{"id":492,"date":"2024-09-24T14:49:45","date_gmt":"2024-09-24T20:49:45","guid":{"rendered":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/?p=492"},"modified":"2024-09-25T09:41:48","modified_gmt":"2024-09-25T15:41:48","slug":"securing-canadian-research-defending-innovation-against-cyber-threats","status":"publish","type":"post","link":"https:\/\/wpsites.ucalgary.ca\/jacobson-cpsc\/2024\/09\/24\/securing-canadian-research-defending-innovation-against-cyber-threats\/","title":{"rendered":"Securing Canadian Research: Defending Innovation Against Cyber Threats"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

In today\u2019s rapidly evolving digital landscape, there has been increase in cyber-attacks, targeting Canadian research, and intellectual property, resulting in stolen work and unauthorized patent filings. Sensitive technology research areas are targeted, with the stolen information being used in ways that threatened Canada’s national security [9].<\/p>\n\n\n\n

Cyberattacks on Canadian Research<\/strong><\/p>\n\n\n\n

As a leader in advanced research, Canadian-led research can be an attractive target for those seeking to steal, use and adapt this research for their own priorities and gains. Theft of proprietary information derived from research laboratories is a cost-efficient way for foreign actors to bypass the lengthy and expensive process of domestic research and development. Some countries view academia and associated research and innovation as an opportunity to advance their own economic objectives, using espionage and other illicit means [7].<\/p>\n\n\n\n

The targeting of Canadian research is not an isolated phenomenon. Espionage campaigns, particularly those focused on dual-use technologies, have been on the rise [9]. Fields such as artificial intelligence, biotechnology, quantum computing, and genetic engineering\u2014which have both civilian and military applications\u2014are especially attractive to hostile foreign entities [3]. Sensitive research and its resulting technologies could be used to advance a foreign state\u2019s military, intelligence, or surveillance capabilities. Cyber criminals and nation-states frequently conduct spear-phishing campaigns and ransomware attacks to extract this valuable information from laboratories and research institutions [7]. As highlighted by the Canadian Centre for Cybersecurity, ransomware continues to be the most disruptive threat to Canadian organizations, including laboratories; with attackers often leveraging phishing and insider threats to gain access to sensitive research [9].<\/p>\n\n\n\n

Policy Response: Safeguarding Sensitive Technology Research <\/strong><\/p>\n\n\n\n

In response to this growing threat landscape, the Government of Canada has taken a proactive step to protect the nation\u2019s research environment. A key part of this strategy is the Policy on Sensitive Technology Research and Affiliations of Concern (STRAC), which came into effect on May 1, 2024. This forward-thinking policy is designed to prevent unauthorized access to Canadian research that could compromise national security [3].<\/p>\n\n\n\n

STRAC focuses on advanced and emerging technologies of importance to Canadian research and development, which are also of interest to hostile foreign states and state-sponsored actors. \u00a0These technologies include fields such as artificial intelligence, cryptography, human-machine integration, quantum science, robotics, and medical innovations. Under the policy, federal research grant and funding applications involving sensitive technology research,\u00a0will not be funded if any of the\u00a0researchers are\u00a0affiliated\u00a0with organizations and institutions posing national security risks, referred to as Named Research Organization (NRO) [3].<\/p>\n\n\n\n

To assist researchers, the Government of Canada has published two key lists:<\/p>\n\n\n\n

\u2022 Sensitive Technology Research Area List: This list identifies advanced and emerging technologies critical to Canadian research and development that are also of interest to hostile foreign-states and state-sponsored actors. Examples include artificial intelligence, machine learning, cybersecurity, biotechnology, and medical technology [4].<\/p>\n\n\n\n

\u2022 Named Research Organization (NRO) List: This list includes organizations and institutions linked to foreign military, defense, or state security entities, that pose the highest risk to Canada\u2019s national security [5].<\/p>\n\n\n\n

Strengthening Canada’s Research Security: A Multi-Faceted Approach<\/strong><\/p>\n\n\n\n

In addition to the STRAC policy, the Government of Canada has also developed tools and resources for researchers to safeguard their research:<\/p>\n\n\n\n