东亚研究院（EAI）国际会议

YouTube链接：https://www.youtube.com/watch?v=1JslytptbwE

东亚研究院（EAI）于12月11日至12日举办了题为“后新冠时代的安全挑战与应对：气候变化、传染病、经济安全与网络安全”的国际会议。在“网络安全领域的冲突与合作”会议环节，庆应大学教授土屋元洋（Motohiro Tsuchiya）介绍了日本2022年国家安全保障战略修订中反映的网络安全战略；韩国国家安保战略研究院责任研究委员金素贞（Kim So-jung）探讨了应对韩国面临的网络安全威胁的战略；嘉泉大学教授尹玟宇（Yoon Min-woo）提出了网络认知战的特性及应对原则。丹国大学教授柳仁泰（Yoo In-tae）、韩国国防研究院高级研究员朴炯汉（Park Han-yong）、国会未来研究院研究委员车贞美（Cha Jeong-mi）就各演讲内容进行了讨论。

■ 负责人及编辑：朴汉洙 EAI研究员

联系方式：02 2277 1683 (分机号 204) | hspark@eai.or.kr

视频文字稿

下午好，非常荣幸能来到这里，尤其是有机会学习这个领域。正如刚才介绍的，我并非此领域的专家，尽管我研究朝鲜，但网络领域无疑是近期最重要的领域之一，因此我对这个领域确实有一些兴趣。顺便说一下，今天我们有第三场会议，主题是网络安全领域的冲突与合作。我们有90分钟时间，这意味着时间不够。

我们有三位演讲者和三位指定评论员。我认为每位演讲者可以发言15分钟，指定评论员发言7分钟。我听说组织者正在准备某种提示牌，会显示“还剩3分钟”和“还剩1分钟”，然后会请您，请您完成您的演讲或评论。好的，那么，首先我们将进行演讲和指定评论，然后如果

还有时间，我想开放提问环节，与在场的各位参与者进行一些问答。好的，废话不多说，现在请庆应大学的土屋元洋教授就“日本应对东亚网络威胁”发表演讲，请大家用掌声欢迎他。非常感谢您的介绍。我是来自日本庆应大学的土屋元洋，实际上我今天是从釜山来的，我在釜山住了两个晚上，吃了很棒的食物，感觉很好。非常感谢

韩国的精彩文化。我想谈谈日本对网络威胁的应对。我不是韩国人，也不是朝鲜专家，但我最近一直在关注网络问题。哦不，30年前，互联网还像是这样。我希望您还记得Mosaic浏览器。那是一件很棒的事情，但正如我常说的，网络空间正在变得“3D”，即更深、更暗、更肮脏。2009年7月，发生了一起大规模的分布式拒绝服务攻击，攻击对象是

美国和韩国。这对我来说是一个巨大的冲击，韩国是日本的邻国，我们可能会面临类似的情况，针对我们的关键基础设施。但这仅仅是当时网络问题的开始。2011年3月11日，对日本人来说是极其重要的一天。所有人都知道那天他们在哪里。发生了大规模的地震和海啸。那天以及之后，许多生命逝去。这是我母亲家乡福岛的照片。我

母亲多年前已去世，她未受影响，但我的家人，我母亲的家人，亲戚们都受到了影响。这对我来说是个人层面的海啸事件。但我想感谢韩国人民，你们给了我们很大的帮助。然而，我们发现世界上有非常非常坏的人。就在20天后，我们发现针对日本政府的网络攻击爆发了。政府官员收到一封主题为“昨天的辐射水平，我们担心福岛

核电站”的电子邮件。当时辐射弥漫。政府官员打开邮件附件是很自然的，但里面包含了一个定制病毒。什么是定制病毒？攻击者检查了所有杀毒软件，发现他们的病毒当时未被检测到。政府官员打开了附件，大量信息被远程窃取了。这对我们来说是一个巨大的冲击。六个月后，

2011年9月，我们发现三菱重工被黑客攻击了。三菱重工是日本最大的军事承包商，大量军事技术可能被窃取了。我们与美国军事承包商有联合项目，美国技术也可能被窃取了。这对我们来说是一个巨大的冲击，是日本社会的一大丑闻。2014年12月，这与朝鲜有关。有一部名为《采访》的电影，在日本并未上映，

但在美国有一些观众观看了。朝鲜对此非常愤怒。索尼影视公司的员工来到办公室，关闭了电脑，他们在屏幕上看到了这张图片。它被黑了，大量信息从索尼影视公司的服务器中被窃取。2015年5月，我们在日本发现了另一事件。日本年金机构被黑客攻击了。就像韩国一样，日本是一个老龄化社会，老年人拥有更大的政治影响力。他们非常愤怒：“我的

养老金在哪里？”钱没有被盗，只是记录被盗了，但这在日本社会再次引起了巨大的丑闻。我们发现当时有超过1000个组织、公司、政府和大学同时遭到攻击。当时，大规模的网络攻击正涌向日本。2017年3月，《纽约时报》报道称，朝鲜被美国网络司令部黑客攻击，以阻止其导弹发射。我不知道这是不是真的，但

这有点像好莱坞电影。朝鲜可能被网络攻击阻止，以测试其导弹。我们在日本做了什么？2018年，时任首相安倍晋三在防卫大学校发表演讲，他说：“我看不见。如今，在网络空间和外层空间等新领域拥有优势至关重要。”这是政治领导人的首次表态。我们必须在军事领域做些什么来加强网络安全。在此之前，我们试图

