A man stands next to screens during the Locked Shields 2017 exercise organized by NATO Cooperative Cyber Defence Centre of Excellence in Tallinn, Estonia, April 26, 2017. (REUTERS/Ints Kalnins)
By Barbara Roggeveen, for Atlantic Council
Modern-day warfare is as much about cyberattacks and the protection of communication and information systems as it is about kinetic military action. In 2016, NATOs institutional networks experienced on average 500 cyberattacks a monthan increase of roughly 60 percent from the year before. Other recent, high-profile, transnational cyberattacks, such as the WannaCry ransomware attack and Petya, highlight the urgent need for NATO and its member states to develop strong cybesecurity capabilities.
Although NATO has been working toward a more comprehensive cybersecurity policy, there are two major challenges with its current strategy. The current plan places cyberattacks within the scope of Article 5 of the North Atlantic Treaty and the concept of collective defense, thus, creating high thresholds for engagement. In addition, it allows for mainly defensive and reactive measures, leaving less room for preventive or offensive operations.
NATOs approach to cybersecurity can be traced back to early steps taken at the 2014 Wales Summit, in which NATO included cyber defense in its core tasks of collective defense. At the Warsaw Summit two years later, NATO recognized cyberspace as a domain of operations, reaffirming its defensive mandate with regard to cyber threats.
The Warsaw Summit Communiqu states that recognizing cyberspace as a domain of operations will support NATOs broader deterrence [of] and defense [against cyber threats], and NATO promised to continue integrating cyber defense into operational planning [to ensure] a better management of resources, skills, and capabilities.
Armed attack-threshold
The designation of cyberspace as a domain of operations has far-reaching implications. As decided upon by Allied countries in the Tallinn Manual 2.0, such a label allows NATO to act only against those cyberattacks that qualify as an armed attack. In the case of cyberattacks, however, opponents often do not seek physical destruction. Of late, cyberattacks have moved further away from traditional warfare in pursuit of subtler influences, sometimes involving coercive political pressure. On July 28, the US Congress voted for new sanctions on Russia for its meddling in the 2016 US presidential election in favor of then-candidate US President Donald J. Trump.
By placing cyberattacks within the doctrine of collective defense, NATO limits its response to those cyberattacks that reach the armed-attack threshold, making it extremely difficult for NATO members to effectively address cyberattacks that do not qualify as such.
Whether a cyber operation constitutes an armed attack also depends on the parties involved. Traditionally, the right to collective defense could only be invoked in case of an armed attack undertaken by one state against another. NATOs Strategic Concept allowed for a wider definition, stipulating that the North Atlantic Treaty covers any armed attack on the territory of the Allies, from whatever direction or source. Although this allows NATO to take defensive action against cyberattacks carried out by non-state actors, there is still some uncertainty within the community of allied countries as to when collective defense against non-state actors is permissible. One of the biggest challenges in this case remains attribution. It is often difficult to trace cyberattacks back to one specific organization.
From defensive to offensive capabilities
Currently, NATOs cybersecurity strategy is strictly defensive. The NATO Computer Incident Response Capability (NCIRC) protects NATOs own networks, and NATO supports allied members in their individual cyber defenses through intelligence gathering and sharing, the employment of high-readiness cyber defense teams, the development of targets for allied countries to facilitate national cyber defense capabilities, and investment in education, training, and exercise.
As James A. Lewis, director of the Strategic Technologies Program at the Center for Strategic and International Studies, wrote for the Tallinn Papers, a series of publications from the NATO Cooperative Cyber Defence Centre of Excellence, a cyber defensive orientation is the equivalent of a static defense, defending fixed positions rather than maneuvering, and conceding initiative to opponents.
Defensive measures might hold off an individual cyberattack, but they do not address the underlying threat. Although the protection of NATO members national networks should be a priority, the most effective way to provide sustainable and long-term protection against cyberattacks is through offensive capabilities and the destruction of opponent networks and systems.
While individual member states can take certain steps toward achieving this objectivethe United States, for example, has already employed strong offensive cyber capabilities, such as Stuxneta collective NATO doctrine would provide allied countries with the necessary guidelines regarding proportionality and subsidiarity when employing offensive cyber capabilities. NATOs cybersecurity policy should provide a clear framework to address the relatively uncharted territory of offensive cyber operations.
Recommendations
Current developments in the field of cybersecurity require a more proactive approach. In order to counter cyber threats, NATO should pursue a broader and more dynamic operational framework than that of collective defense. As the cyber capabilities of NATOs opponents grow more sophisticated, the Alliance should adopt a cybersecurity policy that can effectively counter these threats.
Primarily, this means that NATO should create a public doctrine, independent from the concept of collective defense, that allows member states to not only act defensively, but also offensively. Second, NATO should pursue a public policy that also effectively addresses cyber threats that stay below the armed attack-threshold. Overcoming these two challenges would enable the community of Allied countries to develop the necessary framework to comprehensively address current cybersecurity threats.
By Barbara Roggeveen, for Atlantic Council
Barbara Roggeveen is a research assistant at the Slavic Department of the University of Amsterdam and a former intern with the Atlantic Councils Dinu Patriciu Eurasia Center.
