US Cybersecurity Plan Includes Offense
z4ns4stu writes "Shane Harris of the National Journal describes how the US government plans to use, and has successfully used, cyber-warfare to disrupt the communications of insurgents in Iraq. 'In a 2008 article in Armed Forces Journal, Col. Charles Williamson III, a legal adviser for the Air Force Intelligence, Surveillance, and Reconnaissance Agency, proposed building a military "botnet," an army of centrally controlled computers to launch coordinated attacks on other machines. Williamson echoed a widely held concern among military officials that other nations are building up their cyber-forces more quickly. "America has no credible deterrent, and our adversaries prove it every day by attacking everywhere," he wrote. ... Responding to critics who say that by building up its own offensive power, the United States risks starting a new arms race, Williamson said, "We are in one, and we are losing."'"
Who needs a botnet when you have a labotomized group of internet hooligans who only need a target worth harassing?
Well, why wouldn't it include an offense? If someone is putting videos of nutjobs cutting the heads off of people, we damn well ought to be able to take their servers down.
Hoist Number One and Number Six.
This makes complete sense to me. History is replete with examples of leaders who did not learn to exploit new technology, new fields of battle, and paid the price for it. Expanding your capabilities to use and defend against attacks in information technology is just an extension of the principle of finding a bigger stick.
Scientists point out problems, engineers fix them
altslashdot.org: The future of slashdot.
"America has no credible deterrent, and our adversaries prove it every day by attacking everywhere,"
Well that's just it you can't build a razor wire wall and laugh as people cut themselves trying to get through it. It seems to me the first mistake to be made is to treat a digital front as if it was a front in an actual war. All you're doing it guarding secrets most often, or sometimes vital services. Best way to protect them is physical separation from civilian networks. I know my friend who does communication translation for the military works on a network where they mirror a hand full of sites (wiki among them) every week and host them in house simply because having the network connected to the internet at large is just to risky.
To me, this is reminiscent of our arms race with the Soviet Union. Military officials were convinced that the Soviets were always one step ahead of them the entire time, even though the only time they got to a technology before us was the launch of Sputnik, which wasn't really a military achievement anyway (we were all decades behind spy satellites or something like SDI). If they didn't think the Soviets were building something better than what we had (which would have been supported by their intelligence gathering) they never stopped using that argument to support large standing armies and rapid technological arms buildup.
And when the USSR collapsed, we learned that the entire time they had been at least two steps behind us.
My opinion is that our infrastructure is in such disrepair that if hostile powers had the capability of cyperterrorism, they would have to practice extreme restraint not to use it to put the entire nation in a blackout for a month. If that means they're waiting for a combined-arms assault, then offense is not going to help us when our "military botnet" doesn't have any electricity to run on.
The recent scare about cyberterrorism causing blackouts in Brazil, only to find that those blackouts were more likely due to natural causes in a poorly maintained electrical grid, supports my point.
I sometimes ask revealing, often ignorant-seeming questions. Maybe they're harder to answer than you think.
I have friends working for the Navy who are taking > 6 months just to order a fscking desktop computer.
I doubt the DoD is capable of pulling this off.
A job for Bill Gates, smartest man in the world. Only he can catch Osama Bin Laden and keep the world safe for democracy. Isn't this all sounding like the story line to a bad movie?
From TFA
Bush's authorization of "information warfare," a broad term that encompasses computerized attacks, has been previously reported by National Journal and other publications. But the details of specific operations that specially trained digital warriors waged through cyberspace aren't widely known, nor has the turnaround in the Iraq ground war been directly attributed to the cyber campaign. The reason that cyber techniques weren't used earlier may have to do with the military's long-held fear that such warfare can quickly spiral out of control. Indeed, in the months before the U.S. invasion of Iraq in March 2003, military planners considered a computerized attack to disable the networks that controlled Iraq's banking system, but they backed off when they realized that those networks were global and connected to banks in France.
In traditional warfare, going after your enemy was easy. Your leader tells you where to go, and you go there. One loads up on supplies, munition, and guns. In the face of cyberwarfare, however, things get messy. A lone soldier with a laptop can cross be anywhere in the world causing problems. Hell, he could be sitting in your very country's back yard and you might not even have a clue. Or, in TFA's case, the splash damage ends up screwing up critical, tangentially connected systems.
Sucks to be the military division that has to track, attack, and manage the diplomatic border issues regarding hackers during times of war.
...proposed building a military "botnet," an army of centrally controlled computers to launch coordinated attacks on other machines.
