Experts: US gov't needs to prepare for cyberwar

Cyberwar is difficult to define, but the U.S. needs a strategy, a group of experts says

The U.S. government needs to figure out how it will respond to acts of cyberwar, as foreign governments increasingly look to gain advantages in cyberspace, a group of cybersecurity experts said Wednesday.

One problem, however, is that there wasn't consensus among the panelists on what exactly constitutes an act of war in cyberspace.

The U.S. military has used cyberattacks to disrupt enemy communications in Iraq, but it seems to have backed away from using cyberattacks on major infrastructure, said Shane Harris, a reporter with the National Journal who has written about the U.S. cyberwar policy in Iraq.

So far, most nations have taken the same approach, added James Lewis, director of the technology and public policy program at the Center for Strategic and International Studies, a Washington, D.C., think tank. Nations haven't yet waged all-out cyberwar against each other because they're afraid of retaliation, he said.

There's a difference between war and conflict, he said during a cyberwar discussion at the Congressional Internet Caucus' State of the 'Net conference. "To me, cybercrime and espionage are not acts of war," Lewis added.

An act of war would include disruption of services and physical damage, Lewis said. "As you start to move toward damage and casualties, then we're talking about warfare," he said. "We're in the stages before warfare. We're in the stages where people are poking around."

But cyberwarfare is likely coming, and the U.S. government needs to update its national security strategy to reflect that possibility, Lewis said.

With the possibility of cyberwar, the U.S. government should focus largely on defense, because of outstanding questions about rules of offensive engagement, said Greg Nojeim, senior counsel at the Center for Democracy and Technology, a digital rights group.

"Cyberspace is a battlefield that is much more complicated than other battlefields," he said.

Lewis disagreed, saying the U.S. needs to have both defensive and offensive capabilities. The U.S. needs ways to deal with all kinds of cyberattacks, from cybercriminals to attacks by nations, he said.

"Unless we find a way to use offensive capabilities as part of a deterrence or strategic defense, we will be unable to defeat these opponents," he said.

Part of the problem with responding to cyberattacks has been attributing the attackers, but the attacked companies and agencies can now identify where about 25 percent of attacks come from. The majority of attacks come from inside a couple of countries, including China, he said.

The Chinese government, in recent days, has denied ties with cyberattackers after Google complained about attacks allegedly coming from inside the country.

Robert Holleyman, president and CEO of trade group the Business Software Alliance, said vendors are working hard to decrease vulnerabilties and reduce cyberattacks, but he called on the U.S. Congress to pass a bill requiring breached businesses to report the attacks to affected consumers. He also called for a central place, a sort of "cyber 911" emergency reporting system where businesses could report cyberattacks to government agencies fighting cybercrime.

Lewis suggested that the U.S. government needs to take a bigger role in fighting cyberattacks directly, instead of leaving it to private businesses. "What if we got rid of the Air Force and told our airlines to defend our air space?" he said.

But Nojeim said private companies, and not the government, are best able to defend themselves. "Who knows Google's system better than Google?" he said. "Who can defend them better?"

Join the Good Gear Guide newsletter!

Error: Please check your email address.

Tags cyberwar

Our Back to Business guide highlights the best products for you to boost your productivity at home, on the road, at the office, or in the classroom.

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Grant Gross

IDG News Service
Show Comments

Most Popular Reviews

Latest News Articles

Resources

PCW Evaluation Team

Azadeh Williams

HP OfficeJet Pro 8730

A smarter way to print for busy small business owners, combining speedy printing with scanning and copying, making it easier to produce high quality documents and images at a touch of a button.

Andrew Grant

HP OfficeJet Pro 8730

I've had a multifunction printer in the office going on 10 years now. It was a neat bit of kit back in the day -- print, copy, scan, fax -- when printing over WiFi felt a bit like magic. It’s seen better days though and an upgrade’s well overdue. This HP OfficeJet Pro 8730 looks like it ticks all the same boxes: print, copy, scan, and fax. (Really? Does anyone fax anything any more? I guess it's good to know the facility’s there, just in case.) Printing over WiFi is more-or- less standard these days.

Ed Dawson

HP OfficeJet Pro 8730

As a freelance writer who is always on the go, I like my technology to be both efficient and effective so I can do my job well. The HP OfficeJet Pro 8730 Inkjet Printer ticks all the boxes in terms of form factor, performance and user interface.

Michael Hargreaves

Windows 10 for Business / Dell XPS 13

I’d happily recommend this touchscreen laptop and Windows 10 as a great way to get serious work done at a desk or on the road.

Aysha Strobbe

Windows 10 / HP Spectre x360

Ultimately, I think the Windows 10 environment is excellent for me as it caters for so many different uses. The inclusion of the Xbox app is also great for when you need some downtime too!

Mark Escubio

Windows 10 / Lenovo Yoga 910

For me, the Xbox Play Anywhere is a great new feature as it allows you to play your current Xbox games with higher resolutions and better graphics without forking out extra cash for another copy. Although available titles are still scarce, but I’m sure it will grow in time.

Featured Content

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?