保护我们的私营部门和政府部门。我们只是在防御我们的系统。但安倍首相说，我们必须在网络空间和外层空间做更多的事情。这是跨域作战的主题。我们不仅在地面、空中或海上作战。这些领域相互连接，网络空间涵盖一切。我们必须考虑网络空间的重要性。我们依赖网络空间，因此我们必须保卫

网络空间。然后，我们在2018年12月发布了《国家防卫计划大纲》。其中指出，如果有人攻击日本关键基础设施，可能会受到影响。之后，我们可以在网络空间进行反击。这可能对您来说很愚蠢，但我们几十年来一直坚持防御政策，我们从不发动战争。但在网络空间，如果有人攻击，我们能做什么？我们不知道。我们只是明确了这一点，我们可以在网络空间进行反击。这是日本政策向前迈出的一步。

之后，岸田首相上任，他说他想修订《国家安全保障战略》、《国家防卫计划大纲》和《中期防卫计划》。我们称这三个文件为国防政策文件。2018年的《国家防卫计划大纲》本应在10年后更新，但他没有说10年足够了。他说他想在5年内修订。世界形势正在不断变化，因此我们需要

重塑我们的国防政策。在他演讲之后，我们看到了俄罗斯入侵乌克兰。这对我们来说是一个巨大的冲击。然后我们意识到网络空间、网络防御、网络安全是我们国家防御中一个非常非常大的问题。然后我们制定了《国家安全保障战略》，就在一年前。在这项战略中，我们创造了一个新术语。它不是一个新术语，实际上，我们以前的文件中称之为网络安全，但我们说“网络安保”，即英文文件中的“网络国家安全”，

实际上是同一个术语，但在日语中非常不同。我们更加强调国家安全。这是又向前迈出的一步。它说，网络安全领域的响应能力应得到加强，达到或超过领先西方国家的水平。我听到这句话时非常震惊。你确定我们能超越美国、英国、以色列吗？不可能。这是我的第一反应。我问了一位政治领导人，你确定我们

能超越美国吗？他说，哦不，也许不该这么说，但我们应该设定更高的目标。就是这样。但我们正在努力提高我们的能力。关键术语是“主动网络防御”。这个术语如今在日本网络安全政策中随处可见。它的含义是什么？日本将引入主动网络防御，以提前消除严重网络攻击的可能性。这意味着什么？美国有“前沿防御”政策，他们试图

在发生任何事情之前阻止网络攻击。他们在和平时期渗透到敌人的网络中，他们监视你，监视他们。然后，如果有人开始对美国发动网络攻击，他们会在其所在地阻止，什么都不会发生。这就是美国的主动网络防御。我们能在日本做到吗？这相当困难，因为我们有宪法，有电信业务法，这些法律禁止我们在和平时期做任何事情。

在紧急情况下，我们可以进行反击，但在和平时期我们能做什么？这是目前的一个大讨论。政府正试图组织一个专家组，今年夏天，但他们失败了，未能组织起专家组。我希望明年能做到，但我们不确定。这是一个大讨论，他们还必须重组政府机构，我们称之为NISC。我希望我们能做到，但我们不知道。然后，如果我们拥有更高的能力，我们将拥有多层次的国际合作。

一是日本与美国，二是四方安全对话，包括印度、澳大利亚和美国。当然，我们希望与大韩民国保持良好关系。日本、澳大利亚和美国之间有一个网络咨询机构刚刚启动，我们希望与您合作。日本-北约网络对话也在进行中。我们希望扩大范围，提高能力，以防御来自朝鲜、中国、俄罗斯和其他恶意行为者的恶意攻击。

那么，我们的网络安全真的很糟糕吗？我们有很好的证据：我们在2019年成功举办了G20大阪峰会，2019年举办了橄榄球世界杯，还举办了2020年东京奥运会和残奥会，今年还举办了G7广岛峰会。我们在网络空间和物理空间都成功应对了这些大型活动。我希望我们能够保卫我们的国家和世界免受恶意分子的侵害。这是我的最后一张幻灯片。日本对网络威胁的应对。第一，改善日本的网络安全，这是当务之急。

这是当今紧迫的政策议程。第二，主动网络防御。我们如何实现它？我们希望向韩国政府、美国政府和其他政府学习。最后，我们建立了多层次的国际伙伴关系。这对我们至关重要。我们希望分享我们的情报、信息和数据来保卫自己。非常感谢您的时间。感谢土屋教授。接下来，请韩国国家安保战略研究院的金素贞博士发表演讲，她将就“朝鲜的恶意网络威胁及其对韩国的影响”发表演讲。

您坐在那里，好的，不用来讲台了，好的，请继续。谢谢。好的，谢谢朴教授。我非常荣幸来到这里，我是来自国家安保战略研究院的金素贞。我从事这个领域已经20多年了，很高兴在两三年内再次见到您。我想谈谈朝鲜的恶意网络活动，以及它对韩国的影响。我不会谈论我们在韩国20多年来的经历，以及我们正在通过2019年发布的国家网络安全战略进行修订的内容，该战略目前正在审查中。我们也在讨论主动网络防御。也许这与美国的前沿防御或前沿行动的概念略有不同，但韩国最近也在讨论主动网络防御。所以，我将更多地关注我们在多层次国际伙伴关系视角下是如何做的，以及在网络外交概念方面可以做什么。让我开始吧。朝鲜作为一个网络强国的崛起，源于其战略性地利用网络行动来筹集资金、规避制裁并推进其政治目标。该国已大力投资建设先进的网络战能力，并且有几个