Dear Terrorist:
I am a Jihadist in Nigeria with $10 million and if I put it into a bank, those infidel Americans will freeze it. If you send me $5,000 to open an account in the Cayman Islands, I will put you in for half!
Or the other one:
Dear Terrorist:
Do want a LARGER penis? With a LARGER penis, you'll be more of a man and be able to take out those infidel Americans! Buy V1@gr4 from us! We will make you BIGGER and STRONGER! Allah be praised!
or:
Make BIG MONEY selling AK-47s from home! Make even more with IEDs!
Kill Americans!
It's NOT me! It's the meds! I'm on 1000mg of Fukitol.
I love when commments get modded down simply for expressing an opinion the moderator doesn't like.
Did you guys really expect no offensive strategies? I think nerds on this site need to get real about the real world.
In ten or twenty years USA won't be a country worthy of attacking
You must be too young to remember - that was a popular 70s meme, with the US being the new Roman Empire on its way to an accelerated collapse.
Don't count the US out until you can count 10. Maybe the reason for its endurance is that the US is really never just one nation of one people.
;-)
:-P
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
Mr President, we must not allow a script-kiddie gap!
A military botnet? No problem; just throw all the federally owned computers in to another one, I'm sure Conficker doesn't mind sharing...
Keeping patched, running anti-malware software and not clicking on stupid things would go a long way.
At some point though we're probably just going to have to start issuing licenses since people seem to be determined to not act responsibly online. Accessing porn and adult materials is fine, but people need to realize that it's their own damned fault if they get a virus. And it's completely inexcusable that people run machines that have viruses on them for prolonged periods of time.
No country would start a war with the USA. Not now or in twenty years. Just look at the USA's "defense" budget compared to the rest of the world _total_.
They're like "that survivalist guy with a whole basement full of guns, ammo, grenades and a rocket launcher or two". It'll be suicide to go up to his house with a BB gun and shoot at it.
If anyone wants to hurt the USA they'd have to do it more sneakily - so there's no obvious target for their nukes, cruise missiles, bombers etc.
Same goes for this "cyberwarfare" thing. A massive concerted attack from your country against the USA will just get you bombed.
The US media likes to make noise about China/<bogeyman of the day> launching cyberattacks on US servers. The fact is, if the Chinese Gov was really involved, the US Gov will just call the Chinese ambassador in, and say: "Hey stop that now". But really which government is going to do that? If my government wanted to start a war with the USA - cyber or otherwise, a real act of patriotism would be to shoot the idiot leader(s) who came up with that idea.
The attacks are mainly from a bunch of script kiddies or criminals. If the US Gov is really serious about reducing the attacks they should just go follow the money/control channels, and jail the people responsible if they're in the USA (won't surprise me if many are actually from the USA- after all Sanford Wallace is in the USA, and the BlueHippo thing was in the USA ).
Shouldn't this be in the "no-shit-sherlock" department?
Do you have ESP?
http://www.theregister.co.uk/2003/03/10/one_printer_one_virus_one/
Hoax or incredible cover-up?
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
Another ironic example is the post by chance directly before this one, entitled: "Perfectly Logical"
http://tech.slashdot.org/comments.pl?sid=1443966&cid=30098058
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
Don't count the US out until you can count 10. Maybe the reason for its endurance is that the US is really never just one nation of one people.
Discussions of exceptionalism aside, you must find the term "homeland" (as in "Homeland Security") as inappropriate (even funny) as I do.
Discussions of exceptionalism aside, you must find the term "homeland" (as in "Homeland Security") as inappropriate (even funny) as I do.
I fucking hate it and it's nothing short of the modern equivalent of Der Fatherland.
I'd find it funny but for the clodhopping jerks in the our country (the US) that somehow _relate_ to it.
I blame the religious right.
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
Isn't this fairly similar to how that short-story got started? The major governments of the world start building up their computers for war, only for each system to eventually link itself to the others and become an emergent A.I.? Granted, the computers in the story were for running real-world warfare, not cyber-attacks, but still...
how about "cease your cyberattacks or we unplug your country from the internet"
Tsunami -- You can't bring a good wave down!
It's "das Vaterland".
Just saying.
Thanks, but I translated that into fake-German-in-old-WWII-movie-speak, in hopes that any homeland-lovers reading that would wake up. ;)
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
We get paid by every single big criminal out there.
We have decades of experience.
We are the best in the world.
