Sunday, June 14, 2015

Cyber War, Netwar, and the Future of Cyberdefense and John Baird Speech to NATO

Bloggers note: Before reading this see John Baird speech to NATO in Ottawa                       9638
http://www.international.gc.ca/media/aff/speeches-discours/2014/11/18b.aspx?lang=eng
Interestingly enough
...........................................................................................

http://www.dni.gov/files/documents/atf/Cyber%20War%20Netwar%20and%20the%20Future%20of%20Cyberdefense_Header.pdf

 
Ver 3.2012

Cyber War, Netwar, and the Future of Cyberdefense

Robert Brose   Office of the Director of National Intelligence1
 
1 The author of this paper is the Lead for Futures and Capability Development at the U.S. Office of the Director of National Intelligence (ODNI). The author prepared this work as a conceptual thought piece as part of his official U.S. Government duties.

However, this paper should not be interpreted as an official policy, policy statement, or endorsement, either expressed or implied, of ODNI or the U.S. Government. This paper is a U.S. Government work. The U.S. Government hereby claims all applicable copyright protection under the laws of any country in which this paper is reproduced, published, or distributed.
 
Washington D.C., United States of America
 
Abstract: Over twenty years ago, Arquilla and Ronfeldt warned that both "Netwar" and "Cyberwar" were coming, and could impact the 21st Century security landscape as significantly as combined arms maneuver warfare had impacted the security landscape of the 20th. Since that time, the concept of "Cyberwar" has received great attention, while the parallel concept of "Netwar" has languished, even as its salience to global security has continued to grow.

This paper suggests that just as Cyber defense organizations have been required to confront Cyberwar, Netwar organizations, or Netwar-savvy Cyberdefense organizations, are increasingly needed to counter Netwar. Revisiting the Netwar concepts of the 1990s, it offers a 21st century Netwar definition; examines Netwar from a non-western perspective, exploring intersections between Netwar and Russian concepts of ‘Information-Psychological,’ Chinese United Front Theory, and Chinese Legal Warfare, and concludes with thoughts on unique roles that today’s Cyber defence organizations may play in future Netwar conflict.





Keywords: Cyberwar, Netwar, Information-Psychological, United Front Theory
 
 
 
1. INTRODUCTION

In the summer of 1993, a twenty-page article titled "Cyberwar is coming!" anticipated many of the challenges that western national security practitioners would encounter in years to follow. The paper featured an inspired emphasis on the socially-transforming effects of information technology suggesting "…the information revolution is strengthening the importance of all forms of networks, such as social networks…"2; anticipated that cyber-concepts could transform the role of militaries, imagining a day when militaries would conduct "hitting without holding"3; and included an eerie forecast of future crises’ in which the U.S. might face "large, well-armed irregular forces, taking maximum advantage of familiar terrain, motivated by religious, ethnic, or tribal zeal… [and able to] move easily within and between the "membranes" of fractionated states." 4 As the centerpiece of this article, authors John Arquilla and David Ronfeldt, then of the RAND Corporation but speaking on their own behalf, defined Cyberwar and Netwar as two emergent forms of warfare meriting greater study.5

2 John Arquilla and David Ronfeldt, "Cyberwar is Coming!," Comparative Strategy Volume 12, Number 2 (1993): 144



3 Arquilla and Ronfeldt, "Cyberwar is Coming!," 157

4 Arquilla and Ronfeldt, "Cyberwar is Coming!," 160

5 Arquilla and Ronfeldt, "Cyberwar is Coming!," 141

6 Arquilla and Ronfeldt, "Cyberwar is Coming!," 146

7 Arquilla and Ronfeldt, "Cyberwar is Coming!," 144
 
Since that time, Cyberwar – the act of "disrupting, if not destroying, information and communication systems…on which an adversary relies in order to know itself…"6 – has received substantial attention, from practitioners, policymakers, industry, and security theorists. However, if Cyberwar served as the bright ‘Yang’ of the paper, its’ shadowy ‘Yin’ counterpart was a Netwar, in which actors overtly and covertly sought to "…disrupt, damage, or modify what a target population knows or thinks it knows about the world around it." 7 It is this darker, less clearly bounded and potentially more profound challenge to the security of open and democratic nations that this paper focuses on in detail, first offering an


updated definition of Netwar, then highlighting Russian and Chinese doctrinal concepts that may be applied in Netwar, and finally concluding with thoughts on how western actors may re-purpose or adapt traditional Cyber organizations for Netwar defence.

2. NETWAR, THEN AND NOW


"Whereas cyberwar refers to knowledge-related conflict at the military level, Netwar applies to societal struggles most often associated with low-intensity conflict…"8
8 Arquilla and Ronfeldt, "Cyberwar is Coming!," 141

9 Arquilla and Ronfeldt, "Cyberwar is Coming!," 144-145

The early concepts put forward by Arquilla and Ronfeldt focused for the most part on what they termed Cyberwar – impacts of emerging network technologies on conventional warfare, and the implications of attacks on the interdependence and transformative connectivity that would result. Of the twenty pages in the article, only a few address Netwar, and the thinking is less developed, but enough emerges from the document to make the following distinctions:9

1. Although it may conducted in concert with Cyberwar, Netwar is qualitatively different from Cyberwar; while Cyberwar targets information systems, Netwar targets societal self- and world-perceptions


2. Netwar may be pursued through any combination of diplomacy, propaganda, psychological campaigns, political and cultural subversion, deception or interference with local media, and efforts to promote dissident or opposition movements via computer networks

3. Netwar may also involve infiltration of computer networks and databases, but if "this leads to targeting an enemy’s military C3I capabilities" the action has crossed from Netwar to Cyberwar

This thinking has since been evolved and refined by the global Cyber security community (Arquilla and Ronfeldt included,) but the prevailing focus has remained Cyberwar. Martin Libicki, writing in Strategic Studies Quarterly, provides a refresh of the Cyberwar concept, but seems to view Cyberwar as an activity predominantly undertaken to support "combat in

the physical domain,"10 and the Tallinn Manual on the International Law Applicable to Cyber Warfare11 defines ‘Cyber’ as the "networked technology" itself, ‘warfare’ as the "use of force," and acknowledges that it does not address Cyber activities "below the level of ‘use of force’."12

10 Martin C. Libicki, "Why Cyber War Will Not and Should Not Have Its Grand Strategist," Strategic Studies Quarterly, Volume 8, No 1 (2014)



11 Michael N. Schmitt, editor, Tallinn Manual on the International Law Applicable to Cyber Warfare (United Kingdom: Cambridge University Press, 2013), 3

12 Michael N. Schmitt, editor, Tallinn Manual on the International Law Applicable to Cyber Warfare (United Kingdom: Cambridge University Press, 2013), 4
 
Yet, would any national security scholar or practitioner dispute that at least some components of Netwar – for example, deliberate combinations of diplomacy, propaganda, and manipulation of media – seem to be growing in the modern geopolitical space? And do we not recognize an increasing potential for delivery of psychological campaigns to our doorstep, and the mobilization of ‘dissident or opposition movements,’ whether at the behest of state or non-state actors, via the Internet? If so, then we must also acknowledge that Netwar has in fact emerged alongside Cyberwar, and offer a definition of it that can enable a more effective and insightful analysis of current events than is possible without it.

3. A WORKING DEFINITION OF MODERN NETWAR

I offer the following as a working definition of Netwar in the 21st Century:




1. Netwar consists of intentional activities to influence the domain of human perception via either overt or hidden channels, in which one or more actors seeks to impose a desired change upon the perception of another actor, in order that this change facilitate second-and third order effects of benefit to them
 
 




2. Netwar does not imply a resort to physical force, non-cooperative modification of digital data, or even, necessarily, an act that violates any written laws of the targeted actor or the present-day international system13
 
13 Cyberwar activities of the ‘Cyber-on-Cyber’ variety – when they do occur – may facilitate Netwar, or be conducted in parallel to Netwar, as may be kinetic forms of warfare, but these are not acts of Netwar in and of themselves.