关键特征使其网络活动特别危险。朝鲜的网络行动是由国家策划和支持的。众所周知，侦察总局负责这些活动，并利用像Bureau 1-1这样的专业单位，以及像Lazarus Group这样的国家支持的黑客组织。这些特征使其与其他国家略有不同。由于国际制裁限制了其进入全球金融系统的途径，朝鲜转向网络犯罪来

如今，网络攻防技术日新月异，因此我将不赘述相关内容，而是更侧重于从多层次的国际伙伴关系视角出发，探讨我们在此领域所做的努力，以及在网络外交视角下可以实现的目标。朝鲜已成为网络威胁行为体，其战略性地运用网络行动来创收、规避制裁并推进其政治目标。该国已大力投资于构建其网络战能力，并已具备一定的技术水平。

获取资金。他们从事各种网络活动，如入侵银行、窃取加密货币和进行勒索软件攻击来创收，估计收入达数十亿美元。朝鲜黑客展现出先进的能力，利用网络钓鱼、恶意软件部署和社会工程等技术来渗透目标。APT组织以其持久性、先进技术以及针对关键基础设施、政府、金融机构和加密货币而闻名。

交易所。朝鲜的网络活动已对全球造成重大的经济损失。最近，朝鲜的网络行动已超越国界，对世界各地的机构和个人构成威胁。它们从偏远地区进行操作的能力使其难以追踪和捉摸。国家支持、先进的技术专长、经济动机和全球影响力相结合，使朝鲜成为一个特别危险的网络威胁。它们的活动

不仅针对金融援助，还对情报安全稳定和关键基础设施构成更广泛的风险。此外，转向加密货币相关的犯罪为它们提供了一种去中心化的手段来为其议程融资，同时规避传统的金融限制和监控。人们也越来越担心出现新的政治联盟以及竞争可能升级，因为朝鲜表现出与俄罗斯、伊朗和中国等国家密切结盟。

朝鲜在俄乌战争期间支持俄罗斯，同时又入侵俄罗斯导弹研发部门。朝鲜的IT工人还从阿联酋和俄罗斯窃取信息。人们观察到各种威胁，包括通过知识产权盗窃来确保技术竞争力，以及能够煽动社会动荡的影响行动。我不会谈论韩国的政策和机构，我将

更多地谈论我们如何以国际合作为概念进行回应。总的来说，韩国的网络外交一直受到与朝鲜关系的更广泛国家利益的强烈驱动。与美国的双边网络对话是最重要的，因为韩国依赖美国的安保保障，美国重视朝鲜半岛的稳定以及美国先进的网络能力。美国追踪

加密货币，以防止朝鲜的盗窃和非法使用，采取措施包括起诉和刑事司法合作，如资产扣押。此外，行动还包括旅行禁令、资产冻结、贸易限制、发展援助和安全支持的限制、武器出口禁令、金融交易禁令以及抗议、谴责和寻求国际组织制裁的外交措施，外交驱逐或关闭大使馆。为了促进这一点，

《反击美国对手制裁法》得以颁布，以及第13694号和第13757号行政命令将恶意网络活动指定为国家紧急状态并授权制裁，而第1372号行政命令具体规定了与朝鲜政府打交道的全面禁令和制裁。遵循这些法律和行政命令，美国财政部一贯宣布制裁措施，以阻止朝鲜窃取虚拟资产。

财政部下属的外国资产控制办公室去年禁止使用Tornado Cash，这是一种加密货币混合服务。违反美国政府禁止前往朝鲜旅行禁令并参加朝鲜相关加密货币学术会议或提供加密货币相关知识以帮助朝鲜规避制裁的个人，已面临美国政府的监禁判决。在第22届韩美首脑会议之后，会议将解决

朝鲜的恶意网络活动问题，这是首次。两国都做出了实质性承诺，以应对朝鲜通过其外国IT人员获得的非法收益，并防止通过加密货币盗窃规避制裁。它们阻止朝鲜获得其核武器和导弹计划所需的资源。这导致外交部和国家情报院于12月22日发布联合政府咨询意见，敦促国内公司谨慎行事，

并加强身份验证措施，在聘用可能隐瞒其朝鲜国籍和身份的IT人员时。具体而言，七名朝鲜个人和实体被列为在加密货币活动领域的第一批独立制裁目标。韩国和美国已联合将一名朝鲜国民列为制裁目标，因为他们参与了朝鲜大规模杀伤性武器的融资，并通过非法网络活动。

在202届韩美首脑会议上，网络安全合作得到进一步深化，并于203年宣布了战略网络安全合作框架。该框架确认了在22届韩美首脑会议期间阐述的原则，强调了网络安全作为国家政策和战略重点的重要性。其主要目标是推进开放和协作的方法，以确保互联网和网络空间的安全性与完整性。

在此基础上，23项战略网络安全合作框架通过其在技术、政策和战略领域加强合作的承诺而脱颖而出，同时培养信任。它阐述了韩国在比较格局中的立场，确保该框架的后续行动的执行对于巩固其成就至关重要。23项在8月戴维营举行的三方峰会承诺三国计划协调区域能力建设

在这些举措的基础上，2023年战略网络安全合作框架以其在技术、政策和战略领域加强合作的承诺而著称，同时致力于建立信任。该框架阐述了韩国在比较视野下的立场，确保采取后续行动对于巩固本框架的成就至关重要。2023年8月在戴维营举行的三方峰会承诺三国将协调区域能力建设计划。

