US Cybersecurity Plan Includes Offense
z4ns4stu writes "Shane Harris of the National Journal describes how the US government plans to use, and has successfully used, cyber-warfare to disrupt the communications of insurgents in Iraq. 'In a 2008 article in Armed Forces Journal, Col. Charles Williamson III, a legal adviser for the Air Force Intelligence, Surveillance, and Reconnaissance Agency, proposed building a military "botnet," an army of centrally controlled computers to launch coordinated attacks on other machines. Williamson echoed a widely held concern among military officials that other nations are building up their cyber-forces more quickly. "America has no credible deterrent, and our adversaries prove it every day by attacking everywhere," he wrote. ... Responding to critics who say that by building up its own offensive power, the United States risks starting a new arms race, Williamson said, "We are in one, and we are losing."'"
Who needs a botnet when you have a labotomized group of internet hooligans who only need a target worth harassing?
Well, why wouldn't it include an offense? If someone is putting videos of nutjobs cutting the heads off of people, we damn well ought to be able to take their servers down.
Hoist Number One and Number Six.
In ten or twenty years USA won't be a country worthy of attacking ;-)
This makes complete sense to me. History is replete with examples of leaders who did not learn to exploit new technology, new fields of battle, and paid the price for it. Expanding your capabilities to use and defend against attacks in information technology is just an extension of the principle of finding a bigger stick.
Scientists point out problems, engineers fix them
altslashdot.org: The future of slashdot.
"America has no credible deterrent, and our adversaries prove it every day by attacking everywhere,"
Well that's just it you can't build a razor wire wall and laugh as people cut themselves trying to get through it. It seems to me the first mistake to be made is to treat a digital front as if it was a front in an actual war. All you're doing it guarding secrets most often, or sometimes vital services. Best way to protect them is physical separation from civilian networks. I know my friend who does communication translation for the military works on a network where they mirror a hand full of sites (wiki among them) every week and host them in house simply because having the network connected to the internet at large is just to risky.
To me, this is reminiscent of our arms race with the Soviet Union. Military officials were convinced that the Soviets were always one step ahead of them the entire time, even though the only time they got to a technology before us was the launch of Sputnik, which wasn't really a military achievement anyway (we were all decades behind spy satellites or something like SDI). If they didn't think the Soviets were building something better than what we had (which would have been supported by their intelligence gathering) they never stopped using that argument to support large standing armies and rapid technological arms buildup.
And when the USSR collapsed, we learned that the entire time they had been at least two steps behind us.
My opinion is that our infrastructure is in such disrepair that if hostile powers had the capability of cyperterrorism, they would have to practice extreme restraint not to use it to put the entire nation in a blackout for a month. If that means they're waiting for a combined-arms assault, then offense is not going to help us when our "military botnet" doesn't have any electricity to run on.
The recent scare about cyberterrorism causing blackouts in Brazil, only to find that those blackouts were more likely due to natural causes in a poorly maintained electrical grid, supports my point.
I sometimes ask revealing, often ignorant-seeming questions. Maybe they're harder to answer than you think.
I have friends working for the Navy who are taking > 6 months just to order a fscking desktop computer.
I doubt the DoD is capable of pulling this off.
so how does the average citizen "prepare" for this cyber warfare? just get the latest OS patches or sumthin?
A job for Bill Gates, smartest man in the world. Only he can catch Osama Bin Laden and keep the world safe for democracy. Isn't this all sounding like the story line to a bad movie?
From TFA
Bush's authorization of "information warfare," a broad term that encompasses computerized attacks, has been previously reported by National Journal and other publications. But the details of specific operations that specially trained digital warriors waged through cyberspace aren't widely known, nor has the turnaround in the Iraq ground war been directly attributed to the cyber campaign. The reason that cyber techniques weren't used earlier may have to do with the military's long-held fear that such warfare can quickly spiral out of control. Indeed, in the months before the U.S. invasion of Iraq in March 2003, military planners considered a computerized attack to disable the networks that controlled Iraq's banking system, but they backed off when they realized that those networks were global and connected to banks in France.
In traditional warfare, going after your enemy was easy. Your leader tells you where to go, and you go there. One loads up on supplies, munition, and guns. In the face of cyberwarfare, however, things get messy. A lone soldier with a laptop can cross be anywhere in the world causing problems. Hell, he could be sitting in your very country's back yard and you might not even have a clue. Or, in TFA's case, the splash damage ends up screwing up critical, tangentially connected systems.
Sucks to be the military division that has to track, attack, and manage the diplomatic border issues regarding hackers during times of war.
"America has no credible deterrent, and our adversaries prove it every day by attacking everywhere,"
And who's to blame for that?
The goverment allowed hundreds of thousands of IT jobs to be shipped overseas, we no longer have the labor resources to secure our domestic infrastructure. The government allowed private businesses to copyright and patent everything, there's no further incentive for innovation from the private sector in this country. We wind up spending what limited resources are available for R&D reinventing the wheel constantly. Because we've handed so much control over to multinational authorities like ICANN, we no longer can impliment policy decisions. Where is IPv6? We're facing a resource shortage, but not only that, IPv6 provides for much wider deployment of encryption, and yet here we are dragging our feet. Why is that?
