Monday, November 08, 2010

Should UK cyber defences include offensive operations to protect UK interests?

This question was posed in a tweet by @Warwick_Ashford, which was retweeted to me. He raised the question because of this article US Cyber Command calls for offensive powers in Computer Weekly.

The debate in the US over this request is not over National Interest, or National Security, but over the Legality of offensive operations and some Senior Advisors and Lawyers want to limit such operations to existing War Zones, such as Afghanistan.

I see this as somewhat 'out-dated thinking' Cyber-war can be waged without forces deployed in the field and a state, or indeed individuals can mount an attempted Cyber Attack without escalation to a Military Deployment. Perhaps the 'rules of cyber engagement' should be no 'First Strike' and that any offensive response against the perpetrators  of an attack should 'be measured' and except in exceptional cases Politically Approved by the Prime Minister, or in the case of the USA the president/ This would seem to me to be a reasonable base line posture to adopt for UK, USA, NATO Countries and indeed other Western Nations.

I would be interested in comments

No comments: