1. While "[t]he Islamic Republic of Iran does not publicly communicate on their cyber offensive doctrine,"[1] in what ways does the observed use of their capabilities showcase Iran "play[s] by [different] rules [from] democratic countries, such as the United States" in the "privileged area" that is cyberspace?[2] In addition to explaining general trends (i.e. cyber-enabled influence operations[3]), please include an analysis of one of the Iran-attributed cyber-attacks from the readings (i.e. "Ajax Team"/"Rocket Kitten"; "CopyKittens"; "Phosphorous") to apply your understanding of Iran's cyber posture. Does the United States display the same kind of "exceptionalism" in cyberspace or is it a "non-liberal country" phenomenon like the readings suggest?

 

1. Explain the shift in scope and objectives in Iranian offensive and defensive cyber operations in light of the January 2021 Iran-Russia Cyber Agreement. Beyond the suggestions of (1) establishing a standardized vulnerabilities disclosure mechanism among Western allies and (2) adding self-destruct code modules to offensive capabilities,[4] how does a cooperation agreement on cybersecurity and information and communications technology affect United States/Western response to Iran who is "becoming increasingly adept at conducting cyber espionage and disruptive attacks against opponents at home and abroad?"[5]

 

[1] "Iran Cyber Threat Overview," Sekoia blog, June 5, 2023, https://blog.sekoia.io/iran-cyber-threat-overview/Links to an external site..

[2] Siboni, G and Abramski, Léa and Sapir, Gal (2020). Iran's Activity in Cyberspace: Identifying Patterns and Understanding the Strategy.

[3] "Iran turning to cyber-enabled influence operations for greater effect,"  Microsoft Threat Intelligence, May 2, 2023, https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RW13xRJLinks to an external site..

[4] "The Iran-Russia Cyber Agreement and US Strategy in the Middle east," Council on Foreign Relations Blog Post,  March 15, 2021, https://www.cfr.org/blog/iran-russia-cyber-agreement-and-us-strategy-middle-eastLinks to an external site..

[5] Anderson, C. and Sadjadpour, K. (2018). Iran's Cyber Threat: Espionage, Sabotage and Revenge. Carnegie Endowment for International Peace.

 

 

Readings: 

 

1. Anderson, C. and Sadjadpour, K. (2018). Iran's Cyber Threat: Espionage, Sabotage and Revenge. Carnegie Endowment for International Peace.
2. Siboni, G and Abramski, Léa and Sapir, Gal (2020). Iran's Activity in Cyberspace: Identifying Patterns and Understanding the Strategy
3. "Iran turning to cyber-enabled influence operations for greater effect,"  Microsoft Threat Intelligence, May 2, 2023, https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RW13xRJ
4. "Iran Cyber Threat Overview," Sekoia blog, June 5, 2023, https://blog.sekoia.io/iran-cyber-threat-overview/
5. "The Iran-Russia Cyber Agreement and US Strategy in the Middle east," Council on Foreign Relations Blog Post, March 15, 2021, https://www.cfr.org/blog/iran-russia-cyber-agreement-and-us-strategy-middle-east