A New Age of Warfare

The US is cyber-attacking Russia’s power grid, just as Russia is hacking the US and both are engaged in offensive hacking in ways that are more aggressive than in the past. But Is this hacking really much different from what’s gone on for many years? Does it boost the chances of a cyber arms race or a cyberwar?

One thing is clear: Cyberspace is now seen by senior miltary officers and officials as just another “domain” of warfare, along with air, land, sea, and space. But there’s something different and more dangerous about this domain: 

It takes place out of sight, its operations are so highly classified that only a few people know what’s going on there, and it creates an inherently hair-trigger situation, which could unleash war in lightning speed with no warning. All the major cyber powers, the United States, Russia, China, Israel, France, Britain, and perhaps to some extent, Iran, Syria, and a few others, have been able to hack into one another’s “critical infrastructure” such as, power grids, financial systems, transportation lines, water works, which have been hooked up to computer networks for the past 25 years. From time to time, these countries have actually hacked into these things.

In one sense, these intrusions are no different from any other form of intelligence gathering. In another sense, though, they’re very different. 

With cyber operations, once you’ve hacked into a network, you can disrupt or disable it. Exploring a network and destroying it involve the same technology, personnel, and know-how; it takes just one step, and next to no time, to go from exploring to destroying. In a crisis, one or more of these countries might launch a cyberattack, if just to preempt one of the other countries from doing it first. The very existence of the implants makes a preemptive attack more likely.

There’s another disturbing development in cyberwar: The whole enterprise has slipped out of the oversight and control of our political leaders. 

Last summer, President Donald Trump signed a classified directive giving US Cyber Command leeway to mount cyber offensive operations at its own initiative. Before then, such operations, even tactical operations on the battlefield, had to be personally approved by the president. The premise of the old policy, during the Bush II and Obama administrations, was that cyber weapons were something new: Their effects were somewhat unpredictable and could spiral out of control. 
One consequence is that Cyber Command now feels less constrained about going on the offensive. 

Richard Clarke, the former cybersecurity chief in President Bill Clinton’s White House and co-author of a forthcoming book on cyberwar called The Fifth Domain, said in an email, “The Trump administration may be trying to create a situation of Mutually Assured Destruction, similar to the 1960s strategic nuclear doctrine.” However, Clarke added, “Cyber is different in many ways.” First is the issue of what strategist’s call “crisis instability”, the hair-trigger situation, in which one side might launch an attack, in order to preempt the other side launching an attack. 

There is also the uncertainty of “attribution”, the country attacked might not know for certain who planted the malicious code and might mistakenly strike back at an innocent party, thus triggering an inadvertent war.

US Cyber Command was founded in 2009. It has since grown enormously, in size, scope, mission, and, since last summer’s directive, autonomy. Cyber offensive technology has been around for much longer still. Cyberwar technology has evolved far more quickly than the thinking about how to use the technology in wartime. 

With last summer’s directive taking its use out of the control and supervision of our political leaders, the decisions to use it will be made entirely by the military officers who developed the technology, and whose budgets depend, in part, on its growing prominence.

Slate:           I-HLS:

You Might Also Read:

The ‘Rules’ Of Modern Warfare Are Being Rewritten:

 

 

« Cyber Criminals Have Created An Invisible Internet
Russia's National AI Strategy Takes Shape »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

MIRACL

MIRACL

MIRACL provides the world’s only single step Multi-Factor Authentication (MFA) which can replace passwords on 100% of mobiles, desktops or even Smart TVs.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

LockLizard

LockLizard

Locklizard provides PDF DRM software that protects PDF documents from unauthorized access and misuse. Share and sell documents securely - prevent document leakage, sharing and piracy.

BSI Group

BSI Group

BSI is the business standards company that equips businesses with the necessary solutions to turn standards of best practice into habits of excellence

RU-CERT

RU-CERT

RU-CERT is the CSIRT / CERT team of the Russian Federation.

Security Industry Association (SIA)

Security Industry Association (SIA)

The SIA's mission is to be a catalyst for success​ within the global security industry through information, insight and influence.

Siepel

Siepel

Siepel manufactures high quality shielded rooms and anechoic chambers dedicated to TEMPEST, NEMP & HIRF.

OpenText

OpenText

OpenText is a leader in Enterprise Information Management software and a portfolio of related solutions for Information Governance, Compliance, Information Security and Privacy.

Prolimax

Prolimax

Prolimax deliver innovative solutions to IT Manufacturers, Distributors, Resellers and End-users including Data Erasure and secure IT Asset Disposition (ITAD)

MONITORAPP

MONITORAPP

MONITORAPP is responsible for complete web security. Protect your business environment with Application Security Solutions from MONTORAPP.

Silicon Labs

Silicon Labs

Silicon Labs are a leader in secure, intelligent wireless technology for a more connected world. We provide award-winning hardware and software security to help safeguard connected devices.

CyberScotland

CyberScotland

The CyberScotland Partnership is a collaboration of key strategic stakeholders, brought together to focus efforts on improving cyber resilience across Scotland in a coordinated and coherent way.

TOTM Technologies

TOTM Technologies

TOTM Technologies provides end-to-end identity management and biometrics products, powering Digital identity and Digital onboarding solutions.

Hawk AI

Hawk AI

Hawk AI’s mission is to help financial institutions detect financial crime more effectively and efficiently using AI to enhance rules and find anomalies.

Unit 42

Unit 42

Unit 42 brings together world-renowned threat researchers, incident responders and security consultants to create an intelligence-driven, response-ready organization.

ZoobeTek

ZoobeTek

ZoobeTek are a company focused on preventing leaks related to the security of business information3.

SyberFort

SyberFort

SyberFort offers a suite of SAAS-based platforms designed to fortify your digital defenses including Threat Intelligence and Brand Protection.

Affinity Technology Partners

Affinity Technology Partners

Affinity Technology Partners has been fueling the growth of Nashville, Tennessee businesses and nonprofits with reliable IT services since 2002.

Bytium

Bytium

Bytium provides top-tier IT services and solutions designed to empower everyone, from individuals to global corporations. Specializing in cybersecurity and proactive IT management.