CIA

...now browsing by tag

 
 

Response to “Thinking about cyber offensive capabilities”

Thursday, September 17th, 2009

MAD

http://threatchaos.com/2009/09/thinking-about-cyber-offensive-capabilities/

Should the US engage in offensive cyber attacks?

All warfare is based on deception….

With the NSA’s acquisition of cybercommand, we have a fair indicator of the nation’s digital offensive capability and direction. Cyber attacks such as denial of service are much too public for the intelligence community.  The cyber offensive will come in the form of information collection and subversion of the enemy population, the infowar. Psychological operations will continue to be carried out as they have been for decades, only now with a massive influx of skilled technologists to maintain the competitive electronic edge. Kinetic attacks are also very much a reality. Such was the case when Russia acquired a piece of software corrupted by western intelligence, which caused damage to a pipeline.

“”The result was the most monumental non-nuclear explosion and fire ever seen from space,” he recalls, adding that U.S. satellites picked up the explosion. Reed said in an interview that the blast occurred in the summer of 1982.”

http://www.msnbc.msn.com/id/4394002

Without an external botnet to control, undue stress would be placed on the networks. However, it is likely that the command and control of existing botnets could be subverted by the cybercommand and used to against remote targets. Reflecting on the historical nature of nuclear, biological, and chemical warfare, it does not seem to be a stretch of the imagination to believe that governments would be willing to develop new attacks. By utilizing offensive tactics such as worms, viruses, and even electromagnetic pulse attacks to achieve some objective, suddenly we have a new threat of cyber collateral damage. There is already a precedent for clandestine cyber warfare, and one can only imagine this will continue to escalate.

Will we see cyber Mutually Assured Destruction, the “Deterrence by in-kind response”?

That seems to be how these things reach their apex.  Only by fully developing offensive capability will a nation no longer be subject to a major attack. Or at least that’s the logic behind it.  MAD is the old school way of thinking, and sometimes it’s hard for the old war dogs to learn new tricks. Perhaps through education and training at the local level, a holistic approach to national cyber defense can be effective, this as opposed to relying on government and corporate entities to assume the whole of the burden. One thought on a sort of cyber homeland security is to offer the civilians an opportunity to participate in the federal botnet, offering up their systems willingly to fight the “enemy”.  Learning the lesson from America’s forefathers and establishing a well armed militia for the defense of the nation.

Attacks should not be used as a deterrent, after all the best offense is a good defense, and the enemy could use an event to draw their opponent into a conflict where they possess the higher ground.  One should make their position unassailable, and wait for their opponents to reveal themselves and with it their weakness.

The 24th airborne are training for cyber operations. They are learning to deploy physical assets to defend communications lines, and methods of attack on various targets such as networks, industrial control systems, radio, and air defense. True cyber war will be the combination of traditional combat blended with advanced technological attacks by ‘hacking’ the enemy in the field as a means to gain and advantage. Realistically speaking this is nothing new. ‘Hackers’, and more specifically ‘Crackers’, have played a significant and decisive role in warfare for decades.  Without the employment of these skilled technologists, the result of the Second World War may have been quite different. The connection between cyber war and the NSA is quite clear. By compromising the enemy’s communications, obtaining their documents, and influencing their actions. The outcome of a conflict can be predicted before the first move has ever been made.

On the netcentric battlefield, can there be anything other then western dominance?  The irony there is that there does not seem to be someone their own size to pick on, and they fall victim to the same guerilla warfare that acted as their own midwife into existence. The west owns space, the sky, the airwaves, and the technology. The netcentric warfighter is progressing into the future with little to no opposition, yet continues to fall prey to primitive attacks (though perhaps that’s what the British said about the colonists). I suppose one could envision a future battlefield where technologists play a game of virtual chess, attempting to outhack each other before the first shot is fired.

A cyber Geneva Convention, some UN mandated rules of engagement, would be totally ineffective on the virtual battlefield. Control of the media, political spin, and the very nature of cyber combat, will maintain the air of plausible deniability for any sort of electronic offensive. Protected by secrecy they will be able to carry out operations that supersede any national or international laws.  Privacy, property, and speech have long since fallen victim to this system.

We need to keep in mind the division of roles between the military cybercommand and Homeland cyber security.  Any offensive actions would come from the military.  The protection of non-military government and critical infrastructure systems is the function of Homeland Security.  The protection of the civilian end user of the internet has been delegated to the corporate sector.

So with that perspective, the cybercommand has no role other then military defense of its own networks and to carry out attacks against the enemy. The defense of infrastructure is completely separate. It has less to do with protecting the people, and more focused on defending the critical infrastructure which the government relies upon to operate. In other words, if an attack only affects non-critical sites such as mybook or twitterface, then the general public must look to the corporations to resolve this issue.

The US will continue to conduct intelligence operations against foreign and domestic targets using the most advanced technology and best available labor. Ground forces have been appropriated for kinetic operations. We can call this cyberwar if you wish.

S.773 – The Cyber Security Act of 2009 – part 1

Thursday, May 14th, 2009

S. 773: Cyber Security Act of 2009

A bill to ensure the continued free flow of commerce within the United States and with its global trading partners through secure cyber communications, to provide for the continued development and exploitation of the Internet and intranet communications for such purposes, to provide for the development of a cadre of information technology specialists to improve and maintain effective cybersecurity defenses against disruption, and for other purposes.


The summary is quite honest to the actual intent of the bill. It is designed to protect commerce, and global trade. An act to ensure the continued exploitation of the Internet. Just looking at the initial sponsor, and the groups represented in the findings it seems quite obvious this act has been dreamed up by businesses and government agencies as a way of soliciting additional funding in the form of contracts. Essentially using tax payer money to expand their operations while projecting the illusion of securing ‘cyberspace’. Cyberwar profiteers getting their feet in the door for more government funding.
We already have the majority of intelligence work done by agencies such as the NSA being outsourced to businesses like Booz Allen Hamilton. Now we see the same people giving dire warnings of an eminent terrorist threat. The reaction to these warnings it the Cyber Security Act, and the solution is to channel more resources to the people giving the warning.

Rockefeller – Cybersecurity

Sponsor:
Sen. John Rockefeller [D-WV]Great-grandfather was once the worlds richest man is considered the richest person in history. Infamous for his Standard Oil monopoly.

Cosponsors [as of 2009-04-18]

Sen. Olympia Snowe [R-ME] – Daughter of a Spartan, popular Senator from Maine. Known for her ability to influence the outcome of close votes. Consider a RINO by some. She is also known as a Rockefeller Republican.

Sen. Bill Nelson [D-FL] Former astronaut. Member of the Book and Snake secret society at Yale.

Sen. Evan Bayh [D-IN] Claims his wife’s corporate roles hold no sway over his votes. Recently formed the ‘Blue Dog’ caucus, where it is suspected he is supporting corporate agendas.

Capitol Hill’s corridors are now filled with corporate America’s lobbyists, who are working to assure that our middle class and those who aspire to it have as little representation as possible


Once the church was the dominant power in society, and churches dominated the skyline. Following the church was industry, and steeples were replaced with smoke stacks. From this industry grew enormous wealth. Soon the towering bank buildings facilitated the fluidity of these corporate industrial assets, and again their structures loomed over the city. What I noticed was a transfer of power from the banking and finance sector into telecommunications. Information is the currency of today. Where you have something of value, there will always be threats against it.

Cyberspace is the marketplace of information, and just like in the physical world there is also a black market.

Click to continue »

Twitter links powered by Tweet This v1.8, a WordPress plugin for Twitter.

Get Adobe Flash player