James Torrence
Cyberspace is the newest domain of warfare.[1] In cyberspace, the assailant has the wages over the defender.[2] Cyberspace is unique because it “offers province together with non-state actors the might to wage campaigns against American political, economic, together with security interests” without requiring a physical presence.[3] The 2017 States of America National Security Strategy says that “America’s answer to the challenges together with opportunities of the cyber era volition create upwardly one's heed our hereafter prosperity together with security.”[4] However, inward the 2006 States of America National Security Strategy, the give-and-take “cyber” is mentioned i fourth dimension inward parentheses.[5] The rapid rising of cyber from non beingness a percentage of the National Security Strategy to a determinant of American prosperity together with security agency that policymakers direct maintain footling or no sense developing cybersecurity strategy. To develop an effective foundation for the creation of cybersecurity strategy, cyber policymakers must larn from a historical instance when a novel domain of warfare, speedily evolving technology, together with an surroundings dominated past times the criminal offence presented challenges to conventional defense.
The air domain next World War I together with World War II (with the advent of nuclear weapons) serves every bit an instance of a novel domain amongst evolving applied scientific discipline that did non direct maintain whatever precedent from which policymakers could learn. Like cyberspace, the air domain represents an expanse impossible for the defender to completely encompass which creates opportunities for the assailant together with difficulty for the defender. Italian air might theorist Gilulio Douhet’s operate was the foundation of air might theory next World War I, together with American armed forces strategist Bernard Brodie developed the foundation of nuclear air might strategy during the Cold War. Analysis of Command of the Air past times Douhet andStrategy inward the Missile Age past times Brodie tin give the axe inform the cyber policymaker nigh offensive together with defensive strategy inward a novel domain amongst an surroundings favoring the offense.
Command of the Air together with Lessons for Cyber Policymakers
Douhet argued that it was impossible for “a determined aerial defense” to cut back “the strength of eventual aero-chemical offensives against our province to a betoken where they would live unimportant together with non unsafe to its safety.”[6] According to Douhet, effective aerial defence was non “practically possible to convey into existence.”[7]Douhet vehemently asserted the ineffectiveness of aerial defence because of the finite sum of coin together with resources available to guard against the near-infinite sum of infinite inward the heaven the assailant could occupy.[8] The aerial advantage, inward Douhet’s theory, was amongst the assailant who could e'er notice a weakness inward a defender’s aerial defense. When 2 nations compete for air supremacy, Douhet said:
If 2 nations, Influenza A virus subtype H5N1 together with B, direct maintain equal aerial resources, together with Influenza A virus subtype H5N1 uses all of them offensively spell B uses all of them defensively, B automatically together with gratuitously ensures Influenza A virus subtype H5N1 against whatever aerial offensive but does non ensure itself against an offensive from A. Consequently, B plays into the hands of A, together with does non defend itself either.[9]
Douhet’s declaration nigh equal aerial resources favoring the assailant mirrors the electrical flow province of affairs inward network where “if both the assailant together with defender are given equal resources, the assailant volition prevail” together with that a defender trying to “defeat all attacks” volition invest to a greater extent than resources than an attacker.[10] Douhet’s conclusions regarding how a province should approach the allotment of aerial resources inward an offense-dominated surroundings amongst emerging applied scientific discipline create learning opportunities for cyber policymakers.
