{"id":12722,"date":"2014-03-11T14:45:19","date_gmt":"2014-03-11T03:45:19","guid":{"rendered":"http:\/\/www.aspistrategist.ru\/?p=12722"},"modified":"2014-03-12T08:34:37","modified_gmt":"2014-03-11T21:34:37","slug":"australia-and-cyberwar-time-for-a-measured-debate","status":"publish","type":"post","link":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/","title":{"rendered":"Australia and \u2018cyberwar\u2019: time for a measured debate"},"content":{"rendered":"

\"Cyber<\/a><\/p>\n

Last week, we attended a workshop on Information and Cyber Warfare<\/i>, organised by the S. Rajaratnam School of International Studies (RSIS)<\/a> in Singapore. Bringing together speakers from a range of countries and backgrounds, it discussed different aspects and trends of \u2018cyber war\u2019 in Asia\u2014a hot topic for governments, agencies and the analytical community. Refreshingly, the debate refrained from the usual hype about the impending ‘cyber Pearl Harbor\u2019<\/a> and cyber war as an inevitable \u2018game changer\u2019 in the region. Instead, there was a broad consensus about the need for a less alarmist and much more systematic debate on the subject. Indeed, the Australian strategic debate would also profit from a more measured analysis of \u2018cyber war\u2019 and its utility for statecraft.<\/p>\n

Doing so is important for a number or reasons. First, the Australian debate has had a tendency to \u00a0adopt the gloomy narrative that\u00a0\u2018cyber warfare\u2019 is already upon us<\/a>, allowing hostile state and non-state actors to almost strike at will at highly connected and therefore vulnerable modern societies. But while there\u2019s no doubt a great deal of malicious cyber activity is taking place, none of these actions has constituted an act of war. Second, the proposed solutions to this new menace are significant financial and institutional investments in offensive and defensive cyber capabilities to \u2018deter\u2019 in the \u2018cyberspace cold war\u2019<\/a>. We wouldn’t be surprised if Defence were feeling a strong temptation to adopt a military \u2018Cyber Command\u2019 model, akin to developments in the US<\/a> and elsewhere. Third, in the face of the analytically very complicated but often vague cyber environment, pressure is high on policy-makers to \u2018do something\u2019 against the \u2018growing cyber war threat\u2019. But \u2018war\u2019 is the most fundamental form of conflict in the international system, so it\u2019s essential that sober analysis of the real potential of cyber warfare as a tool of statecraft prevails.<\/p>\n

To be sure, we certainly wouldn\u2019t trivialise the impact of cyber operations on countries\u2019 security and defence policy. We recognise, for example, that China\u2019s extensive \u2018cyber espionage\u2019<\/a> activities have already poisoned Sino-US strategic relations. Indeed, in a volatile state of crisis between countries, cyber espionage could well be the trigger for states to go to war. But espionage isn\u2019t an act of war. Neither was the Advanced Persistent Threat (APT) \u2018Stuxnet<\/a>\u2019, a highly sophisticated malware worm that partially sabotaged Iran\u2019s nuclear enrichment program, but which was rapidly neutralised. The fact that it was apparently a US\u2013Israeli state-led operation didn’t make it \u2018cyber warfare\u2019 even though it demonstrated the growing capability and sophistication of cyberweapons. The 2007 Russian cyber attacks against Estonia<\/a> certainly caused temporary problems to Tallinn\u2019s online banking and government infrastructure. But again, it didn’t constitute a case of cyber warfare, despite contrary claims made by the Estonian government at the time. Finally, cyber espionage and cyber crime do cause considerable economic damage but unless they threaten the very existence of the state they also shouldn’t be considered a war.<\/p>\n

This leads to the critical issue of how to define \u2018cyber war\u2019. In our view, it\u2019s unhelpful to classify any form of attack by a state or non-state actor against another state\u2019s computer or information systems as \u2018cyber warfare\u2019. Instead, the \u2018cyber war\u2019 should reflect traditional understandings of what constitutes an act of war<\/a>. That is, states use or threaten the use of military force to deter or compel an adversary. It\u2019s about imposing their will on the enemy. Further, military force can be used to alter or maintain the balance of power. \u2018Cyberwar\u2019 would require a clear political objective.<\/p>\n

