Is the Military Prepared For Cyberwarfare? 147
pbahra writes "If you think that combating cyber criminals is hard in your organization, imagine doing it in an enterprise with some 18 or so layers of management between the top man (and it is always a man) and the most junior employee. Now imagine that in such an organization, there is a form for everything, that it can take literally decades to buy new equipment, and that you can be jailed for having dirty footwear. But that same organization is charged with helping to defeat shadowy hacker groups who are faster, have better equipment, almost certainly are better funded and don't have to salute every time someone senior walks past them. The modern military is used to operating in what is known as an asymmetric environment, with a distinct imbalance between the two opponents. The problem for the military is that they like to be the big guy. According to a senior officer speaking at the 2011 Annual Defense Lecture in London, when asked if the military was capable of operating at the same speed as their opponents, he admitted they were not."
Not even close to being prepared.. (Score:1)
Re: (Score:2, Insightful)
actually, our military is very good at the blowing shit up and killing people part. this is what they do. hell, they are even very good when we ask them to blow up buildings without scratching the paint of the car parked in front of it.
Re: (Score:2)
when asked if the military was capable of operating at the same speed as their opponents, he admitted they were not.
I know what's wrong! They aren't using enough explosives.
Re: (Score:2)
Re: (Score:1)
I suppose they could be referring to other countries who've developed more resources to deal with a cyberthreat...
Re: (Score:2)
a. what TFA says is not valid for US as well
b. that I think UK has a totally underfunded army
Re: (Score:2)
Re: (Score:2)
Having a high budget, and spending it does not equal better funded.
Take the land warrior system. Your smart phone has better everything except a few software apps,and cost you maybe $500. The military was spending $5000 per soldier to do the same thing.
The military has lots of money but most of it is allocated long before it is handed over. Also the military is 5-10 years behind civilian tech.
Cyberwarfare is dynamic, you cant be 5-10 years behind. That is like windows ME virus againist windows 7,and ubu
Re: (Score:2)
Re: (Score:3)
Re: (Score:1)
What happens if it's thrown out of a helicopter that hasn't been hit by a mule? Or is there someone in charge of making sure all helicopters have been hit by a mule just to be safe?
Re: (Score:2)
Re: (Score:2)
Our military has a hard enough time managing to fight regular wars. If anyone thinks they are going to be ready for a cyberwar, they are kidding themselves.
Of course they're prepared, look at Pearl Harbor, Tonkin Gulf, 911, when they are attacked, the response will be out of proportion to the false flag attacks orchestrated to chip at our rights and privacy online.
WSJ submitting their own stories (Score:2, Interesting)
It's nice to see the Slashdot is now taking direct plugs from the WSJ.
Easy fix (Score:1)
This is an easy one. They just have to outsource this job (especially the cyber-defense) to more capable companies, say in China!
I really like the first comment (Score:2)
Yank at Large wrote:
Though the article purports to expose some interesting new misalignment, this is not a new challenge to the military or a host of other organizations. I used to work at IBM in their personal computing division (now known as Lenovo). Our heavy logistics and multiple levels of approval did not allow the company to bring to market fast enough the kinds of machines that could appeal to customers like other companies could. There is, however, a way to leverage large organizations, much as the human body searches for the right antibody for a disease. You produce many different potential solutions, rather than invest all your resources into one or two ‘optimized’ solutions, and once you find one that works, you leverage the ability of a large organization to quickly replicate and apply that solution. So, like some in the article say, it is not a question of having the right people – they probably already do – it’s a question of having the right environment.
And a guy or gal who has the presence of mind and attention to detail to crack viruses probably also has the focus to keep his uniform in good shape, so those are not necessarily mutually exclusive properties.
I love the way he wields his business-speak and manages to use the words leverage, logistics, market, resources, replicate, solutions and optimised with such ease and finesse. Add to that the analogy with the human body and antibodies and I am not sure how this guy is not in charge of the whole world! He's got my vote!
