• Director

Trey Herr

Dr. Trey Herr is Senior Director of the Cyber Statecraft Initiative, part of the Atlantic Council Technology Programs and assistant professor of Global Security and Policy at American University’s School of International Service. The CSI team works at the intersection of cybersecurity and geopolitics across conflict, cloud computingsupply chain policy, and more. Previously, Trey was a senior security strategist with Microsoft handling cybersecurity policy as well as a fellow with the Belfer Cybersecurity Project at Harvard Kennedy School and a non-resident fellow with the Hoover Institution at Stanford University. He holds a PhD in Political Science and BS in Musical Theatre and Political Science.

February 2023

Avoiding the success trap: Toward policy for open-source software as infrastructure

by Stewart Scott, Sara Ann Brackett, Trey Herr, Maia Hamin with the Open Source Policy Network

Open-source software (OSS) sits at the center of almost every digital technology moving the world since the early 1980s—laptops, cellphones, widespread internet connectivity, cloud computing, social media, automation, all the rainbow flavors of e-commerce, and even secure communications and anti-censorship tools.
read more
September 2022

Policy hackers take Vegas

by Will Loomis, Safa Shahwan Edwards, Trey Herr, Stewart Scott, and Sarah Powazek

Every year, in the early August heat, thousands of hackers from around the world head to Las Vegas, Nevada for a series of cybersecurity conferences known as Hacker Summer Camp. This year, the Cyber Statecraft Initiative – and a few friends – decided to ship out to see what all the hype is about.
read more
September 2022

Dragon tails: Preserving international cybersecurity research

by Stewart Scott, Sara Ann Brackett, Yumi Gambrill, Emmeline Nettles, Trey Herr

A quantitative study on whether legal context can impact the supply of vulnerability research with detrimental effects for cybersecurity writ large through the coordinated vulnerability disclosure process (CVD), using recent regulations in China as a case study.
read more