{"id":38212,"date":"2018-03-29T14:30:03","date_gmt":"2018-03-29T03:30:03","guid":{"rendered":"https:\/\/www.aspistrategist.ru\/?p=38212"},"modified":"2019-05-03T17:12:00","modified_gmt":"2019-05-03T07:12:00","slug":"strategist-six-chris-painter","status":"publish","type":"post","link":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/","title":{"rendered":"The Strategist Six: Chris Painter"},"content":{"rendered":"
<\/figure>\n

Welcome to\u00a0<\/em>The Strategist Six, a feature providing a glimpse into the thinking of prominent academics, government officials, military officers, reporters and interesting individuals from around the world.<\/em><\/p>\n

1. As a top US cyber specialist, you\u2019ve seen the internet shrink the world by allowing people to communicate over vast distances. It\u2019s given us access to massive amounts of information and allowed oppressed people to unite and force change. But it\u2019s also used by terrorists to encourage attacks and by nations to steal commercial and military secrets. Overall, has the net made the world a better or a more dangerous place?<\/strong><\/p>\n

Every new technology from the beginning of mankind has been seized upon by criminals and others who have tried to exploit it. For better or worse, the internet was never conceived as a secure platform. Instead it was designed to ensure communication, survive and be resilient. On balance, it\u2019s been a tremendous force for good in terms of social interaction, global communication and economic growth. So even with the mounting threats, I would definitely say it has made the world a better place.<\/p>\n

However, there\u2019s a wide range of threats and threat actors in cyberspace, including criminals, terrorists who predominantly use the internet to communicate and plan and some nation states who cause disruption and steal sensitive commercial and other information. Cyberspace is also a new domain of warfare where over 100 countries are developing offensive capability. We\u2019ll certainly see these capabilities employed as part of a traditional physical conflict but, as recent cases like the destructive NotPetya worm attributed to Russia illustrate, we\u2019ll also see them outside traditional conflicts. Yet, we don\u2019t have a good idea of what escalation is in cyberspace, what are the bounds of acceptable state behaviour and what the consequences might be if those bounds are breached. We need to work all of those things out.<\/p>\n

The US and Australia have been in the vanguard of advancing an international stability framework for cyberspace. That framework includes applying existing international law to cyberspace, getting consensus on certain voluntary norms (or rules of the road) for responsible state action, and transparency and confidence-building measures such as hotlines to help dial down the chances of misperceptions and avert escalation. There has been good progress in promoting this framework but we also need to be better at deterring bad conduct in cyberspace. There have to be timely and credible consequences for bad actors. That means enhancing our law enforcement capabilities and going after more criminals and locking them up to make clear there\u2019s a cost for their actions.<\/p>\n

It also means we need to be much better at imposing consequences on disruptive nation states. We must act collectively with like-minded countries, see what tools we have to deter a potential adversary\u2019s behaviour, and be willing to use them. There\u2019s a lot left to do in this area. For example, we still need to explore how existing international law maps to cyberspace, further articulate and gain wider acceptance of voluntary norms and improve collective response.<\/p>\n

This work will involve governments, the private sector and civil society. Recently, for example, the Global Commission for the Stability of Cyberspace put forth a proposed norm that stated that state and non-state actors shouldn\u2019t take actions that substantially disrupt the general availability of the global core of the internet.<\/p>\n

If we hope to make real progress combatting the threats we face and seizing on the opportunities that cyberspace provides, we need to get away from thinking that cyber is this boutique, technical policy area and ingrain it in how we think about national security, economic security and foreign policy.<\/p>\n

2. Where are we going with the internet?<\/strong><\/p>\n

We\u2019re not going to go backwards. It\u2019s not a genie you can put back into the bottle. The web is intertwined with everything we do and it\u2019ll continue to evolve and become more useful. You\u2019ll also have more sophisticated attacks and attackers because of that dependency. We\u2019ll be in a cat-and-mouse game to an extent. There\u2019ll be lots of innovation.<\/p>\n

Those who are intent on doing evil or using it for their own purposes will find more sophisticated ways to do that. We\u2019ll do what we can to contain the threats because, ultimately, we have the platform to do good things.<\/p>\n

The technology that\u2019s allowed us to communicate worldwide and enabled all this social interaction can also be used by more repressive countries to monitor and control their citizens. There\u2019s a range of challenges that extend to cybersecurity, human rights and how the internet itself is governed in the future. Now that it\u2019s become such a big deal, the natural instinct of many states is to want to control it. We need to be vigilant in ensuring wide participation by all stakeholders to ensure that this technology continues to evolve and thrive.<\/p>\n

