Stakeholders across the Internet want to improve its security. But no single entity coordinates efforts, implements sustainable cybersecurity, or addresses digital security market failures. IST unites key stakeholders across industry, government, and civil society to innovate new solutions, break down silos, and find effective new methods to advance digital security, including its work to counter the ransomware threat.

Current Projects

Ransomware Task Force

The Ransomware Task Force (RTF) combats the national security threat posed by the ransomware scourge with a cross-sector approach. In April 2021, the Ransomware Task Force launched its cornerstone report, the product of over 60 experts that provided 48 recommendations and advocated for a unified, aggressive, comprehensive, public-private anti-ransomware campaign. Now, the RTF works along multiple lines of effort: International Engagement Working Group; Brazil Ransomware Task Force; Strategic Disruption; Victim Notification; State, Local, Tribal, and Territorial (SLTT) Cybersecurity Initiative; and Cyber Insurance and Resilience.

UnDisruptable27

In its pilot phase, made possible by seed funding from Craig Newmark Philanthropies, UnDisruptable27 prioritized expert outreach, stakeholder engagement, and the development of compelling storytelling to clearly communicate risk. The pilot identified interdependencies among lifeline sectors as a key point of weakness. Most importantly, disruptions to continuity of patient care delivery in hospital communities—and the fragile water and power systems which support them—have the greatest potential for loss of life. In its next phase, UnDisruptable27 heads to the front lines of this conflict. The effort will act quickly to get on the ground with a dozen hospital communities to help them bolster their resilience. UnDisruptable27 is led by Joshua Corman, who for over a decade has been at the forefront of the movement to bolster critical infrastructure cybersecurity.

AI Risk Reduction Initiative

As highly advanced artificial intelligence (AI) systems become increasingly integrated into critical aspects of society—from healthcare and finance to transportation and national security—policymakers and broader society are paying closer attention to the potential risks and opportunities associated with their development and deployment. With the support of the Patrick J. McGovern Foundation, the Institute for Security and Technology (IST) engages with a diverse range of stakeholders across the AI ecosystem to better understand the emerging risks of AI foundation models and to develop technical and policy oriented risk reduction strategies, driving forward responsible innovation.

Generative Identity Initiative (GII)

In response to the emerging realities of generative AI, and with generous support from the Omidyar Network, IST is building upon our initial Digital Cognition and Democracy Initiative effort with the Generative Identity Initiative—a coalition of dedicated members from academia, industry, and civil society—who have been meeting to discuss how generative AI, particularly conversational agents, might impact social cohesion and the protection of public interest in the face of these challenges.

Applied Trust & Safety Initiative

As technology continues to advance in its capabilities and uses—and plays an increasing role in our lives–we must remain vigilant to the human risks that accompany it. IST in 2023 launched its Applied Trust & Safety Initiative, a long-term effort to ensure technology products and services are safe to use and capabilities such as AI are fully leveraged to address these challenges at scale

Artificial Intelligence and Advanced Computing

IST is engaging deep technical expertise to assess the architectures, tools, opportunities, and risks at the intersection of AI and cybersecurity across national security applications. This work includes analysis of open source models, advanced technique proliferation, and intentional mapping of policy conversations to enable industry and government to effectively provide essential input.