21 janvier 2019 | International, C4ISR

Cyberdéfense : une France offensive et complètement décomplexée

Par Michel Cabirol

Depuis plusieurs années, la France ne s'interdit pas de lancer des attaques cyber. Elle rend coup pour coup à ses adversaire dans le cyberespace. Et au-delà... Le ministère des Armées vient de terminer ses travaux doctrinaux en matière de lutte informatique offensive.

Le monde est en guerre. Personne n'a vraiment conscience de l'ampleur de cette guerre très discrète à l'exception d'un cercle d'initiés. Vendredi lors d'un discours dans la droite ligne de celui en septembre 2015 de son prédécesseur Jean-Yves Le Drian, la ministre des Armées Florence Parly a dévoilé une attaque cyber de très grande ampleur contre son ministère, qui a commencé en 2017. Une attaque très sophistiquée à base du Malware Turla, un ver qui s'introduit dans les sites des administrations étatiques et des entreprise. Un ver qui s'est déjà introduit dans les sites de la Défense américaine et avait été décrit comme la plus grande brèche dans l'histoire des ordinateurs de l'armée US.

"Nous sommes fin 2017, a raconté Florence Parly. Des connexions anormales sur le serveur de la messagerie internet du ministère des Armées sont constatées. Ces connexions ont révélé après analyse qu'un attaquant cherchait à accéder directement au contenu de boites mails de 19 cadres du ministère parmi elles, celles de quelques personnalités sensibles. Sans notre vigilance, c'est toute notre chaîne d'alimentation en carburant de la Marine nationale qui aurait été exposée. Surtout, cette tentative d'attaque a duré jusqu'en avril 2018. Nous avons pu patiemment et, en étroite collaboration avec nos partenaires, remonter la chaîne des serveurs et des adresses IP Derrière se cachait un mode d'attaque bien connu de nos services et que certains attribuent à Turla".

Deux attaques par jour

En 2017, le ministère des Armées a recensé 700 événements de sécurité, dont 100 attaques qui ont ciblé ses réseaux. En 2018, ce même nombre a été atteint dès septembre. "En moyenne, a précisé Florence Parly, ce sont donc plus de deux événements de sécurité par jour qui ont touché tout autant notre ministère, nos opérations, nos expertises techniques et même un hôpital d'instruction des Armées". Certaines de ces attaques, directes, ciblaient précisément le ministère. D'autres visaient les industriels de la défense. Par conséquent, confirme le chef d'état-major des armées (CEMA), le général François Lecointre, le cyberespace recèle "des potentialités de désorganisation massive qui ne doivent pas être ignorées mais au contraire intégrées dans une pensée stratégique renouvelée".

Certaines attaques sont "le fruit de groupes malveillants,a précisé la ministre. D'autres de hackers isolés. Mais certaines, nous le savons, viennent d'Etats pour le moins indiscrets, pour le moins... décomplexés". Aujourd'hui, un certain nombre de nations incluent des effets cyber dans leurs stratégies militaires et leurs modes d'action. Elles s'y préparent à l'occasion d'exercices mêlant capacités conventionnelles et cyber. La France fait partie de ce club de nations. "Nos adversaires potentiels doivent savoir à quoi s'attendre" s'ils décident de passer à l'attaque dans le cyberespace, a précisé la ministre des Armées. "L'arme cyber est une arme d'emploi", a rappelé le général Lecointre.

Les attaques cyber ont le plus souvent un caractère d'irrégularité. Le cyberespace favorise les actions de type guérilla ou de harcèlement en raison de la faible traçabilité des attaques cyber qui sont très difficilement attribuables. En outre, l'invulnérabilité du cyberespace est très difficile à conserver dans la durée compte tenu de l'étendue du milieu et de sa complexité. Enfin, l'accessibilité aisée pour les acteurs non-étatiques et les petits Etats offrent un outil offensif qui peut être volé, copié ou imité par des adversaires ou des acteurs tiers.