14 Paul Ducheine and Jelle van Haaster, "Fighting Power, Targeting and Cyber Operations" (paper presented at the 6th International Conference on Cyber Conflict, Tallinn, Estonia, 2014), 307




3. Discrete actions within a Netwar may include collective, personal, or machine-generated speech or action, economic choices, or other legally protected activities, in addition to acts of information conveyance, distortion, or denial that may or may not violate laws or sovereignty
 
 

This is a broad definition, not entirely discontinuous from US doctrinal descriptions of "Diplomatic, Informational, Military, and Economic" (DIME) power, and NATO descriptions of "Cyber operations" conducted as a component of "state power."14 However, while Netwar may entail the use of Cyber systems and tools as conduits, it is not "employment of cyber

capabilities with the primary purpose of achieving [military] objectives,"15 but instead the utilization of Cyber (or social) systems as infrastructure supporting perceptual manipulation aimed at "achieving strategic goals."16

15 Michael N. Schmitt, editor, Tallinn Manual on the International Law Applicable to Cyber Warfare (United Kingdom: Cambridge University Press, 2013), 258, in, "Fighting Power, Targeting and Cyber Operations" by Paul Ducheine and Jelle van Haaster (paper presented at the 6th International Conference on Cyber Conflict, Tallinn, Estonia, 2014), 304

16 Paul Ducheine and Jelle van Haaster, Paul Ducheine and Jelle van Haaster, "Fighting Power, Targeting and Cyber Operations" (paper presented at the 6th International Conference on Cyber Conflict, Tallinn, Estonia, 2014), 305


This broad definition also highlights the challenge of Netwar: employment of the ‘M’ in DIME may violate the UN Charter, intersect NATO article 5, or justify a range of ‘out of band’ responses, but a Netwar "attack" on target perceptions, conducted without attributable use of military force, presents the target with fewer internationally acceptable responses – particularly if they are unprepared, or unable, to respond via a Netwar of their own. It is this very asymmetry of means-legitimacy which a shrewd Netwar practitioner may exploit, and which the following sections explore.

4. NETWAR IN EASTERN PERSPECTIVE

While western national security practitioners may lack a "Grand Strategist" of Netwar, to paraphrase Martin Libicki,17 their eastern counterparts have several to choose from. Qiao Liang and Wang Xiangsui’s relatively recent treatise, Unrestricted Warfare, provides some hints at the deeper theoretical reservoir an eastern strategist might draw upon, but was perhaps better understood as a critique of U.S. – or extant Chinese –methods through an orientalist lens. As some western reviewers have noted, Unrestricted Warfare represented "neither a revolution in military thought nor an executable doctrine for future warfare but a collection of tactics, techniques, and procedures that have been used throughout history."18



17 Libicki, "Why Cyber War Will Not and Should Not Have Its Grand Strategist"
 
18 Major John A. Van Messel, USMC, "Unrestricted Warfare: A Chinese doctrine for future warfare?," (Submitted in partial fulfillment of the requirements for the degree of Master of Operational Studies, United States Marine Corps,School of Advanced Warfighting, 2005)

19 Dean Cheng, "Winning a War Without Fighting," The Washington Times, July 19, 2013, accessed at http://www.heritage.org/research/commentary/2013/7/winning-a-war-without-fighting

20 Arquilla and Ronfeldt themselves likely alluded to Sun-Tzu when they described Cyberwar as an act in which one disrupts means "an adversary relies in order to know itself…"



21 MICROSOFT Word Thesaurus (search for "defeat")
 
For deeper insight, a modern day Netwar practitioner must look farther into the past. From the 64 discrete socio-political conditions described - albeit in semi-mystical terms - within the I-Ching, to the more widely read ‘Art of War’ by Sun-Tzu, Oriental classics offer a wealth of anecdotally expressed thinking on how disparate influences may be brought to bear on an opponent, deflecting, co-opting, or "defeating" them without resort to physical violence. It has become clichéd for western authors to cite Sun-Tzu’s aphorism that "to defeat an enemy without fighting is the acme of skill,"19 20 and then treat the concept superficially, but the very words an English speaker employs in translation may distort understanding of the concepts; in English defeat implies overthrow, downfall, conquest, and rout.21 In contrast, study of Chinese history suggests Sun-Tzu would have likely included any outcome that allowed the protagonist to significantly

advance their interests as a ‘defeat’ for the opponent, and recognized the possibility of ‘opponent’ to become ally or neutral party in an instant22 (in other words, it is the state of effective opposition, not the entity themselves, that must necessarily be defeated.)

22 See various stories recounted in the Chinese classic Romance of the Three Kingdoms, or ‘San-Guo’

23 "X" (George F. Kennan), "The Sources of Soviet Conduct," in "The Sources of Russian Conduct The New Case for Containment" by Alexander Moytel (Foreign Affairs; November 16, 2014), accessed at http://www.foreignaffairs.com/articles/142366/alexander-j-motyl/the-sources-of-russian-conduct

In the traditional eastern perspective every entity is perpetually vying for advantage within a sea of competitive forces, and competition with others is not a discrete (or moral) act to be initiated against a select set of ‘bad guys’ or ‘evil-doers’, but an eternally present and universal fact, which any rational actor denies at their peril. As George Kennan wrote, in describing the Soviet Union of 1947, "…its political action is a fluid stream which moves constantly, wherever it is permitted to move, toward a given goal. Its main concern is to make sure that it has filled every nook and cranny available to it in the basin of world power. But if it finds unassailable barriers in its path, it accepts these philosophically and accommodates itself to them."23 From this perspective, "defeats" are seldom absolute, nor is a "victory" – or alliance - decisive. Thus, Sun-Tzu’s aphorism might be alternately translated as ‘the accomplishment of objectives through persistent persuasion, dissuasion, and manipulation is preferable to a resort to conflict in the physical domain’ – a mission statement that seems well-aligned with Netwar.

Strategists like Sun-Tzu are creatures of an ancient past, and at first glance may seem several orders-removed from today, but if one looks at the 20th Century writings and actions of eastern powers, one can find concepts bridging the gap between these primeval concepts and the present. These include Russia’s "Information Psychological," and the Chinese concepts of United Front Theory and Legal Warfare. Although each is different, they hold in common the basic premise that something resembling Netwar can and should be conducted in service of state objectives, and their study can serve as both tools to understand foreign perspective, and as concepts to inform modern Netwar.

5. INFORMATION-PSYCHOLOGICAL

"Excessive data do not enlighten the reader or the listener; they drown him. He cannot remember them all, or coordinate them, or understand them; if he does not want to risk losing his mind, he will merely draw a general picture from them. And the more facts supplied, the more simplistic the image…"24

24 Jaques Ellul, "Propaganda," (1965) in WIKIPEDIA accessed at http://en.wikipedia.org/wiki/Jacques_Ellul

25 Valery Gerasimov, "The Value of Science in Prediction," in The ‘Gerasimov Doctrine’ and Russian Non-Linear War, by Mark Galeotti, the Blog "In Moscow’s Shadows," accessed at https://inmoscowsshadows.wordpress.com/2014/07/06/the-gerasimov-doctrine-and-russian-non-linear-war/

26 Sam Jones, "Ukraine: Russia’s new art of war," Financial Times, August 28, 2014, accessed at http://www.ft.com/cms/s/2/ea5e82fa-2e0c-11e4-b760-00144feabdc0.html#axzz3TdT0UrNC

Just as Unrestricted Warfare serves as a landmark for westerners seeking an entrée into the world of Chinese strategic thought, a recent article by Russia’s General Valery Gerasimov has of-late served to crystallize western awareness of asymmetric – or ‘hybrid’ - warfare as an emerging Russian forte. Writing in a 2013 issue of Voenno-promyshlennyi kur’er, or the Military-Industrial Courier, then Chief of the General Staff Gerasimov suggested that the "nonmilitary means of achieving political and strategic goals," which he characterized as "political, economic, informational, humanitarian, and other nonmilitary measures — applied in coordination with the protest potential of the population," were beginning to exceed traditional "kinetic" means in their net effectiveness.25 Often referred to as the "Gerasimov Doctrine," this article has sometimes been described in the west as "prophetic"26 in nature, but in reality merely summarizes and reframes the last fifteen years of evolution in Russian Military thinking.

In his 2005 overview of global Information Operations concepts Cyber Silhouettes, Timothy Thomas noted that circa 2000, Russian military doctrine had already begun to differentiate between two forms of information conflict, acts of "Information Technical" and acts of "Information Psychological." Information Technical was associated with concepts that approximate today’s western concepts of Cyberwar -

"…technical intelligence devices, means and measures for protecting information, super-high-frequency weapons …radio-electronic countermeasures, electromagnetic impulse weapons, and special software and hardware."27 In contrast, Information Psychological was associated with use of the mass-media, and with the employment of "nonlethal weapons, psychotronic tools, and special pharmaceuticals." While these latter exotica fall outside the scope of this paper, study suggests Russia is using the mass-media, per Information Psychological, in its’ historic and present-day conduct of Netwar.



27 Timothy Thomas, Cyber Silhouettes (Fort Leavenworth KS: Foreign Military Studies Office, 2005), 79

28 Timothy Thomas, Cyber Silhouettes,183

29 Timothy Thomas, Cyber Silhouettes, 82

30 Timothy Thomas, Cyber Silhouettes, 183
 
Whatever capabilities of propaganda the Soviet Union may have built up in the years preceding, a robust Information Psychological capability was lacking during the early years of post-Soviet Russian state. During the 1994-1996 period of the Chechen conflict, the Russian military failed to take an active part in generating content to fill the global media space, and when it did communicate to the media, did so haphazardly.28 Russian journalists – at the time, still relatively free from state control29 - received both preferential access, and even funding for minor expenses, from a Chechen community spanning national borders as they reported on the conflict. Meanwhile, Russia’s Chechen adversaries deployed mobile television production teams to support a dedicated Ministry of Information. In the words of Russian Major General Zolotarev, "the Chechen campaign of 1994-1996 by military definition was three-quarters won by the Russian Army by August 1996, but by that time it had lost 100% in infospace."30 It was this era of Netwar failure that drove the next stage in Russian thinking.

