CDM-CYBER-DEFENSE-eMAGAZINE-March-2019

The US Must Catch Up to Other Prominent Powers in
Cyberwarfare Defense
By Bryan Becker, DAST Product Manager, White Hat Security
The terms cyberattack and cyberwar have similar meanings, but there are differences to how we
should characterize and regard them. Typically, a cyberattack is a single instance attack that may
or may not be part of a larger “war” between parties. Conversely, a cyberwar - or cyberwarfare -
usually encompasses a strategy that drives long-term offensive and defensive operations and is
likely waged by a nation-state backer. Cyberwarfare is an ongoing event that encompasses many
aspects of information security.
When we look at the state of cybercrime in the U.S., attackers continue to demonstrate an ability
to penetrate the perimeter, steal sensitive data and intellectual property, and disrupt operations
of large and small corporations and private business, as well as federal, state and local
government entities. Attacks are widespread, and as we've seen during recent elections,
exacerbated by an unpredictable political climate.
Given how prevalent cyberattacks are in the U.S., it’s exponentially more complex to consider
what’s necessary to defend the entire country against a full-blown cyberwar – and it quickly
becomes apparent how woefully behind the rest of the developed world the U.S. remains, with
regard to preparedness and ability to defend against a sustained and coordinated cyberwarfare
campaign. Based on today’s climate, it will easily take at least a decade for the U.S. to catch up
with its allies and competitors in terms of nation-state attack protection.
It may or may not come as a surprise that North Korea is near the top of the U.S. cyber adversary
list, with Russia posing the largest threat - both immediate and long term. The reason for this is
that Russia and North Korea have invested in and continually grown their respective cyber
operations dating back as far as the Cold War. Therefore, their experience is decades ahead of