How Nations Use Cyber Tactics in Modern Conflicts

TL;DR

Nation-states have increasingly asserted their power in cyberspace, challenging the early vision of a digital utopia. The period between 2012-2013 marked a significant shift with events like Stuxnet and Snowden's revelations. While the threat of a digital Pearl Harbor is low, espionage and disruption are prevalent. The Internet of Things increases vulnerabilities, and effective security responses remain a challenge.

Transcript

LINDSAY: Good evening, everyone. On behalf of Richard Haass, the president of the Council on Foreign Relations, I want to welcome you all here tonight. I want to thank you all for coming, particularly given the rather unpleasant weather we have outside. You are real troopers to make it here through the storm. I am Jim Lindsay, the director of studi... Read More

Key Insights

• Nation-states have reasserted power in cyberspace, challenging early digital utopia visions.
• The period from 2012 to 2013 marked a shift with events like Stuxnet and Snowden's leaks.
• A digital Pearl Harbor is unlikely; espionage and disruption are more common threats.
• The Internet of Things increases vulnerabilities, with security often being an afterthought.
• Attribution of cyberattacks is possible but complex, involving political decisions.
• China's cyberespionage is mixed; agreements exist but incentives for espionage remain.
• Cyber responses may not always be digital; sanctions and other measures are considered.
• The fragmented Internet challenges the goal of an open, global digital space.

Questions & Answers

Q: What is the hacked world order?

The hacked world order refers to the reassertion of nation-state power in cyberspace, moving away from the early vision of a digital utopia where individuals were empowered. Nation-states have increasingly used cyberspace for espionage, disruption, and asserting sovereignty, marking a significant shift in global digital dynamics.

Q: What marked the inflection point in cyberspace from 2012 to 2013?

The inflection point in cyberspace between 2012 and 2013 was marked by the first leaks about Stuxnet, a malware allegedly used by the United States and Israel against Iran's nuclear facilities, and the revelations by NSA contractor Edward Snowden. This period saw increased cyber activities by nation-states, reasserting their presence in cyberspace.

Q: How dangerous is the current cyber landscape?

The current cyber landscape is characterized by espionage and disruption rather than destructive attacks like a digital Pearl Harbor. While physical damage from cyberattacks is challenging and limited to a few nation-states, the increasing vulnerabilities, especially with the Internet of Things, pose significant challenges.

Q: What is the Internet of Things?

The Internet of Things (IoT) refers to the network of physical devices connected to the internet, allowing them to communicate and interact. Examples include smart appliances, cars, and industrial systems. While IoT offers convenience, it also increases vulnerabilities as security is often not prioritized during development.

Q: Why is security often an afterthought in digital products?

Security is often an afterthought in digital products due to the original design of the internet, which prioritized connectivity over security. Market incentives drive companies to release products quickly to gain users, with security patches applied later. Additionally, user agreements often limit liability for security flaws, reducing the urgency for robust security.

Q: How do countries attribute cyberattacks?

Attributing cyberattacks involves technical analysis and intelligence gathering, which can be time-consuming. While it is possible to identify attackers with high confidence, political decisions determine whether to disclose this information. The complexity lies in proving who ordered the attack and under what authority, rather than just identifying the perpetrators.

Q: What was the significance of the cyber agreement between the US and China?

The cyber agreement between the US and China in 2015 aimed to curb cyberespionage for commercial advantage. While China agreed to this, compliance has been mixed, with reports of continued cyber activities. The agreement reflects ongoing tensions and the challenge of aligning international cyber norms with national interests.

Q: How should nations respond to cyberattacks?

Nations should consider a range of responses to cyberattacks, not limited to digital means. Sanctions, diplomatic measures, and public attribution can be effective in deterring future attacks. The choice of response depends on the nature of the attack, the attackers' identity, and the broader geopolitical context, balancing immediate retaliation with long-term strategy.

Summary & Key Takeaways

• Nation-states have increasingly asserted power in cyberspace, moving away from the early vision of a digital utopia. The period between 2012 and 2013 was pivotal, marked by events like Stuxnet and Snowden's revelations. While the threat of a digital Pearl Harbor is considered low, espionage and disruption are prevalent challenges.

• The Internet of Things raises vulnerabilities as security often comes as an afterthought. Attribution of cyberattacks is possible but complex, requiring time and political decisions. China's cyberespionage activities show mixed compliance with international agreements, reflecting ongoing incentives for such actions.

• Cyber responses may not always be digital; sanctions and other measures can be effective. The fragmented Internet, or 'splinternet,' poses challenges to maintaining an open, global digital space, with countries like China pushing for cyber sovereignty and data localization.