Re: (Score:1)
I love the way he wields his business-speak and manages to use the words leverage, logistics, market, resources, replicate, solutions and optimised with such ease and finesse. Add to that the analogy with the human body and antibodies and I am not sure how this guy is not in charge of the whole world! He's got my vote!
He might be an optimized multilevel synergistic highly integrated bi-level marketing domain with highly stabilized upward mobility.
Or he might be a buzzword generator.
ah just what we need (Score:5, Interesting)
Re: (Score:2)
it is kind of sad in a funny way that the US marks everything as war.
war on drugs, war on terrorism, war on cyber criminals - heck, those are jobs for law enforcement and police organisations; the military excels on battle grounds, not investigations and arrests.
Even the article took the wrong turn in the 1st sentence, the headline talks about "cyberwarfare" (definition please) and the article starts with "combatting cyber criminals". Those are two distinct issues, catching criminals should be done by civil
Re: (Score:3)
Re: (Score:1)
Re: (Score:2)
Eh? We aren't staring any cyber war. But we must be prepared to defend against a cyber war. Do you just expect us to sit back and let our infrastructure get hacked?
I've got an idea (Score:2)
I propose we pass a law requiring that the military win at least *one* of the wars they're already in before we let them have a new one.
Lets give them a Freebie War first (Score:2)
Lets call it "The War on Stupid/Ignorance"
in fact this could replace the War on Drugs (and a few other things) if done properly.
Get the DOD to cross link resources to the DOE.
Re: (Score:2)
Ah just what we need another war. We got a war on terror, war on drugs, a war on war and a war on not enough war. Lets add a 'Cyber war' so we can get some more tax dollars thrown at us.
* I put on my robe and wizard hat *
Another phony non-issue (Score:2)
One word: Windows (Score:5, Insightful)
Sadly I know it won't happen because Microsoft is always sure to let senior military officers in charge of this kind of stuff know that when the time is right they are always "looking" for people who have held those positions. IE throw lots of government money at us and we'll make sure you get a do-nothing job with an impressive title and salary to match.
Comment removed (Score:5, Informative)
Re: (Score:2)
In true cyberwarfare the realistic core of the problem will be the electronics themselves. You only hack software for cyberespionage, when it actually comes to cyberwarfare the whole idea is to shut system down, whether fixed, mobile, land based, airborne or seaborne. That includes military and or civilian systems.
So exotic and not so exotic particle creation and targeting in order to alter energy states in transistors. Resonant affects and modulations to alter energy levels in circuit pathways. Disrupti
Re: (Score:2)
Re: (Score:2)
And to think I let mod points rot yesterday...
What you say couldn't be more true. When I worked as a developer I was aware of some security practices such as secure password handling and things like that. But when I was our shop's DBA I had no idea what was in the DB STIG. Now I wish I could bring in the developers for every program we support and teach them the current STIG. That way they could design their system more securely.
As it stands it's impossible to get things fixed because it means convincing a
Re: (Score:3)
Windows gets lots of scrutiny - much more than competing OS
You figure the Windows source is getting more people doing better security reviews than Linux? If that's the case, then we'd have to assume that Microsoft isn't heeding the results. I'm not sure which is worse.
It's possible there's a case for military office workers to use Windows. But for vertical applications - well, the NSA went through this evaluation and wrote SELinux.
At least most of the embedded systems projects at the DoD are linux-based.
They HAVE considered alternatives (Score:2)
The considered going with Apple, but Steve Jobs scared them way more than any enemy military.
Then they considered Unix, but couldn't find anyone who could still remember all the commands.
Then they considered going with Linux, but that started a huge argument over which distro was best. That was 10 years ago, and the argument is still going on.
Re: (Score:1)
non-Windows(particularly Linux machines)
Syntax error: Expected " ("
hope(though I know it won't happen)
Syntax error: Expected " ("
system(probably)
Syntax error: Expected " ("
FUBAR = Normal (Score:4, Informative)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
Until that happens, the military will rely on other assets within the federal services, or contractors.
The military will always rely on contractors as long as defense contractors have lobbyists in Washington.
