The New Air Force Mission?
mvnicosia asks: "The US Air Force has released its new mission statement, which reads 'The mission of the United States Air Force is to deliver sovereign options for the defense of the United States of America and its global interests -- to fly and fight in Air, Space, and Cyberspace.' With the recent rows over US Internet governance, what do you think is the impact of a US government overtly practicing cyberspace warfare? And what are the US's legal limitations?"
You could be worried about it but if you read it more narrowly and in context, it's not that scary. The USAF will fight in space, air, and cyberspace as it relates to warfare. Given how dependent the US miliary and other militaries are on information, it's reasonable to expect them to practice techniques for attacking and defend networks. Put it another way, while the air force practices gaining air superiority, we rarely ever see them go around downing civilian aircraft in times of peace (though there have been mistakes). Just because they're developing the ability it doesn't mean they're going to recklessly use it on everyone. The military needs to be prepared for things that might happen.
EvilCON - Made Famous by
After spending 22 years wearing the USAF uniform I think I can be confident in saying that the new mission statement has been looked over and discussed by many General officers, public affairs officers and lawyers both civilian and blue-suiters. They don't often post public statements like that without knowing exactly what ramifications might pop up.
Do not meddle in the affairs of dragons, For you are crunchy and go well with ketchup.
I was going to enlist, but my screen name was taken. :(
"seeking out new life" and "exploring strange, new worlds"
Optimists surrender.
An Army grunt stands in the rain after marching 12 miles with 35-pound pack on his back and says, "God, this is shit."
An Army Airborne recruit stands in the rain after jumping from an airplane and marching 18 miles with a 45-pound pack on his back and says with a smile, "God, this is the shit."
An Army Airborne Ranger lies in the mud after jumping from a plane into a swamp and marching 25 miles at night past the enemy with a 55-pound pack on his back and says with a grin, "God, I love this shit!"
A Green Beret kneels in the stinking mud of a swamp with a 65-pound pack on his back after jumping from an airplane into the ocean, swimming ten miles to the swamp and crawling 30 miles through the brush to assault the enemy camp and says with a passionate snarl, "God, give me some more of this shit!"
An Air Force recruit sits in an easy chair in his air-conditioned, carpeted quarters and says, "The internet connection's out? What kind of shit is this?"
"Champagne for my real friends - and real pain for my sham friends!" http://ericblade.postalboard.com/
Disclaimer: I'm a lowly airman and have no idea what really goes on at the top, but this is what I can glean from my perspective.
Is this to say that the Air Force will be in charge of any "cyberspace"-related activity?
No. Loads of people are reading this wrong, though it's not entirely their fault since they don't understand how the Air Force works. The best way to visualize the AF is as a gigantic (even international) company dedicated to US defense through air power. By and large, the AF does its own thing and hardly ever mingles with the other branches except to provide air support in joint-service operations.
The cyberspace that the AF will be in charge of is it's own cyberspace. On the surface it seems redundant that they'd include cyberspace in its mission statement. Of course they're going to protect their own information systems. But I think they were primarily driven to include cyberspace in the statement due to the ever-increasing numbers of attacks on Air Force information assets. Particularly those connected to the Internet.
The AF has one of the largest information systems in the world. So it's a huge target. Also, the AF is extremely reliant these days on their information technology. Every single member has an email account that they're expected to monitor and almost everyone needs a computer to access applications that they need in order to do their job.
Finally, those running this huge information network are incompetent. More often than not, they're civilian contractors with paper MCSEs who just sort of bumble along and solve problems based on trial and error rather than having actual knowledge of how things work. (Trust me, I've met a few of them and most revealed themselves as MS fanboys during casual conversation.) The enlisted members in the info admin shops are undertrained, underbugeted, and understaffed. To top it all off, the entire Air Force information system is based on high-powered expensive Microsoft solutions that are extremely fragile and just rarely work.
(As an example, our netadmins are *always* sending out notices to everyone telling them not to open emails with a particular subject line or attachment. But of course they wouldn't have to burden us, the end users, with this crap if they just filtered viruses out properly at the mail server.)
These result of all of these factors is that the Air Force is frequently on the receiving end of script kiddies, hackers, and viruses. This new missions statement indicates to me that the AF leadership have reached the unfortunate conclusion that they merely need to fight harder to protect our information assets rather than wake up and realize that they really just need to bring in some I.T. people and vendors with a clue.
Traditional Geneva Conventions apply to air. There are few practical constraints here.
There are separate treaties outlawing militarization of space. How prohibitive the treaties will be in practice is yet to be seen. Regardless the US will always act to defend itself, particularly in regards to its satellite system which is today's "high ground" that facilities military dominance. Certainly the US will deploy defensive systems to protect satellites. Whether it will deploy systems designed to disable enemy satellites is uncertain, but likely.
There are no legal treaties explicitly controlling cyber wars. There may be some older international law that could be applied to this new arena. Such would be similar to the desire of some to apply the international laws allowing nations the right to attack and capture pirates to the current war on terrorism -treating terrorists as pirates. If legal scholars can see parallels here, they'll surely see them in cyber warfare.
Today many would consider carpet bombing an entire city filled with civilians in an attempt to destroy a radar tower as a practical violation of the Geneva Conventions' rule against targeting civilians because the same tower could be destroyed with other means that would not endanger a whole city of noncombatants.
Would targeting an entire ISP to take out one terrorist website be similar? If that ISP refused to take down the website, how careful does the US have to be if it chooses to electronically attack it? Can it wipe out the data on all the ISP's servers, thus affecting "noncombatant websites?" Or must it be more careful and try to affect only the enemy's website? Probably not because the collateral damage is not that serious... loss of a website, eh... he'll live.
But what if the US is at war with an entire country, how careful must it be in attacking entire networks in that country? In that case, there may be some serious considerations. Taking out a major ISP may disrupt not only government and military networks of the enemy but also hospital networks or networks that control municipal water systems, etc, etc, which would knowingly endanger civilian lives and possibly affect third party nations. In war a country must differ to saving its citizen's lives over those of the enemy when it has no other options. So, I suppose the legal limitations are such that the US has to decided, what options it has that will likely defeat/incapacitate the enemy and then choose the ones that least endanger civilians (lives and property). Maybe it will be that cruise missiles are safer to civilians than a cyber war.