2026-10-30 –, Main Hall
One cannot open an annual report on advanced persistent threats without finding Russia listed as one of the top threats in the cyberdomain. This talk examines Russia's evolution as a threat actor from a broader perspective, drawing on historical, socio-economic and cultural factors. Viewed through this broad lens, the tactics, techniques and procedures of Russian APTs emerge not as random aggression, but as the expression of a coherent - if at times failing - doctrine.
Russia's emergence as a top-tier cyber threat actor is not a coincidence or a purely technical achievement — it is the product of a historically grown state logic in which geopolitical ambitions, economic constraints, and a deep cultural distrust converge. This talk traces that logic across five interconnected dimensions: the Soviet and post-Soviet institutional heritage, economic marginalisation, political consolidation under Putin, socio-cultural narratives of encirclement, and deliberate technological capacity-building. The Ukrainian war serves as the critical stress test — revealing both the destructive potential and the surprising limitations of Russian cyber operations in a combined-arms conflict. Russia's Tactics, Techniques and Procedures are then examined through this strategic lens, showing how they reflect not random aggression but a coherent, if sometimes failing, doctrine.
Dominique Heuff holds a Master's Degree in Russian Studies. Currently working as a senior security analyst at the SOC of SSC-ICT - a shared service provider for IT for the Dutch government - she aims to bridge her academic background with her professional experience to place cybersecurity developments in a broader context. This presentation is the result of that ambition.