The winning entry was written by Svenja Post (age 30) and Alexis Below (age 28), who are both currently working as junior research fellows at the Brandenburg Institute for Society and Security (BIGS). In awarding Ms. Post and Mr. Below first place, the EastWest Institute hopes to draw attention to this kind of thinking from the next generation, enhancing such efforts to make the world a safer and better place.

THE WINNING ESSAY:

Towards Closing the Cyber Sanitation Gap - Campaigning for Digital Hygiene

While the revelations of former NSA contractor Edward Snowden about state-sponsored intrusions into online privacy have been deeply unsettling to many, the growing everyday threats to our online activities posed by cyber criminals receive little public attention. Yet, in reality, the chances of someone you know being actively monitored by the NSA or its European counterparts are rather slim. The hacking of a friend’s or perhaps your own email, social media or online banking account are, to the contrary, instances of cyber crime that probably most of us have come in contact with. Personal consequences can be unpleasant (i.e. sending a round of spam emails to your digital contacts) or wholly devastating (in the case of online identity theft or serious financial loss). Although public policy and business practices have an important role to play in combating such malicious cyber activity, the key to making cyberspace safer is the adoption of effective digital hygiene habits by all of us.

In the debate about cyber security, one is faced with a multifaceted calculus of social, technological and institutional problems. But just as cyber crime affects everybody, every internet user plays a crucial role in the aggregate. Individuals may both become victims as well as involuntary helpers of cyber criminals. Once compromised, users can unknowingly spread malware, become part of a malicious botnet or have their personal information exploited for targeted phishing attacks on friends or colleagues. However, the best cyber security defenses of banks, retailers and social media sites are useless if individuals use weak passwords or the same one for all online accounts. Thus, effective long-term commitment to increase cyber security has to harden the weakest link: human users.

The explosive growth in the adoption of electronic devices by the general population has created an environment which is comparable to the health situation at the beginning of the 19th century when life expectancy was significantly shorter due to infectious disease, plagues, unclean food and water. The role of personal hygiene in maintaining good health was neither understood by the public nor by governments. A similar situation has arisen in cyberspace today: poor digital hygiene is the major factor contributing to increasing danger to cyber security and online privacy. More than technological advancements and governmental regulations, it was a change in human behavior that precipitated the dramatic decrease in infectious diseases until the 20th century. The history of disease and the role personal hygiene had in driving better health outcomes should be translated to the cyber security context of today.

In view of these circumstances, it is surprising how few resources are devoted to increasing digital hygiene and raising awareness among the general population. Organizations and individuals are not just poorly equipped to recognize security breaches. Moreover, internet users are not conscious of the need to protect themselves at all times. When shopping, sharing and banking online are only a click away, security often takes a backseat to convenience. To increase cyber security, users firstly have to accept that digital hygiene is important and that a set of practices have to be undertaken for the preservation both of their own and, ultimately, the public’s health.

Thus, perhaps even more than developing grand strategies and new governance arrangements for cyber security, it is important to raise awareness and strengthen cyber security skills of users. It is necessary to establish a common social understanding of how to keep users and systems safe when interacting with computers and networks. People and institutions have to make cyber security as high a priority as other day-to-day tasks. To quote Albert Schweitzer: “To me, good health is more than just exercise and diet. It’s really a point of view and a mental attitude you have about yourself.”

Governments should integrate digital hygiene into educational curricula and implement targeted “cyber sanitation” campaigns. Companies, especially those handling sensitive personal data, must educate and constantly remind not only their employees but especially their customers about digital hygiene needs. Through these public and private initiatives, we must integrate an effective digital hygiene routine into everyday digital life—and constantly adapt. Just as diseases continue to exist and germs have changed with the development of new medicine, malicious software will continue to evolve.

The internet has transformed our world and revolutionized our daily lives. While insecurity in cyber space may not (yet) put your life at risk, it can make your life and the lives of those around you quite uncomfortable. As personal hygiene is essential for good health, digital hygiene is crucial for a safe and enjoyable online experience. In the end, the old health motto also applies to the cyber realm—you can’t enjoy wealth if you’re not in good health!

This essay was also published by the American Institute for Contemporary German Studies (AICGS) at Johns Hopkins University. Read the published article, here.  

_

Svenja Post has been a Junior Research Fellow at BIGS since September 2013, where she is working on comprehensive crisis management issues and emerging security challenges. Svenja Post holds a graduate degree in political science, law, and peace and conflict studies from the Philipps University in Marburg. She is a doctoral candidate at the Helmut Schmidt University of the Federal Armed Forces in Hamburg. In her PhD thesis, which is under review at the moment, Svenja Post looks at the challenges comprehensive crisis management poses for the European Union and its member states. She also was a guest researcher at the German Council on Foreign Relations and DAAD Research Fellow at the American Institute for Contemporary German Studies (AICGS) at Johns Hopkins University in Washington DC. Before the start of her PhD, she assisted the European and Transatlantic Security Programme of the Stockholm International Peace Research Institute (SIPRI). Svenja Post also is an active member of Women In International Security Germany (WIIS.de).

Alexis Below has been a Junior Research Fellow at BIGS since August 2012, where he is working on selected issues at the interface between foreign, development and security policy. He studied International Relations, International Economics and Conflict Management in Dresden, Beijing, Bologna and Washington, D.C., receiving his Master of Arts from the Johns Hopkins University School of Advanced International Studies (SAIS) in 2011. Prior to joining BIGS, Alexis Below worked for the nongovernmental organization Partners for Democratic Change and as a consultant for the Deutsche Gesellschaft für Internationale Zusammenarbeit (GIZ). He also gained professional experience working for, among others, the German Council on Foreign Relations (DGAP), the Federal Foreign Office, and The German Marshall Fund of the United States (GMF). At BIGS, Alexis Below works on the collaborative research project fit4sec, the competence center for security and technology, funded by the German Ministry of Research and Education, where he is focusing on vocational training and university-level education for civil security.

The EastWest Institute would also like to congratulate the two other finalists: 

Ben Van Meter 

Click here to read Ben's essay. 

Nicolas Zahn 

Click here to read Nicolas's essay.