Read more:
NATO Needs an Offensive Cybersecurity Policy - StopFake.org
- NATO Protesters Receive 5- To 8-Year Prison Terms - April 26th, 2014 [April 26th, 2014]
- NATO - Wikipedia, the free encyclopedia - April 26th, 2014 [April 26th, 2014]
- Latvia: US troops arrive in Baltics for NATO drill - Video - April 26th, 2014 [April 26th, 2014]
- No NATO. May 2012. Archive. Chicago, Il - Video - April 26th, 2014 [April 26th, 2014]
- Erkkio Tuomioja: "Nato suojaa Suomea meteoriiteilta". - Video - April 26th, 2014 [April 26th, 2014]
- US troops arrive in Latvia for NATO exercises: Baltic states concerned by Russian military threat - Video - April 26th, 2014 [April 26th, 2014]
- Voglio andare a vivere a Laveno dove e' nato Pozzetto - Video - April 26th, 2014 [April 26th, 2014]
- OcaqTv - Rusiya NATO srhdini pozdu -- F-16-lar havaya qalxd - Video - April 26th, 2014 [April 26th, 2014]
- Men of War Assault Squad Cold War Mod - NATO vs Warsaw Pact - Video - April 26th, 2014 [April 26th, 2014]
- US troops in Poland: American soldiers arrive for NATO exercises in response to Russia threat - Video - April 26th, 2014 [April 26th, 2014]
- Ancona 23-04-14 PdCI - La crisi dell'Ucraina, la NATO e l'UE: pericoli di guerra e lotta x la Pace - Video - April 26th, 2014 [April 26th, 2014]
- Eastermonday Peace ralley NATO Bchel germany 21.04.2014 - Video - April 26th, 2014 [April 26th, 2014]
- How to change Gear 2 Strap NATO no tool needed - Video - April 26th, 2014 [April 26th, 2014]
- In Context: The War Report #3 - Ukraine and NATO - Video - April 26th, 2014 [April 26th, 2014]
- On The Wrist Omega Speedmaster Black NATO Strap - Video - April 26th, 2014 [April 26th, 2014]
- US, NATO expanding on Russia doorstep: Analyst - Video - April 26th, 2014 [April 26th, 2014]
- NATO War Games Send Warning to Moscow - Video - April 26th, 2014 [April 26th, 2014]
- NATO to deploy recon flights over Poland - April 27th, 2014 [April 27th, 2014]
- Nato News - April 27th, 2014 [April 27th, 2014]
- NATO - State - April 27th, 2014 [April 27th, 2014]
- NATO: Definition from Answers.com - Answers - The Most ... - April 27th, 2014 [April 27th, 2014]
- Marine Le Pen: Vyvediem Franczsko z NATO - francztina, rutina - Video - April 27th, 2014 [April 27th, 2014]
- 5 NATO troops killed in Kandahar Afghanistan UK's helicopter crash - Video - April 27th, 2014 [April 27th, 2014]
- European observers detained in Ukraine are branded 'Nato spies' - Video - April 27th, 2014 [April 27th, 2014]
- Prostittas priecjas par NATO karavriem Latvij - Video - April 27th, 2014 [April 27th, 2014]
- MV Bill - A Luz #PersianaBaixaMix (prod. DJ Nato pk) Part. @KmillaCdd - Video - April 27th, 2014 [April 27th, 2014]
- Furious Russia Proposes Retaliation Against NATO Countries! - Video - April 27th, 2014 [April 27th, 2014]
- Conversation: NATO's Evolving Mission - Video - April 27th, 2014 [April 27th, 2014]
- NATO supply trucks stuck in Pakistan - Video - April 28th, 2014 [April 28th, 2014]
- NATO troops killed in Afghanistan helicopter crash - Video - April 28th, 2014 [April 28th, 2014]
- Slovakia: NATO exercises in Central Europe - Video - April 28th, 2014 [April 28th, 2014]
- "NATO 3" individuals sentenced - Video - April 28th, 2014 [April 28th, 2014]
- NATO exercise scenario: Naval response to invasion of allied country - April 29th, 2014 [April 29th, 2014]
- NATO News and Video - FOX News Topics - FOXNews.com - April 29th, 2014 [April 29th, 2014]
- RAF Typhoons Arrive in Lithuania to Reinforce NATO Air Policing Mission - Video - April 29th, 2014 [April 29th, 2014]
- Poland: French Rafale fighter jets join NATO force - Video - April 29th, 2014 [April 29th, 2014]
- RAF Deploys Typhoon Jets To Bolster Nato Air Policing Mission - Video - April 29th, 2014 [April 29th, 2014]
- Sunday 4/27/2014 - Tarpley Points Out Fake-OSCE Observers Are Actually NATO Military Officers - Video - April 29th, 2014 [April 29th, 2014]
- Germany: Pro-Russians rally against NATO in Frankfurt - Video - April 29th, 2014 [April 29th, 2014]
