Congress created, through the Department of State Authorization Act of 2023 and funded, through the Department of State, Foreign Operations, and Related Program Appropriations Act, 2024, the Cyberspace, Digital Connectivity, and Related Technologies Fund. This fund will provide the Department of State with authorities and dedicated funding to support strategically important cyber, digital, and technology-related foreign assistance programs. This is a significant step in advancing U.S. foreign policy. The Department will work to operationalize and implement these new authorities. Continue Reading Here. This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 37 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 37 of 38. here here Line of Effort 3: Develop New Tools to Deliver Digital and Cyber Assistance Quickly and Efficiently The demand for cybersecurity and cybercrime assistance, in particular cyber defense, incident response, and skills to combat criminal misuse of cryptocurrency, is growing in scale. After cyberattacks against Ukraine, Costa Rica, and Albania, the United States and its allies shared threat intelligence; facilitated operational collaboration; enabled access to commercial cybersecurity companies’ services, including hardware, software, and embedded technical support; and funded longer term capacity building. From these and other cases, the State Department has learned the importance of regular and close coordination across the U.S. government and with international partners, as well as the importance of mobilizing private-sector technology and expertise. Modernizing authorities and mechanisms to provide technology-related foreign assistance at the speed and scale necessary is crucial. We must adapt our foreign assistance resources and authorities to support long-term U.S. leadership and foster digital solidarity. Recognizing the urgent and growing need for additional tools to advance U.S. cyber and digital foreign policy, Congress created, through the Department of State Authorization Act of 2023 and funded, through the Department of State, Foreign Operations, and Related Program Appropriations Act, 2024, the Cyberspace, Digital Connectivity, and Related Technologies Fund. This fund will provide the Department of State with authorities and dedicated funding to support strategically important cyber, digital, and technology-related foreign assistance programs. This is a significant step in advancing U.S. foreign policy. The Department will work to operationalize and implement these new authorities. Continue Reading Here. Continue Reading Here . Here This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State by the U.S Department of State

