From Prevention to Resilience : Operational Tactics and EU Cybersecurity Frameworks
محتوى المقال
الملخص
Cyber threats continue to outpace conventional defense strategies, underscoring the need for more adaptive security approaches. This study examines how six principal European Union frameworks, including the Network and Information Security Directive (NIS2) and the Digital Operational Resilience Act (DORA), align with modern operational tactics: Redirect, Obviate, Impede, Detect, Limit, and Expose. Using a structured qualitative methodology, including legislative text analysis and cross-referencing with real-world incidents, the research maps each regulation’s provisions to specific defensive functions. Results indicate that while prevention, detection, and coordinated incident response are well addressed, more assertive tactics, such as diverting attackers to decoy environments or employing strategic deception, remain largely absent. This gap may limit the EU’s overall capacity to counter sophisticated threats that circumvent static defenses. In conclusion, supplementing existing regulations with practical guidance and controlled pilot initiatives could enhance cyber resilience without compromising legal or ethical standards. Such measures would empower both public and private entities to adopt a broader range of defensive strategies, ultimately strengthening Europe’s posture against increasingly advanced cyberattacks.
الكلمات المفتاحية
Information security، cybersecurity resilience، operational tactics، EU regulations، cyber defense strategies
التنزيلات
المراجع
B. Valeriano and B. Jensen, “The Myth of the Cyber Offense: The Case for Restraint,” Cato Institute Policy Analysis, Washington, DC, USA, 2019. [Online]. Available: https://www.cato.org/policy-analysis/myth-cyber-offense-case-restraint
S. Shackelford, A. Kastelic, S. Chraghchi, and B. Carroll, “Rethinkin Active Defense: A Comparative Analysis of Proactive ybersecurity Policymaking” Univ. Pa. J. Int’l L., vol. 41, no. 2, pp. 377-427, 2019. [Online]. Available: https://scholarship.law.upenn.edu/jil/vol41/iss2/3/
S. Bradbury, “The Developing Legal Framework for Defensive and Offensive Cyber Operations,” Harv. Natl. Secur. J., vol. 2, pp. 1-23, 2011. [Online]. Available: https://harvardnsj.org/wp-content/uploads/2011/02/Vol-2-Bradbury.pdf
J. M. Couretas, “Cyber Policy, Doctrine, and Tactics, Techniques, and Procedures (TTPs),” in An Introduction to Cyber Analysis and Targeting, Cham, Switzerland: Springer, 2022, ch. 2. doi: 10.1007/978-3-030-88559-5_2
S. Leventopoulos, K. Pipyros, and D. Gritzalis, “Retaliating against cyber-attacks: A decision-taking framework for policy-makers and enforcers of international and cybersecurity law,” Int. Cybersecur. Law Rev., vol. 5, pp. 237–262, 2024. DOI: 10.1365/s43439-024-00113-5
W. DeSombre, J. Cohen, A. De la Garza, J. Matis, and T. Porter, “A Primer on the Proliferation of Offensive Cyber Capabilities,” Eindhoven Univ. Technol., Eindhoven, Netherlands, 2021. [Online]. Available: https://research.tue.nl/en/publications/a-primer-on-the-proliferation-of-offensive-cyber-capabilities
M. N. Schmitt, Ed., Tallinn Manual 2.0 on the International Law Applicable to Cyber Operations, 2nd ed., Cambridge, UK: Cambridge Univ. Press, 2017, pp. 1–598, DOI: 10.1017/9781316822524
G. G. Fuster and L. Jasmontaite, “Cybersecurity Regulation in the European Union: The Digital, the Critical and Fundamental Rights,” in The Ethics of Cybersecurity, 1st ed., M. Christen, B. Gordijn, and M. Loi, Eds., Cham, Switzerland: Springer, 2020, ch. 5, pp. 1–46, DOI: 10.1007/978-3-030-29053-5_5
L. Bederna and Z. Rajnai, “Analysis of the cybersecurity ecosystem in the European Union,” Int. Cybersecur. Law Rev., no. 3, pp. 35–49, 2022, DOI: 10.1365/s43439-022-00048-9
P. Jacuch, “Comparative analysis of cybersecurity strategies. European Union strategy and policies. Polish and selected countries strategies,” Online J. Model. New Europe, no. 37, pp. 102–120, DOI: 10.24193/OJMNE.2021.37.06
A. Annarelli and G. Palombi, “Digitalization Capabilities and Sustainable Cyber Resilience: A Conceptual Framework,” Sustainability, vol. 13, no. 23, p. 13065, 2021, DOI: 10.3390/su132313065
A. Neri, F. Niccolini, and F. Martino, “Organizational cybersecurity readiness in the ICT sector: a quanti-qualitative assessment,” Inf. Comput. Secur., vol. 32, no. 1, pp. 38–52, 2024, DOI: 10.1108/ICS-05-2023-0084
D. Bodeau and R. Graubart, “Characterizing Effects on the Cyber Adversary: A Vocabulary for Analysis and Assessment,” MITRE Corp., Bedford, MA, USA, Tech. Rep. MTR 130432, Nov. 2013. [Online]. Available: https://www.mitre.org/sites/default/files/publications/characterizing-effects-cyber-adversary-13-4173.pdf [Accessed: Jan. 10, 2025].