Re: (Score:1)
Re: (Score:2)
Re: (Score:1)
Re: (Score:2)
i can't thi
Re: (Score:1)
How to prepare for cyberwar (Score:5, Interesting)
Step 1: Make our own hardware again.
Step 2: Remove anything critical to our infrastructure from the damned internet.
Step 3: Remove our government computers from the internet and on to a private intranet where they can log everything and hunt down witches/pedophiles in the government while the rest of us get a pass from ineffective feel-good legislation.
Re:How to prepare for cyberwar (Score:5, Insightful)
I think "cyberwarfare" was closer to espionage (Score:2)
There is not a front line.
Provided security is implemented properly (for the US the NSA appears to have good guidelines and tools to do this, but potentially have back doors for everyone else) it is limited to humans being tricked/corrupted by spy and DOS. It seems a lot more suited to (counter) intelligence agencies.
Unless you are talking about being offensive what’s the big deal about it, human error/corruption in not following guidelines is hardly complicated at least in theory and a 'kill switch'
Military are slowly changing (Score:4, Interesting)
I suppose the summary quotes 18 levels because that's approximately the number of ranks in each branch of the military. But it's not really 18 levels of management. Remember the old saying "Privates are for doing things, sergeants are for making certain things get done, officers are for thinking." And even junior officers don't get involved in purchasing decisions. The actual level of management when it comes to purchasing is more like 5 or 6, but even that is a big number.
What really screws things up is that the military purchasing machine is designed for 100k+ of each item with fairly exacting requirements about being easy to operate, able to work in severely adverse conditions, and to be "fair" to everyone wanting to sell to the military. Which means a very complete description (sometimes thousands of pages), open bids, preference to certain categories of bidders, and much else. Oh, and they need to appear accountable for spending all the money that an army sized purchase entails.
So the guys who actually need relatively small amounts of highly specialized equipment are fighting an entrenched bureaucracy who wants to preserve the status quo. Think $500 hammers. I believe it's getting better though, at least in some areas, and the process is getting reduced from decades to months. Even so, they are rarely have the ability to on-line order stuff from commercial vendors and pay with a credit card, although that does happen sometimes.
The guy speaking at the lecture is right - large militaries can't move as fast as small fast moving enemy groups. But when they do move they can usually outspend him by at least 100,000:1. Which probably doesn't help.
The key is to organize like the bad guys - small groups each with their own budget and freedom to use it without having to go up the chain of command.
Re: (Score:2)
Sounds to me that what's needed is to make the "cyber-warfare" division more like the special operations groups. From what I've heard, the SpecOps soldiers are basically given a check to buy their own equipment, since they need something better than the off-the-shelf M4. Same for the rest of their gear. Sure, that means they're costing many times more than the average grunt, but it also means that they're putting cutting-edge top-of-the-line gear into the hands of those best able to utilize it.
We could just
This is a recruitent problem (Score:1)
This is not a technology issue. Three years ago, I walked into a local Burger King and saw a servicewoman using a laptop that was 20% better than my system in every measure, and my laptop at the time was 3 weeks old and Compaq had only sold it for a month when I bought it.
Roughly 2 years ago, however, I saw a recruiter near my apartment. I asked him, if I was to sign up with the Air Force, could he do 2 simple things for me. One, could I get a full waiver from all physical aspects of basic training, and
Re: (Score:1)
This is not a technology issue. Three years ago, I walked into a local Burger King and saw a servicewoman using a laptop that was 20% better than my system in every measure, and my laptop at the time was 3 weeks old and Compaq had only sold it for a month when I bought it.
Roughly 2 years ago, however, I saw a recruiter near my apartment. I asked him, if I was to sign up with the Air Force, could he do 2 simple things for me. One, could I get a full waiver from all physical aspects of basic training, and two, could I get guaranteed placement in the cyber warfare division. I was told no on both requests. This is the problem. The US Military is more interested in transferring soldiers who can hack than recruiting actual hackers. This leads to troops who, while they may have some decent level of skill, are not a fifth as competent in anything cyberwarfare does (or rather, should be doing) as most civilian hackers.