Building Digital Resilience: US Efforts to Develop Rapid Cyber Assistance Tools

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 36 of 38. Line of Effort 2: Augment Partner Cyber Capacity Building Efforts Cyber capacity building efforts—which usually focus on strengthening a nation’s ability to adopt and develop cyber policies and strategies or improving their technical ability to detect, respond to, and recover from cyber incidents—have a direct and positive impact on international cyber stability and the security of U.S. citizens. Assistance directed at policy- and strategy-making increases states’ credibility and engagement in international discussions. It provides them with the national-level capabilities needed to implement the norms developed under the framework for responsible state behavior in cyberspace, to conform with the standards of the Budapest Cybercrime Convention, to hold irresponsible actors accountable in cyberspace, and to develop a national-level approach to counter persistent cyber threats and build long-term resilience. Improving partner operational capabilities makes it more likely they will be able to combat transnational cybercrime threats, share useful cyber threat and incident information with the United States, and successfully partner with the United States in operations to disrupt malicious cyber activity. Over the last two decades, the Department of State has collaborated with other agencies, international partners, regional organizations, and the private sector to build cyber capacity abroad. Officials and private sector professionals from around the world participate in workshops on industrial control systems held with CISA. The United States assists efforts by the Organization of American States in areas such as cyber incident response, national cybersecurity strategy development and implementation, cybersecurity awareness, and cyber workforce development. The United States is a leading donor to Council of Europe programs designed to expand adoption of the Budapest Cybercrime Convention. The Global Forum on Cyber Expertise (GFCE), of which the United States is a founding and active member, provides a global platform to connect cyber policymakers, practitioners, and experts and to match assistance programs with recipients. Multiple agencies have supported international partners in using and adapting the NIST Cybersecurity Framework, and the Department of State has supported international participation in the development of version 2.0 of the framework. The NICE Workforce Framework for Cybersecurity (NICE Framework) has been leveraged to support talent development and management. The Department of Commerce, NIST, USAID, and the Department of State will engage international partners to promote the development of critical and emerging technology standards in areas such as best practices regarding data capture, processing, privacy, handling, and analysis; trustworthiness, verification, and assurance of AI systems and AI risk management; and content authentication and provenance, synthetic content detection, and content labeling. In addition, NIST has selected four algorithms designed to withstand cyberattacks by quantum computers and is developing standards for U.S. Government use. The Department of State will work with NIST to internationalize – including through ongoing engagements in international standards bodies – these post quantum cryptography standards so that organizations around the world can integrate them into their encryption infrastructure. They will also continue engaging international partners in developing and implementing cybersecurity best practices in areas such as Zero Trust, IoT cybersecurity, digital identity, operational technology, software security, and supply chain risk management. Continue Reading Here. This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 36 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 36 of 38. here here Line of Effort 2: Augment Partner Cyber Capacity Building Efforts Cyber capacity building efforts—which usually focus on strengthening a nation’s ability to adopt and develop cyber policies and strategies or improving their technical ability to detect, respond to, and recover from cyber incidents—have a direct and positive impact on international cyber stability and the security of U.S. citizens. Assistance directed at policy- and strategy-making increases states’ credibility and engagement in international discussions. It provides them with the national-level capabilities needed to implement the norms developed under the framework for responsible state behavior in cyberspace, to conform with the standards of the Budapest Cybercrime Convention, to hold irresponsible actors accountable in cyberspace, and to develop a national-level approach to counter persistent cyber threats and build long-term resilience. Improving partner operational capabilities makes it more likely they will be able to combat transnational cybercrime threats, share useful cyber threat and incident information with the United States, and successfully partner with the United States in operations to disrupt malicious cyber activity. Over the last two decades, the Department of State has collaborated with other agencies, international partners, regional organizations, and the private sector to build cyber capacity abroad. Officials and private sector professionals from around the world participate in workshops on industrial control systems held with CISA. The United States assists efforts by the Organization of American States in areas such as cyber incident response, national cybersecurity strategy development and implementation, cybersecurity awareness, and cyber workforce development. The United States is a leading donor to Council of Europe programs designed to expand adoption of the Budapest Cybercrime Convention. The Global Forum on Cyber Expertise (GFCE), of which the United States is a founding and active member, provides a global platform to connect cyber policymakers, practitioners, and experts and to match assistance programs with recipients. Multiple agencies have supported international partners in using and adapting the NIST Cybersecurity Framework, and the Department of State has supported international participation in the development of version 2.0 of the framework. The NICE Workforce Framework for Cybersecurity (NICE Framework) has been leveraged to support talent development and management. The Department of Commerce, NIST, USAID, and the Department of State will engage international partners to promote the development of critical and emerging technology standards in areas such as best practices regarding data capture, processing, privacy, handling, and analysis; trustworthiness, verification, and assurance of AI systems and AI risk management; and content authentication and provenance, synthetic content detection, and content labeling. In addition, NIST has selected four algorithms designed to withstand cyberattacks by quantum computers and is developing standards for U.S. Government use. The Department of State will work with NIST to internationalize – including through ongoing engagements in international standards bodies – these post quantum cryptography standards so that organizations around the world can integrate them into their encryption infrastructure. They will also continue engaging international partners in developing and implementing cybersecurity best practices in areas such as Zero Trust, IoT cybersecurity, digital identity, operational technology, software security, and supply chain risk management. Continue Reading Here. Continue Reading Here . Here This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State by the U.S Department of State

Empowering Global Cyber Resilience: United States' Efforts in Partner Cyber Capacity Building