By 1999 – just before the emergence of Information Psychological in the open literature – Russia demonstrated an ability to execute at least components of a Netwar in Chechnya. The Russian military supplied

videos and briefing material through centers established in areas that were serving as staging areas for Russian journalists in the neighboring republics of Dagestan and North Ossetia.31 Russian authorities also censored any content deemed adversary propaganda, initially shutting off independent reporting, and then maintaining bans of certain types of content throughout the conflict.32 By the end of 1999, a new centralized Russian Information Center (RIC) was filtering content from the theatre of operations, and information from any foreign publications to be disseminated inside Russia,33 with relatively crude censorship approaches complemented by shaping of themes and the tone of coverage associated with the Russian military itself, at least when directed at the domestic population. Emil Pain, a Russian trained ethno-sociologist and an "advisor to the Russian Federation President since 1996,"34 noted that by 2000, the very terminology used to describe the conflict had shifted. The Army was described as simply "working" in Chechnya, with the assaults it conducted termed "special operation[s]." Addressing the strategic approach that was being undertaken, Pain suggested Russia had initiated a deliberate strategy to "reprogram the mass consciousness" by promulgating new psycho-perceptual models of the world, to include a "new [type of] war"



31 Timothy Thomas, Cyber Silhouettes, 82

32 Timothy Thomas, Cyber Silhouettes, 184
 
33 The timing of RIC establishment generally coincides with both Vladimir Putin’s assumption of the Presidency, and with a formal "Resolution 1538" (R-1538) of the Russian President. However, there is divergence in western accounts regarding the timing of both R-1538 and the stand-up of the RIC, raising the possibility that the "resolution" may have actually served to retroactively legitimize an Information Psychological fait-accompli. Thomas cites December of 1999 as the date for R-1538, and implies the RIC soon followed, while Paul Rich, writing in Crises in the Caucasus: Russia, Georgia, and the West (Routledge, 2013) claims the RIC was established by a "Governmental decree of 7 October." Suggesting even greater lag between RIC establishment and R-1538, European IO expert Daniel Ventre (who highlights the resolutions’ parallel role in strengthening the powers of Russia’s Federal Security Bureau) gives 7 February 2000 as the date of R-1538 [see Daniel Ventre, Information Warfare, (United Kingdom, ISTE Ltd, and United States of America, John Wiley and Sons, 2009),] while Google’s cache holds a 13 January 2000 Voice of Russia interview with then RIC-head Mikhail Margelov, stating that the RIC had been "opened on October 1st by the government."

34 "Biography of Emil Pain" (Stanford University) accessed 5 December 2014 at http://web.stanford.edu/group/Russia20/pain_bio.htm

model, and a "Free Chechen" model, in which the Chechen people eagerly sought Russian liberation.35



35 Timothy Thomas, Cyber Silhouettes, 185

36 S. P. Rastorguyev in Timothy Thomas, Cyber Silhouettes, 78
 
37 S. A. Bogdanov, "The Probable Appearance of Future Warfare," (Voyennaya Mysl [Military Thought], 15 December 2003) as translated and downloaded from the FBIS website in May 2005, per Timothy Thomas, Cyber Silhouettes, 79

By 2003, Russian military theorist S. P. Rastorguyev offered a description of information-centric conflict in which the final objective was to effect the knowledge of a specific information system (in context, clearly meant to include both machines and persons,) and the purposeful use of that knowledge to "distort the model of the victim’s world." Clarifying that both target and means could be other-than-digital, Rastorguyev defined an information weapon as "…any technical, biological, or social means or system that is used for the purposeful production, processing, transmitting, presenting, or blocking of data and or processes that work with the data."36 The same year, writing in Russia’s Military Thought, S.A. Bogdanov suggested the goals of contemporary armed struggle were obtainable by a combination of "military, economic, and ‘information-technical’ and ‘information-psychological’ means,37 suggesting the potential for Russian integration of Netwar alongside Cyberwar and traditional conflict. Thus, in Netwar per Bogdanov, one would expect to see the use of military power as a means to shape perceptions of a target audience (either in concert with, or absent traditional acts of violence); use of economic levers; and use of mass-media a-la Information Psychological, all integrated under a coherent strategy. A lesser, mere execution of Information Psychological alone, would at minimum seek to engage mass media in the struggle, and seek to use it to distort target perceptions to Russian advantage.

However, Moscow faced difficulty in transforming these concepts into tools that worked reliably outside Russia. Writing in The Menace of Unreality: How the Kremlin Weaponizes Information, Culture, and Money, authors Pomerantsev and Weiss suggest that when Russian authorities attempted to ensure victory for Viktor Yanukovych, a pro-Russian candidate in the 2004 Ukrainian elections, they found themselves unable

to dominate the perceptual environment. As a result, at least one Russian media operative was forced to flee Ukraine in disguise as the Orange Revolution brought Victor Yuschenko to power. And four years, later during Russia’s conflict with Georgia, despite securing services of external public relations firms and establishing the Russia Today (RT) television channel, Russian elites still perceived a failure to achieve victory in the external information domain.38



38 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money, (New York: Institute of Modern Russia, 2014), 12
 
39 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money, 12 – in particular, citing Igor Panarin in "Recasting the Red Star" by Timothy Thomas (Foreign Military Studies Office, 2011)

40 Valery Gerasimov, "The Value of Science in Prediction," in The ‘Gerasimov Doctrine’ and Russian Non-Linear War, by Mark Galeotti, the Blog "In Moscow’s Shadows," accessed at https://inmoscowsshadows.wordpress.com/2014/07/06/the-gerasimov-doctrine-and-russian-non-linear-war/

41 V.S. Pirumov, Informatsionne Protivoborstvo. 3. Moscow, 2010, in Timothy Thomas, "Recasting the Red Star," (Foreign Military Studies Office, 2011), in Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information,Culture and Money, 12

Perhaps in response to this weakness, structures Russia used to manage Netwar were once again revised. A position for a Presidential Special Advisor for Information and Propaganda Activities was established, and conduits under state control were expanded to include international "Non"-Governmental Organizations working alongside the Russian information agencies and "information troops made up of state and military news media" 39 By 2010, Rear Admiral Pirumov was already anticipating Gerasimov’s more recent assertion that "wars are no longer declared and, having begun, proceed according to an unfamiliar template,"40 describing information ‘warfare’ as an activity that would be conducted in both wartime and peacetime, with a goal of securing "national policy objectives" through influence on an opponent’s information systems and "psychic conditions," via promulgation of disinformation; societal and situational manipulation; "crises control"; propaganda efforts directed at effecting "conversion, separation, demoralization, desertion, [and] captivity"; lobbying; and blackmail. 41 President Putin himself reinforced this conceptualization of an eternal

battle of influence when he described "soft power" as consisting of a "matrix of tools and methods to reach foreign policy goals … by exerting information and other levers of influence."42 43

42 Putin’s concept of "soft power," which closely approximates Netwar, stands in contrast to western views of "soft power" as a normative attraction derived from actions making one desirable as a model or ally.



43 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money, 12
 
44 Michael John Williams, "Russia’s New Doctrine: How the Kremlin Has Learned to Fight Tomorrow’s War Today," Center for European Policy Analysis, 09 May 2014, accessed at http://cepa.org/content/russia%E2%80%99s-new-doctrine-how-kremlin-has-learned-fight-tomorrow%E2%80%99s-war-today

45 John Baird, "Address by Minister Baird to the NATO Council of Canada Conference - Ukraine: The Future of International Norms; November 18, 2014 - Ottawa, Ontario" accessed at http://www.international.gc.ca/media/aff/speeches-discours/2014/11/18b.aspx?lang=eng

At present, many believe this type of Information Psychological is being actively practiced by Russia. Michael John Williams, an Associate Scholar at the Center for European Policy Analysis, citing Gerasimov, Bogdanov, and Russian strategist Sergey Chekinov, describes something much like Information Psychological as the first of two phases in modern Russian conflict, suggesting in phase one "…unconventional operations are undertaken to manipulate public opinion at home, in the target country and foreign press. Eventually Russian forces, under the guise of domestic militants, will be deployed. This marks the end of the unconventional operations. If successful, the Kremlin then uses legal language to legitimate the intervention as one protecting "human rights" in the target country. The second phase is thus a much more conventional operation. In the case of Crimea, the operation was so successful that the conventional deployment barely required a shot to be fired."44 Canada’s Foreign Minister Baird summarized the situation more succinctly, and with a focus on aspects of Information Psychological directed farther abroad, suggesting Russia was "…polluting the opinion-making process in the west…[via]…the active manipulation of information."45