工作，以支持亚洲和太平洋岛屿国家，确保它们能够相互加强并最大限度地惠及我们尊贵的合作伙伴，包括在网络安全和金融诚信方面的能力建设工作，以及我们新的三边海上安全合作框架。韩、美、日三国都有自己的印太战略，三国的印太战略都谈到了网络安全能力建设。此外，三国对朝鲜的非法网络活动表示担忧，这些活动为其非法大规模杀伤性武器和弹道导弹计划提供资金。

我们宣布成立新的三边工作组，以推动我们与国际社会的合作，打击朝鲜的网络威胁，并阻止通过网络规避制裁。美国、日本和韩国之间关于打击朝鲜网络威胁的首届三边工作组会议于去年7月在东京举行。三国代表

评估了在遏制被视为朝鲜主要核武器和导弹开发非法资金来源的非法网络活动方面的合作成果。他们预计，该工作组的成立将进一步加强三国 संबंधित外交部门之间的协调。最后一部分是关于对韩国的影响和未来的努力。通过俄乌战争和伊斯兰哈马斯战争，国家利用网络战的可能性已经出现，被盗虚拟资产正在中国和俄罗斯等朝鲜友好国家进行兑现。鉴于这些因素，需要大量的想象力来预测朝鲜将如何继续其攻击。作为一种新的商业模式，朝鲜进行黑客攻击操作的潜力不仅造成经济损失，而且还从事间谍活动和代理战争等活动，其风险仍然很高。需要汇集各领域专家来预测和

制定朝鲜未来威胁活动的场景。必须制定相应的战略，并考虑教育和培训计划，以有效应对这些威胁。这需要私营部门和国际伙伴之间的合作。各国政府应合作并协调努力，追踪和打击朝鲜的网络行动。建立专门处理这些威胁的联合特遣部队或联盟可以加强全球应对能力。

在这方面，我们两国（韩国和美国）为建立联合IT人员和加密货币盗窃网络工作组所做的为期两年的努力已经成功。通过与朝鲜进行外交对话和施加外交压力，可以鼓励该国遵守网络空间国际准则。国际社会应考虑严格执行针对从事网络犯罪和加密货币盗窃的朝鲜实体的定向制裁。这将限制它们进入全球

金融系统，并阻碍其非法活动。现金兑换的转移指向了未被悲惨的金融部门触及的领域，这限制了它们的方法。现在，为网络安全基础设施最不发达的国家提供支持，可以增强它们抵御朝鲜网络威胁的韧性。这可能包括分享专业知识、提供技术援助和加强网络安全能力。韩国认识到网络问题的全球性，因此

正在与世界银行和美洲开发银行合作。韩国网络能力的提升不仅能切实加强其能力，而且符合该国的安全目标。南亚和发展中国家积极寻求韩国在政策制定、法律框架开发和培训能力建设等各个方面的专业知识。这些国家渴望利用韩国丰富的经验和知识共享。

通过发展合作或官方发展援助计划等途径提供网络能力建设支持，韩国可以为提高该国的网络安全标准做出有意义的贡献。将能力建设活动的重点放在南亚国家和其他朝鲜利用其IT基础设施和部署人员的国家，可能会为双方带来特别有效的结果。最后，私营部门与国际社会之间的合作是减轻朝鲜网络活动的关键。通过共同努力、共享信息、鼓励和执行法规以及施加外交压力，

我们更有可能减少朝鲜网络犯罪的成功率并阻止其恶意活动。我讲完了。谢谢金素贞博士。接下来，请嘉泉大学的尹玟宇教授发表演讲，他将讨论网络战的未来，并强调网络认知战。

请。今天我将讨论网络战的未来，特别是强调网络认知战。许多人想知道，在即将到来的选举中，是否会有外国信息干预或影响行动针对我们的普选。如果有人问我，我会说很有可能，因为在2023年全年，我一直在研究

这些问题。感谢上帝，今年即将结束，我正在整理我的研究。我发现了一些证据，表明有外国评论员军队在我们的互联网上活动。由于保密原因，我无法详细说明，但我只想说，有一些活动正在进行。在当今世界，人类，即人脑，是可以被黑的。当我们谈论

网络安全时，我们谈论的是黑客攻击计算机系统、信息结构以及所有这些物理实体。但是，就像计算机一样，人脑也是可以被黑的，只是方法不同。人类有情感，有骄傲、沮丧、嫉妒等等。所有这些情感都可以被用作后门，侵入人脑并进行操纵。随着技术的进步，人类将拥有越来越多的控制方法。

控制。

human brains such as Neuroscience or you know the the uh brain and computer interface and intervention of uh brain waves then a lot of uh different method uh the countries overseas they are doing research on these Advanced Technologies and they develop military tactics and strategies so uh today we talk about the you know global over hegemonic competitions between countries and countries so nowadays this cyber cognitive operations is used as method to change the games and win the game of this hegemonic

competition there is a POS possible because when we go back to clait clait defines were is enforcing one's will against the other the physical violence has been used to enforce our will against the other by killing them or threatening to kill them but if theoretically we just change the other's brain way of thinking we don't have to use physical violence so that is possible it doesn't matter you define that as world or not now the bottom line is we can change the others wills and thinkings so that is the importance of

this uh cyber cognitive Warfare and now it's it's it's possible so the country especially major countries they now use uh this method for their uh the games winning their games and season ping ones emphasized cyber space cyber domain is strategic domains and culture and and influence operation can be major weapons if we we look look at Chinese strategic support force their domain of warfare is space war and cyber war and cognitive war and electronic war and combining together so it's a strategic strategic domains so

basically and there is intersection of cyber warfare including cyber cognitive Warfare and geopolitics of not only Northeast Asia but also the globe then there is advancement of cyber warfare and uh we are observing more and more uh this cyber technological Warfare such as hackings and doos and all these using malicious Court are more and more integrated with cyber influence operations or psychological warfare you know you name it so the Russia was Russia us used this tactic specific tactic is called hack and leak they're

hacking sensitive information and then leaking this sensitive information uh into the public try to change the the opinions and sentiment of the public so it's strategically and tactically combined technological method and an influence operation alog together so more and more we are looking at this int creative uh measures so when today when we talk about cyber warfare we we we we have to see the two different things at the same time cyber technological Warfare and Cy psychological warfare or cognitive

