Shifting U.S. Cyber Strategy from Defense to Offense

The United States is heavily reliant on information technology and cyberspace to function at the societal, economic, and military levels. As a consequence, the U.S. faces substantial threats from hostile foreign state and non-state actors conducting computer network exploitations of military and private-sector information networks, and disruptive or potentially destructive cyber network attacks. This thesis examines U.S. interests in cyberspace, the threat environment, legal issues, deterrence in cyberspace, and if a shift in balance towards a more offensive strategy for defending U.S. interests in cyberspace should be pursued. This thesis argues that the Department of Defense's current defensive deterrence-by-denial cyber strategy approach is not sufficient to deal with the current and projected cyber threat environment from state and non-state actors, such as China, Russia, rogue states, and terrorist groups. Instead, the U.S. should incorporate an offensive deterrence-by-punishment cyber component into its strategy. A deterrence-by-punishment strategy should include developing a credible offensive military cyber strategy, establishing a clear offensive cyber declaratory policy, and credible and effective offensive cyber and kinetic counterstrike capabilities for nation state and non-state actor cyber threats at the high-end of the cyber threat spectrum. For cyber threats at the lower-end of the cyber threat spectrum, the U.S. needs to develop and mature additional instruments of state power. This study counters claims that attribution capabilities in cyberspace are not mature enough to provide a clear and timely understanding of hostile cyber acts against U.S. Government and private-sector interests.

Name thesis:degree_name

Master of Science in Defense and Strategic Studies

Level thesis:degree_level

Masters

Discipline thesis:degree_discipline

Defense and Strategic Studies

Year

2012

Author dc:creator

• Carey, Ryan Andrew

Contributors dc:contributor

• Robert Joseph

• offensive cyber
• defensive cyber
• deterrence
• attribution
• China
• Russia
• Defense and Security Studies

Statement dc:rights

• © Ryan Andrew Carey

Repository record dc:identifier

https://bearworks.missouristate.edu/theses/1356

OAI identifier oai:identifier

oai:bearworks.missouristate.edu:theses-2357