Russia’s Netwar tools are diverse: RT has expanded to include multilingual news, a wire service, radio channels, and enjoys a budget measured in the

hundreds of millions of dollars.46 "Voice of Russia" has re-branded itself as "Sputnik," and is establishing a network of media hubs in 30 cities abroad,47 echoing the establishment of the media centers during the Chechen conflict. Some researchers suggest Moscow also employs armies of online "trolls" to supplement these overt channels, using multiple social media accounts to participate in online discussions, and recruiting thousands of Twitter followers under multiple online identities.48 The existence of such obscured meme amplification architectures may explain propagation of supposedly "leaked" satellite images purporting to show that Flight MH17 was downed by Ukrainian aircraft, even as other online communities note inconsistency and brand the images fake.49



46 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money, 12
 
47 Stephen Ennis, "Russia's global media operation under the spotlight," BBC News Online Europe, 16 Nov 2014, accessed at http://www.bbc.com/news/world-europe-30040363



48 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money,17
 
49 Will Stewart and Amy Ziniak, "Were MH17 'satellite images' photoshopped? Report slams new surveillance pictures released by Russian state broadcaster as a 'shoddy fake'," Mail Online and Daily Mail Australia, 16 November 2014, accessed at http://www.dailymail.co.uk/news/article-2836245/Report-slams-new-surveillance-photos-released-Russian-state-broadcaster-MH17-shot-shoddy-fake.html



50 Peter Pomerantsev and Michael Weiss, The Menace of Unreality: How the Kremlin Weaponizes Information, Culture and Money
 
51 Mark Franchetti, Toby Harnden and Michael Sheridan, "Kremlin Calling," The Sunday Times, 16 November 2014, accessed at http://www.thesundaytimes.co.uk/sto/news/focus/article1484299.ece

However, arguments of "real" or "fake" may miss the underlying intent of Information Psychological. Pomerantsev and Weiss suggest Moscow "…exploits the idea of freedom of information to inject disinformation into society … not to persuade (as in classic public diplomacy) or earn credibility but to sow confusion via conspiracy theories and proliferate falsehoods [and] … exacerbate divides."50 Fiona Hill, of the Brookings Institution is more direct, suggesting that "Putin is aiming for that large swathe of the population, especially in the United States, that is non-conformist and deeply suspicious of their own government. Then in Europe there are those who follow populists and the far right and far left who are very prone to seeing their own governments as traitors to the national cause, or inept or overbearing."51 If these hypotheses are correct, the west should expect coordinated targeting of issues and communities pre-disposed to question

domestic authority, and to accept – or at least entertain – alternate narratives that serve Moscow’s interest. Information Psychological is thus not a logical contest, but an emotional contest for the hearts and minds of the swing votes and interests in targeted systems. And it is here that United Front Theory most clearly comes into play.

6. UNITED FRONT THEORY




"Cooperate with anybody who is not opposing us today, even though he did so only yesterday."52
 
 
52 Mao Tse-Tung, in Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History (Stanford CA: Stanford University Press, 1967), 168
 
53 Introduced by Hendricus Sneevliet, a Dutch Comintern agent operating first in Indonesia, and then in China’s Eastern coastal cities.



Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History (Stanford CA: Stanford University Press, 1967), 15
 
55 Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History

56 Mao Tse-Tung, in Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History, 168
 
United Front Theory is, in simplest form, a strategy of a deliberately (and dynamically) shifting the boundary between ideological friend and foe in order to maximize the community aligned with a protagonist while isolating an opponent. Lyman Van Slyke, who chronicled the evolution of this approach within the Chinese Communist Party (CCP), suggests it emerged as a CCP tactic during the early 1920s,5354 when CCP members (then a tiny minority) sought dual membership in the more powerful Nationalist Kuomintang (KMT) party as a means to initially reach, and ultimately co-opt, a greater number of followers.55

United Front Theory served as a useful tool to both guide and rationalize CCP policy regarding relations with, and accommodation to, the KMT. Toward the end of World War Two, Mao Tse-Tung suggested that in areas controlled by the KMT, Chinese communists should engage an extant social movement "…embracing various social strata…" and "…cooperate with anybody who is not opposing us today."56 Here we see a willingness to put aside past conflict to realize a shared aim, but we should not read into this any intent of Mao to reach lasting accommodation with the KMT! Instead, recognizing the CCP was better served for the moment by "uniting" with the KMT against the Japanese, Mao and his comrades placed the CCP in a position from which it could survive and build capacity for a future day, while still reserving the option to re-draw the boundaries that separated friend and foe.

This was exactly what occurred in 1945 when, following Japan’s surrender, the CCP re-drew a boundary which still (at least nominally) included the KMT as allies, but posited the nebulous presence of elements that sought to perpetuate a civil war within China as the new enemy, in the knowledge that the US (at the time, a power the CCP sought to co-opt or at least neutralize) feared just such a civil war. Within a few months, the line was shifted again, as goals of "peace" and "unity" rapidly morphed into calls for "an anti-feudal united front" (language that both conformed to the rejection of dynastic legitimacy that underpinned both KMT and CCP platforms, while also subtly playing to more radical Communist concepts,) then ultimately into the existential need for an "anti-Chiang [Kai Shek, the KMT leader] united front."57 I believe this meme evolution suggests United Front Theory guided a deliberate CCP information strategy to:



57 Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History, 188-189
 
1. Present the CCP in a favorable light to both extant allies and potentially undecided parties

2. Co-opt potential resources of an opponent by actively and selectively framing the debate

3. Define, isolate, and ultimately destroy legitimacy of a specific, manageable subset of opponents

In other words, United Front Theory served the CCP as a Netwar management tool, allowing identification of potential conceptual boundaries that could be promulgated to isolate a specific subset of an adversary, while simultaneously framing the public debate in terms that deterred the target’s potential allies from associating with it.


United Front Theory is based upon Marxist dialectics and theories of "contradiction," and as refined by Mao, posits the presence of both a principle contradiction and many lesser contradictions at any given moment. The principle contradiction cannot be resolved without struggle, and is thus deemed to be an "antagonistic" contradiction. Many lesser, "non-antagonistic" contradictions also exist, but can be put on hold until the initial "antagonistic" contradiction is resolved, and any third parties with whom a "non-antagonistic" contradiction exists may be dynamically

co-opted within the United Front to facilitate resolution of the "antagonistic" contradiction. However, upon resolution of the primary "antagonistic" contradiction, by definition a new "antagonistic" contradiction will evolve to take the primary place. Thus at all times there is a core protagonist group, a "wavering" middle that may split either way, and an existential foe who must be destroyed or transformed into a non-contradictory entity.58



58 Lyman Van Slyke, Enemies and Friends: The United Front in Chinese Communist History, 249-251
 
59 Kate Kaye, "Post Election, Campaigns Try to Link Targeted Ads to Actual Votes - Here's How Political Groups Know When Digital Ads Drove Voters to the Polls," AdAge, November 24, 2014, accessed at http://adage.com/article/datadriven-marketing/political-campaigns-link-voter-aimed-ads-actual-votes/295936/

60 Brian Christian, "The A/B Test: Inside the Technology That’s Changing the Rules of Business," WIRED online, 25 April 2012, accessed at www.wired.com

61 Seth Grimes, "What are the most powerful open-source sentiment-analysis tools?," 8 January 2012, Breakthrough Analysis, accessed at http://breakthroughanalysis.com/2012/01/08/what-are-the-most-powerful-open-source-sentiment-analysis-tools/



62 "2014 Sentiment Analysis Symposium," accessed at http://sentimentsymposium.com/
 
The art of executing United Front Theory is to reduce to the absolute minimum the boundaries of the entity deemed to be in "antagonistic contradiction" (thus allowing the most concentrated and efficient application of resources against it,) to co-opt (or deter from participation) the broadest possible swath of the "wavering" middle (thereby eliminating them as an adversary resource, and possibly leveraging them as a supporting resource,) and to anticipate, and stand ready to re-draw, the new boundaries of contradiction as the strategic environment evolves (an opponent may also be seeking to do the same, and the new psycho-structural features, once established, may require significant effort to erode.) Mao and the CCP historically executed this evolution in fast geopolitical time, sometimes acting within days. In a modern age of targeted political messaging,59 online A-B testing (the presentation of unique versions of a message to different groups within a targeted online audience, in order to measure responses and optimize desired effect,)60 and near-real-time semantic analysis,61 62 United Front Theory can operate at netspeed.

