[EAI 국제 컨퍼런스]

YouTube 링크 : https://www.youtube.com/watch?v=1JslytptbwE

동아시아연구원(EAI)는 12월 11일과 12일 “코로나19 이후의 안보 도전과 대응: 기후변화, 감염병, 경제안보 및 사이버 안보” 국제 컨퍼런스를 개최하였습니다. “사이버안보 분야의 갈등과 협력” 세션에서는 일본의 2022년 국가안보전략 개정에 반영된 사이버안보 전략을 소개한 츠치야 모토히로(Motohiro Tsuchiya) 게이오대 교수의 발표, 한국이 직면한 사이버안보 위협에 대비하는 전략을 모색한 김소정 국가안보전략연구원 책임연구위원의 발표, 사이버 인지전의 특성 및 대응 원칙을 제시한 윤민우 가천대 교수의 발표가 진행되었습니다. 각 발표에 대하여 유인태 단국대 교수, 박용한 한국국방연구원 선임연구원, 차정미 국회미래연구원 연구위원의 토론이 이어졌습니다.

■ 담당 및 편집: 박한수 EAI 연구원

    문의: 02 2277 1683 (ext. 204) | hspark@eai.or.kr

영상 스크립트

good afternoon uh it is my honor to be here and especially it's a great opportunity to learn about this uh field uh as I just have been introduced that I'm not an expert on this issue even though I'm the uh the I'm I'm studying about the North Korea and definitely the Cyber area is one of the most important areas lately so I do have a some interest of this field by the way uh today we have a session three that is conflict and cooperation in cyber security we have a 90 minutes and it means that we don't have enough time we

have a three presenters and also three designate discussions so I think I can give you the 15 minutes each for the presentation and the seven minutes for the designate discuss I heard that the organizers they are preparing some kind of s post so they are giving sign that 3 minutes left and one minutes left and then ask you oh here you go and ask you to finish up your presentation or discuss okay and um I'd like well first we are going to have a presentation and designate discussant and then if we had

time I'd like to open to the floor and to get some questions among the many participant here okay without any further delay I'd like to ask uh Professor Moto suchia from the K University to make a presentation about the Japan's respond to cyber threat in East Asia please welcome him with a round of applause uh thank you very much for a kind of introduction so I'm Mia from K University in Japan but actually I came from Busan today so I spent two nights in Busan and had a wonderful food and getting F and F so thank you very much

for wonderful uh Korean culture so I want to talk about um Japan's response to cyber slats I'm not a Korean and no a North Korean expert but I'm following cyber issues these days oh no so uh just 30 years ago um um the internet was something like this so I hope you remember the Mosaic for browser so it was great um things but so I'm always saying so 3D is happening 3D means that so deeper darker and um dirtier so cyers space is becoming 3D and 3D this state so um July 2009 there was a massive cyber deos attack against

United States and South Korea so it was big shock for me and so um Korea is neighbor uh of Japan so we might get something similar uh against our critical infrastructures but it was just a beginning of the Cyber issues um at that time and in March uh 11th 2011 it was a big big day for Japanese people so everybody knows where they were uh on this day so there was a massive massive um earthquakes and tsunamis so um a lot of lives were lost on that day and after and so this is a a photo of the my mother's Hometown in Fukushima so my

mother passed away many years ago so she was not affected but my family so my mother's family so relatives were affected so it was um my personal issue for the As and tsunami so but I want to thank the Korean people you helped us very much but we found that very very bad guys uh in the um world after this uh just 20 days uh later um we found that um um cyber attacks happened um broke out against Japanese government so um the government officials found that email titled uh yesterday's radiation level we are worrying about Fukushima

nuclear plant at that time so radiation is all over uh there so it was quite natural for the government official to open up attachment of the email but it was customized virus was included what means customized so the attacker checked the every antivirus software so they found that the the their virus was not detected at that time and they uh the government official opened the attachment and so the a lot of information was stolen from the government server by remote it was big shock for us and six months after that

September 2011 so we found that Mitsubishi heavy Industries was H so mitsubish heavy Industries mhi is the largest military Constructor in Japan so a lot of the military technology might be stolen and so we have a joint um project with United States um military contractors so American Technology might be stolen too it was a big shock for us it's a big scandal in Japanese society and December 2014 it's a uh connected to the North Korea so there was a movie titled the interview so it was not um um um viewed in Japan

but so there are some U viewers in the United States and so the North Korea was very angry with that so um um Sony Pictures employees went to office and turn up the computers they found this picture on their screen it was hacked and so the the a lot of information was stolen from the Sony pictures um um servers in May 201 um 15 we found another incident in Japan so Japan pension service was hacked as Korea so Japan is an aging Society so older people have more political power so they were very angry where is my

pension money so money was not stolen but just records were stolen but it was big big Scandal again in Japan society and so we found that more than 1,000 organization companies government um and so universities were hacked at the same time so the huge massive scale of cyber attacks were coming to Japan at that time and March 2017 so the New York Times reported that so North Korea was hacked by the US um cyber command uh to disrupt their missile launches I don't know this is real or enough but it's

kind of uh Hollywood movie thing so uh the North Korea might be disrupted by cyber attacks to test um their missiles what we are doing in Japan so 2018 um uh prime minister AB at the time made a speech at the National Defense Academy he said um um I cannot see it so um nowadays having an advantage in new areas such as cyberspace and outer space is of vital importance so um it was the first statement of the political leaders we must do something uh in cyber security in military area before that we try to

defend our private sectors and government Ministries we are just defending uh our uh systems but so prime minister abet says we have to do something more in cyber space and out space it was um um the topic of the Cross domain Warfare so we are not fighting in on the ground on the in the sky or on the sea only so the um um domains are connected each other so cyberspace is covering everything so we have to uh think about the importance of cyberspace we are dependent on cyberspace that's why we have to defend

cyberspace too then we published National Defense program guidelines in December 2018 it says if somebody attacks Japan critical INF infrastructures might be affected after that we can do Counter Strike in cyber space it's it's stupid for you but we are stick to the defense oriented policy for many decades we do not start a war at all so but in cyber space if somebody attacks what can we do so we didn't know so we are just made it clear so we can do Counter Strike in cyber space that's a one step further in