Geeks want to defeat America's enemies as badly as anyone else, but we're not going to have our faces slammed into the dirt by some drill sergeant with a chip on his shoulder to do it. We'll never be able to run 10 miles with 100 pounds of gear on our backs, and while most of us could fire a weapon and hit a target, we're not going to go do it in 140 degree heat in the middle of the desert. On the other hand, when the Chinese, Russians, or whoever else are trying to shutdown the power grid for the whole damn east coast, I don't care if the cyberwarfare division can run or shoot or salute - as long as the lights stay on, they can be as sloppy and physically unfit as they like.
This is the problem with the cyberwarfare division. We're unprepared because the Military is too deep into tradition to attract those who are really the "best and the brightest" for the job in question.
Don't worry though. Eventually this'll get farmed out to some defense contractor once the brass realizes it's costing too much and we suck at it, and those companies are more than willing to hire good hackers, whether they can do 50 pushups or not. I just hope it happens before someone like China decides to bite us in the ass.
Ironic that you should mention farming cyber warfare out to contractors (as I know the Air Force already does this, I was enlisted for 4 years with the USAF), and one of the ones that got hacked (Booze Allen Hamilton) is a prime contractor for a lot of AF systems (as is General Dynamics, Diebold, Lockheed Martin, etc...). The problem is that the enemy can adapt a lot faster than our military can because it is one big bureaucracy on top of another bureaucracy, and it takes too many approvals to change anythi
Re: (Score:2)
The problem with civilian contractors is that the companies are only interested in the money.
The workers might be motivated by national pride and security, but the company is only in it for the money.
Re: (Score:2)
This is totally true. The sad thing is technically minded people who ARE in the military still have a hard time getting any type of computer job. I came to the Air Force after completing an Associates degree in Computer Network Technology (this was a time before security-specific training was really pushed). I went to the recruiter and tried to get any job that was computer related. I had extremely high test scores (overall 92 on my ASVAB) and I qualified for just about any job (there are a few jobs that re
Re: (Score:2)
Re: (Score:2)
Part of your problem is that for a few years there the AF was trying to decide if they were going to keep Programmers and whatnot at all. I think it's finally settled out now and you might want to look into it again.
The extra test (EDPT) is or at least was required to be a programmer, so if you can't pass that then you'll have to look into some of the other related jobs.
The best thing I got out of my AF job though was the basic experienve, veterans preference, and clearance that landed me my first contracto
Re: (Score:2)
run 10 miles with 100 pounds of gear on our backs
Fuuuuuck man, you think we did that in the Air Force? We had to make it 1.5 miles in 12 minutes, I know 60-year olds who could do that.
He should have been able to guarantee you a cyberwarfare job. When I enlisted (2004) we got to pick a job.
Still, it was probably good you never went in. I stuck in the 4 years for the G.I. Bill, but even in a technical field (communications) the military is a load of bullshit. Best thing about being in is getting out at the end. Benefits aren't bad though.
If you really
They will likely turn to the private sector (Score:2)
From a military perspective, cyber-warfare is restricted to figuring out where an attack is coming from and then hitting the source location with a predator drone - collateral damage be damned!! Now that would be true cyber war!! Just think how many hackers would be able to concentrate on the job at hand after a few of their colleagues have become carbon polution or the proxies the have h
Wrong Department (Score:1)
The problem isn't just the military (Score:2)
The military has a certain structure to make sure VERY large scale things remain coordinated - thus the associated bureaucracy. Sure, it'll take decades for the Defense Equipment and Support [www.mod.uk] to clean up the mess in procurement, but let's assume for a moment they could and hit a more commercial frame of mind and speed.
They would still lose the battle.
The problem is in the way security is now managed. For the last 5 years, everyone has settled down into a fine routine of process, patching and playthings: th
cheros: perfect example of absolute cluelessness (Score:2)
Re: (Score:2)
"Dood", you haven't got the faintest clue who I am, what I know and what I do for a living, and I'm not going to enlighten you. Suffice to say you appear to be using the wrong orifice for communication.