Warfare you name it so it's now now we have to change our our uh the measures we have to adopt more integrative approach approaches when it's the same when we work with other countries our alliance as well so cyber warfare in South Korea today and uh uh we have upcoming elections but also uh we have uh the public how public thinks and so we make consider and China and and North Korea uh may have strong interest to uh infil ating the our uh the Public's uh cognitive domains and changing their opinions and cultures and

also uh try to infiltrate our election system so the US and and they Define election system is one of these uh critical infrastructure just like you know the power plant transportation system and and and and Centra so I think their approach is right and we have to consider our election system is one of this critical infrastructure so we need to protect this both you know electronically and technically and also uh cognitively as well so uh next thing I like to address is there is a strategic goals and

tactical principles just like you know we can identify uh techniques and tactics and procedures for Cy technological Warfare such as hackings and doos and rmail attacks and we can identify and tactics techniques and procedures for cyber cognitive Warfare I'm working on it and I I I uh specify strategies and tactical measures and steps of operations so influence operation is not just a uh individual isolated uh event it's all related and it's all integrated so there is a certain rules of steps so

it's very shredly uh operated so we can identify ttps and we can prepare for them that's what I found so future of cyber warfare in Northeast Asia so what do we expect more well and this kind of situation uh will be uh uh normal I would say New Normal and so actually China and Russia they see the War and Peace is not definitely divided uh time frames they see War and Peace as a spectrum continuous Spectrum so they don't uh uh clearly distinguish so it's a gray area war and and peace is is is a intermingled and

existing at the same time so cyber warfare cyber cognitive operations is more like this with or without conventional word this thing goes on it will be threat you know just like Russia uh before they invaded Ukraine they attacked Ukraine with cyber measures and they initiated the 2022 Ukrainian invasion in this time of War they also used cyber measures so cyber measures can be used both War times and peace times so we have to change our perceptions H in the future there is no clear distinction between peace and War

so it's a combined gray area so basically uh the Cyber operations you know we have to prepare so I would name War like peace or peaceful Warfare so it's a coexistent so nowadays SNS is like uh used you know uh military units SNS SNS you know account is weapons and media also weapons and they are armies but in the future H we're going to see more and more drastic uh the phenomenon using new Advanced Technologies so brain science and and and cyber technology engineering robots and iots will be all

combined this is serious issues without real world we can be invaded and we can be conquered so we need to prepare for this and and and we need to emphasize on this new type of warfare and thank you thank you um Professor Yun next we have a three of course excellent discussions and each will have 7 minutes and start with Professor u in from tanuk University hi I'm in U from Tang University and first of all I'd like to thank uh president sonor for inviting me here um this a wonderful opportunity and

also giving me this uh I I uh I'm much pleased to have this uh role as a discussion at this panel uh filled with lots of interesting insightful uh papers and also presentations I uh my role here for today is especially uh discussing uh What uh Professor um um um uh on his his paper about Japan's um New U cyber security strategy Trend or um orientation um while reading the paper uh I have have much enjoyed his writing U because partly because I U I've been also working on um um cyber deterence and cyber operations uh in uh various

countries mostly um us UK Australia uh New Zealand uh and uh Canada's cyber security operations and also um uh I'm also deeply concerned uh and interesting in how South Korea would develop its own uh cyber operations and cyberis strategy and I was uh pleased to hear that Japan is a step ahead U um sort of uh uh I think giving uh push a little bit of push to maybe J uh South korean's uh relevant audiences um but uh you know as uh soj mentioned that uh South Korean uh policy makers are also working on that

topic as well so sooner or later we will see some kind of um outcome uh so um so um I figure my role is more beneficial or fruitful if I ask more questions uh rather than comment on your uh uh field because you're Japanese specialist and cyber SK specialist uh much more than anybody here I would guess so uh my first question uh and hopefully I uh get all the answers to all the questions uh you know given the limited time uh my first question is so um uh which country is the gravest threat to Japan especially uh in terms

of cyberspace in cyers space uh I bet you know this question sounds like a no-brainer but uh you know China uh or either North Korea right but uh it's important to figure out and specify which country is more uh Graver okay so uh threatening to Japan because it might uh determine or it might uh characterize uh the way in which Japanese policy makers would form or formulate um cyber operations or cyber deterrence strategy so because uh again U you know the way ways in which Japan uh would address

cyber threats uh um uh will DET determine uh how to develop uh cyber cap uh capabilities uh because now Japan is trying to go beyond just defense position right it's it's going going to it's going for uh offensive capabilities if I figure right uh so you still use Japan still use active defense although I figure I think that this is more closer to offensive uh capabilities and theany operations uh so you also mentioned in the paper that uh you know you can't J Japanese fing policy makers can refer to hunt forward the concept

proposed by the US DOD right so which is more offensive uh rather than defensive so um but you know in order to develop offensive capabilities you have to be very careful in what capability would you like to develop because first of all it takes money it takes lot of money and time and in other words resources and you know defending cyberspace itself it costs a lot of money and then you your country is going to add offensive character uh to your cyber security strategy uh but you know as uh Professor mentioned you know the ways of