Japanese policy after that so uh prime minister kishida came in and he said uh he want to revise National Security strategy National Defense program guidelines and Midterm um defense program so we call three documents for defense policy and it was um the first the um the 2018 National Defense program guidelines will be would be renewed in 10 years but he didn't say so 10 years is enough so he said we want to revise it in five years so the situation is changing changing in the world that's why need we need to um

um uh reshape our defense uh policies and after that after his speech so we saw the um Russian invasion of Ukraine it was big shock for us then we realized cyber space cyber defense cyber security is very very big um issue uh in the defense of our country and then we had a national security strategy um just one year ago and in this strategy we made a new term it's not new term actually but we are calling cyber security cyber security in previous documents but we said um cyber anzen it means cyber National Security in the

English documents the same term actually but in Japanese language is very different so we are stressing um National Security more so it's U one step further again and it's says um the response capabilities in the field of cyber security should be strengthened equal or surpassing the level of leading Western countries I was so shocked with this words are you really sure we can go surpass the United States United Kingdom Israel impossible that's my first response I asked the one of the political leaders are you really sure we

can suppose the United States he says oh no maybe it's not good to say but so we should make a higher goal that's it so but we are struggling to um raise our capabilities the key term is active cyber defense so this term is um everywhere in Japanese cyber space policy these days and what does it mean so Japan will um introduce active cyber defense for eliminating in advance the possibility of serious cyber attacks in advance what does it mean so the United States has a defend forward policy so they are trying

to stop cyber attacks before something happens so they are penetrating into enemy's Network in the peace time so they are watching you they are watching them then if somebody starts cyber attacks against United States they will stop in their location nothing happens that is active cyber defense in the United States can we do that in Japan it's quite difficult because we have the Constitution we have the telecommunication business law those kind of things um prohibiting do something in peace time

in the emergencies we can do Counter Strike but in peace time what can we do that's a big discussion now so the government is trying to organize an expert group um uh summer this year but they failed they couldn't organize a expert goou I hope we can do it next year but we are not sure it's a big big discussion and they have to reorganize the government agency too we call the nisk NC I hope we can do it but we don't know then so um if we have a higher capabilities we will have the multi layered International coroporation one

is Japan um and the United States and second one is quart um and so we will have India Australia and United States and of course we want to have a good relationship with um uh Republic of Korea so Japan U Al and United States cyber uh uh consultive body has just started we want to cooperate with you and so Japan NATO cyber dialogue is also happening so we want to enlarge our scope and we want to have higher capabilities to defend us from the malicious attack from the North Korea China Russia and other uh malicious

actors so um are we really bad in cyber security so we have good evidence is we uh survived G20 Osaka Summit in 2019 and we had a World Cup rugby in 2019 and we also had um um Tokyo 2020 Olympic and Paro Olympic Games and we had also um G7 hirosima Summit this year we survived these Mega events in cyber space and the physical space I hope we can um defend our country and the wall from the malas people this is my last slide so Japan's response to cyber slits so first one is improving Japan's cyber security this is urgent

urgent um um policy agenda these days second one so active cyber defense how we can have it so uh we want to learn from the uh Korean government too and the US government other governments too and so they finally um we have multi-layered internation um um um partnership this is key for uh us and so we want to share our um um uh intelligence and information and data to defend uh ourselves uh thank you very much for your time thank you um professor sushia and next uh I'd like to invite uh Pro Dr Kim So Jong from The

Institute for National Security strategy and she's going to make a present presentation about the malicious cyber threat from dprk implication for R so you sitting there okay not come to the podium okay go ahead thank you okay thank you uh Professor P um I'm very honored to be here and I'm zun from Institute for the National Security strategy I've been involved in this field like more than 20 years and it's great to see you again you again professor in like two or three years so uh I want to talk about the milous from

dprk and I will definitely uh talk about the implications for RK and maybe um I will not going to talk about the the what we've been through for more than 20 years in Korea and what we are trying to revise through our national cyber security strategy which was published in 2019 and it is under reviewing right now and we are also definitely talking about the active cyber defenses so maybe it is a little bit different from the the concept of us different forward orun forward operations but still Korea also

talk about the active cyber defenses these days so I will not going to talk about that one but I will more focus on the how we are doing in in multi-layered international partnership perspective so what can be done in cyber diplomacy perspectives Concepts so let me start the north korean's emergence as a cyber STS from its strategic use of cyber operations to generate funds and evade sanctions and Advance its political goals the nation has invested heavily in building a sophisticated cyber warfare capabilities and several

key characteristics makes is cyber activities particularly dangerous so North Korean Cy operations are orchestrated and supported by the state it is know that reconnaissance General Bureau oversees these activities utilizing specialized unit like buau one to1 and St sponsor the hecko group like lerus group so these characteristics distinguishes is slightly from other countries a little bit different way so with International sanctions limiting its access to Global Financial systems North Korea turned to cyber crime to

