A new report from the Department of Defense (DoD) has revealed that China’s malicious cyber activity is linked to its preparations for a potential military conflict with the US. The agency’s 2023 Cyber Strategy emphasized China and Russia’s use of cyber attacks as a means to counter US conventional military power and degrade the combat capability of the Joint Force.
According to the report, China has been engaged in prolonged campaigns of cyber espionage, theft, and compromise against critical US infrastructure, including the Defense Industrial Base (DIB). In the event of a war, China is likely to launch destructive cyber-attacks against the US Homeland with the aim of hindering military mobilization, creating chaos, and diverting attention and resources.
The report also highlighted the cyber threats posed by other nation-states, such as North Korea and Iran, as well as financially-motivated transnational criminal organizations. These criminal groups, often aligned with nation-states, are increasingly threatening US national security.
To address these threats, the DoD outlined four strategies it will pursue:
1. Defend the Nation: The Department plans to identify malicious cyber activity in the early stages and collaborate with other agencies to publicize information that can help organizations better defend their systems. It will also work with law enforcement to disrupt threat actors and develop a comprehensive approach for the protection and recovery of critical DIB elements.
2. Prepare to Fight and Win the Nation’s Wars: The DoD aims to promote cyberspace operations among allies to achieve informational and military advantages, as well as deter coercive actions from adversaries. It also plans to enhance the defensive measures of the Department of Defense Information Network (DODIN), including modernizing cryptographic algorithms.
3. Protect the Cyber Domain with Allies and Partners: The Department intends to build the capacity and capability of allies and partners in cyberspace, expanding avenues of potential cyber-cooperation. This involves identifying and addressing malicious cyber activity on their networks and encouraging adherence to international law and cyber norms.
4. Build Enduring Advantages in Cyberspace: The DoD recognizes the need for institutional reforms to gain long-term advantages in cyberspace. It plans to optimize the organizing, training, and equipping of the Cyberspace Operations Forces and Service-retained cyber forces. Additionally, it expects all military personnel to be responsible for exercising cyber awareness and managing cyber risk.
While many experts welcomed the DoD’s ambition to enhance global security partnerships and cooperation, they acknowledged the challenges that lie ahead. Ted Miracco, CEO of Approov Mobile Security, emphasized the importance of execution and sustained commitments to achieve meaningful improvement in cyber resilience. He also highlighted the need to overcome cultural obstacles and prioritize sharing actionable intelligence to enable better private sector defenses.
In conclusion, the DoD’s report highlights China’s malicious cyber activity as a significant concern in terms of its potential impact on a future military conflict with the US. By outlining strategies to address current and future cyber threats, the DoD aims to defend the nation, prepare for war, protect the cyber domain with allies and partners, and build enduring advantages in cyberspace. However, the successful implementation of these strategies will require collaboration, information sharing, and a sustained commitment to cybersecurity.