National Cybersecurity Strategy
The National Cybersecurity Strategy: Breaking a 50-Year Losing Streak
The new White House strategy tackles long-standing cybersecurity problems head-on.
Jason Healey is a Senior Research Scholar at Columbia University’s School for International and Public Affairs and founder of the global “Cyber 9/12” student cyber-policy competition. He is also a part-time strategist at the Cybersecurity and Infrastructure Security Agency and edited the first history of conflict in cyberspace, "A Fierce Domain: Cyber Conflict, 1986 to 2012." He has held cyber positions at the White House, Goldman Sachs, and the U.S. Air Force.
Subscribe to this Lawfare contributor via RSS.
The new White House strategy tackles long-standing cybersecurity problems head-on.
The new National Cybersecurity Strategy builds on a long consensus but differs in important and long-overdue ways.
Though many are quick to oversimplify cyber brandishing as counterproductive, the power of cyber brandishing is much more nuanced and useful.
Ukraine’s offensive cyber hacking against Russia, though perhaps for aims that the international community may agree with, is nonetheless a violation of cyber norms—which should be enforced without exceptions.
Subversive cyber operations are argued to have “limited utility in practice” because of the inherent trade-offs of the trilemma/quadrilemma. However, this assessment ignores several key factors.
Cyberspace may be a domain of military operations, but it is not predominantly so. Civil-military relations in the United States must adapt to new demands or cyberspace may be irretrievably diminished.
Attackers in cyberspace have had the systemwide advantage for decades. Reversing this requires both a more nuanced understanding of the offense-defense balance and innovations with leverage that works at scale across the internet.