obtain funds so they have engaged in various cyber activities like hacking Banks cryptocurrency theft and conding conducting ransomware attacks to generate revenues estimated in billions so North Korean makers exibit exhibit Advanced capabilities utilizing techniques like Spar fishings and bware deployment and social engineering to infiltrate targets so AP groups are known for their persistence Advanced Techniques and targeting of critical infrastructures government and financial institutions and cryptocurrency

exchanges th the North Korea cber activities have caused a significant economic damages globally so recently North Korean cyber operations transcend the borders posing a threat to institutions and individuals worldwide their ability to conduct operations from remote locations allow them to remain Elusive and difficult to track the combination of state sport support and advanced technical expertise and financial motivations and Global reach makes North Korea cyber threat particularly dangerous their activities

not only target financial assistance but also oppose a broader risk to intelligent security stability and critical infrastructures moreover the shift toward the cryptocurrency enabled crime has Pro provided them with a decentralized means to finance their agendas while evading traditional Financial restrictions and monitorings so concerns have Arisen Also regarding the emergence of a new political alignment and potential escalation of competitions as North Korea demonst a close alignment with countries such as

Russia Iran and China so North Korea supported Russ Russia during the r Russian Ukraine war while current concurrently hacking into a Russian missile development forms also North Korean IT workers have spy from UAE and Russia so various threats including the securing of technological technological competitiveness through intellectual property theft and influence operations capable of uring inducing Society unrest and are being observed so I will not going to talk about the the Korean policies and institutions and I will

talk more about the in general how we uh responded in inter with the concept of international cooperations so overall the South Korea cyber diplomacy has been strongly driven by the broader National interest caused by its relations with the depar so the bi cyber dialogue with the US is the most important one given the South Korea's dependence on US security guarantees the US states in the stability of the Korean Peninsula and the higher high sophistication of us cyber capacities the United States TRS

cryptocurrencies to prevent North Korea's stft and unlawful use employing measures such as prosecutions and criminal justice corporations including SS seizures additionally action Encompass trouble banss and asset freezes and trade restrictions cations of development Aid and security support and arms export prohibitions financial transaction bans and diplomatic measures like a protest condemnations and pursuing International Organization sanctions diplomate uh diplomatic explosions or Embassy closures to facilitate this the

countering America's adversaries through sanctions Act was enacted and also the executive order 13694 and 13757 designated malicious cyber activities as a national emergency and authorized sanctions while executive order 1372 specifically outlines comprehensive prohibitions and sanctions on dealing with the North Korean government following these laws and executive orders the US Department of the treasury consistently unn ounces sanctions measured to thwart North Korea's theft of virtual assets the

office of foreign asset control within the treasury has been prohibited the use of a tornado cash last year which is a cryptocurrency mixing service and individuals violating the US government's ban on travel to North Korea and engaging in cryptocurrency related academic conferences in North Korea or providing cryptocurrency related an knowledges to help North Korea circumstance sanction s have faced the imprisonment sentences imposed by the US government so following the 22nd and 20 22nd RK us Summit which will address the

North Korea's militia cyber activist for the first time both Nations made substantial commitment to counter North Korea's elicit gains from its foreign IT personnel and to prevent sanctions evasion through cryptocurrency theft they prevent North Korea acquiring resources necessary for its nuclear and missile programs this resulted in a joint government advisory by the Ministry of Foreign Affairs and the National Intelligence services on December 8th 22nd urging domestic companies to exercise the pro prudence

and enhanc identify ver identity verifications measures when engaging IT personnel who may conceal their North Korean nationality and identities concretly North Korean individuals have seven entities have been singled out as the initial independent sanction Targets in the realm of cus activities South Korea and the United States have jointly designated a North Korea National as sanction Target due to their involvement in North Korea's financing of weapon of mass destructions and through illegal cyber

activities the 202nd AR us Summit brought a further deepening of a cooperation in cyber security leading to the Declaration of a strategic cyber security cooperation framework in 203 this framework confirms the principles articulated during the 22nd AR us Summit under scoring the significance of cyber security as a national policy and strategic priorities so its primary objective is to advance an open and collaborative approach aimed at ensuring the security and integrity of the internet and cyber space so

building upon these initiatives the 23 strategic cyber security cooperation framework distinguishes Itself by its commitment to enhancing cooperations across technology policy and Str strategic do domains while fostering trust it articulates South Korea's positions within the comparative landscape ensuring the execution of follow action is imperative to consolidate the achievement of this framework 23 trial Summit in Camp David in August committed the three to plan to coordinate Regional capacity building

efforts to asan and Pacific island countries to ensure that they are Mally reinforcing and maximally beneficial to our valued Partners including through capacity building efforts in cyber security and financial integrity and our new tral Maritime security cooperation framework so the AR us and Japan all three of three countries have their own Indo Pacific strategies and the three Indo Pacific strategy talked about the cyber security capacity buildings and in addition that uh the three countries expressed the concerns

regarding the dprk's illicit cyber activities that fund is unlawful wmd and ballistic missile program so we announced the establishment of the new Tri L working group to drive our cooperations including with the International Community to combate thek cyber threat and block a cyber enable sanctions evasions so inaugural meeting of the tri working group among the United States Japan and South Korea on countering North Korean cyber threats took place in Tokyo in last July so representatives from three conations