Une doctrine de lutte informatique offensive

Si une éventuelle riposte à l'attaque Turla n'a pas été révélée, Florence Parly a toutefois confirmé que la France s'octroierait le droit de riposter face à des cyber-attaques . "En cas d'attaque cyber contre nos forces, nous nous réservons le droit de riposter, dans le respect du droit, par les moyens et au moment de notre choix, a-t-elle expliqué. Nous nous réservons aussi, quel que soit l'assaillant, le droit de neutraliser les effets et les moyens numériques employés. Mais nous serons aussi prêts à employer en opérations extérieures l'arme cyber à des fins offensives, isolément ou en appui de nos moyens conventionnels, pour en démultiplier les effets". "La capacité à conduire des opérations militaires dans le cyberespace permet d'obtenir certains avantages sur les thé'tres d'opération des armées", a d'ailleurs reconnu le général Lecointre.

"Nous considérons l'arme cyber comme une arme opérationnelle à part entière. C'est un choix nécessaire, en responsabilité. Nous en ferons un usage proportionné, mais que ceux qui sont tentés de s'attaquer à nos forces armées le sachent : nous n'aurons pas peur de l'utiliser", a averti la ministre.

Une stratégie cyberdéfense offensive qui n'est pas nouvelle. Mais la France a affiné tout au long de ces derniers mois une doctrine de lutte informatique offensive à des fins militaires, qui est considérée comme une arme de supériorité opérationnelle. "La stratégie vise pour l'essentiel à acquérir et à conserver la supériorité (ou, tout au moins, une situation favorable) afin d'assurer la défense de nos intérêts et la préservation de notre souveraineté", a précisé le CEMA.

L'arme cyber, un effet démultiplicateur

C'est le commandant de la cyberdéfense, le général Olivier Bonnet des Paillerets, qui a été chargé de rédiger une doctrine de lutte informatique offensive. La France mis en place en mai 2017 le commandement de la cyberdéfense (COMCYBER). "Immédiateté de l'action, dualité des cibles, hyper-connectivité sont autant de facteurs de risques qui ont été pris en compte dans l'élaboration de la doctrine, tout comme la notion d'irrégularité", a précisé le CEMA. Une doctrine dont les éléments les plus sensibles resteront toutefois logiquement secrets. Ces attaques cyber seront conduites de façon autonome ou en combinaison des moyens militaires conventionnels. Selon le ministère, l'arme cyber vise à produire des effets à l'encontre d'un système adverse pour en altérer la disponibilité ou la confidentialité des données. Car la lutte informatique offensive permet de tirer parti des vulnérabilités des systèmes numériques adverses.

"La lutte informatique offensive peut être un formidable démultiplicateur d'effets", a d'ailleurs estimé le chef d'état-major des armées.

Pour le CEMA, la lutte informatique offensive élargit considérablement "le champ des possibles et la palette des options modulables que je suis susceptible de proposer au Président de la République". Elle peut se combiner et, si nécessaire, se substituer aux autres capacités militaires de recueil et d'action sur tout le spectre des missions militaires (renseigner, défendre, agir), a-t-il expliqué. "En réalité, les armes cyber apparaissent désormais comme des instruments incontournables de l'action militaire gr'ce à leur capacité à agir au profit des armes employées dans les autres milieux", a-t-il souligné.

Les discours de Florence Parly, qui n'a rien annoncé de nouveau dans le domaine de la cyberdéfense, et du général François Lecointre préparent-ils à un nouveau changement de doctrine, cette fois-ci, dans la politique spatiale de défense, qui pourrait être dotée elle aussi d'une doctrine offensive,. Il semble qu'une France plus pragmatique mais pas forcément plus guerrière tourne la page d'une France romantique, voire naïve, dans les domaines cyber et de l'espace...

https://www.latribune.fr/entreprises-finance/industrie/aeronautique-defense/cyberdefense-une-france-offensive-prete-a-rendre-coup-pour-coup-a-ses-adversaires-804456.html

Sur le même sujet

  • India announces ban on 101 imported arms. Who benefits, and who loses out?

    14 août 2020 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    India announces ban on 101 imported arms. Who benefits, and who loses out?