cyber uh offenses are very very diverse right uh information uh operations where just simply uh disruption or network of of disruptions and things like that so uh it also it all depends on which country do you think is more threatening right um so if it's uh if Japan feels North Korea is more threatening then Japan would not have much to do because North Korea Society is not much wired right then what kind of cyber offense capabilities are you talking about if it is China that Japan is targeting it then what

kind of aspect do you like to use or leverage to influence China right to to prevent China from what kind of things right so that's that's first uh question um the another question is about public private relationship uh you said that in the one of the stalking or the shocking changes that happen that happened in December 2020 National Security strategy is that the terminological change right the it used to Japan used to say J cyber security but now it used cyber National Security what do you mean what what what

what do you make of that change right so do you think that Japan is ready to sort of override social economic interests uh in in the interest of National Security interest do you think when uh these two interests Collide and the National Security interest would would obw them uh so that's one thing so and then what kind of sort of public private uh coordination mechanism do you imagine to happen right uh do you think uh something like cesa in the US would happen in Japan or what kind of uh again

coordination mechanism would be there in ch in Japan the near future lastly because you're presenting in South Korea I cannot but be asking this question so what kind of international cooperation with South Korea do you think proper especially uh as Japan is moving toward Now new aspect of cyber security uh cyber uh uh capabilities right so Japan is trying to upgrade or develop cyber um offensive cyber capability now what kind of what kind of cyber activity do you think Japan could would like to

cooperate with South Korea okay that's all thank you Professor U and next uh Dr P Yan from the Korean Institute for defense analysis so you also have seven minutes for for for frame e for r for for thank you Dr P and then last of course not least and Dr CH ji from National Assembly future Institute please thank you so much I learned a lot from the professor Jun article I think that this is very kind of new I mean topics for the cyber security because like I reviewed this literature on the Cyber

cognitive Warfare I think I found very little on this topic so I think cyber cognitive Warfare is very new topics for the cyber security issues but I think that probably I think the cognitive Warfare issues is very traditionally very long topic on the kind of like a battlefield so I think first of all I think we should focus on the kind of cognitive welfare because I mean cognitive Warfare with new space and new technologies like cyber space and cyber technology so cyber cognitive welfare should firstly

firstly mean first I think cyber cognitive Warfare should focus on on analy analyzing the kind of Co the nature of cognitive Warfare I think for example I China has kind of long history about like a cognitive Warfare because CH traditionally it's a lot of people a lot of scars knows already about the K this art of word traditional concept of Chinese cognitive Warfare is kind of on winning the world without fighting this is kind of concept of Chinese traditional cognitive Warfare and this currently mean Chinese pla has adopted

this kind of like cognitive Warfare because I mean they adopted the kind of a Doctrine about like a three Wars me three battlefields and kind of sanan they included kind of propaganda like mean public Warfare public opinion Warfare and the second one is like psychological warfare and the third one is that kind of like mean low welfare this is kind of like a new kind of cognitive welfare of Chinese pla but I think mean the the the target of the Chinese paa Doctrine is the winning informational Warfare but with chinaese

concept of information Warfare includes the three domains and physical domains and information domain and finally the cognitive domains but pla has argued that cognitive domain is Ultimate domain for the winning the information world so I think Chinese me pla has modernized kind of like capacity for cyber cognitive Warfare recently so I think that we knew we think I think that we have to focus on kind of nature of cognitive Warfare with the cyber space and with the cyber technology and second one is that I mean uh mostly mean

Professor yun's paper covered kind of human dimension of cyber cognitive Warfare but I think that cyber cognitive Warfare has two Dimension First Dimension is a human Dimension and human Dimension is that like kind of in cyers space with the Cyber Technology uh influencing and targeting human cognition so mean recently we saw a lot of kind of mean cyber cognitive Warfare targeting the human cognition kind of like propaganda where kind of misinformation operation or cyber hacking those kind of things I mean in

directly influencing the Cyber I mean human cognition but like in the long term or midterm I think that the most important thing is that like must Dimension second dimension is must Dimension because like the Warfare future warfare will be most more autonomous and AI based distance making process in in the kind of AI based future warfare we need to focus on kind of like second dimension mean I mean like must Dimension because I mean a lot of AI based distance making AI based Ware mean includes a lot of like

cyber hacking where they they manipulation or kind of like intercepting the data processing to influence or hacking the kind of like mine learning or machine dist making so actually mean in the future I think AI Warfare needs a lot of kind of like deterence a lot of kind of like operational tactics to defend those kind of like cyber cognitive Warfare targeting and influencing those kind of mine mean Dem menion so I think I mean in the future I think cyber cognitive Warfare should be it should Encompass

the but not only the human Dimension but also like mine Dimension so I think we need more systemic and kind of like very structural approach to the Cyber cognitive Warfare with like a shortterm and long-term Dimension and I have the two two question for the professor Jun I mean you mention about like a c cognitive Warfare but like you I mean selected some cases China and North Korea but you didn't really explain mean what technologies China and North Korea uses and how these work how this impact

on the target States I mean you mentioned that South Korea and Japan but so if you have like detail kind of case studies about those kind of like what technology uses used or how this works and how this impacts on the kind of Target stage cognition so if you have in detail information please give us kind of like case studies and the second second question is that about like South Korean strategy because let mean South Korea is kind of falling behind in confronting National Security challenges at the intersection of technology and