evaluated the collaborative achievement in curving illegal cyber activities identified as primary funding sources for North Korea's major nuclear and Miser development they anticipated that the formation of this working group would further strengthen the coordination among the Diplomatic authorities of the three countries and the last part is about the implications for Aran and the future efforts so through the Russian Ukraine and ISL Hamas Wars the potentials for stors to engage in cyber warfare has

emerged with the cashing out of stolen virtual assets that taking place in Friendly Northern Korean countries such as China and Russia given these factors considerable imagination is required to anticipate how North Korea will persist in its attacks moving forward as a new business models North Korea's potential to conduct hacking operations not only causing Financial damages but also engag in activities such as Espionage and proxy Warfare remains High experts from diverse Fields need to convene to develop predictions and

scenarios for North Korea's next threatening activities it's imperative to devise corresponding strategies and contemplate education and training programs toor to respond effectively to these threats so this negotiates collaborations between private sectors and international partners the governments worldwide should collaborate and coordinate efforts to track and counter North Korean cyber operations establishing joint tax forces or coalitions dedicated to addressing these threats could enhance Global responses

so in this regard our two-year long efforts from both South Korea and the us to have joined cyber working group on IT personnel and cryptocurrency Heist has been successful engaging in diplomatic dialogue and applying diplomatic pressure on North Korea can encourage the nation to adhere to International Norms in cyber spaces the International Community should consider rigorously enforcing targeted sanctions on North Korean entities engaged in cyber crime and cryptocurrency DEP this will restrict their access to Global

Financial systems and H hinder their illicit activities the shift of cash conversions points to AR un touched by the trag financial sector causes another restrictions on their approaches now so providing support to countries with least developed cyber security infrastructures can strengthen their resiliences against North Korean cyber um threats so this could involve sharing expertise providing technical assistance and enhancing cyber security capabilities South Korea recognized the global remit of cyber and is therefore

working with the World Bank where intern American development Bankers the enhancement of South Korea cyber capabilities not only serves to fortify the capability in tangible sense but also aligns with the country security objectives Le developed and developing nations in South Asia have actively sought Korea's expertise in various faes including policy formations legal framework development and training and capacity buildings so these countries are eag to leverage Korea's ensive experience and knowledge sharing by

extending support for cyber capacity building through avenues like development cooperations or official development assistance programs South Korea can make a meaningful contributions to raising the nation's cyber secur standards focusing efforts on capacity building activities are targeted in southern Asian countries and other nations where North Korea exploits it infrastructures and deploys Personnel is likely to ELD the par particularly effective res for both sides and finally the collaboration between the private

sectors and the International Community as a pivotal in mitigating North Korea's cyber activities by combining efforts sharing information encouraging enforcing regulations and applying the Diplomatic pressures there's a greater chance of reducing the success of North Korean cyber crimes and detering their malicious activities I'm done here thank you Dr Kim soj and next uh Professor yumu from kachan University and he's going to talk about the future of a cyber warfare and emphasis on Cyber cognitive Warfare

please today I'm going to talk about uh future of cyber warfare uh especially uh emphasizing uh cyber cognitive Warfare uh many people wondering uh in the upcoming election in this country uh there might might be or might not be fallen uh uh information uh interference or influence operation uh against or targeting against our uh general election or uh if someone ask me uh I would say there might be uh strong evidence they might do it because uh for this entire year uh year 2023 uh I I was uh doing research on

this uh uh issues and this you know thanks God in this year is uh about to end and uh I'm uh uh now uh wrapping up my research then I found some uh evidences uh on uh foreign commenter armies operating in our uh internet uh uh because of this uh you know confidentiality I cannot talk about uh uh about I cannot talk about it but you know I just uh want to say there is uh some activities going on so well uh in in in today's world the human beings I mean human brain it can be heck you know when we talk about

cyber security we talk about hacking uh computer systems and information structures and all these uh uh of physical entities but uh you know and and just like uh computers human brains can be hackable but the the the the method is different the humans have emotions no Pride or frustration and jealousy you know all these these our emotions emotions can be used as a back door to infiltrate into human brain and manipulate okay uh as the technology advances on uh the human beings will have more and more uh the method to uh control

human brains such as Neuroscience or you know the the uh brain and computer interface and intervention of uh brain waves then a lot of uh different method uh the countries overseas they are doing research on these Advanced Technologies and they develop military tactics and strategies so uh today we talk about the you know global over hegemonic competitions between countries and countries so nowadays this cyber cognitive operations is used as method to change the games and win the game of this hegemonic

competition there is a POS possible because when we go back to clait clait defines were is enforcing one's will against the other the physical violence has been used to enforce our will against the other by killing them or threatening to kill them but if theoretically we just change the other's brain way of thinking we don't have to use physical violence so that is possible it doesn't matter you define that as world or not now the bottom line is we can change the others wills and thinkings so that is the importance of

this uh cyber cognitive Warfare and now it's it's it's possible so the country especially major countries they now use uh this method for their uh the games winning their games and season ping ones emphasized cyber space cyber domain is strategic domains and culture and and influence operation can be major weapons if we we look look at Chinese strategic support force their domain of warfare is space war and cyber war and cognitive war and electronic war and combining together so it's a strategic strategic domains so

basically and there is intersection of cyber warfare including cyber cognitive Warfare and geopolitics of not only Northeast Asia but also the globe then there is advancement of cyber warfare and uh we are observing more and more uh this cyber technological Warfare such as hackings and doos and all these using malicious Court are more and more integrated with cyber influence operations or psychological warfare you know you name it so the Russia was Russia us used this tactic specific tactic is called hack and leak they're

hacking sensitive information and then leaking this sensitive information uh into the public try to change the the opinions and sentiment of the public so it's strategically and tactically combined technological method and an influence operation alog together so more and more we are looking at this int creative uh measures so when today when we talk about cyber warfare we we we we we have to see the two different things at the same time cyber technological Warfare and Cy psychological warfare or cognitive

