Back to news

January 10, 2020 | International, C4ISR, Security

How tensions with Iran could test a new cyber strategy

Mark Pomerleau

In 2018, the Department of Defense began following a new philosophy for cyber operations to better protect U.S. networks and infrastructure.

Known as “defend forward,” the approach allows U.S. cyber forces to be active in foreign network outside the United States to either act against adversaries or warn allies of impending cyber activity that they've observed on foreign networks.

After the U.S. military killed an Iranian general in a Jan. 2 drone strike and after national security experts said they expect Iran might take some retaliatory action through cyber operations, the specter of increased cyber attacks against U.S. networks puts Cyber Command and its new approach front and center.

“This Iran situation today is a big test of the ‘defend forward' approach of this administration,” James Miller, senior fellow at Johns Hopkins Applied Physics Laboratory and former undersecretary of defense for policy, said at a Jan. 7 event hosted by the Council on Foreign Relations. “Will [Cyber Command] take preventative action? Will they do it in a way that our allies and partners support and that can be explained to the public?”

While Iran fired several missiles Jan. 7 at a base in Iraq where U.S. troops lived as an initial response to the drone strike, many national security experts expect Iran could continue cyber actions as further retaliation for the strike. Iran could also ratchet up its cyber operations in the United States following the collapse of portions of the 2015 nuclear deal between the United States, Iran and five other nations to curb Iran's nuclear weapons capability in return for sanctions relief.

Over the past 12 months, the White House and Congress streamlined many of the authorities used to conduct cyber operations to help cyber forces to get ahead of threats in networks around the world. One such provision in last year's annual defense policy bill provides the Pentagon with the authority to act in foreign networks if Iran, among other named nations, is conducting active, systematic and ongoing campaigns of attacks against the U.S. government or people.

Cyber Command declined to comment on what, if anything, they were doing differently since the drone strike.

Some experts, however, have expressed caution when assessing how well this defend forward approach has worked thus far given it is still relatively new.

“The jury is very much still out here,” Ben Buchanan, assistant professor and senor faculty fellow at Georgetown University, said at the same event. “We don't have a lot of data, there's been a lot of hand-wringing ... about these authorities and about how Cyber Command may or may not be using them. I just don't think we've seen enough to judge whether or not ... [it is] meaningfully changing adversary behavior.”

Others have also expressed reservations about how effective Iran can even be in cyberspace toward U.S. networks.

“Iran is a capable cyber actor, Iran is a wiling cyber actor. That means Iran will conduct cyberattacks,” said Jacquelyn Schneider, Hoover fellow at the Hoover Institution at Stanford University. “It's not like they have this capability and they've been deterred in the past and maybe now they're going to turn it on. I think they've been trying this entire time.”

Complicating matters further could be other actors trying to take advantage of U.S.-Iran imbroglio for their own interests.

Priscilla Moriuchi, senior principal researcher and head of nation-state research at threat intelligence firm Recorded Future, said over the past several months, there have been reports of Russian state-affiliated actors hijacking Iranian cyber infrastructure to conduct operations masquerading as Iranians.

“That creates its own uncertainty,” she said at the same event. “Another level of potential what we call inadvertent escalation if a country perceives that they are attacked by Iran but in reality, it” wasn't.

https://www.fifthdomain.com/dod/2020/01/09/how-tensions-with-iran-could-test-a-new-cyber-strategy/