If this were any kind of a priority, I think we'd see the government making an honest and sincere effort to fix some of these problems. But they aren't. Which tells me that cybersecurity "problems" are a paper tiger. There won't be any changes until a few thousand people die from a "cyber-terror" attack. Our government has always been reactive in nature -- preferring to procrastinate and delay until after the bomb explodes, and then swoop in to justify its relevance and 35% tax rates.
#fuckbeta #iamslashdot #dicemustdie
...proposed building a military "botnet," an army of centrally controlled computers to launch coordinated attacks on other machines.
Dear Terrorist:
I am a Jihadist in Nigeria with $10 million and if I put it into a bank, those infidel Americans will freeze it. If you send me $5,000 to open an account in the Cayman Islands, I will put you in for half!
Or the other one:
Dear Terrorist:
Do want a LARGER penis? With a LARGER penis, you'll be more of a man and be able to take out those infidel Americans! Buy V1@gr4 from us! We will make you BIGGER and STRONGER! Allah be praised!
or:
Make BIG MONEY selling AK-47s from home! Make even more with IEDs!
Kill Americans!
It's NOT me! It's the meds! I'm on 1000mg of Fukitol.
I love when commments get modded down simply for expressing an opinion the moderator doesn't like.
Did you guys really expect no offensive strategies? I think nerds on this site need to get real about the real world.
Mr President, we must not allow a script-kiddie gap!
A military botnet? No problem; just throw all the federally owned computers in to another one, I'm sure Conficker doesn't mind sharing...
There is only so much you can do on the defensive. The US has been fairly defensive in protecting the IT infrastructure of our society and our government networks. As everyone knows, you can only keep someone out for so long before they finally figure out how to get through. The best way to keep your networks protected is by eliminating the threat. The old adage "a good defense is a great offense" holds true till this day.
That line of thinking may piss off the peacenicks and the neo-marxists, but anyone who has ever had to deal with a chronic problem of coming under attack from foreign entities with no recourse, knows that the available solutions are just as bad as the problem (having back bone providers hobble foreign ISP's access results in reduced commerce). The internet is the modern "ocean" of the colonial period. Pirates like to hide in lawless (or hostile to the target) regions for protection. I dont think these internet pirates should be provided any different protection than the pirates of the Caribbean.
20th century Marxism is not progress...
This is all very ironic, as I mention here:
http://listcultures.org/pipermail/p2presearch_listcultures.org/2009-November/005991.html
So, the US military, once again, in a tremendous burst of irony, is developing ways to create artificial scarcity on the network of abundance. And they are justifying this to have new ways to further harm the people upset about being harmed by the illegal and immoral US invasion of Iraq.
"Illegal, Immoral Invasion of Iraq to Carve up the Middle East"
http://www.mediamonitors.net/abdullahvawda16.html
So, one illegal and immoral act begets another. One artificial scarcity begets another. One arms race, fueled by war profits, begets another.
http://www.lexrex.com/enlightened/articles/warisaracket.htm
How do we resolve this seemingly intractable problem?
Mutual security?
http://www.beyondintractability.org/audio/morton_deutsch/?nid=2430
Intrinsic security?
http://en.wikipedia.org/wiki/Brittle_Power
Humor? :-)
http://www.humorproject.com/doses/default.php?number=1
Jacque Fresco comments on some of this, as far as the problems of way being profitable, as I note here:
http://groups.google.com/group/openmanufacturing/msg/3b7889054e4b4317
So, after the US military gets all these shiny new cyberweapons, who are they going to use them against next? Who will be the next people labeled "insurgents"? Or goaded into it by suffering from other military-enforced artificial scarcities?
Anyway, people ask me why I don't just post to a blog, and prefer to use email, and that's part of it. All web archives and other websites may be taken out once that "arms race" really gets going and military doctrinal TINA rules: "There is no alternative (but to destroy everything)".
Generally, a core theme of what I write is the irony of post-scarcity technology like computers and robots or nuclear power in the hands of people still thinking in terms of scarcity, like fighting over products or oil instead of producing products with robots and producing energy with nuclear power or solar power made using advanced materials. Example:
http://listcultures.org/pipermail/p2presearch_listcultures.org/2009-November/005929.html
http://listcultures.org/pipermail/p2presearch_listcultures.org/2009-November/005498.html
As I mention in that last one, for an example of post-scarcity thinking, I think our taxes would go *down* if as I proposed here, everyone in the USA who wanted one was given a "free" safer luxury electric car:
"Why luxury safer electric cars should be free-to-the-user"
http://groups.google.com/group/openmanufacturing/msg/09eb7f4c973349f2?hl=en
Basically, defense costs, pollution mediation costs, and medical costs would all go down enormously, thus lowering taxes.
More ironically, it turns out, it takes more electricity to make a gallon of gas than for an electric car to go the same distance, according to this:
http://www.evnut.com/gasoline_oil.htm
"So I can get 24 miles in my ICE on a gallon of gasoline, or I can get 41 miles (at 300wh/mile) in my RAV4EV just using the energy to refine that g
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
Shouldn't this be in the "no-shit-sherlock" department?
