Security

FSI scholars produce research aimed at creating a safer world and examing the consequences of security policies on institutions and society. They look at longstanding issues including nuclear nonproliferation and the conflicts between countries like North and South Korea. But their research also examines new and emerging areas that transcend traditional borders – the drug war in Mexico and expanding terrorism networks. FSI researchers look at the changing methods of warfare with a focus on biosecurity and nuclear risk. They tackle cybersecurity with an eye toward privacy concerns and explore the implications of new actors like hackers.

Along with the changing face of conflict, terrorism and crime, FSI researchers study food security. They tackle the global problems of hunger, poverty and environmental degradation by generating knowledge and policy-relevant solutions. 

Paragraphs

Bio: Anthony Vinci

The next presidential term will confront an increasingly urgent question of how to compete with China, economically and militarily. Simply increasing national security funding or R&D spending will not ensure victory against a competitor able to outspend the United States. Instead, we will need once again to revolutionize public-private partnerships to meet the challenge, harnessing more efficient ways of developing and implementing new technology. This paper proposes a novel approach for such partnerships, leveraging a joint venture model to share proprietary federal data with industry—on a limited basis, with appropriate safeguards—to catalyze faster development of new national security technology applications. 

All Publications button
1
Publication Type
Working Papers
Publication Date
Authors
Paragraphs

Bio: Amy Webb

Despite an abundance of technical experts across its agencies, the federal government lacks a centralized office charged with long-range, comprehensive, streamlined planning to address critical science and technology developments. The status quo risks misalignment between agencies and redundant strategic work. At the outset of the next presidential term, the President should create a new, centralized office championing strategic foresight. This will involve leadership in strategic processes using data-driven models to analyze plausible futures, continually evaluating macro sources of change, finding emerging trends, and mapping the trajectory and velocity of changes. Focused on providing authoritative, unbiased insights to the executive branch, it should facilitate forward-leaning research, knowledge dissemination and capabilities building via ongoing strategic conversations, experiential learning, and rigorous quantitative and qualitative proceedings that result in concrete actions. 

All Publications button
1
Publication Type
Working Papers
Publication Date
Authors
-

Vic Baines Vic Baines

Abstract:

Predicting the future is a fool's errand. Or is it? Technology has proved an agent of unprecedented disruption in recent years, but the instinct of some humans to do harm to others remains a constant. Cyber attacks continue to take the global community by surprise, and government actors still have a tendency to describe cybercrime as a new phenomenon. Knowing what we know about criminal modi operandi ​and motivations, can we speculate on the future of cybercrime in a way that enables governments, businesses and citizens to anticipate and prepare for the threats to come? Vic will present her ongoing work to review a past cybersecurity futures exercise, and a new project that aims to see further.

Vic Baines Bio

Downloable Flyer: The Cyber Policy Center Lunch Seminar Series

 

 
Seminars
-

Daphne Keller Daphne Keller
Abstract:

Facebook recently announced its own version of the Supreme Court: a 40-member board that will make final decisions about user posts that Facebook has taken down. The announcement came after extended deliberations that have been described as Facebook’s “constitutional convention.” Sweeping terms such as Supreme Court and constitution are not commonly used to describe the operation of private companies, but here they seem appropriate given the platforms’ importance for the many people who use them in place of newspapers, TV stations, the postal service, and even money. Yet private platforms aren’t really the public square, and internet companies aren’t governments. That’s exactly why they are free to do what so many people seem to want: set aside the First Amendment’s speech rules in favor of new, more restrictive ones. 

Mimicking a few government systems will not make internet platforms adequate substitutes for real governments, subject to real laws and real rights-based constraints on their power. Compared with democratic governments, platforms are far more capable of restricting speech. And they are far less accountable than elected officials for their choices. In this talk, I will delve into the differences we should be considering before urging platforms to take on greater roles as arbiters of speech and information.