    By: Vivek Raghuvanshi NEW DELHI — To bolster self-reliance for its defense industrial base, India on Sunday released a list of 101 weapons and platforms that will be banned from import over the next seven years. The list incorporates major armaments such as artillery guns, assault rifles, corvettes, sonar systems, transport aircraft, ammunition, radars, conventional diesel-electric submarines, communication satellites and shipborne cruise missiles. In announcing the move, Defence Minister Rajnath Singh called it “a big step toward self-reliance in defense production in accordance with Prime Minister Narendra Modi's ‘Atmanirbhar Bharat,' ” or “Self-Reliant India.” Singh added the decision will bring with it a great opportunity for the local defense industry to manufacture the items on the negative list by using domestic design and development capabilities. “The embargo on imports is planned to be progressively implemented between 2020 to 2024,” the Ministry of Defense said in a statement. “The aim behind the promulgation of the list is to appraise the Indian defense industry about the anticipated requirements of the [Indian] armed forces so that they are better prepared to realize the goal of indigenization.” The items on the list, worth a total of $53.4 billion, are to be manufactured in India, with local companies as prime contractors. Of these, about $17.3 billion will be either Army or Air Force programs, and defense contracts worth $18.6 billion will be meant for naval programs. The MoD said these orders will be placed with domestic companies within the next five to seven years. The domestic industry will now stand a better chance to compete among itself and cater to local demand, an MoD official told Defense News. “Foreign-origin technology transfer will be key. However, the Indian companies will be in the driver's seat,” the official said. Domestic private companies have welcomed the government's move, but some defense experts doubt change will come. Baba Kalyani, chairman of Bharat Forge Limited, said this decision is a strategic step that will “propel the Self-Reliant India narrative and bolster the Indian defense equipment-manufacturing industry.” He added that the growth of the domestic sector will lead to self-reliance, reduced expenditure on imports, the saving of foreign currency, job creation and the revival of consumption, and that it will get India closer to its goal of a $5 trillion economy. Jayant Patil, senior executive vice president of India's largest private defense company Larsen & Toubro, said the defense policy reforms will provide long-term visibility, which he said is needed to drive investment. In contract, Vivek Rae, a former MoD chief of acquisitions, said the “gradual ban on imports of 101 weapons and platforms signals the strong intent of government to boost domestic defense production. However, some of these items are already made or assembled in India, and import content is also high. Therefore, business as usual will continue unless more orders are given to the private sector and import content reduced.” Rae also noted the cost of items manufactured or assembled locally tends to be higher than the cost of imported items. The quality of locally produced materiel is also a concern for Rae. The embargo may not adversely affect foreign original equipment manufacturers, as they can continue involvement in MoD acquisition programs, either by way of direct product orders or through technology transfer or collaboration with the Indian companies, in respect to items not covered by the list, according to Amit Cowshish, a former financial adviser for acquisition at the MoD. It doesn't matter whether an embargoed item is made by a joint venture or any other entity, so long as it is designed and developed in India, Cowshish added. Indeed, an MoD official confirmed that foreign original equipment manufacturers now can set up joint ventures with a majority control up to 74 percent. The ventures would be considered Indian companies and thus be eligible for manufacturing the embargoed items, the official explained. https://www.defensenews.com/global/asia-pacific/2020/08/13/india-announces-ban-on-101-imported-arms-who-benefits-and-who-loses-out/

