A report titled “Resilient Military Systems and the Advanced Cyber Threat” written by Defense Science Board (DSB), a Federal Advisory Committee established to provide independent advice to the Secretary of Defense, presented alarming scenarios on US nation’s military considered unprepared for a full-scale cyber-conflict.
The 138-page report alerts Pentagon on the necessity to improve cyber capabilities to deal with such event, top-tier adversary represents a serious menace in case of cyber war. The numerous initiatives conducted by US Government to improve cyber capabilities are not sufficient to face with sophisticated cyebr attacks by hostile countries, the report remarks that Defense Department “is not prepared to defend against these threats” and its effort leak of a proper coordination, the document also alert central authorities on a “fragmented” dispersion of commitments.
The statements are shocking, you do not need sophisticated computing platforms to hit the country in its vital centers, the technologies are readily available from the Internet. In various occasion cyber warfare experts alerted on the possibility that a conventional warfare operation could be integrated by a cyber offensive, a valuable option that could allow attackers to defense capabilities of adversary.
Tiers I and II attackers primarily exploit known vulnerabilities.
Tiers III and IV attackers are better funded and have a level of expertise and sophistication sufficient to discover new vulnerabilities in systems and to exploit them.
Tiers V and VI attackers can invest large amounts of money (billions) and time (years) to actually create vulnerabilities in systems, including systems that are otherwise strongly protected.
The report alerted on the capabilities of US militias to respond to a joint attack that could adopt conventional weapon and cyber tools to create large damage to the country. The document try to draw a scenario of a global cyber conflict in which skilled adversaries could crash national networks, hit critical infrastructures, corrupt data.
The report sustains the thesis that “with present capabilities and technology it is not possible to defend with confidence against the most sophisticated cyber attacks”, the document states that the process of improvement of cyber capabilities could take years for the Department. The principal need is the building of an effective response to the cyber threats that must include elements of deterrence, mission assurance and offensive cyber capabilities.
Offensive cyber capabilities are fundamental to preserve cyber security of US, the report suggests establishing a well-defined response strategy for cyber attacks contemplating also the use offensive preemptively cyber operations.
Another aspect highlighted by the report is the necessity of hardware/software qualification for all those components produced in countries having high-end cyber-capabilities such as Russia and China, the fears is that these governments could distribute systems and application that could include a backdoor or any other mechanism to interfere with hosting environment.
The report agree on the impossibility to protect any military system, it propose to isolate critical environments reserving for them most advanced defensive measures.
As reported above nuclear option remains ultimate response for deterrence strategy, but it is absolutely necessary that Government is able to ensure security of high critical system also within a full-spectrum, cyber-stressed environment.
The great question is, how much cost this?
It’s clear that there is no time to lose.