You can pick up chatter with intercept, but the bad guys vary their method of transmission which means you'd need to grab everything. Too much hay to find fewer needles, and *if* you find needles you may discover it's old school OTP, which means you can't convert unless their messages are a bit longer - you
Privateers (Score:5, Interesting)
Back in the old days, governments would authorize private parties to go out and do bad things to the enemies of the governments.
http://en.wikipedia.org/wiki/Letter_of_marque [wikipedia.org]
Reviving that concept might work better than trying to use the military for a task it's not optimized for.
Re: (Score:3)
Arrrrr! I be intrigued by yer ideas, and be wishin' ter subscribe ter yer letter o' news.
Re: (Score:2)
It's not a bad idea. Having the military prepare for 'cyberwarfare' is as smart as a company getting the guy who sits in the parking lot booth to do its firewall work.
Are they going to be tasked with 'financial warfare' and 'PR wars' next? How about the 'war on poverty' or the 'war on drugs'? Oh, wait, they are trying to bomb their way out of the medical problem. I guess we can expect core router closets to be bombed if there's ever a 'cyberattack' too.
Your own link (Score:2)
... lists the issuance of letters of marque as a war crime. Not to mention that they applied to war at sea, not in cyberspace. Not to mention that I'm not real comfortable with the idea of subcontracting our national security affairs to LulzSec (or equivalent).
I'm sort of dubious that we even NEED a "cyber" "warfare" capability, but if we do, maybe getting the military to do it isn't such a bad thing.
humm? (Score:2)
Is hard to see how this is a issue. A pistol don't need a permanent conexion to the internet. As much, can have a firmware, that can only be updated manually. Or can have a secure protection to a protected and encrypted lan, completelly separated from the net.
If we are talking about military people in a office, with computers. All normal rules apply. Just don't chose real security or feel good security. Feel good security is done buying products. Real security involve thinking, doing things right, h
Re: (Score:2)
Just like Iran's uranium enrichment centrifugues?
Look through the other end of the sniper scope (Score:2)
Re: (Score:2)
Well, those nuclear heads are delivered by robots...
The British Military and their Cyber capabilities. (Score:1)
A military in general preparing for "Cyberwar" will not have every grunt learn metasploit. There will be a few ultra bright people who get access to all the intelligence related to the enemy capability and develop recommendations based upon current threats and capabilities. These recommendations will be taken to the IT management and they will balance everything together to decide wha
Treat "cyber soldiers" like special forces? (Score:1)
Cyber warriors == special forces (Score:3)
Military not even remotely suited to the task (Score:2)
Cyber "warfare" is not warfare in any traditional sense of the term. The military's entire mentality and organizational structure is completely unsuited for such a task. They should get the fuck out of the business and governments should form teams of actual white-hat hackers to do this kind of thing.
Always Fighting the Last War (Score:3)
Of course the military isn't ready for cyberwarfare. They are always fighting the last war. Recent articles have come out about how the Pentagon is finally restructuring itself to fight terrorism, meaning they've done away with mass troop movements in favor of lots of small actions. Which will work great until we get into a war with China, which will both hack our systems and require mass troop movements. Chinese military doctrine has expressly stated it means to do just that along with financial warfare (suddenly dumping all dollar reserves), shutting off the Panama Canal (which they now control) to impede the American navy, and lots of other outside-the-box thinking.
Re: (Score:2)
People who make these kinds of statements about war with China need to think about it a little. 1) The Chinese own tons of our bonds, and if they were to some how beat us, the bonds would now be... worthless. 2) If they decided to do "financial warfare" by dumping the bonds, that takes time to accomplish, and the act of dumping the first increment of bonds would rapidly depress the price of the remaining bonds. They'd lose tons of money. 3) How many US flagged ships do you think go through the Panama Canal?