7. LEGAL WARFARE

At this point it is worth noting that while information and sentiment may move at netspeed, their lumbering, normative counterparts - policy and law – still do not, and in the space between these two worlds, China has developed another facet of Netwar, "Legal Warfare" (or what Major General Charles Dunlap, Jr. has called "Lawfare."63) The leading western scholar of Chinese Legal Warfare, Dr. Dean Cheng, suggests that Legal Warfare illustrates a broader Chinese effort to expand conflict beyond the military domain. 64 One of "three [non-traditional] warfares" articulated in doctrinal writings by the modern Chinese state, 65 conduct of Legal Warfare accelerated in December of 2003 when policy – specifically, revised Political Work Regulations of the Chinese People’s Liberation Army – directed the General Political Department (GPD) of the PLA to undertake "three warfares" as part of its implementation of political work.66

63 Major General Charles J. Dunlap, Jr., USAF, "Lawfare Today: A Perspective," Yale Journal of International Affairs (Winter 2008): 146

64 Dean Cheng, "Winning Without Fighting: Chinese Public Opinion Warfare and the Need for a Robust American Response," 26 November 2012, accessed at http://www.heritage.org/research/reports/2012/11/winning-without-fighting-chinese-public-opinion-warfare-and-the-need-for-a-robust-american-response



65 Dean Cheng, "Winning Without Fighting: Chinese Public Opinion Warfare and the Need for a Robust American Response"
 
66 Dean Cheng, "Winning Without Fighting: Chinese Legal Warfare," May 21, 2012, accessed at http://www.heritage.org/research/reports/2012/05/winning-without-fighting-chinese-legal-warfare



67 Dean Cheng, "Winning Without Fighting: Chinese Legal Warfare"
 
Operating in synergistic concert with the other two "warfares," psychological warfare (defined as fairly standard ‘will-eroding’ activities,) and public opinion/media warfare ("…a constant, ongoing activity, aimed at long-term influence of perceptions and attitudes [via domestic and foreign] news media…movies, television programs, and books,") the function of Legal Warfare is to inculcate "…doubts among adversary and neutral military and civilian authorities, as well as the broader population, about the legality of adversary actions, thereby diminishing political will and support and potentially retarding military activity." 67

Here one can see the potential intersection between Legal Warfare, as a component of Chinese Netwar, and United Front Theory, as a guiding framework for Chinese Netwar. Taking the PLA/GPD as our protagonist, the "antagonistic contradiction" can be defined as an undesired legal, normative, or military activity undertaken or advocated by an adversary; and the "wavering" middle ground can be seen as all those "adversary and neutral military and civilian authorities, as well as the broader population" that may be swayed. The PLA operational objective is thus the effect of reducing opponent "…political will and support and potentially retarding military activity,"68 achieved via a synergistic execution of Legal Warfare, psychological warfare, and public opinion/media warfare.



68 Dean Cheng, "Winning Without Fighting: Chinese Legal Warfare"
 
69 Major General Charles J. Dunlap, Jr., USAF, "Lawfare Today: A Perspective," 148

70 Xinhua News, "China's blueprint means opportunities, not threats," 22 November 2012, accessed at http://news.xinhuanet.com/english/china/2012-11/22/c_131993006.htm

Dunlap notes, "information technologies have … vastly increased the scope, velocity, and effectiveness of such [Lawfare] efforts,"69 and one need only look to Chinese online press to find candidate examples of United Front Netwar addressing legal disputes. For example, in the 2012 Xinhua article titled "China's blueprint means opportunities, not threats," Chinese state media simultaneously suggested opposition to China in the legal domain would bring economic ruin, stoked regional fear of western decline and abandonment, and deterred "internationalizing" of legal disputes, arguing that "cementing economic bonds within Asia remains key to the region's continuous growth, as the eurozone sovereign debt woes are far from over, with a fiscal cliff threatening a fragile recovery in the U.S. economy and protectionism on the rise globally. Internationalizing the South China Sea issue will not help resolve the disputes but can sabotage efforts to carry out friendly negotiations on the issue and hamper much-needed regional economic cooperation."70


At first glance this might seem an expedient response to anomalous regional and international conditions, but if Cheng is correct, Legal Warfare (and the Netwar conducted in support) is not viewed by the

Chinese as an action to be initiated upon tensions or hostilities, nor, as Dunlap suggests, as part of pre-existent "confines of the law"71 which a Judge Advocate General (JAG) Officer might help warfighters navigate, but rather a cause to be constantly advanced in parallel with other "phase zero" shaping activities, and represents part of "…the foundation … [that] must be established during peacetime so as to create beneficial conditions and context for the military conflict and, in turn, precipitate an early end to a conflict on terms favorable to the PRC."72



71 Major General Charles J. Dunlap, Jr., USAF, "Lawfare Today: A Perspective," 151
 
72 Dean Cheng, "Winning Without Fighting: Chinese Public Opinion Warfare and the Need for a Robust American Response"

This suggests both peacetime legal claims, and Chinese contention of foreign legal claims during peacetime, should be evaluated not only as expressions of Chinese national interest, but also as both preparation of a multidimensional Netwar battlespace, and as a form of Netwar itself. In short, any would-be challengers to Chinese ambition must expect sustained, pre-emptive campaigns to reframe normative, legal, and military issues in ways that paint them as dangerous outliers while embedding Chinese goals within constructs likely to be, or already, embraced by a majority of stakeholders. This is a strategy unlikely to be countered by reactive efforts (which cede to China, or any other Netwar opponent, the ability to set the very boundaries of the front.) Instead, sustained counter-strategies, and analytic entities capable of delivering a thorough analysis of the dynamic normative and psychological terrain that these strategies must operate within, are needed.

8. A ROLE FOR CYBER-DEFENSE ORGANIZATIONS IN NETWAR


"Perhaps the most important future battlefield for psychological warfare, though, is the Internet..."73
73 Dean Cheng, "Winning a War Without Fighting," July 19, 2013, the Washington Times, accessed at http://www.heritage.org/research/commentary/2013/7/winning-a-war-without-fighting

The principle strengths of free societies may make them inherently more vulnerable to the effects of Netwar. Open ‘information borders,’ vital to debate and commerce, provide thin protection against tailored deceptions veiled as gossip, market preference, opinion, or social interaction. Yet, inherent vulnerability need not equate to actual vulnerability. While free nations are rightly reluctant to control or censor any legally conducted expressions of belief, there is no reason they cannot convey findings regarding a foreign influence campaign, the dubious origins of a propagating meme, or objective facts – no matter how uncomfortable a position they paint an offending nation in - to their own population. In fact, given that in the modern age the vast majority of content in a Netwar will at some point transit the Internet, and given that the "networked technology" of that Internet has sovereignty associated with it, one might argue that a truly responsive democracy must be prepared to warn of, and if needed counter, a range of Netwar actions directed at it in a timely and transparent fashion, or else be deemed to have ceded a measure of sovereignty over its own cyberspace.


If this is the case, then the technology and skills of a Cyber-Defense organization will have important roles to play. In the civil sector, Cyber-Defense traditionally entails heightened, near-real-time situational awareness of internet activity; maintenance and control of backup communication and networking capabilities held in reserve; and established advisory and consulting relationships with subject matter experts and counterpart organizations across industry, academia, and government. All of these tools may be of utility in countering the malevolent effects of a Netwar campaign.

For example:

1. Cyber-Defense organizations could be tasked to identify the emergence of Netwar-associated memes and actions in open online content. To guard against any potential misuse, warning activities could be transparent to the entire population served, and capabilities could remain under both the operational control and oversight of duly elected civilian officials.

2. Cyber-Defense tools to characterize quantitative and qualitative shifts in network activity74 could be called upon to reconstruct, track, and attribute Netwar-associated activities. A nation or alliance’s citizens deserve to know if ten-thousand seemingly different online identities, all confirming the "fact" of an occurrence that their own leaders dispute, are in reality merely five persons operating under orders from a basement within an adversarial nation.

74 See for example the Internet Storm Center at www.sans.org , or Google’s TRENDS feature at www.google.com


3. If and when Netwar is executed in combination with other forms of warfare – either Cyberwar, or kinetic war – Cyber-Defense organizations may possess the capacity to counter certain Netwar actions with potentially existential consequences. Cyber-Defense organizations should be prepared to use any out-of-band communication capabilities, reserve modes, international partnerships, or civil-military-industrial interfaces they possess to enable an authoritative and timely response by their civilian leadership within the information domain.

Moreover, Cyberwar and Netwar have become increasingly intertwined, and the impact of Cyber actions can be either potentiated or mitigated by corresponding psychological and normative conditions. Thus, an effective Cyber-Defense must also incorporate a set of informed Netwar responses.

9. CONCLUSION

Responding to modern Netwar need not require the initiation of a Cyberwar in response, nor a claim in the United Nations Security Council that the threshold of any type of conflict (other than the here-defined concept of Netwar) has been breached. President Putin may express the sentiment that the west is conspiring against Russia75 without his paranoia constituting a casus belli. So too is Minister Baird free to draw attention to ongoing Russian manipulation of information. But the west should not become complicit in affording such different, and differently-intentioned, statements conceptual equality on a national, regional, or global, media stage, nor should western decision-makers cling to hope that Netwar opponents will refrain from elevating their own voices at the expense of truth, either overtly or through a façade of intermediaries.