Daphne Keller Bio

 

Lunch Seminar Series Flyer
  • E207, Encina Hall
  • 616 Serra Mall, Stanford, CA 94305
 

 

0
top_pick_rsd25_070_0254a.jpg

Daphne Keller is the Director of Platform Regulation at the Stanford Program in Law, Science, & Technology. Her academic, policy, and popular press writing focuses on platform regulation and Internet users'; rights in the U.S., EU, and around the world. Her recent work has focused on platform transparency, data collection for artificial intelligence, interoperability models, and “must-carry” obligations. She has testified before legislatures, courts, and regulatory bodies around the world on topics ranging from the practical realities of content moderation to copyright and data protection. She was previously Associate General Counsel for Google, where she had responsibility for the company’s web search products. She is a graduate of Yale Law School, Brown University, and Head Start.

SHORT PIECES

 

ACADEMIC PUBLICATIONS

 

POLICY PUBLICATIONS

 

FILINGS

  • U.S. Supreme Court amicus brief on behalf of Francis Fukuyama, NetChoice v. Moody (2024)
  • U.S. Supreme Court amicus brief with ACLU, Gonzalez v. Google (2023)
  • Comment to European Commission on data access under EU Digital Services Act
  • U.S. Senate testimony on platform transparency

 

PUBLICATIONS LIST

Director of Platform Regulation, Stanford Program in Law, Science & Technology (LST)
Social Science Research Scholar
Date Label
Director of Intermediary Liability Center for Internet and Society
Seminars
Paragraphs

In February, the White House attributed “the most destructive and costly cyberattack in history,” a summer 2017 attack affecting critical infrastructure and other victims around the world, to Russian intelligence services. The malicious code used in the attack, known as NotPetya, permanently encrypts the data on the computers that it has infected, essentially destroying them. Ground zero for the malware was Ukraine, but it self-propagated and quickly spread to Asia, Europe and the United States, costing its victims billions of dollars in damage. Russia’s hand in the NotPetya attack ought to send a chill down the spine of anybody who uses products by the Moscow-based antivirus company Kaspersky Labs. Russian law and practice, grants Russian intelligence agencies virtually unfettered authority to compel any internet-facing business in Russia to support their operations.

 

All Publications button
1
Publication Type
Journal Articles
Publication Date
Authors
Paragraphs

Excerpt from: "Publicly Reported Data Breaches: A Measure of Our Ignorance?"  Lawfare. July 11, 2018. Online.

There is a mounting gap between what the headlines say about the costs of cyber insecurity to the U.S. economy and the results of data-driven research on this topic—with negative implications for cybersecurity. Congress should move to narrow the gap by passing a federal law that takes two steps to protect data. First, it should require companies that possess sensitive personal information to publicly disclose when significant breaches of this information occur. Second, the law should also establish across-the-board requirements for companies that own and operate critical infrastructure, such as power plants and water utilities, to notify the authorities when sensitive operational systems are under credible threat from malicious cyber actors. A uniform, comprehensive framework would aid national security and enable executives, investors and policymakers alike to make data-driven investment and policy decisions.

Full article >

All Publications button
1
Publication Type
Blogs
Publication Date
Authors
Paragraphs

Excerpt from: "Cyber Security Derailed? Recommendations for Smarter Investments in Infrastructure." War on the Rocks. November, 2018. Online.

A state-owned Chinese company receives a contract to build and maintain the next generation of railcars that service Metro stations at the Pentagon, near the White House and Capitol Hill, and throughout the Washington, D.C., metro area. What could possibly go wrong? 

Possibly nothing, but maybe something. Commuter trains have come a long way from the unconnected transit assets that moved through and between cities independently. Modern rail cars are nodes in complex transit communications networks, extensions of a transit authority’s information and operational technology infrastructures, and even WiFi hotspots. Procurement announcements for the next generation of cars, like the one recently issued by D.C.’s Washington Metropolitan Area Transit Authority (WMATA), illustrate the complex, connected technologies that underpin promised improvements in automation, safety, and commuter experience.

 

All Publications button
1
Publication Type
Commentary
Publication Date
Authors
-

Stanford University's Hoover Institution in Washington is pleased to invite you to attend the next National Security and Technology Congressional Briefing. The briefing, centered on the U.S. race with China for technological superiority, will feature various experts outlining actionable policy proposals to meet this rising challenge.