R. McMillan, “Man Gets 10 Years for VoIP Hacking,” PCWorld, Sep. 24, 2010. [Online]. Available: https://www.pcworld.com/article/503431/article-2843.html.
European Commission, Proposal for a Council Recommendation for an EU Blueprint on Cybersecurity Crisis Management, COM(2025) 66 final, Brussels, Belgium, Feb. 24, 2025. [Online]. Available: https://ec.europa.eu/newsroom/dae/redirection/document/113086.
Federal Bureau of Investigation (FBI), “GameOver Zeus Botnet Disrupted: Collaborative Effort Among International Partners,” FBI News, Jun. 2, 2014, updated Jul. 11, 2014. [Online]. Available: https://www.fbi.gov/news/stories/gameover-zeus-botnet-disrupted.
U.S. Department of Justice, “FBI’s Encrypted Phone Platform Infiltrated Hundreds of Criminal Syndicates; Result is Massive Worldwide Takedown,” U.S. Attorney’s Office, Southern District of California, Jun. 8, 2021. [Online]. Available: https://www.justice.gov/usao-sdca/pr/fbi-s-encrypted-phone-platform-infiltrated-hundreds-criminal-syndicates-result-massive.
World Economic Forum, Global Cybersecurity Outlook 2025: Insight Report. Geneva, Switzerland: WEF, Jan. 2025. [Online]. Available: https://reports.weforum.org/docs/WEF_Global_Cybersecurity_Outlook_2025.pdf.
Microsoft Security Response Center, “Security Update for Microsoft Windows SMB Server (4013389),” Microsoft Security Bulletin MS17-010 - Critical, ver. 1.0, Mar. 14, 2017. [Online]. Available: https://learn.microsoft.com/en-us/security-updates/securitybulletins/2017/ms17-010.
C. Singh and A. K. Jain, “A comprehensive survey on DDoS attacks detection & mitigation in SDN-IoT network,” e-Prime, Adv. Electr. Eng., Electron. Energy, vol. 8, p. 100543, Jun. 2024, DOI: 10.1016/j.prime.2024.100543.
S. M. Kerner, “Colonial Pipeline hack explained: Everything you need to know,” TechTarget, Apr. 26, 2022. [Online]. Available: https://www.techtarget.com/whatis/feature/Colonial-Pipeline-hack-explained-Everything-you-need-to-know.
N. Khomami and O. Solon, “‘Accidental hero’ halts ransomware attack and warns: this is not over,” The Guardian, May 13, 2017. [Online]. Available: https://www.theguardian.com/technology/2017/may/13/accidental-hero-finds-kill-switch-to-stop-spread-of-ransomware-cyber-attack.
S. Steinberg, A. Stepan, and K. Neary, NotPetya: A Columbia University Case Study, Rep. SIPA-21-022.1, Picker Center Digital Education Group, Columbia Univ., New York, NY, USA, 2021. [Online]. Available: https://www.sipa.columbia.edu/sites/default/files/2022-11/NotPetya%20Final.pdf.
U.S. Department of Justice, “Emotet Botnet Disrupted in International Cyber Operation,” Office of Public Affairs, Jan. 28, 2021. [Online]. Available: https://www.justice.gov/archives/opa/pr/emotet-botnet-disrupted-international-cyber-operation.
S. Oladimeji and S. M. Kerner, “SolarWinds hack explained: Everything you need to know,” TechTarget, Nov. 3, 2023. [Online]. Available: https://www.techtarget.com/whatis/feature/SolarWinds-hack-explained-Everything-you-need-to-know.