3. Can it ever be completely controlled by anyone or any state?<\/strong><\/p>\n

I don\u2019t think so. You can imagine scenarios where states try to control their piece of the internet. That obviously undermines its global nature and its value to commerce and other things it enables. There\u2019ll be challenges to the architecture of the internet itself but it would be very hard for any one government to control it. But that doesn\u2019t mean there won\u2019t be governments that try.<\/p>\n

4. Have we reached a plateau or will we continue to see the same technological leaps in the cyber area as in the past, and what are your main concerns about the internet and computing generally?<\/strong><\/p>\n

In terms of sheer computing speed, people have often said it\u2019ll slow down because it\u2019s reached its practical limits with the size of circuits. But circuits keep getting smaller\u2014down to the atomic level\u2014and faster and more capable. Every time we think it has reached its limits, someone thinks of new things like stacking chips on top of each other. It hasn\u2019t slowed yet. I think innovation and advancement will continue to accelerate.<\/p>\n

Quantum computing could bring a vast increase in capability. In addition, there will continue to be great innovation in terms of the architecture of the internet and the applications that run on top of it. I don\u2019t know what the next big leap will be but I\u2019m confident something will happen.<\/p>\n

There are a lot of tensions built into the internet. Obviously it would be useful to have easy attribution of internet traffic to go after bad actors, but that\u2019s bad for human rights and privacy so you have to find middle ground. You have a lot of new things coming on line, including the internet of things and the promise of everything from self-driving cars to autonomous health systems. That\u2019s great and can lead to amazing innovation, but if security isn\u2019t built in as we\u2019re doing this, they could be vulnerable to attack and the results will be physical as well. You won\u2019t just lose your information but something bad may happen in the physical world\u2014including critical infrastructure disruption. I worry about that.<\/p>\n

The other thing I really worry about, and this doesn\u2019t get a lot of discussion, is how we preserve the integrity of information. We worry about data being stolen or deleted but we don\u2019t talk enough about what happens when data is made unreliable by a bad actor. For example, if someone gets into your health records and changes your blood type so that the next time you get a transfusion you die, that\u2019s certainly more serious than not being able to access a webpage because of a distributed denial of service attack.<\/p>\n

5. Much military equipment relies on satellites. Could a cyber attack render that inoperable? <\/strong><\/p>\n

Anything that relies on computers and computer networks is potentially vulnerable if the right precautions aren\u2019t taken and protections implemented. Militaries need to be cognizant of how dependent they are on systems that ride on the back of networks\u2014secure networks but also just networks. What would they do if they were unavailable? Some militaries try to train for that\u2014a day or a week without cyber.<\/p>\n

We need to be keenly aware of how dependent we are. What\u2019s our resilience? What\u2019s our bounce back? Attacks on critical infrastructure may be low in their probability but high in their impact if they happen.<\/p>\n

Many people haven\u2019t done the basic hygiene they need to in order to protect themselves and that\u2019s a problem. You can do basic things to protect yourself from most intrusions and attacks. Even when you do that, there are still the dedicated, usually state, actors who can use tools to try to get into your system. But that allows those protecting systems to focus on that smaller set of actors and their tools.<\/p>\n

6. How concerned should we be about advances in artificial intelligence? Are machines going to take over?<\/strong><\/p>\n

There are different camps on this. I think AI, as it\u2019s now constituted, is very helpful. Machine learning and the like can lead to great advances. The dystopian movie view has AI with human characteristics and taking over everything. I suppose that\u2019s a possibility but I don\u2019t think we\u2019re anywhere close to that and we can take precautions. I tend to take a more optimistic view. I don\u2019t think we should shy away from exploring AI because it has so many benefits. Who knows what the future will bring but I don\u2019t think it\u2019ll be a binary thing where suddenly, one day they\u2019re running us.<\/p>\n","protected":false},"excerpt":{"rendered":"

