The Modern Security Environment and Cybersecurity: The Case of Iran

With the development of technology, great changes and developments have taken place in the security and military fields, as in every field. Especially at the beginning of the 21st century, concepts such as non-conventional, asymmetric and hybrid formed the main focal points of the security field. Defence and security policies are shaped within the framework of these core concepts. Although concepts such as cybersecurity, electronic warfare and electronic attack and defence are included in these concepts and theories, they have not been sufficiently addressed or effectively included in the current security concept.

The security environment has taken on a structure that is growing more complex every day in both its dimensions and its actors and is changing rapidly. As a natural result, uncertainties in the security environment have increased and it has evolved into an unpredictable structure. This complexity, rapid change and uncertainty are obstacles that are very hard to overcome, and this is not a problem that can be overcome with customary methods alone. Strategies that do not focus only on defence, that go beyond the classic perception of security and take security as a whole as their basis, should therefore be adopted. For this reason it is extremely important to take into account the regional and global effects of security.

The dizzying change in risk and threat perceptions in the security environment makes it necessary to develop alternative courses of action regarding the measures to be taken. These do not all have to be military measures. In particular, the development of global communication networks and the digitalisation of IoT (Internet of Things), also referred to as the fourth industrial revolution, significantly affect today’s perception of security.

On the other hand, the change in security perceptions has further strengthened the existing position of energy and energy transmission lines, one of the important sources of problems. Life cannot go on without energy. These changes and developments bring cyber and cybersecurity to the fore in terms of interference with or attacks on energy or energy transmission lines.

The concepts of nation-state or state actor are generally used to refer to the state or to persons representing the state. Some of the actors carrying out cyber attacks are the group referred to as state actors. In addition, hackers and hacktivists also form groups that carry out cyber attacks. There may be many reasons for carrying out cyber attacks: political, financial gain, personal satisfaction or getting hired.

Another important aspect of cyber attacks is that, for little effort and expense, they can create serious political, economic and sociological pressure and damage on the target. Taking into account the actors carrying out cyber attacks, their motivations and the strength and effects of the destruction they can cause, we can say that the security problem that will most occupy countries in the near future will be cybersecurity and cyber attacks. In this context, the necessary infrastructure work should be done and the security concept should be rebuilt with a cybersecurity focus that also encompasses digitalisation.

*****

As a current example, it is worth briefly touching on what has happened in Iran.

As a result of a cyber attack on Iran’s fuel distribution network on 26 October 2021, there were problems in fuel distribution and long queues formed at petrol stations. Likewise, in July another cyber attack was carried out in Iran, this time against the railway lines. Iran describes these attacks as attacks on the country’s integrity. Another view, however, is that they were retaliation for certain global cyber attacks thought to have been carried out from Iran with the support of the Iranian government.

In May 2020, a similar cyber attack was carried out on Iran’s Shahid Rajaee port. This attack is believed to have been retaliation for a cyber attack by Iran in April on Israel’s water and sewage system. The attack on the port operation targeted the connection point and aimed to disable or disrupt its operation. As a result, the cyber attack caused activities at the port to stop and the port to remain closed for several days.

These cyber attacks clearly show the need for a change in current security perceptions.

We will also discuss cybersecurity and its place and importance in today’s security concept in the context of other countries.