Warfare you name it so it's now now we have to change our our uh the measures we have to adopt more integrative approach approaches when it's the same when we work with other countries our alliance as well so cyber warfare in South Korea today and uh uh we have upcoming elections but also uh we have uh the public how public thinks and so we make consider and China and and North Korea uh may have strong interest to uh infil ating the our uh the Public's uh cognitive domains and changing their opinions and cultures and

also uh try to infiltrate our election system so the US and and they Define election system is one of these uh critical infrastructure just like you know the power plant transportation system and and and and Centra so I think their approach is right and we have to consider our election system is one of this critical infrastructure so we need to protect this both you know electronically and technically and also uh cognitively as well so uh next thing I like to address is there is a strategic goals and

tactical principles just like you know we can identify uh techniques and tactics and procedures for Cy technological Warfare such as hackings and doos and rmail attacks and we can identify and tactics techniques and procedures for cyber cognitive Warfare I'm working on it and I I I uh specify strategies and tactical measures and steps of operations so influence operation is not just a uh individual isolated uh event it's all related and it's all integrated so there is a certain rules of steps so

it's very shredly uh operated so we can identify ttps and we can prepare for them that's what I found so future of cyber warfare in Northeast Asia so what do we expect more well and this kind of situation uh will be uh uh normal I would say New Normal and so actually China and Russia they see the War and Peace is not definitely divided uh time frames they see War and Peace as a spectrum continuous Spectrum so they don't uh uh clearly distinguish so it's a gray area war and and peace is is is a intermingled and

existing at the same time so cyber warfare cyber cognitive operations is more like this with or without conventional word this thing goes on it will be threat you know just like Russia uh before they invaded Ukraine they attacked Ukraine with cyber measures and they initiated the 2022 Ukrainian invasion in this time of War they also used cyber measures so cyber measures can be used both War times and peace times so we have to change our perceptions H in the future there is no clear distinction between peace and War

so it's a combined gray area so basically uh the Cyber operations you know we have to prepare so I would name War like peace or peaceful Warfare so it's a coexistent so nowadays SNS is like uh used you know uh military units SNS SNS you know account is weapons and media also weapons and they are armies but in the future H we're going to see more and more drastic uh the phenomenon using new Advanced Technologies so brain science and and and cyber technology engineering robots and iots will be all

combined this is serious issues without real world we can be invaded and we can be conquered so we need to prepare for this and and and we need to emphasize on this new type of warfare and thank you thank you um Professor Yun next we have a three of course excellent discussions and each will have 7 minutes and start with Professor u in from tanuk University hi I'm in U from Tang University and first of all I'd like to thank uh president sonor for inviting me here um this a wonderful opportunity and

also giving me this uh I I uh I'm much pleased to have this uh role as a discussion at this panel uh filled with lots of interesting insightful uh papers and also presentations I uh my role here for today is especially uh discussing uh What uh Professor um um um uh on his his paper about Japan's um New U cyber security strategy Trend or um orientation um while reading the paper uh I have have much enjoyed his writing U because partly because I U I've been also working on um um cyber deterence and cyber operations uh in uh various

countries mostly um us UK Australia uh New Zealand uh and uh Canada's cyber security operations and also um uh I'm also deeply concerned uh and interesting in how South Korea would develop its own uh cyber operations and cyberis strategy and I was uh pleased to hear that Japan is a step ahead U um sort of uh uh I think giving uh push a little bit of push to maybe J uh South korean's uh relevant audiences um but uh you know as uh soj mentioned that uh South Korean uh policy makers are also working on that

topic as well so sooner or later we will see some kind of um outcome uh so um so um I figure my role is more beneficial or fruitful if I ask more questions uh rather than comment on your uh uh field because you're Japanese specialist and cyber SK specialist uh much more than anybody here I would guess so uh my first question uh and hopefully I uh get all the answers to all the questions uh you know given the limited time uh my first question is so um uh which country is the gravest threat to Japan especially uh in terms

of cyberspace in cyers space uh I bet you know this question sounds like a no-brainer but uh you know China uh or either North Korea right but uh it's important to figure out and specify which country is more uh Graver okay so uh threatening to Japan because it might uh determine or it might uh characterize uh the way in which Japanese policy makers would form or formulate um cyber operations or cyber deterrence strategy so because uh again U you know the way ways in which Japan uh would address

cyber threats uh um uh will DET determine uh how to develop uh cyber cap uh capabilities uh because now Japan is trying to go beyond just defense position right it's it's going going to it's going for uh offensive capabilities if I figure right uh so you still use Japan still use active defense although I figure I think that this is more closer to offensive uh capabilities and theany operations uh so you also mentioned in the paper that uh you know you can't J Japanese fing policy makers can refer to hunt forward the concept

proposed by the US DOD right so which is more offensive uh rather than defensive so um but you know in order to develop offensive capabilities you have to be very careful in what capability would you like to develop because first of all it takes money it takes lot of money and time and in other words resources and you know defending cyberspace itself it costs a lot of money and then you your country is going to add offensive character uh to your cyber security strategy uh but you know uh as uh Professor mentioned you know the ways of