On the same subject

  • Intelsat declares bankruptcy

    May 19, 2020 | International, Aerospace, C4ISR

    Intelsat declares bankruptcy

    Nathan Strout and Valerie Insinna Satellite communications provider Intelsat declared bankruptcy May 13, although its subsidiary which provides services to the Department of Defense is not part of the Chapter 11 proceedings. CEO Stephen Spengler spun the action as a positive move, claiming it gave the company more financial flexibility for the Federal Communication Commission's clearing of C-Band spectrum to make way for 5G uses. Major satellite communications companies, including Intelsat, saw their stocks take a massive hit last fall when FCC Chairman Ajit Pai announced plans for a public auctioning of C-Band spectrum, which C-Band holders like Intelsat had hoped to sell off directly. The company says it will need to spend more than $1 billion to meet the FCC's deadlines for clearing out C-Band spectrum, which it needs to do in order to be eligible for $4.87 billion in accelerated relocation payments. Wiping the company's significant legacy debt off the books will help it accomplish those actions, said Spengler. “We intend to move forward with the accelerated clearing of C-band spectrum in the United States and to achieve a comprehensive solution that would result in a stronger balance sheet,” said Spengler in a statement. “This will position us to invest and pursue our strategic growth objectives, build on our strengths, and serve the mission-critical needs of our customers with additional resources and wind in our sails.” Subject to court approval, the company said in a statement it had already secured $1 billion in new financing in debtor-in-position funds, giving it the liquidity to continue current operations and finance C-Band clearing costs spurred by the Federal Communications Commission. The company claims that day-to-day operations will not be impacted by the restructuring process—it will continue to launch new satellites and invest in its network with no changes planned. The Chapter 11 petitions for Intelsat and some of its subsidiaries were filed with the U.S. Bankruptcy Court for the Eastern District of Virginia, Richmond Division. However, Intelsat General, which provides satellite communications to the U.S. military and allied military customers, is not part of the bankruptcy proceedings. “The immediate concern (for DoD) is continuity of operations and it sounds like that is not going to be a big issue,” said Todd Harrison, director of the Aerospace Security Project at CSIS. “The longer term concern for DoD is how does Intelsat eventually emerge from bankruptcy, and is there any kind of transfer in ownership or an increase in ownership stake that would be concerning from a national security perspective.” Specifically, investment from Chinese companies could raise alarms for the military and the Committee on Foreign Investment in the United States. “I think that's something that DoD will be watching, that Treasury will be watching,” he said. “It will be a positive side from DoD's perspective if wherever the capital is coming from is from a U.S. source.” When asked about potential Chinese investment in a bankrupt Intelsat May 14, U.S. Air Force Assistant Secretary for Acquisition, Technology and Logistics Will Roper acknowledged he had concerns. “It's a topic that's harder for me to talk about, but we are mindful of adversarial tactics in this period. Every crisis is an opportunity, and with companies coming under duress it is an opportunity for predatorial tactics targeting IP that countries would not have access to otherwise," he told reporters. Furthermore, Roper noted that the decision to financially support a company like Intelsat to prevent foreign investment requires a different calculus than a traditional stimulus. “The way to engage if we risk losing IP to a nation for whom it's not in our interest to have it, it's a very different strategy (than whether we) should engage to prop up a company through stimulus," he said. "When the former appears to happen, then we need to pivot into a different gear than we would be in the latter. We simply cannot do stimulus for every company that is in duress right now.” Intelsat isn't the only major satellite company to declare bankruptcy. OneWeb—who have been building a proliferated low earth orbit constellation to provide broadband—declared bankruptcy in March. DoD had been exploring utilizing OneWeb for communications in the Arctic among other things, and Lt. Gen. David Thompson, vice commander of Headquarters Space Force, noted earlier this week that the department's new Space Acquisition Council was looking into helping OneWeb and other financially vulnerable space companies impacted by COVID-19. Intelsat noted in a statement that several of its end markets had been impacted by COVID-19. Roper said he was concerned with how COVID-19 was disproportionately affecting space and aviation companies, which rely more heavily on commercial revenue than other parts of the defense industrial base. “That's why we've taken such aggressive means to accelerate contract awards," said Roper. “We're worried about space, as well, especially microelectronics. All of the Space Acquisition Council shares that concern. And as we see the Chapter 11s being filed—we're tracking them—but our concern as an acquisition enterprise has got to be industrial base health and not picking winners or losers with specific companies. It's ensuring that we are engaging to have a healthy industrial base on the other side." Roper added that he had approved the acceleration of a major satellite award that should be announced this week as part of the department's efforts to increase the flow of funding to defense companies during COVID-19. https://www.c4isrnet.com/battlefield-tech/space/2020/05/14/intelsat-declares-bankruptcy/

  • Missile Framework-contract for Rheinmetall: Bundeswehr orders 70mm-practice rockets for combat helicopters – envisaged order value over €100m

    July 18, 2024 | International, Land

    Missile Framework-contract for Rheinmetall: Bundeswehr orders 70mm-practice rockets for combat helicopters – envisaged order value over €100m

    An initial order worth a mid-double-digit million euro amount was booked in the second quarter of 2024

  • US Navy asks Congress to shift millions of dollars to fix high-tech supercarrier

    July 19, 2018 | International, Naval

    US Navy asks Congress to shift millions of dollars to fix high-tech supercarrier

    By: David B. Larter WASHINGTON — The U.S. Navy needs to get the permission of lawmakers to move $62.7 million to fix a number of hiccups in its high-tech new carrier, the Gerald R. Ford, during its post-shakedown availability that kicked off July 15. The money, part of a larger DoD reprogramming request from June, will go toward fixing a number of issues that arose during its recently concluded post-delivery trials, according to a copy of the request obtained by Defense News. According to the document, the Navy needs to move: $12.7 million to fix “continuing technical deficiencies” with the Advanced Weapon Elevators. $30 million for “tooling and repair” of the main thrust bearings, issues that the Navy has blamed on the manufacturer. $20 million for additional repairs, a prolonged post-shakedown availabilty, and parts and labor. By: David Larter The Navy told Congress in May that it was going to exceed the Ford's $12.9 billion cost cap because of needed repairs and alterations. The $62.7 million was part of that total repair bill. The repairs and technology setbacks extended the Ford's PSA at Huntington Ingalls' Newport News Shipbuilding from eight months to 12 months, according to a statement from Naval Sea Systems Command, and significantly added to the cost. The ship will then proceed to full-ship shock trials ahead of its first deployment, a priority pushed by Senate Armed Services Committee Chairman Sen. John McCain, R-Ariz., according to the document. Since its delivery, the Ford has spent 81 days at sea during the eight times it was underway, a July 15 NAVSEA release said. “The ship has completed 747 shipboard aircraft launches and recoveries against a plan of approximately 400,” the release said. “CVN 78 successfully completed fixed-wing aircraft/helicopter integration and compatibility testing, air traffic control center certification, JP-5 fuel system certification, daytime underway replenishment capability demonstration, ship's defensive system demonstration, Dual Band Radar testing, and propulsion plant operations.” https://www.defensenews.com/naval/2018/07/18/us-navy-asks-congress-to-shift-millions-to-fix-its-new-high-tech-supercarrier/

All news