Replying to myself, bad form... (Score:2)
View from the inside (Score:1)
A definitive 'no.' As a soldier working in networking, I can guarantee that the Army's understanding of security, our equipment, and most specifically our training are approaching a decade behind the enterprise world, for a number of reasons. The most prominent is that soldiers not only aren't adequately trained to operate even a minimalist network to modern standards, most have no desire or opportunity to improve the state of things.
The 'operators,' those setting up equipment, are all junior enlisted, and
Neither side knows the other (Score:2)
Starting with the original article, it's clear that a lot of the people talking about how bad the military is have no experience in the military. Similarly, most of those talking from military experience have little or no knowledge of commercial practices.
is it part of plan to make it look like we have no (Score:2)
is it part of plan to make it look like we have no idea while we really have a good top secret cyber warfare group somewhere?
Questionable Qualifications (Score:3, Interesting)
The military and the net (Score:1)
Is the military ready? Depends. (Score:2)
Military Command Comments (Score:1)
The British (Score:2)
We laughed at the british armies when we read about the Revolutionary War in school. They would just stand there and take no cover but wait for the enemy to shoot them. They were stupid because of their rules. We laughed at that.
Is the Military Prepared For Cyberwarfare? (Score:1)
Re: (Score:2)
You want to protect America from cyber criminals? Have the govt give more money to high
I think you have hit the nail on the head (Score:2)
Re: (Score:2)
Re: (Score:3)
Exactly. The CIA and NSA and other Alphabet Soup Agencies send their boys and gals to military bases for much of their training. Not just technical stuff, but languages, combat training, and intelligence. I'm really tired of this crap. Anti-sec Teenage anst isn't going to get a massive retaliatory strike if you 'server pawn' a military subcontractor. In a shooting war, all bets are off. The job of the officer is not to be the be-all end-all oracle of knowledge. Your C/O might not be the world's grea
Re: (Score:1)
*rollz eyes*
cant u ignore meaningless details
Re: (Score:2)
Re: (Score:1)
common words help much more, along with using the lest amount of words needed to get across ur meaning,
"jackanape"?
Re: (Score:1)
Yes. It's called the NSA. There's a reason it's budget is estimated at 7 times that of the CIA.
Re: (Score:1)
Re: (Score:2)
No, that's because they have $20,000 toilet seats.
The government does not spend $20,000 on toilet seats. They spend billions on projects that need to be kept secret and need some other way to account for the money. They usually pick things that no one will look at like hammers, toilet seats, screw drivers, paint, etc, and radically inflate those prices to make the books balance. When they are caught, they promise to launch an investigation until the public loses interest. "Nothing to see here. Please move along."
Re: (Score:2)
If you nuke them. The cyber kind of stops.
Well retaliation by force does appear to be part of the US strategies to combat hacking [guardian.co.uk]. The problem is that it is not always clear who is responsible. for example when Iran was hacked by the stuxnet worm there was speculation that it could have originated in the USA, Germany, Israel, the UK and I even read one suggestion that it was an Australian group.
Even though the USA thinks that a military response is valid I doubt if it would act in a similar situation, and I think it would have condemned any attack
Re: (Score:2)
Great. Find them first. They're using the internet. They don't all have to be in the same place. Or even the same continent.
Re: (Score:2)
Um as a taxpayer paying for these programs, thats about as fucking need to know as it gets. I personally wonder why we even have a military when its plain to see, from what I am apparenntly "allowed to know" I haven't seen the military involved in anything I am somewhat glad we were involved in since WWII. I say shut it all down. 50 state militias is all we need for actual defense.
Re: (Score:1)
Re: (Score:2)
Protect me? rotfl
Yah thats pretty much the standard answer I would expect. "You don't need to know for your own good". Sure... but there is no way for us to know the difference between that and utter BS. I don't even see a real threat out there....its all been BS for decades now. Just an excuse to take more tax dollars.
Re: (Score:2)
I really feel put in my place now. Its ok though, afterall, I am ignorant for a reason right? Becuase it would be dangerous for me to know. Makes it really easy for you eh? No need to actually justify anything how about some more vague blanket statements, they are so elucidating.