With the 2020 presidential campaign in full swing, the time is ripe to develop new nonpartisan policy ideas to inform the national security and technology policy priorities of whomever will occupy the White House in 2021. The Technology and Public Policy Project housed within the Freeman Spogli Institute's Cyber Policy Center, and in partnership with the Hoover Institution, seeks to address these policy challenges and questions by developing implementation-ready proposals that meet the needs of current and future policymakers.

Hosted by Hoover Research Fellow Andrew Grotto, the briefing will focus on opportunities for action, featuring proposals by: 

  • Anja Manuel, on developing an affirmative strategy for competing, contesting, and cooperating with China in response to its efforts to systematically extract advanced technology from the West.
  • Anthony Vinci, on harnessing a new joint venture model for public-private technology innovation to meet national security technology challenges. 

 

Schedule:

  • 9:00a.m. - Registration and Coffee
  • 9:30a.m. - 11:00a.m. - Panel Discussion
  • Hoover Institution DC
  • 1399 New York Avenue NW, Suite 500
  • Washington, DC 20005
Panel Discussions
News Type
News
Date
Paragraphs

The Freeman Spogli Institute for International Studies (FSI) is pleased to announce that Kelly Born has been named the first executive director of the Cyber Policy Center. With a focus on cybersecurity, disinformation, digital democracy and election security, the Cyber Policy Center’s research, teaching and policy engagement aim to bring new insights and solutions to national governments, international institutions and industry.

As executive director, Born will collaborate with the center’s program leaders to pioneer academic programs focused on cyber issues, including new lines of research, a case-based, policy-oriented curriculum, pre- and postdoctoral training and practitioner fellowships, policy workshops and executive education. Born will also serve as the key spokesperson within the university and externally to the media, policy influencers, industry, foundations and civil society organizations. 

Prior to joining Stanford, Born helped to launch and lead The Madison Initiative at the William and Flora Hewlett Foundation, one of the largest philanthropic undertakings in America working to reduce polarization and improve U.S. democracy. There, Born designed and implemented strategies focused on money in politics, electoral reform, civic engagement and digital disinformation. In this capacity, Born worked with academics, government leaders, social media companies, foundations, and nonprofits around the world to help improve online information ecosystems. 

Before joining the William and Flora Hewlett Foundation, Born worked as a strategy consultant with the Monitor Group, supporting strategic planning efforts at Fortune 100 companies, governments, and nonprofits in the U.S., Africa, Asia, Latin America and Europe. 

Born earned a master’s degree in international policy from Stanford University. The graduate program is offered through the Freeman Spogli Institute for International Studies.

“We are thrilled that Kelly is returning to Stanford to play a leadership role at the Cyber Policy Center,” said Nathaniel Persily, the center’s faculty co-director, and the James B. McClatchy Professor of Law at Stanford Law School. “Her deep knowledge of our core research areas and strong relationships with leaders in academia, government and technology circles position the center well to achieve its strategic aims.”

The Cyber Policy Center was established in June 2019 and includes four programs: the Program on Democracy and the Internet; the Program on Geopolitics, Technology, and Governance; the Internet Observatory; and the Global Digital Policy Incubator. Together, they focus on addressing the threats cyber technologies pose to security and governance worldwide. 

The center’s launch event, “Securing Our Cyber Future: Innovative Approaches to Digital Threats,” featured the center’s first white paper, Securing American Elections: Prescriptions for Enhancing the Integrity and Independence of the 2020 U.S. Presidential Elections and Beyond,” which was co-authored by scholars affiliated with the Cyber Policy Center. The report details 45 recommendations for protecting the 2020 U.S. presidential election from domestic and foreign interference.

“I am honored and excited to have the opportunity to work with the distinguished faculty and staff at the new Cyber Policy Center, as well as the broader Stanford community of faculty and students,” said Born. “Questions of how best to maximize the benefits and minimize the harms presented by our increasingly networked, online world are amongst the most important and challenging questions global societies are grappling with today. Stanford’s Cyber Policy Center is ideally suited to pursue the research, teaching and policy engagement necessary to help answer these questions.”