75 Mark Franchetti, Toby Harnden and Michael Sheridan, "Kremlin Calling," The Sunday Times, 16 November 2014, accessed at http://www.thesundaytimes.co.uk/sto/news/focus/article1484299.ece


Fortunately, the antidote to Netwar poison is active transparency, a function democracies excel in. A United Front, as it were, of truth-seeking nations, soberly facing their opponents, willing to accept the airing of one’s own imperfection for the sake of improvement, and committed to the norm that there is an objective reality that matters, presents a formidable challenge to the information-machinations of undemocratic or authoritarian regimes. There is no reason the west cannot accept the insights in these eastern perspectives, and we should apply them, leveraging both new mechanisms and extant Cyber-Defense organizations, within a morally appropriate Netwar framework, to advance our shared interests on the global stage.

How Russia’s new — and possibly fully robotic — Armata tanks measure up

http://news.nationalpost.com/news/world/how-russias-new-and-possibly-fully-robotic-armata-tanks-measure-up                                                                                                                       9634


In its Original form this is quite large sorry...lol
















Armata

Thursday, May 7, 2015

FOCUS USA FOREIGN ASSISTANCE Congressional Budget Justification AND MORE.... 2016

  SUMMARY TABLES   Fiscal Year 2016                         9500

http://www.state.gov/documents/organization/238223.pdf

Top US foreign aid Israel $3.1B Afghan $1.5B Egypt $1.5B Jordan $1B Pak $803M Kenya $630M Nigeria $607M Tanzania $590


--------------------------------------
Interesting Map 
http://www.state.gov/r/pa/map/index.htm  learn your State by State 1% investment

---------------------------------------




Russia's Greatest Weapon May Be Its Hackers

Russia's Greatest Weapon May Be Its Hackers

2015_05_08_Cover_600 x 800Newsweek
 
 
ADVERTISEMENT
 
The Americans and Israelis pioneered the technique back in 2009 when the Stuxnet program infiltrated Iranian computer systems and wrecked thousands of uranium-enriching centrifuges.
 
But now other players—especially the Russians and Chinese—are getting into the game of remotely using computer networks to destroy infrastructure and threaten human lives.
 
Last year, according to a report by Germany’s Federal Office for Information Security, a blast furnace melted down in an unnamed industrial city in Germany after a digital attack on its control systems, causing “massive damage.”
 
 
It nearly happened in the United States too, when unknown hackers succeeded in penetrating U.S. electrical, water and fuel distribution systems early in 2014. While old-fashioned, relatively low-tech data hacks make headlines—for instance, high-profile break-ins over the last 12 months to the email systems and databases of the White House, State Department, Department of Homeland Security, Department of Defense and Sony Pictures Inc.—what has security officials seriously worried is the new and dangerous world of cyber-to-physical infrastructure attacks.
 
“This is not theoretical,” National Security Agency Director Admiral Michael Rogers told the U.S. House of Representatives’ Intelligence Committee recently. Hacking attacks on the U.S. and its allies are “costing us hundreds of billions of dollars,” Rogers warned, and will result in “truly significant, almost catastrophic failures if we don’t take action.” 
 
 
According to Alexander Klimburg, an affiliate of the Harvard Kennedy School of Government’s Belfer Center and senior research fellow at the Hague Centre for Strategic Studies, “cyberspace today is like Europe in 1914, before World War I. Governments are like sleepwalkers. They do not comprehend the power of new technology and the consequences of misunderstanding each other’s activities.”
 
According to the U.S. Intelligence Community’s 2015 “Worldwide Threat Assessment” report, Russia and China are the "most sophisticated nation-state actors” in the new generation of cyberwarfare, and Russian hackers lead in terms of sophistication, programming power and inventiveness.
 
“The threat from China is overinflated, while the threat from Russia is underestimated,” says Jeffrey Carr, head of Web security consultancy Taia Global and author of the book Inside Cyber Warfare. “The Russians are the most technically proficient. For instance, we believe that Russian hackers-for-hire were responsible for the Sony attack.”
 
Last year hackers gained access to thousands of Sony company emails and threatened further damage unless a film lampooning North Korean leader Kim Jong Un was withdrawn from cinemas. “We spoke to [one of the hackers] via an intermediary,” says Carr. “Even after Sony lost 80 percent of its network capability, the hackers were still operating. That shows an incredibly high level of technical ability.”
 
The Moscow connection is worrying because Russia is the only country to date to have combined cyberwarfare with assaults by conventional guns and tanks. “The Russia-Georgia war of 2008 was a perfect example of a combined kinetic and cyber operation,” says Carr. “Nobody else has ever done anything like that.”
05_08_RussianHackers_02 Russian President Vladimir Putin (C) shakes hands with Defence Minister Sergei Shoigu during a meeting in Sochi, November 24, 2014. Putin has characterized the Internet as a “CIA invention” and this month ordered the FSB to “cleanse the Russian Internet” by forcing all Internet providers to keep their servers in Russia—another turn of the screw in the Kremlin’s long-term plan to create a separate Russian Internet. Alexei Druzhinin/RIA Novosti/Kremlin/Reuters
Similarly, in the wake of Russia’s annexation of Crimea in April 2014, ground assaults were accompanied by a deluge of mostly low-tech cyberassaults on over a hundred government and industrial organizations in Poland and Ukraine, as well as attacks on the European Parliament and the European Commission.
 
Many of these attacks featured a modified version of “BlackEnergy,” a kind of malware program known as a Trojan horse that is designed to remotely take over computers. A network of such infected computers, or “bots,” is known as a “botnet.” This can be mobilized to overwhelm a target server with requests for information and crash it—an attack known as Distributed Denial of Service, or DDoS.
 
 
“The BlackEnergy malware was authored by a Russian hacker and originally used for DDoS attacks, bank frauds and spam distribution,” says Pierluigi Paganini, founder of the Security Affairs blog and a member of a European Union Agency for Network and Information Security working group. “But the new variant was used in targeted attacks on government entities and private companies across a range of industries.”
 
 
One of the biggest mysteries of the latest generation of cyberattacks—known in the U.S. government as Offensive Cyber Effects Operations—is working out who is behind them and whether they are being launched with political or criminal intent.
What’s not in doubt is that Russian hackers have long been kings of the cybercrime world.
 
A group of Russians and Ukrainians were named by U.S. federal prosecutors as being behind the biggest cybercrime case in U.S. history, a bank-card fraud spree from 2010 to 2013 that cost companies including J.C. Penney, JetBlue and French retailer Carrefour more than $300 million. A group of Russian “click-jackers” were convicted in the U.S. last year for hijacking users of Apple's iTunes store, Netflix, the U.S. Internal Revenue Service, Amazon.com, ESPN.com and the Wall Street Journal website—as well as computers at NASA.
 
 
Another as-yet-unidentified hacking ring, based in a small city in south-central Russia, stole some 1.2 billion Internet logins and passwords and more than 500 million email addresses last year by plundering data from more than 400,000 websites, according to U.S. cybersecurity firm Hold Security.
 
And in February the Moscow-based Internet security company Kaspersky Labs revealed details of the biggest Internet heist of all time—a raid on over 100 banks in Russia, Ukraine, Japan, the United States and Europe from 2013 to 2014. Kaspersky reported seeing evidence of $300 million in losses just from the banks that had hired it to clean up the mess—and estimated that the total amount stolen was likely to be around $900 million.
“This is cybercrime on an industrial scale,” says one Moscow-based Western Internet security consultant, who helped overhaul several Russian banks’ defenses in the wake of the attack. “In one case in Kiev, they made the bank’s ATMs spew out money, which was collected by people walking by.”
 
 
The techniques used to break into the bank’s electronic systems via flaws in Adobe and Microsoft programs “were not particularly sophisticated,” says the consultant, “but it was amazing how careful they were not to alert the victims and to keep their backdoor into their systems a secret.”
05_08_RussianHackers_04 Customers queue to withdraw hryvnia currency from an ATM outside a Privatbank CJSC bank branch in Kiev, Ukraine, on February 20, 2014. Among the most frightening new-generation cyberweapons are those designed to target super-secure, so-called “air-gapped” systems that have no links to the Internet or outside networks. Vincent Mundy/Bloomberg/Getty 
                        
The exact nature of the links between these criminal hackers and the Russian government remains murky.
 
“Cybercrime, cyberterrorism and cyberwarfare share a common technological basis, tools, logistics and operational methods,” says Klimburg. “They can also share the same social networks and have comparable goals.
 
The differences between these categories of cyberactivity are often razor–thin. It’s hard to distinguish in cyberspace between financial and political motivation.”
 
In particular, the methods of delivering malware into a target computer are identical.
 
Hackers seek vulnerabilities in popular programs that allow them to introduce alien code, in particular a weak spot in the code known as a “zero-day,” meaning it remains unpatched and can be used for an attack before it is discovered by everyone else, so there are zero-days between an attack and the discovery of the vulnerability.
 
A good zero-day vulnerability can be sold for $200,000, says Klimburg, but there are many examples of Russian hackers “lending” their zero-day hacks to the government for espionage purposes, then using them for crime later.
 
“Hundreds of ‘black-hat’ Russian hackers are doing this for a living—whether it’s at the order of Swiss bankers or Ukrainian oligarchs,” says Carr. “Russian hackers who are caught are given the choice to work for the FSB [Federal Security Service] or to go to jail. The FSB also has some on contract hire.”
 