cyber uh offenses are very very diverse right uh information uh operations where just simply uh disruption or network of of disruptions and things like that so uh it also it all depends on which country do you think is more threatening right um so if it's uh if Japan feels North Korea is more threatening then Japan would not have much to do because North Korea Society is not much wired right then what kind of cyber offense capabilities are you talking about if it is China that Japan is targeting it then what

kind of aspect do you like to use or leverage to influence China right to to prevent China from what kind of things right so that's that's first uh question um the another question is about public private relationship uh you said that in the one of the stalking or the shocking changes that happen that happened in December 2020 National Security strategy is that the terminological change right the it used to Japan used to say J cyber security but now it used cyber National Security what do you mean what what what

what do you make of that change right so do you think that Japan is ready to sort of override social economic interests uh in in in the interest of National Security interest do you think when uh these two interests Collide and the National Security interest would would obw them uh so that's one thing so and then what kind of sort of public private uh coordination mechanism do you imagine to happen right uh do you think uh something like cesa in the US would happen in Japan or what kind of uh again

coordination mechanism would be there in ch in Japan the near future lastly because you're presenting in South Korea I cannot but be asking this question so what kind of international cooperation with South Korea do you think proper especially uh as Japan is moving toward Now new aspect of cyber security uh cyber uh uh capabilities right so Japan is trying to upgrade or develop cyber um offensive cyber capability now what kind of what kind of cyber activity do you think Japan could would like to

cooperate with South Korea okay that's all thank you Professor U and next uh Dr P Yan from the Korean Institute for defense analysis so you also have seven minutes for for for frame e for r for for for thank you Dr P and then last of course not least and Dr CH ji from National Assembly future Institute please thank you so much I learned a lot from the professor Jun article I think that this is very kind of new I mean topics for the cyber security because like I reviewed this literature on the Cyber

cognitive Warfare I think I found very little on this topic so I think cyber cognitive Warfare is very new topics for the cyber security issues but I think that probably I think the cognitive Warfare issues is very traditionally very long topic on the kind of like a battlefield so I think first of all I think we should focus on the kind of cognitive welfare because I mean cognitive Warfare with new space and new technologies like cyber space and cyber technology so cyber cognitive welfare should firstly

firstly mean first I think cyber cognitive Warfare should focus on on analy analyzing the kind of Co the nature of cognitive Warfare I think for example I China has kind of long history about like a cognitive Warfare because CH traditionally it's a lot of people a lot of scars knows already about the K this art of word traditional concept of Chinese cognitive Warfare is kind of on winning the world without fighting this is kind of concept of Chinese traditional cognitive Warfare and this currently mean Chinese pla has adopted

this kind of like cognitive Warfare because I mean they adopted the kind of a Doctrine about like a three Wars me three battlefields and kind of sanan they included kind of propaganda like mean public Warfare public opinion Warfare and the second one is like psychological warfare and the third one is that kind of like mean low welfare this is kind of like a new kind of cognitive welfare of Chinese pla but I think mean the the the target of the Chinese paa Doctrine is the winning informational Warfare but with chinaese

concept of information Warfare includes the three domains and physical domains and information domain and finally the cognitive domains but pla has argued that cognitive domain is Ultimate domain for the winning the information world so I think Chinese me pla has modernized kind of like capacity for cyber cognitive Warfare recently so I think that we knew we think I think that we have to focus on kind of nature of cognitive Warfare with the cyber space and with the cyber technology and second one is that I mean uh mostly mean

Professor yun's paper covered kind of human dimension of cyber cognitive Warfare but I think that cyber cognitive Warfare has two Dimension First Dimension is a human Dimension and human Dimension is that like kind of in cyers space with the Cyber Technology uh influencing and targeting human cognition so mean recently we saw a lot of kind of mean cyber cognitive Warfare targeting the human cognition kind of like propaganda where kind of misinformation operation or cyber hacking those kind of things I mean in

directly influencing the Cyber I mean human cognition but like in the long term or midterm I think that the most important thing is that like must Dimension second dimension is must Dimension because like the Warfare future warfare will be most more autonomous and AI based distance making process in in the kind of AI based future warfare we need to focus on kind of like second dimension mean I mean like must Dimension because I mean a lot of kind AI based distance making AI based Ware mean includes a lot of like

cyber hacking where they they manipulation or kind of like intercepting the data processing to influence or hacking the kind of like mine learning or machine dist making so actually mean in the future I think AI Warfare needs a lot of kind of like deterence a lot of kind of like operational tactics to defend those kind of like cyber cognitive Warfare targeting and influencing those kind of mine mean Dem menion so I think I mean in the future I think cyber cognitive Warfare should be it should Encompass

the but not only the human Dimension but also like mine Dimension so I think we need more systemic and kind of like very structural approach to the Cyber cognitive Warfare with like a shortterm and long-term Dimension and I have the two two question for the professor Jun I mean you mention about like a c cognitive Warfare but like you I mean selected some cases China and North Korea but you didn't really explain mean what technologies China and North Korea uses and how these work how this impact

on the target States I mean you mentioned that South Korea and Japan but so if you have like detail kind of case studies about those kind of like what technology uses used or how this works and how this impacts on the kind of Target stage cognition so if you have in detail information please give us kind of like case studies and the second second question is that about like South Korean strategy because let mean South Korea is kind of falling behind in confronting National Security challenges at the intersection of technology and

cognition so to catch up or to address this emerging threat what do you think are the most important tasks that South Korea has to develop and Implement in order to deal with this kind of cyber Cog R thank you so much all right thank you Dr cha and before we are going to give a time to respond to these excellent questions and if I may I will ask each one of you to my own question just one each of you and first about um professor tsia suia and you talking about the South Korea Japan and United States trilateral cooperation

