Cyberwar, out of the shadows (Q&A) - CNET

Kaplan spoke with CNET about why this world has remained in shadow for so long, what could deter cyberattacks in the future, and why public debate will help.

Q: Cyberwar is hard to define. Why do you think that is?
Kaplan: Right now there isn't much distinction between cyberwar and cybersecurity. It was decided a few years ago the best way to forestall an attack was to know when the attack is coming. You get inside the networks of your prospective opponents. It's the digital equivalent of having spies on the ground.

The dangerous thing is, it's only one step between that and launching a cyberattack. They could attack us with very little notice, and we could attack them with very little notice. If you're worried that the other side is going hack our infrastructure first -- making it much harder to defend ourselves -- there's an incentive to go first.

You write that there is no good strategy for deterring cyberattacks. Why is deterrence so hard?
Kaplan: Part of the problem is that all of these issues have been entangled from the beginning with the National Security Agency and similar agencies, which are all extremely secretive. Contrast that with the nuclear standoff of the 20th century. From the beginning, you had people engaging in conversation about strategy: "How do you not just fight, but deter another country from blowing us up?"

There hasn't been anything like this with cyber. It's been too secretive for anyone with a strategic bent to discuss. But now the NSA has merged with US Cyber Command, a combat command [that leads the military's hacking efforts]. It's not just a tool of espionage, but of war.

It's not in the American tradition to build up power like this without it being open to a public discussion. We've amassed all this stuff that can do all these amazing things before anyone has decided whether we should be doing these things.

How has public awareness of NSA surveillance changed the debate about the US govement's hacking abilities?
Kaplan: I think it's had a very salutary effect. Edward Snowden's revelations about the extent of domestic surveillance prompted [President Barack] Obama to look into possible NSA abuses and whether there were reforms that should be enacted. They came up with some measures and some reforms, a few of which were actually enacted.

There is potential abuse of this. If this technology had been around when Richard Nixon was president and J. Edgar Hoover was director of the CIA, they could have done things that would make what they really did look like tiddlywinks.

What has the impact been on tech companies now that the public is more aware of the US govement's hacking abilities?
Kaplan: There's a long long history of, call it what you will, cooperation or complicity, between telecoms and the intelligence world. In the 1920s, leftovers of the World War I intelligence agency persuaded Weste Union to give it access to all the telegrams coming into the country.

When the software and the Inteet industries started coming about, it actually became a two-way street. When Microsoft presented a very early version of Windows to the NSA for vetting, the NSA found 1,500 points of vulnerability. They left some open so that they could sneak into this system.