Skip to content

Operationalizing Cyber Norms

Chris Kubecka

Discusses operationalizing international cyber norms and rules of engagement to protect civilian critical infrastructure.

Summary

In this international policy and security briefing from the DEF CON Safe Mode ICS Village, a reformed hacker and critical infrastructure specialist presents "Operationalizing Cyber Norms" live from Amsterdam. Opening at 00:00, the speaker explores how geopolitical tensions and state-sponsored cyber operations threaten civilian critical infrastructure.

At 02:01 and 03:00, the talk examines landmark international governance efforts, focusing on the 2015 United Nations Group of Governmental Experts (UN GGE) consensus report that established voluntary non-binding norms prohibiting cyberattacks against critical infrastructure.

At 04:00, the presenter references major historical incidents—including the 2012 Shamoon attacks against Saudi Aramco and attacks on power grids—to underscore the stakes. Concluding past 15:00, the speaker details how to operationalize diplomatic norms through regional CERT cooperation, mandatory incident transparency, and cross-border technical defense pacts. (AI summary — Gemini Flash)

Related talks

ICS Village·15 min

  • DEF CON
  • Policy
  • Date: Aug 2020
  • Location: Online

Chris Krebs

Chris Krebs answers questions regarding national cyber defense, government coordination, and ICS security.

cisacritical-infrastructurepolicy+1

Creator Stage·39 min

  • DEF CON
  • Policy
  • Date: Aug 2025
  • Location: Las Vegas

Herming Chiueh · Jason Vogt · Frank Smith

Taiwanese digital affairs officials and experts discuss digital blockade scenarios, undersea infrastructure protection, and cyber-resilience against nation-state threats.

geopoliticsundersea-cablescritical-infrastructure+2

Voting Village·44 min

  • DEF CON
  • Policy
  • Date: Aug 2025
  • Location: Las Vegas

Moore · Young · Baggett

Applies the military CARVER targeting and vulnerability analysis matrix to evaluate systemic risks and physical attack vectors across the US election system.

voting-machinescritical-infrastructurethreat-modeling+2