If we apply these more restrictive, Clausewitzian criteria, it becomes apparent that \u2018cyberwar\u2019 doesn’t revolutionise warfare<\/a>. Indeed, it\u2019s hard to see how \u2018cyberwar\u2019 can be utilised as a political instrument other than as an adjunct to conventional, terrestrial operations. The current crisis in Crimea proves this point. Apparently Russia infiltrated Ukrainian government computer networks<\/a> with the \u2018Snake\u2019 cyberespionage tool kit. But much more consequential and worrisome for the international community is the physical intervention of Russian troops in Crimea.<\/p>\n

Cyber operations alone can\u2019t inflict enough damage to defeat a sophisticated country such as the United States or Australia. And the RAND Corporation<\/a> isn\u2019t alone in pointing out that cyberattacks as a means of deterrence and coercion face serious limitations, not least because of the lack of attribution, and understanding the intent of an attacker. Even the assumption that offensive cyber operations provide enormous advantages to the attacker is questionable<\/a>. It has been argued that \u2018cyber warfare\u2019 provides less powerful states with an \u2018asymmetric\u2019 advantage against more advanced powers, but this assumes that those advanced powers haven\u2019t invested in their own cyber capabilities. Nations such as North Korea can certainly enhance their espionage activities and create disruption via cyber operations, but ultimately they can\u2019t fight solely in cyberspace and would simply loose a conventional war with more advanced states. In short, fighting a \u2018cyber war\u2019 in isolation from conventional military operations would be of limited utility.<\/p>\n

That\u2019s very likely the reason there hasn’t been a case of \u2018cyber warfare\u2019 in the Asia-Pacific region. \u2018Cyber warfare\u2019 in itself won\u2019t change the regional power balance, although cyber espionage has the potential to allow opponents to understand others\u2019 military capability and to design forces to counter their conventional force. However, Asia-Pacific powers are<\/i> engaged in an intense \u2018cyber competition\u2019<\/a>\u00a0(PDF). This is worrying, as it fuels mistrust and misperception among the regional players. And the strategic narrative of \u2018cyber war\u2019 isn\u2019t helping either.<\/p>\n

What does this all mean for Australia\u2019s approach to \u2018cyber warfare\u2019? While the ADF is certainly wise to invest in capabilities to protect its critical information infrastructure in both war and peacetime, Australian strategic decision-makers would be well-advised to keep a cool head and to see through the fog of cyber warfare. Cyber won\u2019t transform the nature of conflict and military operations nearly as much as did the advent of nuclear weapons. Those who argue otherwise need to make a better case for why that\u2019s theoretically possible and likely.<\/p>\n

