Helena Huang is an Associate Research Fellow at the S. Rajaratnam School of International Studies (RSIS), Nanyang Technological University (NTU), Singapore. Her research specializes in cybersecurity, cybercrime, digital rights, and emerging technologies. With her work experience at the Cybersecurity Agency of Singapore, a M.Sc. in International Relations and certification as a Certified Ethical Hacker, Helena integrates policy expertise with technical knowledge in her research and international engagements. She has represented RSIS at the United Nations Open-ended Working Group (OEWG) on Security of and in the Use of Information and Communications Technologies (ICTs) and has spoken at international platforms such as the RSA Conference 2025 and INTERPOL’s Asia-Pacific Cybercrime Working Group.

University profile

LinkedIn

ORCiD

Personal website

The conventional understanding of cybercrime positions cybercriminals as rule-breakers, malicious actors operating outside the boundaries of established legal and ethical frameworks. However, a closer examination, particularly within the rapidly digitaliising landscape of the Southeast Asia region, reveals a more complex reality: cybercriminals are increasingly shaping the rules that govern cyberspace. This presentation challenges traditional paradigms and argues that sophisticated cybercriminal groups are not only opportunistic actors, but also active participants in constructing the digital landscape within the region, exploiting its inherent vulnerabilities.

The rise of ""cybercrime as a service"" (CaaS) exemplifies this phenomenon. Professional criminal organizations are establishing intricate ecosystems, dictating the terms of engagement through ransomware negotiations targeting critical infrastructure, data recovery protocols, and the operation of darknet marketplaces catering to regional demands. They set the standards for malicious software development and distribution, effectively influencing the tactics and techniques employed by a broader spectrum of cyber threats. Furthermore, cybercriminals are instrumental in driving technological adaptation. Their rapid exploitation of emerging technologies such as mobile payment systems and social media platforms forces diverse stakeholders – ranging from governments and security professionals to technology companies – to develop reactive defences, inadvertently granting themselves a degree of influence on cybersecurity developments in the region. Cybercriminals are not simply reacting to the rules; they are dictating the terms of engagement in the digital realm within Southeast Asia.

This presentation will explore the implications of this shift in power dynamics and the challenges this poses for law enforcement, international governance, and the future of cybersecurity, particularly in the context of the Southeast Asia region.. The speaker will propound that a fundamental reassessment of our understanding of cybercrime is necessary to effectively address the evolving threats of the digital age, and that new and proactive, regionally tailored approaches, that account for the diverse levels of technical ability and capacity building, are needed to combat the new 'rule makers' within the ASEAN region.