We wish you goood luck! ^^
Greetz,
Your Russian hacker community.
Any sufficiently advanced intelligence is indistinguishable from stupidity.
This has cropped up on slashdot before. Can't find the article, but it was more hand-wringing about the vulnerabilities of the American network infrastructure to enemy attack.
Granted, the nature of the Internet is to provide information access from any point in the world, and because of that it can be so easily exploited, commandeered, or broken. But I believe if the $hit ever hit the fan and the Tubes were threatened, those of us who hack and build and kludge the Code would come to its defense. Hundreds of thousands strong, I would wager a citizen-soldier army of l33t coders could well defend this country from its script-kiddie foreign enemies.
All your botz are belong to us.
You say it's inexcusable that it's their own damned fault that they get viruses. So you propose restricting internet access to give them what they want by taking it away.
The fact is, if the Chinese Gov was really involved, the US Gov will just call the Chinese ambassador in, and say: "Hey stop that now".
And then he could reply: "no, and stop bothering us or we'll just start devaluating your currency so much, you're gonna be ruined".
You were speaking about the huge size of the US defence budget, yet it won't help much if most of your equivalently huge debt is owned by a foreign country.
Yeah, it's probably not going to be pretty when China starts calling in its markers and pushes the US. the the breaking point (either a domestic or international one).
It might be a wee bit early to go claiming endurance.
The US has been a superpower for less than 60 years, and has existed for less than 250 years.
The Roman Empire, which you mentioned, and most of history's other great civilizations, were around for rather longer.
Jeez, give it a rest. Mine was a point response to a point question without a need to respond to who's brother can beat up who's brother.
Because a big helicopter fleet and or tank fleet supporting sufficient infantry can take out the missile launching backpackers - oh yeah, well a tactical nuke can take out those guys - oh yeah, well mass drivers moving asteroids and sending them to the right spot can take out the nuke forces - oh yeah, well photon torpedos can take out the orbital mass drivers...
My reply for technology circa pre-1968 - and we didn't do a lot of laser guided weapons then.
And if you'd gone further back, you'd find that the Israelis did not lose that war in 1973 - and the end result was effected with Israeli tanks.
The only thing that you accomplished was to support my original thesis - that the Soviet technology was better than the person to whom I was responding gave them credit for.
Happy now?
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
Seriously? You really think it's a wee bit early to attack the idea that the US will be of no consequence within two decades?
The Roman Empire, as I mentioned it, was in comparison to our stated decline and decadence in the 70s.
I never said - nor even got in the neighbor of saying - or predicting - how long the US would endure. All I said was that I question less than 20.
If you're gonna snipe, pick words, concepts or sentiments that I actually express as a target.
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
K, I'm whoa'd. Misread you, sorry.
Pathological kinda promises Path + Logical - but instead, you get stuck with pathetic.
When I saw "offense" I envisioned a couple crackers in Eastern Europe getting a drone launched Hellfire missile up the rear. Oh well.
No country would start a war with the USA. Not now or in twenty years. Just look at the USA's "defense" budget compared to the rest of the world _total_..
Um, wake up we are at war on several fronts.
We have organized entities trying to kill us. ( perhaps not overly effective to date, but that isnt the point )
We have organized countries trying to crush our economy.
How do YOU define war?
---- Booth was a patriot ----
What about what PLA leaders have published in regards to Information Warfare and ("Informationized Warfare")?
A good starting point is Unrestricted Warfare. See: http://en.wikipedia.org/wiki/Unrestricted_Warfare for links to a PDF version.
--
"This is another type of war, new in its intensity, ancient in its origins—war by guerrillas, subversives, insurgents, assassins; war by ambush instead of by combat; by infiltration, instead of aggression, seeking victory by eroding and exhausting the enemy instead of engaging him. It requires in those situations where we must counter it a whole new kind of strategy, a wholly different kind of force, and therefore a new and wholly different kind of military training."
John F. Kennedy
USMA Graduation Speech, 1962
If you haven't noticed, during that period of time the US *HAS* followed in the steps of the Roman Republic. Not precisely in lock-step, but close. I hope that there's enough play that we escape the horrendous Marius vs. Sulla civil war, but the democracy of the country has declined severely during this period. The presidency has become more imperial. The orders of the president are less subject to question. Etc.
