The Jerusalem Post

Brave new world

Are we on the verge of a cyber war?

- • By IDO KILOVATY The author is a Cyber Fellow at the Center for Global Legal Challenges, and Resident Fellow at the Informatio­n Society Project, both at Yale Law School.

Acombinati­on of geopolitic­al and strategic circumstan­ces is leading to an inevitable war. It’s not the type of war we traditiona­lly envision – which includes kinetic weapons, physical destructio­n and most importantl­y, casualties. It’s a war that will undermine informatio­n systems, expose secret political, military and diplomatic documents, target the confidenti­ality, integrity and availabili­ty of critical computer systems, and more.

This grim prediction stems from recent developmen­ts that nearly eliminate any sort of deterrence the United States had in cyberspace. Most importantl­y, the US reaction to the Democratic National Convention hack. US President Barack Obama acknowledg­ed that “when a foreign government tries to impact the integrity of our elections... we need to take action.” And finally last week, he ordered some – the deportatio­n of some Russian diplomats from the US. However, the absence of an immediate, strategic response to the hack is detrimenta­l to deterring future attacks. That could signal to other foreign actors, China for example, that such attacks against critical infrastruc­ture in the US will go unpunished, while giving a major political advantage to the attacker at nearly no cost.

It is unlikely that Russia will be involved in major cyber operations during Donald Trump’s presidency, given that Russian President Vladimir Putin promised to stop hacking after confronted by Obama. However, that still leaves the possible scenario of China engaging in major operations against the US.

This is strengthen­ed by recent troublesom­e events in the realm of US-China affairs, which consist of Trump’s phone call with Taiwanese President Tsai Ing-wen, which infuriated China due to its stance that Taiwan is an integral part of China. Trump later suggested that the US should rethink the One China policy, which naturally did not help in mitigating this tension. Last week, China intercepte­d and seized a US underwater drone in the South China Sea. Although the drone has now been returned, this represents another escalation.

Predicting possible conflicts with a great degree of precision is somewhat difficult. Yet certain indication­s point to a possible escalation in the realm of cyberspace. It was recently reported by cyber-security expert Bruce Schneier that someone is “learning how to take down the Internet,” which essentiall­y means that a nation-state is “testing the ability to manipulate Internet addresses and routes, seeing how long it takes the defenders to respond, and so on. Someone is extensivel­y testing the core defensive capabiliti­es of the companies that provide critical Internet services.” According to Schneier, the evidence “suggests China,” but it has not been establishe­d beyond doubt, due to possible disguise used by the state involved in that probing.

This leads me to my next point, which is that when it comes to cyberspace capabiliti­es, states are constantly pushing the limits and attempting to learn how another states would respond to cyber operations against them. Unfortunat­ely, the DNC hack case study suggests that cyber-attacks against core democratic values may go unpunished, or may have a delayed response, like the diplomats’ deportatio­n. To be clear, the implicatio­ns of the DNC hack transcend the bilateral relations of Russia and the US, and may include other actors who monitor the situation and evaluate their future actions vis-à-vis the US. This suggests that China is aware that the DNC hack was not accompanie­d by a real response on the US’s part. That observatio­n may result in China examining the boundaries of what it can get away with in cyberspace.

It may be hard to predict the precise nature of this “cyber war,” but what’s clear is that it could potentiall­y affect communicat­ions, online services, confidenti­ality of sensitive data, unavailabi­lity of critical systems and much more. This scenario will occur if tensions between China and the US escalate during the Trump presidency, and with the absence of clear deterrence strategy for cyberspace, the Chinese might get away with it.

This cyber war does not even necessaril­y require the utilizatio­n of most sophistica­ted and forceful tools (such as cutting undersea cables, or developing specialize­d malware), it could simply be an immensely widespread distribute­d denial of service (DDoS) attack against DNS providers.

To Americans, such scenarios could be devastatin­g. President Obama rightly observed that the US is more vulnerable to these sort of attacks, due to its ubiquitous digitaliza­tion and dependency on informatio­n systems. The Internet is a global platform, but certain countries are far more dependent on it than others. The meaning would be an asymmetry in the harm that could be caused by such war to the US compared to a country like China.

Often, experts attempt to create a sterility between cyberspace and the physical world. This distinctio­n is immensely detrimenta­l, because it wrongly assumes that activities in cyberspace are unrelated to affairs taking place in the physical sphere. The DNC hack attempted to influence a physical world process, just as the Sony hack in 2014 attempted to coerce Sony to cancel the release of The Interview, a movie which depicts the North Korean regime in a mocking manner. The cyber-war scenario presented in this piece will be just as physical as anything else – it will be a response to an overly Taiwan-friendly administra­tion, as well as policies deteriorat­ing the economic and trade relationsh­ip between China and the US.

Such war should be envisioned as part of a whole picture, involving a multitude of actors with a variety of conflictin­g interests and motives. The realizatio­n that such scenario is possible if certain developmen­ts take place vis-à-vis China may be helpful in strengthen­ing the security of the critical systems currently in place. However, the more important realizatio­n is that certain administra­tion attitudes toward China may come with a price tag in cyberspace.

This integralit­y of the virtual and physical calls for attention in foreign affairs. It assumes that cyber attacks happen for a reason – they are responding to certain events in the world, or attempting to influence ongoing processes, but the crux of the argument is that nation-states will not engage in cyber operations unless doing so would will directly benefit them. The question, therefore, is whether in 2017 cyber war will benefit a nation-state, and what potential victims can do to prevent, or to respond, to such a scenario.

In a recent Forbes piece, Paul Laudicina calls for attention to the prediction that “The first crippling cyberattac­k will be launched on critical infrastruc­ture in a major economy.” Laudicina argues that the next administra­tion should have a leading role in countering the threats emanating from cyberspace. Although stemming from a slightly different perspectiv­e, I believe that this prediction is more real than anything else. Though many experts and leaders have been sounding the alarm regarding a “cyber Pearl Harbor” or “cyber 9/11” for some time, this time it appears that circumstan­ces are maturing in a way that makes cyber war possible.

Obama’s administra­tion has certainly done a lot, but regretfull­y not enough. The White House Commission on Enhancing National Cybersecur­ity released its report on December 1. This report has many important, even original, recommenda­tions. However, it is unclear whether Trump’s administra­tion will implement any of these. In addition, the way the Obama administra­tion dealt with the DNC hack can be seen as another misstep.

All evidence seems to suggest that Trump’s hawkish attitudes toward China may result in the dangerous precedent of a crippling, sustained and state-sponsored cyber war, which will greatly affect not only the military but also the rest of us – those who store their data online, who depend on the Internet for communicat­ion, who need cyberspace for transport control, electricit­y, dam management and more. Although no bullets will be fired, such a scenario might prove to be extremely detrimenta­l and harmful to today’s interconne­cted society. Given that environmen­t, every political step against China should be weighed very, very, carefully. Otherwise, 2017 just might be the year of cyber war.

 ??  ??
 ?? (Reuters) ?? WHO IS hacking who?
(Reuters) WHO IS hacking who?

Newspapers in English

Newspapers from Israel