认知，以赶上或应对这一新兴威胁，您认为韩国必须制定和实施哪些最重要的任务才能应对此类网络认知？非常感谢。好的，非常感谢车博士。在我们请各位回应这些精彩的问题之前，如果允许的话，我将各自向各位提一个问题，首先是关于苏晓教授您谈到的韩日美三边合作。

and very lately last week the um National Security advisers and the counterparts and they met and they introduced the cooperation in the Cyber the area but still it seems to me that the three countries are slightly different emphasis I mean South Korea is definitely talking about the North Korea we I mean South Korea haven't talked about the China officially but Japan and United States it seems to me the main targets of course is China so how to have a little bit differences among the three countries can be adjust and have a

same goal and that's my question to you and uh to the doctor Kim soong and you of course didn't mention about China we basically of course you the Titleist about the North Korea but still as I already mentioned that South Korea we haven't mentioned about the China but China is a very serious threats in this field especially so-called disinformation and there's many countries um they are already talking about the possibility of the get intervene many elections next years and so what's the South korean's position at

this moment or the perception about the China's uh threat from the China and uh to the professor Yun and minu and you didn't mention about you just briefly mentioning about the possibility of this upcoming our general election that April by North Korea and North Korea has been very notorious for past several decade they are more or less intervene the South Korean election general election and the presidential election but lately they are a little bit different and at the time North Korea usually have some

provocation and but nowadays that is cognitive Warfare so I see there some uh difference Trend lately so what what do you think about that and how North Korea get intervene this upcoming general election thank you and what means the uh cyber and theno National Security so we say so we want to defend our systems we have to defend our properties um um until now but so maybe we are engaged in um cross domain Warfare in the future as we are seeing in Ukraine as we are seeing in Gaza so um many people are non-state actors too

are involved in cyber warfare these days but can we really defend our systems our nation our um um um Pride over country so um maybe they are trying to um make us lose our faces so it's it's it's kind of part of the cognitive Warfare it might happen in the future future so everything can be targeted so everything we have to defend that's the um very difficult thing and so the third question is what kind of Corporation we are uh uh expecting from uh Republic of Korea so first one is the um sharing of the threat groups

information so we are talking about ap43 lazos or F be bear and many many cyber actors uh in cyber space but we want to identify who are there who are attacking us who are attacking you so if we combine so we um compare uh those information intelligence we might have a better picture of the cyers space and the second one is uh we want to share uh um um uh the understanding of uh thre meth methods what kind of measures are used to attack you steal something or affect something so of course um cognitive Warfare is another aspect for

us so um I'm going to typ a Taiwan uh next month because they are having the uh presidential election in Taiwan so there might be a very very uh big influence from China so that kind of thing might come to Japan too and South Korea too so what kind of methods they use we want to share and the third one is uh we want to launch coordinated action if possible so we want to stop the malas actors how we can do together so one country's action is not enough we want to coordinate uh such kind of thing and so um um uh uh Professor Parks uh Dr

Parks um final question oh where's my memo um so it's the trilateral corporation so um yeah it's impossible to say so we have Anonymous enemies and so we want to identify we want to do attribution but we still don't know who will be the first attacker to us but we want to have if we us has a higher capability I believe so if they share uh information and we can share information so um we will have a better picture so that's the important thing so the one country's effort not not enough and we need the

coroporation from Microsoft Google and so other cyber security companies so we need a team efforts so cyber security is always uh said that the team sports what kind of good sports good team we can organize so uh that's important thing so we fought in the baseball sport but it's not good so in the cyber space South Korea and Japan must make a coordinated team so that's important thing thank you very much all right thank you in that sense I'm very glad that finally South Korea and Japan can normalize the

relationship okay all right next U Dr Kim uh thank you so much and actually the U Dr parked a little big and difficult questions and also the professor y raised the issu is that how we see our threat how we can evaluate how we can uh make our threat as a a strategic goal to respon that that is really really big discussions actually so in Korean cases um the cyber security efforts are usually done by the more by really practitioners not from the social scientist perspectives not by the policy

makers in a higher level or strategy levels they were usually dealt by the practitioners perspectives so more than 20 years or 30 years that they just wanted to defend our networks and recovers if we have any accidents or impacts from certain cyber incidences so those kind of concept is now conflicting how we can understand how we can make our strategy in a more understandable way in the all around the world so those kind of questions you raised it before and the the the professor you raised was the

starting point how we can make our national cyber security as a more understandable way so but already we have our national cyber security strategy in 2019 actually it was F drafted in 2017 and it took 18 more month to to Cor coordinated between governments and finally when it published it I actually shocked I personally involved in the drafting the national service security strategy in 2017 and the 2019 version has no mentioning about the DP dprk at all as our threat surprisingly surprisingly it

yeah it deleted actually the first dra has that one but the the published one has no mentioning about the tprk and then we only talked about we have various cyber attacks from outside not specifically designating or naming a country or some other countries so definitely China cannot be there too so until now we had no chances to publicly say that we are suffering from cyber attacks from China yet we never said that before but definitely we have a text from the China so those kind of things were should be

um dealt with very um strategic thinking so they can be a my you know general answers on all all of the questions which I got for but more specifically maybe I can also said that the uh us and Iraq governments are thinking that the their for like more in more than two years uh after the 2020 Summit we established a working group cyber working group to deal with the IT personnel from the North Korea and also the dprk's cryptocurrency thft and they gathered like more than four or five times in here in DC and they sanctioned

a lot of mixers or some the ice the service providers and the person persons and the entities and even the universities to have the raising the skilled personnels so those kind of activities were the most important and most practical way to cooporate each other so those kind of things also can expand to with the Japan because that in Japan there's a moral defectors or the North CR nationalities in In Living in there right so maybe they were going to have some more information in in in human human s so there can be another