Do you have ESP?
http://www.theregister.co.uk/2003/03/10/one_printer_one_virus_one/
Hoax or incredible cover-up?
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
- In AD 2010...
- War was beginning...
- What happen?
- We get Kenyan...
- Somebody set up us the Dems
- What??
- Main screen turn on...
- It's you!
- A shout out to you gentlemen...
- You all have acted...stupidly.
- But don't jump to conclusions.
- All your base are belong to us.
- You are on the way to socialism!
- What you say??
- You have no chance to survive - make your time.
- Vote out "Libs"
- Impeach "Libs"
- For Great Justice!
Another ironic example is the post by chance directly before this one, entitled: "Perfectly Logical"
http://tech.slashdot.org/comments.pl?sid=1443966&cid=30098058
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
...US military should rob foreign banks, too?
Contrary to the popular belief, there indeed is no God.
Isn't this fairly similar to how that short-story got started? The major governments of the world start building up their computers for war, only for each system to eventually link itself to the others and become an emergent A.I.? Granted, the computers in the story were for running real-world warfare, not cyber-attacks, but still...
how about "cease your cyberattacks or we unplug your country from the internet"
Tsunami -- You can't bring a good wave down!
We get paid by every single big criminal out there.
We have decades of experience.
We are the best in the world.
We wish you goood luck! ^^
Greetz,
Your Russian hacker community.
Any sufficiently advanced intelligence is indistinguishable from stupidity.
This has cropped up on slashdot before. Can't find the article, but it was more hand-wringing about the vulnerabilities of the American network infrastructure to enemy attack.
Granted, the nature of the Internet is to provide information access from any point in the world, and because of that it can be so easily exploited, commandeered, or broken. But I believe if the $hit ever hit the fan and the Tubes were threatened, those of us who hack and build and kludge the Code would come to its defense. Hundreds of thousands strong, I would wager a citizen-soldier army of l33t coders could well defend this country from its script-kiddie foreign enemies.
All your botz are belong to us.
set up trap banks / have a way to take cash back so if they take ours down we can stop them for makeing it big time off of that.
"nothing comes close", etc Uh huh
http://news.bbc.co.uk/2/hi/middle_east/4794829.stm
http://www.globalsecurity.org/military/world/russia/at-14.htm
Tanks are the new battleships, mostly obsolete when being used against any medium equipped adversary on up. Good for intimidating natives carrying rifles, once they have access to anything better, tanks are just multi million dollar targets
http://rutube.ru/tracks/1262945.html?v=0a1269577834d4909cf8402da05d89eb
there goes your abrams, merkava, chieftain, whatever
"proposed building a military "botnet," an army of centrally controlled computers to launch coordinated attacks"
wait no obligatory skynet tag?
then we shall take it over and aim it all govts for a day
haha
No need for the hair trigger there. I was _agreeing_ that this near jingoistic reverence that all things western are superior can be negated with obvious examples of Russian tech. That's all, nothing more. And for that matter, Soyuz is still bringing them up and getting them down. And AKs are still functioning when M-4s jam up.
When I saw "offense" I envisioned a couple crackers in Eastern Europe getting a drone launched Hellfire missile up the rear. Oh well.
Hmm... Let's think about this.... at the following addresses we have openly discussed articles about Chinese, or potentially Chinese government linked hacking, cracking, etc.
http://www.nytimes.com/2007/12/09/us/nationalspecial3/09hack.html
http://www.chinaherald.net/2009/08/patriotic-hacking-of-australian.html
http://www.thedarkvisitor.com/category/china-russia-links/
http://www.secureworks.com/research/blog/index.php/2009/01/04/chinese-hackers-talk-hacking/
We also have folks noting significant vulnerabilities in Chinese systems.
http://news.bbc.co.uk/2/hi/technology/8094026.stm
Finally, and probably most importantly the USAF and others discuss US intent to pursue cyberwarfare using elements of airborne ISR.
http://www.aviationweek.com:80/aw/generic/story_generic.jsp?channel=awst&id=news/02145p04.xml&headline=Pictures%20Give%20Insights%20Into%20Stealth%20Projects
http://www.nytimes.com/cfr/world/slot1_20080227.html
http://gentleseas.blogspot.com/2007/10/suter-jamming-our-good-guys.html
http://defense-update.com/features/2008/may08/suter_v.htm
I'd observe that although the Col mentioned in the root article indicates that we are in a war (and we probably are). He probably underestimates the work the US has done, or is doing. Probably for good reasons. Although there is a need for rather creative, smart, potentially even otherwise anarchistic folks, there are some common things which can be done without deploying these very "precious" and scarce resources as uniformed troops.
One other aspect of the discussion is the typical conspiracy theorist nutcases (including with less negativity the ACLU, EFF, EPIC, etc.) who feel that just because some entity of the federal government can use something against a US citizen in some constitutionally prohibited way, that they will. (The Big Brother Syndrome)
They already have both CNA (computer network attack) and CND-AR (computer net defense, attack response). Have for ages.