and very lately last week the um National Security advisers and the counterparts and they met and they introduced the cooperation in the Cyber the area but still it seems to me that the three countries are slightly different emphasis I mean South Korea is definitely talking about the North Korea we I mean South Korea haven't talked about the China officially but Japan and United States it seems to me the main targets of course is China so how to have a little bit differences among the three countries can be adjust and have a

same goal and that's my question to you and uh to the doctor Kim soong and you of course didn't mention about China we basically of course you the Titleist about the North Korea but still as I already mentioned that South Korea we haven't mentioned about the China but China is a very serious threats in this field especially so-called disinformation and there's many countries um they are already talking about the possibility of the get intervene many elections next years and so what's the South korean's position at

this moment or the perception about the China's uh threat from the China and uh to the professor Yun and minu and you didn't mention about you just briefly mentioning about the possibility of this upcoming our general election that April by North Korea and North Korea has been very notorious for past several decade they are more or less intervene the South Korean election general election and the presidential election but lately they are a little bit different and at the time North Korea usually have some

provocation and but nowadays that is cognitive Warfare so I see there some uh difference Trend lately so what what do you think about that and how North Korea get intervene this upcoming general election thank you and what means the uh cyber and theno National Security so we say so we want to defend our systems we have to defend our properties um um until now but so maybe we are engaged in um cross domain Warfare in the future as we are seeing in Ukraine as we are seeing in Gaza so um many people are non-state actors too

are involved in cyber warfare these days but can we really defend our systems our nation our um um um Pride over country so um maybe they are trying to um make us lose our faces so it's it's it's kind of part of the cognitive Warfare it might happen in the future future so everything can be targeted so everything we have to defend that's the um very difficult thing and so the third question is what kind of Corporation we are uh uh expecting from uh Republic of Korea so first one is the um sharing of the threat groups

information so we are talking about ap43 lazos or F be bear and many many cyber actors uh in cyber space but we want to identify who are there who are attacking us who are attacking you so if we combine so we um compare uh those information intelligence we might have a better picture of the cyers space and the second one is uh we want to share uh um um uh the understanding of uh thre meth methods what kind of measures are used to attack you steal something or affect something so of course um cognitive Warfare is another aspect for

us so um I'm going to typ a Taiwan uh next month because they are having the uh presidential election in Taiwan so there might be a very very uh big influence from China so that kind of thing might come to Japan too and South Korea too so what kind of methods they use we want to share and the third one is uh we want to launch coordinated action if possible so we want to stop the malas actors how we can do together so one country's action is not enough we want to coordinate uh such kind of thing and so um um uh uh Professor Parks uh Dr

Parks um final question oh where's my memo um so it's the trilateral corporation so um yeah it's impossible to say so we have Anonymous enemies and so we want to identify we want to do attribution but we still don't know who will be the first attacker to us but we want to have if we us has a higher capability I believe so if they share uh information and we can share information so um we will have a better picture so that's the important thing so the one country's effort not not enough and we need the

coroporation from Microsoft Google and so other cyber security companies so we need a team efforts so cyber security is always uh said that the team sports what kind of good sports good team we can organize so uh that's important thing so we fought in the baseball sport but it's not good so in the cyber space South Korea and Japan must make a coordinated team so that's important thing thank you very much all right thank you in that sense I'm very glad that finally South Korea and Japan can normalize the

relationship okay all right next U Dr Kim uh thank you so much and actually the U Dr parked a little big and difficult questions and also the professor y raised the issu is that how we see our threat how we can evaluate how we can uh make our threat as a a a strategic goal to respon that that is really really big discussions actually so in in Korean cases um the cyber security efforts are usually done by the more by really practitioners not from the social scientist perspectives not by the policy

makers in a higher level or strategy levels they were usually dealt by the practitioners perspectives so more than 20 years or 30 years that they just wanted to defend our networks and recovers if we have any accidents or impacts from certain cyber incidences so those kind of concept is now conflicting how we can understand how we can make our strategy in a more understandable way in the all around the world so those kind of questions you raised it before and the the the professor you raised was the

starting point how we can make our national cyber security as a more understandable way so but already we have our national cyber security strategy in 2019 actually it was F drafted in 2017 and it took 18 more month to to Cor coordinated between governments and finally when it published it I actually shocked I personally involved in the drafting the national service security strategy in 2017 and the 2019 version has no mentioning about the DP dprk at all as our threat surprisingly surprisingly it

yeah it deleted actually the first dra has that one but the the the published one has no mentioning about the tprk and then we only talked about we have various cyber attacks from outside not specifically designating or naming a country or some other countries so definitely China cannot be there too so until now we had no chances to publicly say that we are suffering from cyber attacks from China yet we never said that before but definitely we have a text from the China so those kind of things were should be

um dealt with very um strategic thinking so they can be a my you know general answers on all all of the questions which I got for but more specifically maybe I can also said that the uh us and Iraq governments are thinking that the their for like more in more than two years uh after the 2020 Summit we established a working group cyber working group to deal with the IT personnel from the North Korea and also the dprk's cryptocurrency thft and they gathered like more than four or five times in here in DC and they sanctioned

a lot of mixers or some the ice the service providers and the person persons and the entities and even the universities to have the raising the skilled personnels so those kind of activities were the most important and most practical way to cooporate each other so those kind of things also can expand to with the Japan because that in Japan there's a moral defectors or the North CR nationalities in In Living in there right so maybe they were going to have some more information in in in human human s so there can be another