  • In a future USAF bomber force, old and ugly beats new and snazzy

    28 juillet 2020 | International, Aérospatial

    In a future USAF bomber force, old and ugly beats new and snazzy

    Robert Burns, The Associated Press WHITEMAN AIR FORCE BASE, Mo. — In the topsy-turvy world of U.S. strategic bombers, older and uglier sometimes beats newer and snazzier. As the Air Force charts a bomber future in line with the Pentagon's new focus on potential war with China or Russia, the youngest and flashiest — the stealthy B-2, costing a hair-raising $2 billion each — is to be retired first. The oldest and stodgiest — the Vietnam-era B-52 — will go last. It could still be flying when it is 100 years old. This might seem to defy logic, but the elite group of men and women who have flown the bat-winged B-2 Spirit accept the reasons for phasing it out when a next-generation bomber comes on line. “In my mind, it actually does make sense to have the B-2 as an eventual retirement candidate,” says John Avery, who flew the B-2 for 14 years from Whiteman Air Force Base in western Missouri. He and his wife, Jennifer, were the first married couple to serve as B-2 pilots; she was the first woman to fly it in combat. The Air Force sees it as a matter of money, numbers and strategy. The Air Force expects to spend at least $55 billion to field an all-new, nuclear-capable bomber for the future, the B-21 Raider, at the same time the Pentagon will be spending hundreds of billions of dollars to replace all of the other major elements of the nation's nuclear weapons arsenal. The Air Force also is spending heavily on new fighters and refueling aircraft, and like the rest of the military it foresees tighter defense budgets ahead. The B-2′s viability suffers from the fact that only 21 were built, of which 20 remain. That leaves little slack in the supply chain for unique spare parts. It is thus comparatively expensive to maintain and to fly. It also is seen as increasingly vulnerable against air defenses of emerging war threats like China. Then there is the fact that the B-52, which entered service in the mid-1950s and is known to crews as the Big Ugly Fat Fellow, keeps finding ways to stay relevant. It is equipped to drop or launch the widest array of weapons in the entire Air Force inventory. The plane is so valuable that the Air Force twice in recent years has brought a B-52 back from the grave — taking long-retired planes from a desert “boneyard” in Arizona and restoring them to active service. Strategic bombers have a storied place in U.S. military history, from the early days of the former Strategic Air Command when the only way America and the former Soviet Union could launch nuclear weapons at each other was by air, to the B-52′s carpet bombing missions in Vietnam. Developed in secrecy in the 1980s, the B-2 was rolled out as a revolutionary weapon — the first long-range bomber built with stealth, or radar-evading, technology designed to defeat the best Soviet air defenses. By the time the first B-2 was delivered to the Air Force in 1993, however, the Soviet Union had disintegrated and the Cold War had ended. The plane made its combat debut in the 1999 Kosovo war. It flew a limited number of combat sorties over Iraq and Afghanistan and has launched only five combat sorties since 2011, all in Libya. The last was a 2017 strike notable for the fact that it pitted the world's most expensive and exotic bomber against a flimsy camp of Islamic State group militants. “It has proved its worth in the fight, over time,” says Col. Jeffrey Schreiner, who has flown the B-2 for 19 years and is commander of the 509th Bomb Wing at Whiteman, which flies and maintains the full fleet. But after two decades of fighting small wars and insurgencies, the Pentagon is shifting its main focus to what it calls “great power competition” with a rising China and a resurgent Russia, in an era of stiffer air defenses that expose B-2 vulnerabilities. Thus the Pentagon's commitment to the bomber of the future — the B-21 Raider. The Air Force has committed to buying at least 100 of them. The plane is being developed in secrecy to be a do-it-all strategic bomber. A prototype is being built now, but the first flight is not considered likely before 2022. Bombers are legend, but their results are sometimes regretted. A B-2 bomber scarred U.S.-China relations in 1999 when it bombed Beijing's embassy in the Serbian capital of Belgrade, killing three people. China denounced the attack as a “barbaric act,” while the U.S. insisted it was a grievous error. The Air Force had planned to keep its B-2s flying until 2058 but will instead retire them as the B-21 Raider arrives in this decade. Also retiring early will be the B-1B Lancer, which is the only one of the three bomber types that is no longer nuclear-capable. The Air Force proposes to eliminate 17 of its 62 Lancers in the coming year. The B-52, however, will fly on. It is so old that it made a mark on American pop culture more than half a century ago. It lent its name to a 1960s beehive hairstyle that resembled the plane's nosecone, and the plane featured prominently in Stanley Kubrick's 1964 black comedy, “Dr. Strangelove.” More than once, the B-52 seemed destined to go out of style. “We're talking about a plane that ceased production in 1962 based on a design that was formulated in the late 1940s,” says Loren Thompson, a defense analyst at the Lexington Institute, a Washington think-tank. Rather than retire it, the Air Force is planning to equip the Boeing behemoth with new engines, new radar technology and other upgrades to keep it flying into the 2050s. It will be a “stand off” platform from which to launch cruise missiles and other weapons from beyond the reach of hostile air defenses. In Thompson's view, the Air Force is making a simple calculation: The B-52 costs far less to operate and maintain than the newer but finickier B-2. “They decided the B-52 was good enough,” he says. https://www.airforcetimes.com/news/your-air-force/2020/07/26/in-a-future-usaf-bomber-force-old-and-ugly-beats-new-and-snazzy/