options for us to and also the regarding the competition among the this Western countries and then the other parts so in Norm settings or the understanding or app applications of implementations of the international laws and the sanctions that way it is not possible to have the good answers for how we cannot deter from those kind of activities but still know we are agreed that we we're going to to protect our values and the older values will be the basic uh starting point to setting the DOR building

processes so they can be a not a good answers but you know not just as a Defender but as a contributors then we were going to have more roles in the world I guess and what can be our sustainable cooperations like an expanding more PR medic way that can be a a small step but maybe change a little bit more in the later and then what can be our priority no everything is priority so we are not sure that how we can understand the cyber security issues in a a traditional way or that the traditional activities all the tra traditional

activities and security issues can be converted into the cyers space wayes we are not agreed in that concept itself so maybe that understanding and then discussions about how we see the cyber security issues as one of the National Security issues or the the basic foundational things as the National Security issues those kind of conversations we discussions also will will be needed and then finally um still the about the attributions or some other areas among uh countries for the corporations we need some kind of um

protocols to verify the the credibilities and how we can be sure what has been done and what has not been done and how we can understand their intentions the intentions cannot be coded the intentions cannot be understood in a visible way so maybe we need this kind of a um Corporate Way and inner coordinated actions and then the lastly I would like to uh make a example as for further cooperations in R&D maybe so in 21 we developed the when I was in the National Security research institution before I mov into the

Institute the National Security strategy we developed our methodology to how we can judge the evaluate the impact of from a certain cyber incidences so if we have higher impact then we our proportional response will going to be the higher but if we have little impact then the the respon should be under not that serious so those kind of things the those kind of common criteria can be developed by uh among the three countries and among other likeminded countries then the those kind of things also can be

cognition so to catch up or to address this emerging threat what do you think are the most important tasks that South Korea has to develop and Implement in order to deal with this kind of cyber Cog R thank you so much all right thank you Dr cha and before we are going to give a time to respond to these excellent questions and if I may I will ask each one of you to my own question just one each of you and first about um professor tsia suia and you talking about the South Korea Japan and United States trilateral cooperation

the Russians so this countries and Russians and Chinese and North Korea and and also us and they use uh different techniques different procedures and and different uh strategic uh course uh when they are doing this uh uh cognitive operations so uh I cannot uh discuss further detail uh because it's a short time and is also very often but I will address this you know uh during the Second World War uh when we uh bombing certain targets and and and we just uh you know packed these bombs and uh roded in airplane and

then goes there and just uh pulled bombs because you know at the time uh we had no technology to uh pinpoint uh the targets but now we don't use that you know uh we just uh pinpoint uh strike on the Target because we know all these information and guidances and uh satellite and all these cognitive Warfare or psychological warfare you know whatever you name it it's it's just same you know in the past you know we don't specify targets you know just uh certain uh General populations we go there and we just pull the beer or uh we

just uh you know uh broadcasting uh radios and televisions but now we have Technologies AIS and all these Etc we we can uh specifically pinpoint certain Target The People's uh the individual life stories their are anguishes their frustration and their psychological uh Tendencies so that's why these days uh this uh uh individual information on individual is critical so in Internet we can correct uh a lot of information on certain individual uh through SNS or you know other other uh uh other channels so

we uh Ai and Quantum Computing or all these Technologies we can pinpoint what are the weaknesses of certain individual or certain group of individuals so now cognitive Warfare is more sophisticated and pinpoint strike so it is quite you know uh uh effective so one of methods uh mostly uh the the they use is active measures basically they try to uh uh uh the drive wet between different uh uh groups of populations and China uh uh boosting uh you know in in the black live metal case and they are supporting uh the like you know white uh

supporters uh White and also uh the this black at the same time when they are uh operating uh uh against the Czech Republic China also uh boosted both groups of political uh uh the the groups you know pro pro European Union anti-european Union at the same time so there are number of method so I have three minutes and uh I will summarize all this uh so the techniques can be used used strategic level operational Art Level and tactical level all together strategic levels and history is used it's a narrative and storytelling

and basically use manipulate histories uh from the past and then uh make a deab at present so like uh hukushima you know this uh nuclear water case and this current issue can be distorted and to uh uh make a public belief we are still living in the the Japanese Colonial period This is a manipulation of History so in the Strategic level history is uh shreddy exploited to analyze or understand a current event the operational art reel and there's uh the united front Strate or uh dividing groups and then uh

将不同的、孤立的群体聚集在一起，并指明一个共同的敌人。基本上，他们将性别问题、环境问题、气候问题以及所有这些不同的问题汇集在一起，并运用“敌人是我的朋友”原则。在战术层面，所有这些积极措施和驱动措施是其中一种技术措施，例如制造假新闻或虚假信息，并通过社交媒体或类似渠道进行公开曝光。

这个程序被称为锚定效应。通过将偏见或假新闻植入公众的头脑，然后他们利用所有这些，你知道，利用合法媒体和政府，你知道，政府官员的演讲来包装。时间到了，所以，你知道，我们可以识别所有这些技术，这是可能的。关于所有这些更详细的信息，欢迎在本次会议结束后进行讨论。非常感谢。

好的，非常感谢 Meu 教授。我很抱歉，观众没有机会提问，而且我们也没有休息时间，所以您没有时间私下与这位与会者交流。不过，第三场会议到此结束。请大家以热烈的掌声感谢第三场会议的所有与会者。谢谢。