Welcome to\u00a0The Strategist Six, a feature providing a glimpse into the thinking of prominent academics, government officials, military officers, reporters and interesting individuals from around the world. 1. As a top US cyber specialist, you\u2019ve …<\/p>\n","protected":false},"author":587,"featured_media":38215,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[95],"class_list":["post-38212","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general","tag-cyber-security","dinkus-strategist-six"],"acf":[],"yoast_head":"\nThe Strategist Six: Chris Painter | The Strategist<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Strategist Six: Chris Painter | The Strategist\" \/>\n<meta property=\"og:description\" content=\"Welcome to\u00a0The Strategist Six, a feature providing a glimpse into the thinking of prominent academics, government officials, military officers, reporters and interesting individuals from around the world. 1. As a top US cyber specialist, you\u2019ve ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/\" \/>\n<meta property=\"og:site_name\" content=\"The Strategist\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/ASPI.org\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-29T03:30:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-05-03T07:12:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png\" \/>\n\t<meta property=\"og:image:width\" content=\"497\" \/>\n\t<meta property=\"og:image:height\" content=\"500\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Brendan Nicholson\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Jerry Cashman\" \/>\n<meta name=\"twitter:site\" content=\"@ASPI_org\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brendan Nicholson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\",\"url\":\"https:\/\/www.aspistrategist.ru\/\",\"name\":\"The Strategist\",\"description\":\"ASPI's analysis and commentary site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.aspistrategist.ru\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-AU\"},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#primaryimage\",\"url\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png\",\"contentUrl\":\"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png\",\"width\":497,\"height\":500},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/\",\"url\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/\",\"name\":\"The Strategist Six: Chris Painter | The Strategist\",\"isPartOf\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#primaryimage\"},\"datePublished\":\"2018-03-29T03:30:03+00:00\",\"dateModified\":\"2019-05-03T07:12:00+00:00\",\"author\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/05899c3f9ed739cee652cbad02490edb\"},\"breadcrumb\":{\"@id\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#breadcrumb\"},\"inLanguage\":\"en-AU\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.aspistrategist.ru\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Strategist Six: Chris Painter\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/05899c3f9ed739cee652cbad02490edb\",\"name\":\"Brendan Nicholson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-AU\",\"@id\":\"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/432efb040ac92cb9a2cecaa148e1f70f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/432efb040ac92cb9a2cecaa148e1f70f?s=96&d=mm&r=g\",\"caption\":\"Brendan Nicholson\"},\"sameAs\":[\"https:\/\/twitter.com\/Jerry Cashman\"],\"url\":\"https:\/\/www.aspistrategist.ru\/author\/brendan-nicholson\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Strategist Six: Chris Painter | The Strategist","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/","og_locale":"en_US","og_type":"article","og_title":"The Strategist Six: Chris Painter | The Strategist","og_description":"Welcome to\u00a0The Strategist Six, a feature providing a glimpse into the thinking of prominent academics, government officials, military officers, reporters and interesting individuals from around the world. 1. As a top US cyber specialist, you\u2019ve ...","og_url":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/","og_site_name":"The Strategist","article_publisher":"https:\/\/www.facebook.com\/ASPI.org","article_published_time":"2018-03-29T03:30:03+00:00","article_modified_time":"2019-05-03T07:12:00+00:00","og_image":[{"width":497,"height":500,"url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png","type":"image\/png"}],"author":"Brendan Nicholson","twitter_card":"summary_large_image","twitter_creator":"@Jerry Cashman","twitter_site":"@ASPI_org","twitter_misc":{"Written by":"Brendan Nicholson","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/www.aspistrategist.ru\/#website","url":"https:\/\/www.aspistrategist.ru\/","name":"The Strategist","description":"ASPI's analysis and commentary site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.aspistrategist.ru\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-AU"},{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#primaryimage","url":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png","contentUrl":"https:\/\/www.aspistrategist.ru\/wp-content\/uploads\/2018\/03\/Screen-Shot-2018-03-29-at-8.40.41-am.png","width":497,"height":500},{"@type":"WebPage","@id":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/","url":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/","name":"The Strategist Six: Chris Painter | The Strategist","isPartOf":{"@id":"https:\/\/www.aspistrategist.ru\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#primaryimage"},"datePublished":"2018-03-29T03:30:03+00:00","dateModified":"2019-05-03T07:12:00+00:00","author":{"@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/05899c3f9ed739cee652cbad02490edb"},"breadcrumb":{"@id":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#breadcrumb"},"inLanguage":"en-AU","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.aspistrategist.ru\/strategist-six-chris-painter\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.aspistrategist.ru\/"},{"@type":"ListItem","position":2,"name":"The Strategist Six: Chris Painter"}]},{"@type":"Person","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/05899c3f9ed739cee652cbad02490edb","name":"Brendan Nicholson","image":{"@type":"ImageObject","inLanguage":"en-AU","@id":"https:\/\/www.aspistrategist.ru\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/432efb040ac92cb9a2cecaa148e1f70f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/432efb040ac92cb9a2cecaa148e1f70f?s=96&d=mm&r=g","caption":"Brendan Nicholson"},"sameAs":["https:\/\/twitter.com\/Jerry Cashman"],"url":"https:\/\/www.aspistrategist.ru\/author\/brendan-nicholson\/"}]}},"_links":{"self":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/38212"}],"collection":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/users\/587"}],"replies":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/comments?post=38212"}],"version-history":[{"count":7,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/38212\/revisions"}],"predecessor-version":[{"id":47328,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/posts\/38212\/revisions\/47328"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media\/38215"}],"wp:attachment":[{"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/media?parent=38212"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/categories?post=38212"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.aspistrategist.ru\/wp-json\/wp\/v2\/tags?post=38212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}