Tobias Feakin is a senior analyst at ASPI and Director of the International Cyber Policy Centre.\u00a0<\/em>Benjamin Schreer is a senior analyst at ASPI. Image courtesy of Flickr user watchingfrogsboil<\/a>.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Last week, we attended a workshop on Information and Cyber Warfare, organised by the S. Rajaratnam School of International Studies (RSIS) in Singapore. Bringing together speakers from a range of countries and backgrounds, it discussed …<\/p>\n","protected":false},"author":49,"featured_media":12723,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[719,713,163],"class_list":["post-12722","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-crimea","tag-cyberattack","tag-russia"],"acf":[],"yoast_head":"\nAustralia and \u2018cyberwar\u2019: time for a measured debate | The Strategist<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Australia and \u2018cyberwar\u2019: time for a measured debate | The Strategist\" \/>\n<meta property=\"og:description\" content=\"Last week, we attended a workshop on Information and Cyber Warfare, organised by the S. Rajaratnam School of International Studies (RSIS) in Singapore. Bringing together speakers from a range of countries and backgrounds, it discussed ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/\" \/>\n<meta property=\"og:site_name\" content=\"The Strategist\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ASPI.org\" \/>\n<meta property=\"article:published_time\" content=\"2014-03-11T03:45:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2014-03-11T21:34:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png\" \/>\n\t<meta property=\"og:image:width\" content=\"743\" \/>\n\t<meta property=\"og:image:height\" content=\"458\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Tobias Feakin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:site\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Tobias Feakin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\",\"url\":\"https:\/\/www.aspistrategist.ru\/\",\"name\":\"The Strategist\",\"description\":\"ASPI's analysis and commentary site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.aspistrategist.ru\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-AU\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#primaryimage\",\"url\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png\",\"contentUrl\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png\",\"width\":743,\"height\":458,\"caption\":\"Cyber war?\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/\",\"url\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/\",\"name\":\"Australia and \u2018cyberwar\u2019: time for a measured debate | The Strategist\",\"isPartOf\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#primaryimage\"},\"datePublished\":\"2014-03-11T03:45:19+00:00\",\"dateModified\":\"2014-03-11T21:34:37+00:00\",\"author\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/84f461839f3f37e79509040ae4eeedcd\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#breadcrumb\"},\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.aspistrategist.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Australia and \u2018cyberwar\u2019: time for a measured debate\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/84f461839f3f37e79509040ae4eeedcd\",\"name\":\"Tobias Feakin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a8346dd3562a4d00483b16ff7e8b8df6?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a8346dd3562a4d00483b16ff7e8b8df6?s=96&d=mm&r=g\",\"caption\":\"Tobias Feakin\"},\"url\":\"https:\/\/www.aspistrategist.ru\/author\/tobias-feakin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Australia and \u2018cyberwar\u2019: time for a measured debate | The Strategist","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/","og_locale":"en_US","og_type":"article","og_title":"Australia and \u2018cyberwar\u2019: time for a measured debate | The Strategist","og_description":"Last week, we attended a workshop on Information and Cyber Warfare, organised by the S. Rajaratnam School of International Studies (RSIS) in Singapore. Bringing together speakers from a range of countries and backgrounds, it discussed ...","og_url":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/","og_site_name":"The Strategist","article_publisher":"https:\/\/www.facebook.com\/ASPI.org","article_published_time":"2014-03-11T03:45:19+00:00","article_modified_time":"2014-03-11T21:34:37+00:00","og_image":[{"width":743,"height":458,"url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png","type":"image\/png"}],"author":"Tobias Feakin","twitter_card":"summary_large_image","twitter_creator":"@ASPI_org","twitter_site":"@ASPI_org","twitter_misc":{"Written by":"Tobias Feakin","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.aspistrategist.ru\/#website","url":"https:\/\/www.aspistrategist.ru\/","name":"The Strategist","description":"ASPI's analysis and commentary site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.aspistrategist.ru\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-AU"},{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#primaryimage","url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png","contentUrl":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2014\/03\/war-cyber.png","width":743,"height":458,"caption":"Cyber war?"},{"@type":"WebPage","@id":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/","url":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/","name":"Australia and \u2018cyberwar\u2019: time for a measured debate | The Strategist","isPartOf":{"@id":"https:\/\/www.aspistrategist.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#primaryimage"},"datePublished":"2014-03-11T03:45:19+00:00","dateModified":"2014-03-11T21:34:37+00:00","author":{"@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/84f461839f3f37e79509040ae4eeedcd"},"breadcrumb":{"@id":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#breadcrumb"},"inLanguage":"en-AU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.aspistrategist.ru\/australia-and-cyberwar-time-for-a-measured-debate\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.aspistrategist.ru\/"},{"@type":"ListItem","position":2,"name":"Australia and \u2018cyberwar\u2019: time for a measured debate"}]},{"@type":"Person","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/84f461839f3f37e79509040ae4eeedcd","name":"Tobias Feakin","image":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/a8346dd3562a4d00483b16ff7e8b8df6?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a8346dd3562a4d00483b16ff7e8b8df6?s=96&d=mm&r=g","caption":"Tobias Feakin"},"url":"https:\/\/www.aspistrategist.ru\/author\/tobias-feakin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/12722"}],"collection":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/comments?post=12722"}],"version-history":[{"count":2,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/12722\/revisions"}],"predecessor-version":[{"id":12734,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/12722\/revisions\/12734"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media\/12723"}],"wp:attachment":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media?parent=12722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/categories?post=12722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/tags?post=12722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}