  • The US Navy is planning for its new frigate to be a workhorse

    31 janvier 2019 | International, Naval

    The US Navy is planning for its new frigate to be a workhorse

    WASHINGTON — The U.S. Navy is looking to get a lot of underway time out of its new frigate and is eyeing a crewing model that swaps out teams of sailors to maximize the operational time for each hull. The so-called blue-gold crewing model effectively creates two crews for each ship of the class. The blue crew and gold crew switch out to keep the ships at sea for as long as possible without breaking the sailors and their families. It's the model the Navy has used for years on the ballistic missile submarines and is employing on the littoral combat ships, but now the model is likely to extend to the LCS successor, said Rear Adm. Ron Boxall, the Chief of Naval Operations' surface warfare director. “We're looking at the blue-gold construct on FFG(X). We're planning on it, which gives us a larger operational availability – it should double it,” Boxall told Defense News in an interview late last year. The use of blue-gold crewing hints at how the Navy is viewing its new frigate: as a ship that can carry out a a broad range of tasks that have consumed the operational time of larger combatants. That includes exercises with allies and freedom of navigation operations to counter-piracy and routine presence missions that don't require an Arleigh Burke destroyer to be successful but are time-intensive. The Navy has bemoaned the lack of a small surface combatant that can hold down low-end missions but still contribute in a high-end fight, which has been the impetus behind the whole FFG(X) program. Even though the crews will catch a break in the blue-gold construct, off-hull crews won't be kicking back during their shore rotation, Boxall said. The surface force has been investing in higher-end training facilities in fleet concentration areas in an effort to increase the proficiency of its watch teams. Crews on shore will be going through those trainers, he said. “So, these ships are going to be out there half the time while the [off-hull] crews are back training in higher-fidelity training environments,” Boxall explained. “And what [commanding officers] will tell you is that as we get to higher and higher fidelity training, time to train becomes equally as valuable. “So, in an increasingly complex environment, it's just intuitive that that you have to have time to train. We think Blue-Gold makes sense for those reasons on the frigate.” Lessons from LCS Getting more simulator time for surface sailors has been an initiative championed by the Navy's top surface warfare officer Vice Adm. Rich Brown. It's an off-shoot from lessons-learned from FFG(X)'s predecessor, the LCS, which has extremely high-fidelity simulator trainers for its crews before they take over their assigned hulls. One thing the surface force has been intrigued to see has been the high quality of the officers that come up through the LCS program, something the Navy in part attributes to the trainers, Boxall said, and the SWOs want to replicate that for the FFG(X). “One really interesting side-note with LCS has been the quality of the training,” Boxall said. “As we went back and looked at the lessons learned from McCain and Fitzgerald, we're trying to apply some of the good things about LCS to that. “Those officers, because they are smaller ships they get a lot more water under the keel. And they're faster ships so they are getting that water under the keel in a faster-moving environment. So we're creating a generation of officers who are getting tougher navigation environments thrown at them more quickly, and we're also getting the quality and fidelity of their trainers.” This has meant that LCS officers more-than stack up to their peers from larger, more advanced ships, he added. “What we're seeing is they are doing very, very well against their contemporaries coming off the bigger ships,” Boxall said. “Why is that happening? It's fairly logical: More stick time, better fidelity trainers and more time in the trainers.” Ownership The littoral combat ship adopted the Blue-Gold crewing model after a series of high-profile breakdowns, some caused by crew errors. The original model was to have three crews for two hulls, a rotational model that the Navy worried was taking away from the sense of ownership for a single, specific hull that permanently attached crews might have to a greater degree. The program was reorganized to a Blue-Gold model, which required hundreds of new billets for the LCS program, under then-head of Naval Surface Forces Pacific, Rear Adm. Thomas Rowden. Expanding Blue-Gold to the FFG(X) would further spread the model inside the surface warfare community. Both minesweepers and patrol craft, two other workhorse platforms in the surface community, operate under a Blue-Gold crewing model as well. However, it may not be a model that the Navy will pursue on the large surface combatant now in development. That ship may be better with a lower operational tempo, Boxall said. “We'll look and see if that makes sense on the large surface combatant or not,” he said. “Maybe those are better ships to keep as a surge force, maybe they're fine operating on a lower rotational model.” https://www.defensenews.com/naval/2019/01/30/the-us-navy-is-planning-for-its-new-frigate-to-be-a-workhorse/

Toutes les nouvelles