 
 
There is strong evidence, going back to cyberattacks on Estonia as early as 2007, that Russian cybercriminals were working either with or for the Russian state. But now, it seems, the Kremlin is getting directly involved. U.S. Director of National Intelligence James Clapper told the Senate Armed Services Committee in March that Russia’s Ministry of Defense is “establishing its own cybercommand” responsible for “conducting offensive cyberactivities.”
 
 
And the Russian government appears to be stepping up funding for the research and development of cybertechnology at world-class computer science centers such as the prestigious St. Petersburg Polytechnic University and Samara State University, according to information gathered by Seattle-based Taia Global.
 
 
 
Possible evidence linking recent hacking attacks on the U.S. government to the Russian state includes the digital signatures of a hacker group known as Advanced Persistent Threat 28 (or APT28, identified by the U.S.-based Internet security company FireEye) and a family of hackers labeled CozyDuke, CosmicDuke, MiniDuke and OnionDuke (spotted by Kaspersky Labs). These groups, which may or may not be related, have some giveaway signatures that tie them to Russia.
 
 
“Indicators in APT28’s malware suggest that the group consists of Russian speakers operating during business hours in Russia’s major cities,” says a recent FireEye report. “More than half of the malware samples...attributed to APT28 included Russian-language settings.”
But the real giveaway is not the forensics of the APT28 codes but their targets over the past five years, which have included Georgia’s ministries of internal affairs and defense, the Polish and Hungarian governments, NATO, the Organization for Security and Co-operation in Europe, the Norwegian army and U.S. defense contractors. The APT28 hacking crew "does not appear to conduct widespread intellectual property theft for economic gain, but instead is focused on collecting intelligence,” says FireEye. “That would be most useful to a government.”
 
 
Though there is evidence that the development teams of APT28 and the CosmicDuke, MiniDuke and OnionDuke “worked together and shared same knowledge and coding techniques,” and that they all have Russian origins, it’s likely they are separate groups, says Paganini.
 
 “All these groups are state-sponsored hackers, probably backed by the Russian government, though it is likely that they operate under different divisions of the same cyberarmy.”
 
Was APT28—and the Kremlin—behind hacking attacks on the White House and State Department this year, which cracked open confidential email records (though not, according to a spokesman, the president’s personal email)?
 
The Kremlin strongly denies it. “We know that blaming Russia for everything has turned into a sport,” Kremlin spokesman Dmitry Peskov joked to journalists. “At least they haven't looked for Russian submarines in [Washington's] Potomac River, as has been the case in a few other countries.”
05_08_RussianHackers_03 Vladimir Putin's spokesman Dmitry Peskov attends a meeting in the Kremlin in Moscow, on December 25, 2013. There is strong evidence, going back to cyberattacks on Estonia as early as 2007, that Russian cybercriminals were working either with or for the Russian state. But now, it seems, the Kremlin is getting directly involved. Kirill Kudryavtsev/AFP/Getty 
                        
Yet some code—in particular, the family of “backdoors” into programs known as CHOPSTICK—regularly used by APT28 has been linked to those virtual break-ins. And there’s less ambiguity about a similar attack on an unclassified military network at the U.S. Department of Defense last year. “We analyzed their network activity, associated it with Russia and then quickly kicked them off the network," Secretary of Defense Ashton Carter said in April.
Cyberspying on the West Wing’s emails may be cheeky, but it’s not much different from the old-school espionage and signals-intelligence games that Russia and America have been playing for decades.
 
What’s truly scary, on the other hand, is infiltrating physical infrastructure in a way that could herald a new generation of violent covert action and sabotage. “This is an entirely new way of waging war,” says one former KGB general once posted as a spy to London who now works in the private security sector. “It is like the invention of planes or submarines. Suddenly you can attack the enemy from a completely new and unexpected direction.... This is the essence of warfare: constant surprise.”
 
 
In April, Eugene Kaspersky, the Moscow-born CEO of Kaspersky Labs, noted that there has been a dramatic surge in targeted attacks against power grids, banks and transportation networks around the world—and warned that groups targeting crucial infrastructure have “the capacity to inflict very visible damage. The worst terrorist attacks are not expected.”
 
 
 
Among the most frightening new-generation cyberweapons are those designed to target super-secure, so-called “air-gapped” systems that have no links to the Internet or outside networks.
 
 
The developers of Stuxnet bridged the air gap by developing ingenious programs that infected CD-ROMs and memory sticks that then colonized Iran’s nuclear development computers, ultimately inflicting devastating physical damage on uranium centrifuges and forcing the Iranians to replace their entire computer infrastructure.
 
 
 But a Stuxnet-like program that can be carried by email and memory sticks, called Uroburos, has been around since 2011—and was diagnosed as being of Russian origin. Uroburos targets Microsoft Windows, sets up surreptitious communications with its parent network and is able to leap across air gaps isolating secure networks from the Internet.
 
 
“The scary thing is that now everyone can do pretty much anything to anyone,” says Klimburg. He believes that one way to distinguish between criminal and government cyberactivity is measuring the amount of programming resources an attack requires—like malware designed to leap across air gaps.
 
“If you see a huge amount of organization and programming going into an attack, that’s a good indicator that there’s a government involved.”
The U.S. and Europe remain extremely vulnerable to infrastructure attacks—especially as so much of these developed economies’ vital infrastructure is now electronic, from financial systems to social networks.
 
One small example: In late April, a fleet of American Airlines Boeing 737s was temporarily grounded after an iPad application known as an “electronic flight bag” used by pilots for preflight checks crashed. The iPad app replaced 13 pounds of paper manuals—but when it went down, so did the entire fleet.
More worrying, though still hypothetical:
 
The U.S. Government Accountability Office issued an official warning in April that “modern aircraft’s interconnectedness can potentially provide unauthorized remote access to aircraft avionics systems” and that an aircraft’s Wi-Fi access could be exploited by hackers. When security researcher Chris Roberts joked on Twitter about how easy it would be to “start playing with the EICAS”—Engine-Indicating and Crew-Alerting System—he was bumped off a flight. Boeing issued a statement saying that “no changes to the flight plans loaded into the airplane systems can take place without pilot review and approval.”
 
 
Other infrastructure is just as unprotected. A recent survey by the energy industry consultants Black & Veatch revealed that only 32 percent of U.S. electric utility companies had integrated security systems with the “proper segmentation, monitoring and redundancies needed for cyberthreat protection.”


In February, President Barack Obama set up a new Cyber Threat Intelligence Integration Center, described as “a national intelligence center focused on connecting the dots regarding malicious foreign cyberthreats to the nation.”

Defense Secretary Carter made a trip to the heart of Silicon Valley, this month to help improve relationships with tech companies after damaging revelations by former National Security Agency contractor Edward Snowden about digital surveillance. “This threat affects us all,” Carter told the assembled techies. "There are also really great opportunities to be seized through a new level of partnership between the Pentagon and Silicon Valley.”


Behind the scenes, American spy agencies are also busy fighting a secret war against cyberenemies. Snowden—now in hiding in Russia—publicly revealed the massive scale of data mining by U.S. intelligence agencies, often in apparent violation of protections for U.S. citizens’ privacy. But a recent report by Kaspersky Labs suggests that the U.S. is no slouch in the hacking department either.
 
 A hacking collective that Kaspersky’s team dubbed Equation Group—sponsored, it coyly says, “by a nation-state with nearly unlimited resources”—has for the past 14 years apparently been busy planting top-flight spyware around the world, including a keystroke-logging program called Grok and a protective encryption system known as GrayFish.
 
The top targets? Iran and Russia, followed by Pakistan, China and India. The malware has targeted financial, government, diplomatic, aerospace and telecommunications networks, as well as research institutions and universities. According to Kaspersky’s engineers, the Equation Group designed “the world’s most mysterious malware warhead” as well as “a secret storage vault that survived military-grade disk wiping and reformatting, making sensitive data stolen from victims available even after reformatting the drive and reinstalling the operating system.”
 
 
Thanks to its vast resources, the U.S. may well be able to stay one step ahead of its cyberenemies. But the problem with this new battlefield is that none of the potential combatants know the rules—and, even more dangerous, no one can be certain of who the combatants are.
 
“It is not always possible to distinguish between cyberespionage, cyber covert action and, most importantly, preparation for cybersabotage or war,” says Klimburg. “Serious misunderstandings are preprogrammed.... The consequences of misidentifying the motive of the attacker could be, in diplomatic-speak, ‘inadvertent escalation’—or accidental cyberwar.”
 
Richard Clarke, head of cybersecurity and counterterrorism coordination in the George W. Bush administration, has warned of the dangers of a “false flag” cyberattack designed to create tension between the U.S. and, for instance, China and launched by a hidden third party.
 
 
Some academics have proposed “cybermilitary exercises” between the United States and Russia as a vehicle for trust building. Others suggest establishing “rules of the road”—a kind of informal agreement for cyberspace that outlines what is a legitimate target for espionage purposes, with an agreement not to target super-critical infrastructure such as power grids with cyberespionage attacks.
 