options for us to and also the regarding the competition among the this Western countries and then the other parts so in Norm settings or the understanding or app applications of implementations of the international laws and the sanctions that way it is not possible to have the good answers for how we cannot deter from those kind of activities but still know we are agreed that we we're going to to protect our values and the older values will be the basic uh starting point to setting the DOR building

processes so they can be a not a good answers but you know not just as a Defender but as a contributors then we were going to have more roles in the world I guess and what can be our sustainable cooperations like an expanding more PR medic way that can be a a small step but maybe change a little bit more in the later and then what can be our priority no everything is priority so we are not sure that how we can understand the cyber security issues in a a traditional way or that the traditional activities all the tra traditional

activities and security issues can be converted into the cyers space wayes we are not agreed in that concept itself so maybe that understanding and then discussions about how we see the cyber security issues as one of the National Security issues or the the basic foundational things as the National Security issues those kind of conversations we discussions also will will be needed and then finally um still the about the attributions or some other areas among uh countries for the corporations we need some kind of um

protocols to verify the the credibilities and how we can be sure what has been done and what has not been done and how we can understand their intentions the intentions cannot be coded the intentions cannot be understood in a visible way so maybe we need this kind of a um Corporate Way and inner coordinated actions and then the lastly I would like to uh make a example as for further cooperations in R&D maybe so in 21 we developed the when I was in the National Security research institution before I mov into the

Institute the National Security strategy we developed our methodology to how we can judge the evaluate the impact of from a certain cyber incidences so if we have higher impact then we our proportional response will going to be the higher but if we have little impact then the the respon should be under not that serious so those kind of things the those kind of common criteria can be developed by uh among the three countries and among other likeminded countries then the those kind of things also can be

eight steps for coordinated corporations so I stop here thank you all right thank you uh Dr Kim soong and the next Professor y you have about seven minutes yes I kept the time uh so uh because uh two uh questioners uh they uh uh jointly emphas focus on uh the techniques so I will uh address the answer Al together uh basically uh based on my research uh for uh whole year I can uh now uh uh specify uh the different uh techniques uh between uh uh North Korea and China and and then there's also difference uh

the Russians so this countries and Russians and Chinese and North Korea and and also us and they use uh different techniques different procedures and and different uh strategic uh course uh when they are doing this uh uh cognitive operations so uh I cannot uh discuss further detail uh because it's a short time and is also very often but I will address this you know uh during the second World War uh when we uh bombing certain targets and and and we just uh you know packed these bombs and uh roded in airplane and

then goes there and just uh pulled bombs because you know at the time uh we had no technology to uh pinpoint uh the targets but now we don't use that you know uh we just uh pinpoint uh strike on the Target because we know all these information and guidances and uh satellite and all these cognitive Warfare or psychological warfare you know whatever you name it it's it's just same you know in the past you know we don't specify targets you know just uh certain uh General populations we go there and we just pull the beer or uh we

just uh you know uh broadcasting uh radios and televisions but now we have Technologies AIS and all these Etc we we can uh specifically pinpoint certain Target The People's uh the individual life stories their are anguishes their frustration and their psychological uh Tendencies so that's why these days uh this uh uh individual information on individual is critical so in Internet we can correct uh a lot of information on certain individual uh through SNS or you know other other uh uh other channels so

we uh Ai and Quantum Computing or all these Technologies we can pinpoint what are the weaknesses of certain individual or certain group of individuals so now cognitive Warfare is more sophisticated and pinpoint strike so it is quite you know uh uh effective so one of methods uh mostly uh the the they use is active measures basically they try to uh uh uh the drive wet between different uh uh groups of populations and China uh uh boosting uh you know in in the black live metal case and they are supporting uh the like you know white uh

supporters uh White and also uh the this black at the same time when they are uh operating uh uh against the Czech Republic China also uh boosted both groups of political uh uh the the groups you know pro pro European Union anti-european Union at the same time so there are number of method so I have three minutes and uh I will summarize all this uh so the techniques can be used used strategic level operational Art Level and tactical level all together strategic levels and history is used it's a narrative and storytelling

and basically use manipulate histories uh from the past and then uh make a deab at present so like uh hukushima you know this uh nuclear water case and this current issue can be distorted and to uh uh make a public belief we are still living in the the Japanese Colonial period This is a manipulation of History so in the Strategic level history is uh shreddy exploited to analyze or understand a current event the operational art reel and there's uh the united front Strate or uh dividing groups and then uh

different uh isolated groups put them together and pinpoint uh common enemy so basically they guas writing uh the gender issues environmental issues climate issues all these different issues all together and you know enemies enemy is my friend principles and and uh the Tactical level all these active measures and driving meas is one of the uh one of the technical measures is uh like this you know make a fake news or disinformation and and uh make a public uh uh exposure and uh through SNS or this this

this procedure is called anchoring bias so implenting bias uh or fake news uh into the Public's uh Minds then they use all this you know you know Source rounding using uh uh the legitimate uh uh Medias and government you know you know in uh government lanking officials speeches so uh wrap it up so time's up so you know just uh we can uh we can identify all these techniques so that is possible and all this further details you know uh you're welcome to uh discuss after this session thank you very much

all right thank you professor meu I feel really sorry about the audience and I couldn't give a chance to ask the questions and also I'm feel sorry because we don't have any break time so you don't have a time to ask personally to this participant but by the way this is the end of session three and uh please join me to thank you for the all the participant participants in session three with round of applause thank you