OTOH, now that the US has defeated it's last major enemy (Russia....for some reason China doesn't count. Probably because they defeated us financially without our even noticing it. They own so much US debt they could sink us totally if they ever wanted to take the hit. But they probably won't. I did say there was a lot of play in the model.) the country seems to be collapsing. It's not for lack of military spending, either. We waste more money on the military than most countries spend. (I don't count all military spending as waste. But lots of it is.)
There are differences. E.g., the computer games that are our substitute for the arena, don't actually injure anyone. And they encourage a level of direct participation rather than mere voyeurism. If we go to virtual reality, this level of engagement will increase. But that isn't what killed the Roman Republic. The excesses of the arena happened mainly after the transition to the Empire, though they'd certainly been building up during the later days of the Republic.
What we have is the decay of the power of the common people, and the concentration of power into the hands of a few aristocrats. One of the basic tools of that in the US is the division of political parties into two, and an election system that practically guarantees that the winner will be one of those two. That means that anyone sufficiently wealthy can purchase the loyalty of BOTH candidates before the election. Since there are only two real contenders, it's not even a gamble. And the bribery laws have sufficient loopholes that anyone who is knowledgeable can bid for the vote of an office-holder. It's dangerous for the inexperienced, though. This serves to concentrate power in those who are wealthy enough to buy both sides, and, after them, the politicians and, after them, those with enough money and skills to "convince" the office-holder.
This has long been a problem, but it's become much worse since the 70's. And one of the vehicles of this was a decision by the FCC that networks weren't required to offer equal time to all candidates.
It's possible that the net could reform this, but my bet would be that the laws are instead somehow changed to provide more benefit to those currently in office. And to maintain the expense of campaigning.
It's quite possible that there won't be any dramatic assassination followed by a usurpation as was involved in the shift from the Roman Republic to the Empire, but that didn't really change anything. That merely consolidated changes that either had already happened or were already well in motion. (Note that at first the Imperial mantel was not hereditary, an Augustus initially had to share power with two other co-rulers.)
We've come a long way towards the transition in a shorter period than I had expected. We certainly did it a lot faster than the Romans did. But the signs of the collapse are writ large for those to see who can.
OTOH, the Imperial period of Rome wasn't a bad period for those who stayed out of politics. (Well, and weren't enemies of Rome.) The politics got a lot bloodier, but the lot of the common folk didn't become much worse until quite a bit later.
However, it's worth noting that the Imperial period of Rome was considerably shorter than the Republic was. And it wasn't invaders that destroyed Rome, they merely delivered the final coup, it was internal dissension. Various powerful groups fighting against each other without regard for law or custom striving for ultimate power. If you don't see the roots of that in the here-and-now, you're being willfully blind.
I think we've pushed this "anyone can grow up to be president" thing too far.
That's not what I said. I said, and I quote, "It might be a wee bit early to go claiming endurance." You said, and again, I quote, "Maybe the reason for its endurance is that the US is really never just one nation of one people."
The US is far too young to have shown much "endurance" and certainly too young to need explanations like because it "is really never just one nation of one people."
If the US makes it, in recognizable form, to the magic thousand years that all the big empires seem to aim for, THEN you can start looking for the something special that the US has and all the others lacked.
You don't have a clue what you are talking about. China would only hurt themselves if they tried to start dumping their US treasury holdings, and of course since they peg the yuan to the dollar they would kill their exports. In any case the US is already devaluing the dollar tacitly.
And the US defense budget would have no affect on the strength of the dollar. That is just rubbish.
Please take some time to read up on current events before spouting off your uninformed nonsense.
> yet it won't help much if most of your equivalently huge debt is owned by a foreign country.
Yes, the US Gov owes trillions to other countries BUT that debt is payable in US dollars.
There's a big difference between the US Gov owing somebody lots of US dollars, and you owing somebody lots of US dollars.
You can't legally create US dollars or have your left hand lend your right hand US dollars out of thin air.
The US Gov can. They can create US dolalrs, or lend themselves US dollars.
If the US dollars get devalued, it does not hurt the US Gov as much as it hurts China or other countries that are holding net positive amounts of US dollars, or are owed lots of US dollars. The USA is not like Zimbabwe. Hardly anyone outside of Zimbabwe holds Zimbabwe currency or is owed large amounts of Zimbabwe currency.
Imagine if somebody owes you lots of US dollars, and they are suddenly worth a lot less and can no longer even buy you a loaf of bread. Who does that hurt more? You or the person who owes you?
And the real scenario is that person who owes you money can actually print US dollars too.
So guess who is the one really in deeper shit. It should be obvious that China will want the "show" to go on.