- April 28 2014 Breaking News NATO minesweepers set off on Baltic deployment - Video - April 30th, 2014 [April 30th, 2014]
- NATO forces serve world bankers: Analyst - Video - April 30th, 2014 [April 30th, 2014]
- 2 NATO troops killed in attack in eastern Afghanistan - Video - April 30th, 2014 [April 30th, 2014]
- STEFANO BORGONOVO:ATTACCANTE NATO IL DOCUMENTARIO - Video - April 30th, 2014 [April 30th, 2014]
- RAF Deploys Typhoon Jets To Bolster NATO Air Policing Mission - May 1st, 2014 [May 1st, 2014]
- NATO opens second Baltic air base in Estonia with 4 Danish fighter jets amid Ukraine crisis - May 1st, 2014 [May 1st, 2014]
- NATO triples fighter jets in Baltic countries - Video - May 1st, 2014 [May 1st, 2014]
- Lithuania: US hands over NATO air patrol to UK - Video - May 1st, 2014 [May 1st, 2014]
- Ukraine: Kerry announces more support from NATO towards coup - Video - May 1st, 2014 [May 1st, 2014]
- Scoring Political Points? NATO bolsters forces in Eastern Europe - Video - May 1st, 2014 [May 1st, 2014]
- Putin: NATO Chief Rasmussen secretly taped, leaked meeting when he was Danish PM - Video - May 1st, 2014 [May 1st, 2014]
- Russia Accuses NATO of 'Provocative' Actions - Video - May 1st, 2014 [May 1st, 2014]
- NATO & its future NAZI headquarters - Video - May 1st, 2014 [May 1st, 2014]
- NATO Fest 2014 - Video - May 1st, 2014 [May 1st, 2014]
- RAF Jets Respond To Ukraine Crisis 28.04.14 - Video - May 1st, 2014 [May 1st, 2014]
- OSCE team in Ukraine NATO spies: Analyst - Video - May 1st, 2014 [May 1st, 2014]
- NATO commander: Europe concept on international borders changed after Crimea annexation - May 1st, 2014 [May 1st, 2014]
- NATO allies take over Baltic mission from Air Force - May 1st, 2014 [May 1st, 2014]
- NATO official says Russia must now be viewed as more of an enemy than a partner - May 1st, 2014 [May 1st, 2014]
- NATO official says Russia now an adversary - May 1st, 2014 [May 1st, 2014]
- North Atlantic Treaty Organization - The New York Times - May 1st, 2014 [May 1st, 2014]
- Estonian Air Base Turns Into Second NATO Baltic States Hub - Video - May 1st, 2014 [May 1st, 2014]
- Finale Ligure Freeride H e Base nato con Patrik - Video - May 1st, 2014 [May 1st, 2014]
- Ellodesse Mv.1, 2, 3 - nato in Synthesia - Video - May 1st, 2014 [May 1st, 2014]
- NATO Boosts Presence in Eastern Europe Amid Continued Turmoil in Ukraine - Video - May 1st, 2014 [May 1st, 2014]
- NATO's efforts to attain advancement in ariel warfare and defense HD Stock Footage - Video - May 1st, 2014 [May 1st, 2014]
- Me Gusta By Nato 2014 - Video - May 1st, 2014 [May 1st, 2014]
- Toward a Europe Whole and Free: Secretary of State John Kerry - Video - May 1st, 2014 [May 1st, 2014]
- NATO official: Russian moves in Ukraine pose 'grave challenge' to global security system - May 2nd, 2014 [May 2nd, 2014]
- As NATO Builds It's Forces The Economy Is On The Brink Of Collapse -- Episode 355 - Video - May 2nd, 2014 [May 2nd, 2014]
- 15 years on: NATO's Murino Massacre of innocent children remembered In the NOW. - Video - May 2nd, 2014 [May 2nd, 2014]
- Nato -- finally finding its feet? - Video - May 2nd, 2014 [May 2nd, 2014]
- Europe Responds to Russian Aggression: NATO opens second Baltic hub at Estonia's Amari air base - Video - May 2nd, 2014 [May 2nd, 2014]
- NATO air strength triples in Baltic states - Video - May 2nd, 2014 [May 2nd, 2014]
- Russia now an adversary, NATO official says - May 3rd, 2014 [May 3rd, 2014]
- NATO Movie - Video - May 3rd, 2014 [May 3rd, 2014]
- The Expandables: NATO talking heads, war tech on 'crusade control' - Video - May 3rd, 2014 [May 3rd, 2014]
- Friend to Foe? NATO's Deputy Head classifies Russia as enemy over Ukrainian crisis - Video - May 3rd, 2014 [May 3rd, 2014]
- Tiger's Eye Dance by Oasis Dancers at 2014 NATO - JVC Version - Video - May 3rd, 2014 [May 3rd, 2014]
- Cleopatra's Dance by Oasis Dancers at 2014 NATO - JVC Version - Video - May 3rd, 2014 [May 3rd, 2014]
- Slave To The Rhythm Dance by Oasis Dancer at 2014 NATO - JVC Version - Video - May 3rd, 2014 [May 3rd, 2014]