Transatlantic Cyber Forum

• Use of surveillance software by law enforcement agencies

• Government disclosure decision processes

• Securing elections

• Technological innovation for intelligence surveillance control

• Securing machine learning applications

• Protection of the machine learning supply chain

• Government's role in securing Open-Source Software

• Cybersecurity support deployment

• Responsible active cyber defense operations

• Responsible vulnerability disclosure and mitigation sharing

The work was conducted by working groups with 30-50 experts each through online and face-to-face workshops in Berlin and Washington D.C., and through online collaboration.

In 2024, the TCF Network focuses on the topic of "Responsible Vulnerability Disclosure and Mitigation Sharing" to present concrete implementation recommendations for "Norm (j)" of the UN norms of responsible state behavior in cyberspace. This project is made possible by the generous support of the German Federal Foreign Office. The working group currently consists of:

• Policy Brief – Vulnerability Disclosure: Guiding Governments from Norm to Action

• Policy Brief - Active Cyber Defense: Toward Operational Norms

• Policy Brief - Cybersecurity Support Deployments: An Emerging Cooperative Approach

• Policy Brief - Fostering Open Source Software Security 

• Policy Brief - Active Cyber Defense Operations: Assessment and Safeguards 

• Policy Brief - Securing Artificial Intelligence (Part 2) - Understanding the Security Implications of the Machine-Learning Supply Chain

• Policy Brief - Securing Artificial Intelligence (Part 1) - The attack surface of machine learning and its implications

• Policy Brief - Governmental Vulnerability Assessment and Management

• Policy Brief - A Framework for Government Hacking in Criminal Investigations

• Policy Brief - Securing Democracy in Cyberspace: An Approach to Protecting Data-Driven Elections

• Impulse - Options for more Effective Intelligence Oversight

• Policy Brief - Cyber Operations: Defending Political IT-Infrastructures

• Policy Brief - Government Hacking: Computer Security vs. Investigative Powers

• Statement - Initial Take-Away: Encryption Policy and "Government Hacking"

The TCF project team regularly engages in events and presentations including the Congressional Cybersecurity Caucus, the European Parliament and the German Bundestag and is cited in national and international media including leading German media outlets as well as for example the New York Times and the Washington Post.