Douhet claimed that “much larger forces are needed for defence inward the air than for offense”[11] together with that “the heaven cannot live cutting upwardly into sections simply to delight an aerial defence or an auxiliary aviation.”[12] Because he regarded aerial defence every bit impossible, Douhet argued that “the most practical together with realistic way of preventing enemy planes from coming over together with bombing us is to destroy them.”[13] Furthermore, Douhet claimed that the devastation of enemy aviation assets must spill out inward enemy territory earlier they tin give the axe motion into the air.[14] Douhet argued for proactive offensive measures inward enemy territory to effectively defend against an aerial offensive. Influenza A virus subtype H5N1 proactive offensive assault that must spill out inward enemy territory straight correlates to Defensive Cyber Operations – Response Actions (DCO-RA). In the States of America Army War College’s 2016 Strategic Operations Cyber Guide, at that topographic point is a Definition of DCO-RA that involves defence measures external to the Department of Defense Information Networks (DODIN):
DCO-RA are those deliberate, authorized defensive actions which are taken external to the DODIN to defeat ongoing or imminent threats to defend DOD network capabilities or other designated systems. DCO-RA must live authorized inward accordance amongst (IAW) the standing rules of appointment together with whatever applicable supplemental rules of appointment together with may rising to the aeroplane of role of force. In or so cases, countermeasures are all that is required, but every bit inward the physical domains, the effects of countermeasures are express together with volition typically solely degrade, non defeat, an adversary's activities.[15]
Douhet’s airpower theory advocated pre-emptive strikes to defeat the enemy strength inward a resource-constrained surroundings amongst a domain impossible to defend completely. Cyber policymakers must learn, when appropriate, how to defeat adversary cyber capability at its betoken of root so that a cyberattack does non brand its way into network where it is nearly impossible to defend. Douhet’s airpower theory solely helps cyber policymakers amongst agreement potential opportunities for the criminal offence but does non render whatever solutions for defence inward an offensive-dominated domain. With legal together with ethical constraints, pre-emptive attacks are non e'er possible together with therefore request that the cyber policymaker sympathise how to approach the defence inward an surroundings advantageous to the attacker. Bernard Brodie’s Strategy inward the Missile Age focuses to a greater extent than on defence together with reveals to a greater extent than lessons for the cyber policymaker.
Brodie’s Strategy inward the Missile Age & Lessons for the Defense inward Cyberspace
Unlike Douhet, Brodie advocated for a defensive strategy inward the air domain. Brodie claimed that armed forces officers (like Douhet) “are trained to live biased inward favor of the offensive, much every bit ordinary persons are trained to live biased inward favor of virtue.”[16] Furthermore, Brodie said: “the bias toward the offensive creates special problems inward whatever technologically novel province of affairs where at that topographic point is footling or no relevant state of war sense to assist i to attain a balanced judgment. ”[17] Brodie’s analysis of the air domain amongst the inclusion of nuclear weapons straight applies to network where at that topographic point is no relevant state of war sense to assist cyber policymakers attain a balanced judgment. Brodie cautioned that “in considering the occupation of strategic air defense, then, nosotros must live prepared to notice the armed forces selling the defence short.”[18] Brodie reinforced the merits of the defence together with argued that “the value of armor has been proved inward naval engagements over the previous 80 years, peculiarly at the Battle of Jutland inward World War I, but that of antiaircraft guns on ships had non been similarly demonstrated.”[19] The declaration Brodie made nigh armor proving effective inward the past times is a direct criticism of Douhet meant to reinforce Brodie’s betoken that defence tin give the axe live effective inward an offense-dominated environment.
Brodie argued that policymakers should never lose sight of the “importance of the security of the retaliatory force.”[20] In Brodie’s work, he claimed that the kickoff assault is non the most of import slice of defence strategy, but rather the wellness of the retaliatory force; if the assailant knows that he cannot effectively eliminate all the defender’s nuclear weapons, it volition deter him from attacking for fearfulness of suffering a retaliatory strike.[21] Cyber policymakers must too direct maintain into draw of piece of work organisation human relationship the importance of a cyber retaliatory force. Influenza A virus subtype H5N1 States of America determination to launch an offensive cyberattack (with no or footling focus on defense) could acquire out the States of America susceptible to a retaliatory assault if the assault does non successfully defeat all adversary cyber capabilities. But, if the States of America tin give the axe develop defensive measures that ensure a cyberattack against its infrastructure would non homecoming it incapable of retaliation, so it could deter malicious actors from attacking inward the kickoff place. Brodie’s terminal betoken on the defence was that:
Americans direct maintain to aspect upwardly the fact that if total state of war comes for whatever ground other than our deliberately choosing it inward advance of special provocation (obviously an unlikely eventuality), the chances are high that nosotros volition have rather than deliver the kickoff blow.[22]
Though Brodie was writing nigh nuclear war, his declaration withal holds amongst cyberattacks; because of legal restrictions together with moral considerations, it is probable that the States of America volition have rather than deliver the kickoff blow inward a cyber state of war which necessitates a focus on defense. Cyber policymakers must larn from Brodie together with recollect through defensive cyber measures instead of dogmatically adhering to an attack-first doctrine.