About the Cyber Policy Center

The digital age has exposed countries to new security threats and sovereignty challenges that policymakers have only begun to address. In addition, social media and network technologies increasingly strain the balance between protecting the First Amendment and preventing foreign actors from influencing elections. To date, technological advancement in this domain has outpaced government policies, doctrines, or regulations. The Cyber Policy Center at the Freeman Spogli Institute for International Studies at Stanford University aims to address this need through research, policy advocacy and teaching. Program areas address topics including cybersecurity, election security, misinformation, digital democracy and human rights, artificial intelligence, and emerging technologies. Through research, policy engagement and teaching, the Cyber Policy Center brings cutting-edge insights and solutions to national governments, international institutions, and industry.

 
All News button
1
Authors
News Type
News
Date
Paragraphs

As the internet has increasingly been used to weaponize information, governments and technology companies have begun to grapple with new issues surrounding free expression and privacy.

Technology companies are being called upon to reshape their privacy and hate speech policies, and politicians are tackling the possibility  of  tech industry regulation.

Achieving both of those things, according to Eileen Donahoe, executive director of the Global Digital Policy Incubator (GDPI), is easier said than done.

“They all know that they need help,” Donahoe told Freeman Spogli Institute Director Michael McFaul on an episode of the World Class podcast. “Private-sector entities are looking for help from civil society and academics. And governments need help if for no other reason than they don’t always understand what’s going on in the platforms."




Free Speech Dilemma
Facebook and Google both have their own definitions of free speech, their own community values and their own terms of service, which they dictate to their billions of users. But their parameters of free expression are not always aligned with those of the U.S. government, Donahoe said.

“There’s an interplay between the rules of the platforms and the rules of the governments in which they operate, and that’s causing a lot of confusion,” she said. “We’re trying to help develop an appropriate metaphor for what these platforms are — some see themselves as a utility, some see them as editors and media. Whatever metaphor you pick, the rules and responsibilities that flow from it will be different. And we don’t have a metaphor yet.”

Over the last few years, tech companies have begun asking outsiders for help in developing norms for their platforms. Facebook CEO Mark Zuckerberg announced in 2018 that he was developing an “External Oversight Board” to help the company evaluate its community guidelines and for assistance with some of the content-based decisions on its platform.

Some companies are going as far as to call on the government for regulation, she said.

“They recognize that they’re not well suited to develop all of these norms for [their] platforms, which have such gigantic effects on society,” Donahoe said.

To Regulate or Not to Regulate
Several heads of technology companies have testified in front of the U.S. Senate this summer, including Zuckerberg, who answered questions about the company’s new cryptocurrency, and Karan Bhatia, Google's vice president for government affairs and public policy who testified on the question of whether Google’s search engine censors conservative media.

“Techlash” — the growing animosity toward large technology companies — has been on the rise, Donahoe said, and the government isn’t sure what their next steps are in handling these issues with the technology companies yet.

“So many congressional representatives and senators are a bit reticent to jump in,” she said. “They don’t want to undermine free expression, and they don’t want to destroy the American internet industry.”

Europe has already started  tackling this problem with the passage of the General Data Protection Regulation (GDPR), which standardizes data protection laws across all countries in the European Union.

Donahoe said that while she thinks the GDPR is a good move, there have been other laws passed in Europe, such as Germany’s Network Enforcement Act — which puts the liability on social media companies to censor the content on their respective platforms — that undermine free expression and democratic values.

“It shifts what we would normally consider democratic responsibility for assessing criminality to the private sector, and I find that problematic,” Donahoe said. “It’s a dangerous concept — a government is asking platforms to restrict content and be liable in a tort basis for content that is perceived to be harmful…it’s a very slippery slope.”

Related: Watch Eileen Donahoe’s interactive workshop on deep fakes at the June 2019 Copenhagen Democracy Summit

Eileen Donahoe served as the first U.S. ambassador to the United Nations Human Rights Council in Geneva. Follow her at @EileenDonahoe
 

 

Hero Image
eileen donahoe web
Eileen Donahoe, executive director of the Global Digital Policy Incubator, presents at the 2019 Copenhagen Democracy Summit. Photo: Alliance of Democracies
All News button
1
Subscribe to Security