You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 27 of 38. Line of Effort 2: Disrupt and Build Resilience to Malicious State Activity Given the interconnected nature of cyberspace, international cooperation is crucial to deny, disrupt, and counter adversary activities in and through cyberspace. The Department of State leads efforts, including facilitating international outreach, to address the rising threat of disruptive or destructive cyberattacks on the critical infrastructure of the United States and its allies and partners. This includes sharing through diplomatic channels joint cybersecurity advisories with the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and National Security Agency (NSA), and allies and partners on threats; capacity building and information sharing with new and existing partners to mitigate cyber threats and ensure the resilience of their critical infrastructure; and using bilateral, multilateral, and other fora to clarify and communicate expectations about adherence to international law and the framework for responsible behavior in cyberspace. In addition, members of the Quad have developed joint principles for the cybersecurity of critical infrastructure and NATO members have committed to ensuring the resilience of critical infrastructure, enhanced protection of critical infrastructure through training and exercises, and shared intelligence on threats. As part of its counter adversary cyber activity, the Department of State provides foreign policy guidance and uses diplomatic engagements to support the Department of Defense (DoD)’s efforts to campaign in and through cyberspace below the level of armed conflict to reinforce deterrence and frustrate adversaries. As laid out in the 2023 DoD Cyber Strategy, U.S. Cyber Command continues to defend forward to discover, expose, and protect against the sources of malicious cyber activities and to reinforce responsible state behavior by encouraging adherence to international law and internationally recognized cyberspace norms. The DoD Cyber Strategy also notes that cyber operations are most effective when used in concert with other instruments of national power, including diplomatic engagement and cyber capacity building. The Department of State, in close coordination with interagency and international partners, will continue to organize and execute sustained diplomatic pressure campaigns to raise international and public awareness of significant cyber threats and to increase the costs and risks to malicious cyber actors. For example, the United States has worked with allies, partners, and the private sector to disrupt DPRK revenue-generation efforts through cybercrime, crypto theft, and IT workers. U.S. Cyber Command, NSA, DHS, DOJ, and the FBI have exposed North Korean malware, seized malicious cyber infrastructure, seized cryptocurrency and fiat currency, and shared actionable threat intelligence with the private sector. The Department of State coordinates action with the Republic of Korea through a bilateral DPRK Cyber Working Group, including information sharing and policy coordination. Also, the United States, Japan, and the Republic of Korea coordinate efforts to counter DPRK cyber threats through a trilateral working group announced during the Camp David Summit in August 2023. The Department of State has also briefed officials around the world on threats posed by DPRK IT workers and cyber actors and deployed foreign assistance funds to build capacity to detect and defend against DPRK cyber and crypto threats. Continue Reading Here. This post was originally published on May 6, 2024, by the U.S Department of State You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here. This part is 27 of 38. You can jump to any part of the United States International Cyberspace & Digital Policy Strategy here . This part is 27 of 38. here here Line of Effort 2: Disrupt and Build Resilience to Malicious State Activity Given the interconnected nature of cyberspace, international cooperation is crucial to deny, disrupt, and counter adversary activities in and through cyberspace. The Department of State leads efforts, including facilitating international outreach, to address the rising threat of disruptive or destructive cyberattacks on the critical infrastructure of the United States and its allies and partners. This includes sharing through diplomatic channels joint cybersecurity advisories with the Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), and National Security Agency (NSA), and allies and partners on threats; capacity building and information sharing with new and existing partners to mitigate cyber threats and ensure the resilience of their critical infrastructure; and using bilateral, multilateral, and other fora to clarify and communicate expectations about adherence to international law and the framework for responsible behavior in cyberspace. In addition, members of the Quad have developed joint principles for the cybersecurity of critical infrastructure and NATO members have committed to ensuring the resilience of critical infrastructure, enhanced protection of critical infrastructure through training and exercises, and shared intelligence on threats. As part of its counter adversary cyber activity, the Department of State provides foreign policy guidance and uses diplomatic engagements to support the Department of Defense (DoD)’s efforts to campaign in and through cyberspace below the level of armed conflict to reinforce deterrence and frustrate adversaries. As laid out in the 2023 DoD Cyber Strategy, U.S. Cyber Command continues to defend forward to discover, expose, and protect against the sources of malicious cyber activities and to reinforce responsible state behavior by encouraging adherence to international law and internationally recognized cyberspace norms. The DoD Cyber Strategy also notes that cyber operations are most effective when used in concert with other instruments of national power, including diplomatic engagement and cyber capacity building. The Department of State, in close coordination with interagency and international partners, will continue to organize and execute sustained diplomatic pressure campaigns to raise international and public awareness of significant cyber threats and to increase the costs and risks to malicious cyber actors. For example, the United States has worked with allies, partners, and the private sector to disrupt DPRK revenue-generation efforts through cybercrime, crypto theft, and IT workers. U.S. Cyber Command, NSA, DHS, DOJ, and the FBI have exposed North Korean malware, seized malicious cyber infrastructure, seized cryptocurrency and fiat currency, and shared actionable threat intelligence with the private sector. The Department of State coordinates action with the Republic of Korea through a bilateral DPRK Cyber Working Group, including information sharing and policy coordination. Also, the United States, Japan, and the Republic of Korea coordinate efforts to counter DPRK cyber threats through a trilateral working group announced during the Camp David Summit in August 2023. The Department of State has also briefed officials around the world on threats posed by DPRK IT workers and cyber actors and deployed foreign assistance funds to build capacity to detect and defend against DPRK cyber and crypto threats. Continue Reading Here. Continue Reading Here . Here This post was originally published on May 6, 2024, by the U.S Department of State This post was originally published on May 6, 2024, by the U.S Department of State by the U.S Department of State by the U.S Department of State

Diplomatic Efforts to Combat Cyber Threats and Maintain International Cyber Resilience 

Stories, News & Mentions about RESILIO

Resilio’s Stories on HackerNoon