Back to news

January 10, 2020 | International, C4ISR, Security

How tensions with Iran could test a new cyber strategy

Mark Pomerleau

In 2018, the Department of Defense began following a new philosophy for cyber operations to better protect U.S. networks and infrastructure.

Known as “defend forward,” the approach allows U.S. cyber forces to be active in foreign network outside the United States to either act against adversaries or warn allies of impending cyber activity that they've observed on foreign networks.

After the U.S. military killed an Iranian general in a Jan. 2 drone strike and after national security experts said they expect Iran might take some retaliatory action through cyber operations, the specter of increased cyber attacks against U.S. networks puts Cyber Command and its new approach front and center.

“This Iran situation today is a big test of the ‘defend forward' approach of this administration,” James Miller, senior fellow at Johns Hopkins Applied Physics Laboratory and former undersecretary of defense for policy, said at a Jan. 7 event hosted by the Council on Foreign Relations. “Will [Cyber Command] take preventative action? Will they do it in a way that our allies and partners support and that can be explained to the public?”

While Iran fired several missiles Jan. 7 at a base in Iraq where U.S. troops lived as an initial response to the drone strike, many national security experts expect Iran could continue cyber actions as further retaliation for the strike. Iran could also ratchet up its cyber operations in the United States following the collapse of portions of the 2015 nuclear deal between the United States, Iran and five other nations to curb Iran's nuclear weapons capability in return for sanctions relief.

Over the past 12 months, the White House and Congress streamlined many of the authorities used to conduct cyber operations to help cyber forces to get ahead of threats in networks around the world. One such provision in last year's annual defense policy bill provides the Pentagon with the authority to act in foreign networks if Iran, among other named nations, is conducting active, systematic and ongoing campaigns of attacks against the U.S. government or people.

Cyber Command declined to comment on what, if anything, they were doing differently since the drone strike.

Some experts, however, have expressed caution when assessing how well this defend forward approach has worked thus far given it is still relatively new.

“The jury is very much still out here,” Ben Buchanan, assistant professor and senor faculty fellow at Georgetown University, said at the same event. “We don't have a lot of data, there's been a lot of hand-wringing ... about these authorities and about how Cyber Command may or may not be using them. I just don't think we've seen enough to judge whether or not ... [it is] meaningfully changing adversary behavior.”

Others have also expressed reservations about how effective Iran can even be in cyberspace toward U.S. networks.

“Iran is a capable cyber actor, Iran is a wiling cyber actor. That means Iran will conduct cyberattacks,” said Jacquelyn Schneider, Hoover fellow at the Hoover Institution at Stanford University. “It's not like they have this capability and they've been deterred in the past and maybe now they're going to turn it on. I think they've been trying this entire time.”

Complicating matters further could be other actors trying to take advantage of U.S.-Iran imbroglio for their own interests.

Priscilla Moriuchi, senior principal researcher and head of nation-state research at threat intelligence firm Recorded Future, said over the past several months, there have been reports of Russian state-affiliated actors hijacking Iranian cyber infrastructure to conduct operations masquerading as Iranians.

“That creates its own uncertainty,” she said at the same event. “Another level of potential what we call inadvertent escalation if a country perceives that they are attacked by Iran but in reality, it” wasn't.

https://www.fifthdomain.com/dod/2020/01/09/how-tensions-with-iran-could-test-a-new-cyber-strategy/

On the same subject

  • Lockheed names Taiclet next top executive

    March 16, 2020 | International, Aerospace

    Lockheed names Taiclet next top executive

    By: Aaron Mehta WASHINGTON — Lockheed Martin, the world's largest defense company, will have a new top executive come June. The company announced Monday that James Taiclet, 59, has been selected president and CEO of the company, succeeding Marillyn Hewson in those roles. Taiclet, while a member of Lockheed's board since 2018, has not worked directly inside the company before; he has served as chairman, president and CEO of American Tower Corporation, a wireless and broadcast communications infrastructure company based in Boston, Massachusetts, since 2004. Previously, he worked as president of Honeywell Aerospace Services and vice president of engine services at Pratt & Whitney. Taiclet is also a retired U.S. Air Force officer, whose biography cites more than 5,000 flying hours, including as part of the first Gulf War. “I know it is the right time to transition the leadership of Lockheed Martin. The corporation is strong, as evidenced by our outstanding financial results last year and a record backlog of business. We have a bright future — particularly with Jim and our outstanding leadership team at the helm,” Hewson said in a statement. “I'm pleased the board agreed with my recommendation. As Lockheed Martin's next CEO, Jim will lead the company forward in its next phase of growth and value creation.” Hewson took over the company in 2013, the first woman to lead Lockheed. Her ascension came as a surprise, following the sudden removal of then-Chief Operating Officer Chris Kubasik, who had been in line for the top job. Since coming into power, Hewson successfully guided the company through the U.S. budget sequestration and a major acquisition of helicopter manufacturer Sikorsky, along with getting the F-35 fighter program largely on track. “I'm honored to be asked to succeed one of the most respected CEOs in America. While serving on Lockheed Martin's board, I've not only been impressed by the company's continued growth as a leader in aerospace & defense but also by the dedication and commitment of Marillyn and Lockheed Martin employees to deliver for its customers,” Taiclet said in a statement. “As a military veteran, I understand the mission of this great company to provide global security and innovative solutions for the brave men and women who protect our freedom.” Taiclet's rise to the role of Lockheed's CEO may have been enabled due to a leave of absence by Michele Evans, Lockheed's head of aeronautics, who temporarily stepped back from that position in September due to an undisclosed medical issue. Evans, age 53, was considered a rising star in the pool of Lockheed executives, having rose through the ranks of Lockheed's aeronautics, sustainment, and integrated warfare systems and sensors divisions. She was widely considered a possible successor to Hewson. As follow-on moves, Frank St. John, 53, was elected by the board to serve as chief operating officer of Lockheed; St. John is currently executive vice president of Lockheed Martin's Rotary and Mission Systems division. Replacing him is Stephanie Hill, 55, the current senior vice president for Enterprise Business Transformation. All the moves are effective June 15. According to the Defense News Top 100 list, Lockheed Martin has been the top defense contractor in the world for 20 straight years. Lockheed's $50.5 billion in defense revenue in fiscal 2018 represented about 10 percent of the Top 100's total defense revenues, and dramatically outpaced the No. 2 company on the list, Boeing, which brought in $34 billion in defense revenue. https://www.defensenews.com/industry/2020/03/16/lockheed-names-taiclet-next-top-executive

  • Italy's Leonardo says in talks with Germany's Hensoldt on possible JV

    March 3, 2024 | International, Aerospace

    Italy's Leonardo says in talks with Germany's Hensoldt on possible JV

  • UK reveals Puma replacement plan

    February 24, 2021 | International, Aerospace

    UK reveals Puma replacement plan

    The United Kingdom is set to replace its Westland-Aerospatiale SA 330E Puma HC2 rotorcraft with a new aircraft type via its New Medium Helicopter (NMH) requirement. While the Puma's put of service date of 2025 has long been known, the UK had...

All news