Conclusion
Both Brodie together with Douhet brand points from which the cyber policymaker tin give the axe learn. Douhet emphasizes the demand to defeat aerial attacks at the betoken of root which necessitates striking inward enemy territory. There are times when the States of America volition demand to pre-emptively assault inward network to defend itself. But, pre-emptive attacks are non the solely percentage of a cyber strategy. Brodie cautions that the bias towards the offensive tin give the axe blind strategists to merits of a defensive strategy focused on protecting a retaliatory force. Cyber strategists must too draw of piece of work organisation human relationship for defence of infrastructure that volition afford the States of America the might to live on a cyberattack together with direct maintain plenty operational systems to retaliate. Cyberspace is a new, borderless domain amongst constantly evolving technology. Cyber policymakers must larn from analogous historical examples together with thinkers similar Douhet together with Brodie to develop a foundation from which they tin give the axe create a to a greater extent than secure cyber environment.
End Notes
[1] Christos Athanasiadis & Rizwan, Ali, Cyber every bit NATO’s Newest Operational Domain: The Pathway to Implementation, Cybersecurity: Influenza A virus subtype H5N1 Peer-Reviewed Journal, 1(1), Summer 2017, 48-60, accessed Jan 26, 2018,http://www.ingentaconnect.com/content/hsp/jcs/2017/00000001/00000001/art00006 .
[2] Department of Defense, “The Department of Defense Cyber Strategy,” defense.gov, Apr 2015, accessed September 1, 2017, https://www.defense.gov/Portals/1/features/2015/0415_cyber-strategy/Final_2015_DoD_CYBER_STRATEGY_for_web.pdf , 10.
[3] United States, together with Donald Trump, National Security Strategy of the United States, accessed Dec 30, 2017,https://www.whitehouse.gov/wp-content/uploads/2017/12/NSS-Final-12-18-2017-0905.pdf , 12.
[4] Ibid.
[5] United States, together with George W. Bush, National Security Strategy of the United States, accessed Dec 30, 2017, https://www.state.gov/documents/organization/64884.pdf .
[6] Douhet, Giulio, together with Dino Ferrari, The Command of the Air, (Washington, D.C.: Air Force History together with Museums Program, 1998), 239.
[7] Ibid., 239
[8] Ibid., 237.
[9] Ibid., 241
[10] Andrew Krepenivich, (2012, August 24). Cyberwarfare: Influenza A virus subtype H5N1 Nuclear Option?, csbaonline.org (Online Monograph published August 24, 2012) accessed August 27, 2017. http://csbaonline.org/research/publications/cyber-warfare-a-nuclear-option/publication , 84
[11] Douhet, Giulio, together with Dino Ferrari, The Command of the Air, 239.
[12] Ibid., 241
[13] Ibid.
[14] Ibid., 239.
https://www.csl.army.mil/usacsl/Publications/Strategic_Cyberspace_Operations_Guide_1_June_2016.pdf , 17
[16] Bernard Brodie, Strategy inward the Missile Age (New Jersey: Princeton University Press, 1959).
[17] Ibid., 175
[18] Ibid., 176
[19] Ibid., 176
[20] Ibid., 285.
[21] Ibid.
[22] Ibid., 176
Buat lebih berguna, kongsi:
