How do you get to cyber peace?
Nations are beginning to talk informally about things they could do to reduce tension. And both the UK and US have opened talks with Russia on cyber risk reduction. Communications channels, transparency measures.
The US is very good at cyber offense, as it demonstrated with Stuxnet.
The US is very bad at defense. As is everybody else. There is "offense preference." It costs thousands of times the amount of money to defend as it does to attack.
We have a 4-star general (Keith Alexander) running something called "Cyber Command." It has 27,000 people in it. It has a navy component. The 10th fleet. It has no ships. We have the 24th Airforce. No planes. In cyberspace.
The CIA says that there are 20-30 countries that have cyber warfare units with significant offensive capability. The nations that have announced that are China, Russia, UK, Israel, Germany. But North Korea has it. Brazil has it. The skill-sets required to do cyber war are expanding rapidly.
"No one has died in a cyber war."
We have a body bag mentality. People have to die before it's important. That says that all the espionage that's going on isn't important because no one is dying.
"Everything we do is connected to a network. The internet of machines talking to machines. We haven't secured it."
4 distinct phenomena CHEW
C - Cyber Crime - theft of money
H - Cyber Hacktivism (Anonymous / Wikileaks)
E - Cyber Espionage - theft of information. corporate information
W - Cyber War. haven't seen much of it yet. US destroyed Iran centrifuges. Stuxnet (not exactly war).
Aurora Idaho experiment - big electrical generator blow up because of cyber commands.
Commands that cause trains to derail, commands to cause refineries to catch fire
Richard A. Clarke - Terms
Iranian Wipe Attack
Iranian Flood Attacks knocked US banks off line
knocking out banking
knocking out electricity