S. M. Khasru, “WannaCry shows that businesses and governments must cooperate,” World Economic Forum, Jun. 1, 2017. [Online]. Available: https://www.weforum.org/stories/2017/06/wannacry-exposes-need-for-better-public-private-cooperation-in-the-cyber-space.
European Union Agency for Cybersecurity (ENISA), “2024 Report on the State of Cybersecurity in the Union,” Dec. 2024. [Online]. Available: https://www.enisa.europa.eu/sites/default/files/2024-11/2024%20Report%20on%20the%20State%20of%20the%20Cybersecurity%20in%20the%20Union.pdf.
European Parliament and Council of the European Union, “Directive (EU) 2022/2555 of the European Parliament and of the Council of 14 December 2022 on measures for a high common level of cybersecurity across the Union, amending Regulation (EU) No 910/2014 and Directive (EU) 2018/1972, and repealing Directive (EU) 2016/1148 (NIS 2 Directive) (Text with EEA relevance),” Official Journal of the European Union, vol. L 333, pp. 80-152, Dec. 2022. [Online]. Available: http://data.europa.eu/eli/dir/2022/2555/oj
European Parliament and Council of the European Union, “Regulation (EU) 2022/2554 of the European Parliament and of the Council of 14 December 2022 on digital operational resilience for the financial sector and amending Regulations (EC) No 1060/2009, (EU) No 648/2012, (EU) No 600/2014, (EU) No 909/2014 and (EU) 2016/1011 (Text with EEA relevance),” Official Journal of the European Union, vol. L 333, pp. 1-79, Dec. 2022. [Online]. Available: http://data.europa.eu/eli/reg/2022/2554/oj
European Parliament and Council of the European Union, “Regulation (EU) 2024/2847 of the European Parliament and of the Council of 23 October 2024 on horizontal cybersecurity requirements for products with digital elements and amending Regulations (EU) No 168/2013 and (EU) 2019/1020 and Directive (EU) 2020/1828 (Cyber Resilience Act) (Text with EEA relevance),” Official Journal of the European Union, vol. L 2847, Nov. 2024. [Online]. Available: http://data.europa.eu/eli/reg/2024/2847/oj
European Parliament and Council of the European Union, “Regulation (EU) 2019/881 of the European Parliament and of the Council of 17 April 2019 on ENISA (the European Union Agency for Cybersecurity) and on information and communications technology cybersecurity certification and repealing Regulation (EU) No 526/2013 (Cybersecurity Act) (Text with EEA relevance),” Official Journal of the European Union, vol. L 151, pp. 15-69, Jun. 2019. [Online]. Available: http://data.europa.eu/eli/reg/2019/881/oj
European Parliament and Council of the European Union, “Directive (EU) 2022/2557 of the European Parliament and of the Council of 14 December 2022 on the resilience of critical entities and repealing Council Directive 2008/114/EC (Text with EEA relevance),” Official Journal of the European Union, vol. L 333, pp. 164-198, Dec. 2022. [Online]. Available: http://data.europa.eu/eli/dir/2022/2557/oj
European Parliament and Council of the European Union, “Regulation (EU) 2025/38 of the European Parliament and of the Council of 19 December 2024 laying down measures to strengthen solidarity and capacities in the Union to detect, prepare for and respond to cyber threats and incidents and amending Regulation (EU) 2021/694 (Cyber Solidarity Act),” Official Journal of the European Union, vol. L 2025/38, pp. 1-45, Jan. 2025. [Online]. Available: http://data.europa.eu/eli/reg/2025/38/oj
J. X. Dempsey and J. P. Carlin, Cybersecurity Law Fundamentals, 2nd ed. Portsmouth, NH, USA: IAPP, 2024.
National Institute of Standards and Technology, “The NIST Cybersecurity Framework (CSF) 2.0,” NIST Cybersecurity White Paper, CSWP 29, Feb. 26, 2024. [Online]. Available: https://doi.org/10.6028/NIST.CSWP.29
ISO/IEC, “Information security, cybersecurity and privacy protection - Information security management systems - Requirements,” ISO/IEC 27001:2022, Oct. 2022.
ISO/IEC, “Information security, cybersecurity and privacy protection - Information security controls,” ISO/IEC 27002:2022, 2022.
تفاصيل المقال
هذا العمل مرخص بموجب Creative Commons Attribution-NonCommercial 4.0 International License.