 
But even if Beijing could be persuaded to come on board, the current geopolitical tension between Washington and Moscow is hardly conducive to gentleman’s agreements. Russian President Vladimir Putin has characterized the Internet as a “CIA invention” and this month ordered the FSB to “cleanse the Russian Internet” by forcing all Internet providers to keep their servers in Russia—another turn of the screw in the Kremlin’s long-term plan to create a separate Russian Internet, a project to which Putin has pledged some $100 million since 2012.
 
And during the Sochi Olympics in February 2014, the FSB deployed aggressive cyberspying tools designed to infect foreign visitors’ computers and cellphones with spyware through Wi-Fi networks and cellphone towers.
 
It is unlikely that such a regime would shy away from using every cyberweapon at its disposal. It’s equally unlikely that, faced with a barrage of what White House spokeswoman Jan Psaki described as “hundreds of cyberattacks a day,” the U.S. will cease and desist from developing some of the world’s most sophisticated cyberweapons in retaliation. The cyber arms race is on.

Friday, March 20, 2015

Putin’s Arctic Ambitions Send Chill Through Neighbors

8989
http://www.newsweek.com/putins-arctic-ambitions-send-chill-through-neighbors-315089?piano_t=1


2015-03-19T115241Z_1618833986_GF10000031147_RTRMADP_3_RUSSIA-CRISIS-PUTIN-RATES 9206 9427
Russian President Vladimir Putin attends a session during the Week of Russian Business, organized by the Russian Union of Industrialists and Entrepreneurs, in Moscow on March 19, 2015.


Filed Under: Opinion, Russia, Arctic

Tensions have increased a notch in the Arctic with the news that the Russians have started a major military exercise in the region. Nearly 40,000 servicemen, 41 warships and 15 submarines will be taking part in drills to make them combat-ready—a major show of strength in an area that has long been an area of strategic interest to Russia.

Russia might be reshaping national borders in Europe as it reasserts its geopolitical influence, but the equivalent borders in the Arctic have never been firmly established. Historically, it has proved much harder for states to assert sovereignty over the ocean than over land, even in cases where waters are ice-covered for most of the year.

For centuries the extent to which a nation-state could control its coastal areas was based on the so-called cannon-shot rule—a three-nautical-mile limit based on the range of a cannon fired from the land. But this changed after World War II, leading to the United Nations Law of the Sea Convention (UNCLOS) in 1982.
  
Under UNCLOS, every signatory was given the right to declare territorial waters up to 12 nautical miles and an exclusive economic zone (EEZ) of up to 200 for commercial activities such as fishing and oil exploration. Signatories could also extend their sovereignty beyond the limits of this EEZ by up to an additional 150 nautical miles if they could prove that their continental shelves extended beyond 200 nautical miles from the shore.

Orderly settlement

It is quite common to read about a “scramble for the Arctic” in which the states concerned—Denmark, Norway, Canada, Russia and the U.S.—race to carve up the region among themselves. In fact, this is not a very accurate description.
There are two dimensions to developments in the region—one legal and the other political.

 In legal terms, these five littoral states have sought to use UNCLOS to establish borders and assert their primacy over much of the Arctic Ocean and the seabed below (with the exception of the U.S., which is yet to ratify the convention).
Canada and Russia have also used the special provisions provided by Article 234 of UNCLOS—relating to the right to regulate over ice-covered waters—to strengthen their authority over emerging Arctic shipping routes (the Northwest Passage and the Northern Sea Route).
In 2008 the five states issued the Ilulissat Declaration, committing to the “orderly settlement of any possible overlapping claims” using the legal framework provided by the law of the sea. 

This has been reflected in the continental shelf claims they have submitted to the U.N. over the past 15 years: Russia (2001), Norway (2006), Canada (2013) and Denmark (2014).
These submissions are all claims for an extension of exclusive rights to continental shelves beyond 200 nautical miles from each land border. This leaves a small area in the central Arctic Ocean unclaimed but also raises issues about various territories where more than one state has posted a claim (see graphic below).

Among the claimants, Russia has been asked by the U.N. to submit further scientific evidence in support of its case. This has not yet happened to the other states, but since it will take time for their claims to be assessed, that may yet change. Until the U.S. ratifies UNCLOS, it can’t submit a claim.
Arctic claims (click to enlarge – or see original)
Arctic map 27-02-15
Insecure borders
Yet legal provisions only go so far. The question remains: What happens if the Arctic states become more assertive in the delimitation of their national borders?

Canada and Denmark have made significant commitments to backing up their claims, including developing new security strategies. In 2012 Denmark established a specialized military command to police its Arctic territories, for instance. But over the past decade, it is Russia that has advanced the most significant plans for building up its security forces in the region—even before its most recent exercises began.

In material terms, Russia currently has the most to gain from industrially developing its Arctic zone. The Russian Arctic contains significant reserves of hydrocarbons, diamonds, metals and other minerals with an estimated value of more than $22.4tn (£15.2tn). The area is already a major producer of rare and precious metals and important oil and gas fields.

This makes it easy to see why the Kremlin announced in 2008 that it will use the Arctic zone as a “strategic resource base” for the socioeconomic development of Russia in the 21st century. In 2013 the Kremlin further observed that such development would be heavily dependent on foreign investment, technology and expertise.

Yet this apparent openness to international business interests has been accompanied by an intense sense of insecurity about Russia maintaining influence and authority in the region. It is wary of a Western bloc forming within the Arctic Council (the five littoral states plus Finland, Iceland and Sweden) and has preferred to engage the other Arctic states on a bilateral or regional basis. Russia is particularly concerned about the potential for the EU and NATO to become more active in Arctic affairs, given that all of the other Arctic states are members of one or both of these organizations.

Vladimir Putin has spoken publicly about the need to keep tensions to a minimum in the Arctic, while embarking on an extensive military and security program in the region at the same time—not least, establishing a new Arctic strategic command last December.

The Kremlin showed in its response to the “Greenpeace 30,” who tried to seize a Russian oil platform in 2013, that it will not tolerate any threat to its economic activities in the Arctic, nor allow any precedent that might undermine its authority over what it essentially regards as its territorial waters.

Future uncertainties

Russia will submit a new claim for an extension of its EEZ into the Arctic Ocean to the U.N. in 2015 (encompassing an area of roughly 1.2 million square kilometers). Already, state officials in Russia are positioning the situation as a test of whether the international scientific community will accept Russian science.

A second rejection of Russian claims in the Arctic might further feed Russian concerns about being kept down and encircled by Western rivals. On the other hand, if Russia’s claim is accepted, the rest of the international community might quite rightly become concerned about how the Kremlin will exert its authority within such significantly expanded maritime borders in the Arctic. This is because Russia will likely continue using Article 234 of UNCLOS to enable it to exercise complete authority in its extended EEZ, with little regard for the right to innocent passage.

The deterioration in Russia’s relations with the West is only likely to up the stakes for the Kremlin when it comes to settling its maritime borders in the Arctic. Russia has remained engaged in the Arctic Council and has repeatedly called for the Arctic to remain insulated from the fallout from Ukraine. Yet in the coming years, Russia’s neighbors are likely to remain wary about how exactly the Kremlin plans to negotiate and secure its borders along its Arctic frontier.
To read installments from The Conversation’s Russia’s borders series, click here.

The ConversationDuncan Depledge is a postdoctoral researcher at Royal Holloway. This article was originally published on The Conversation. Read the original article here.

Monday, March 9, 2015

Ezra Levant vs Noam Chomsky: The Complete Interview



In this provocative March 2015 interview -- which originally appeared on TheRebel.media in three parts -- Ezra Levant and Noam Chomsky debate a wide range of topics, including:

The state of free speech in America today, Obama's U.S. foreign policy, Israel and the rise of anti-semitism and more.

JOIN TheRebel.media for more news and commentary like this:
http://www.TheRebel.media

Jason Kenney: Defeating Muslim Terrorism's "Arc of Violence" The Rebel

8929

Published on Mar 8, 2015
On Friday March 6, 2015 at the Manning Networking Conference, Brian Lilley talked with recently appointed Defense Minister Jason Kenney.

They talked about the "steep learning curve" that accompanied Kenney's new cabinet position, and Kenney's family's history of military service.

Lilley asked Kenney how far Canada could spread its military resources to fight Muslim terrorism abroad.

(Note: This interview took place before news of the death of Sgt. Andrew Doiron in a friendly fire incident in northern Iraq.)

JOIN TheRebel.media for more exclusive content like this:
http://www.TheRebel.media/

Who are Canada's radical Muslim leaders? FIND OUT and fight back at CanadianJihad.cahttp://canadianjihad.ca/#/#petition

GET Ezra Levant's timely book about domestic radicalization and terrorism:
"The Enemy Within: Terror, Lies and the Whitewashing of Omar Khadr"
http://www.amazon.ca/Enemy-Within-Ter...