Cyberwarfare Isn’t Game of Thrones. A Wall Won't Work.

According to retired U.S. Army General Stanley McChrystal, top-notch cybersecurity isn't modeled after the Maginot Line or a giant wall attempting to block outside forces from getting in. Instead, we need to design cybersecurity that acts like an immune system, learning on the go every time a new or unique challenge emerges.

Stanley McChrystal: Cybersecurity is a unique challenge today because one, we are so utterly dependent upon our digital communications and our digital control of things and so it's going to become ever more essential that we have the ability to provide security that we're confident in. The challenge is if we were against Doctor No or Mr. Big in a cave somewhere and they got a bunch of people working, you could understand the threat and you could sort of limit the threat and the threat would have a predictable limitation in what they could do. They'd have to pick an avenue of approach and they'd have to go at that avenue of approach because they can't do all things at all times.

The problem with the cybersecurity; that's not the threat. There are some entities like that. There are some state-sponsored entities that are focused on certain things, but the barrier to entry into the cyberworld is very low. You can get in your basement in your boxers shorts and you can have a computer and you can get into the game. And it's sort of the idea of 10,000 monkeys typing on 10,000 keyboards; somebody is going to create a cybersecurity challenge. And it's constantly morphing and adapting, whereas the cyber security requirement is to protect things so you essentially have to protect everything that you value all the time. The people who want to attack that can attack at their choosing wherever they want and constantly change their attacks. Constantly just like water goes against a dam, it just goes until it finds the weakest point. At some point, something happens — technology changes, human error, technological glitch or whatever. There's a good likelihood that they'll get in.

And so, if you think about the cybersecurity problem the first thing I don't think will work is the Maginot Line. The Maginot Line was created by the French in the 1930s to prevent the Germans from doing a repeat of the first World War and invading France from Germany. People think of it now as the stupidest thing ever built, but it's not really correct because the Maginot Line actually worked. The Germans did not invade across the German/French border. Now, the fact is they went through Belgium. They still got into France and conquered France in the summer of 1940.

So I think the lesson to be learned is there has to be defensive things set up as best we can for cybersecurity, but it's going to have to be this constantly adapting, constantly morphing, defense in depth, with some offense too, with going out and figuring out where the threats are arising. And that defense in depth means that you can't have one line. The government can't put a big wall up and everybody hides behind it, nor do we want each organization, each commercial firm or government organization to be an island onto themselves just hoping that they're not the weakest wildebeest in the herd and that the lions will get somebody else. 

What we really need is all those entities to be linked so that they constantly learn from one another. If one suffers a breach, everyone has to learn from it. Right now the challenge is people are loath to share that information. One, because commercially they might be hurt by reputation; also they're afraid the more you share the more you have the possibility of your little island is not completely separated. Your moat around it has got linkages across it and you can be opened up more. But we're going to have to get a network to defense where every time something happens, and we learn from it, the entire network learns immediately. We're going to have to have that kind of speed because there will be breaches. There will be mistakes. But the organisms have got to learn. It's going to have to be a lot like the human immune system. The human immune system is extraordinary because about 10,000 times a day it gets attacked by something that could hurt the human body. But as it responds and it sends out antibodies to it, it does it and it learns from that. And so if it has a breach one time, it actually builds up antibodies against that challenge and has them at the ready for the next time. That's how we build up immunity to things. And I think the human immune system is the way our cyberdefense is going to have to be, which means it has to be integrated.

 

According to retired U.S. Army General Stanley McChrystal, top-notch cybersecurity isn't modeled after the Maginot Line or a giant wall attempting to block outside forces from getting in. Instead, we need to design cybersecurity that acts like an immune system, learning on the go every time a new or unique challenge emerges.

Related Articles

Why Japan's hikikomori isolate themselves from others for years

These modern-day hermits can sometimes spend decades without ever leaving their apartments.

700,000 Japanese people are thought to be hikikomori, modern-day hermits who never leave their apartments (BEHROUZ MEHRI/AFP/Getty Images).
Mind & Brain
  • A hikikomori is a type of person in Japan who locks themselves away in their bedrooms, sometimes for years.
  • This is a relatively new phenomenon in Japan, likely due to rigid social customs and high expectations for academic and business success.
  • Many believe hikikomori to be a result of how Japan interprets and handles mental health issues.
Keep reading Show less

Scientists discover what caused the worst mass extinction ever

How a cataclysm worse than what killed the dinosaurs destroyed 90 percent of all life on Earth.

Credit: Ron Miller
Surprising Science

While the demise of the dinosaurs gets more attention as far as mass extinctions go, an even more disastrous event called "the Great Dying” or the “End-Permian Extinction” happened on Earth prior to that. Now scientists discovered how this cataclysm, which took place about 250 million years ago, managed to kill off more than 90 percent of all life on the planet.

Keep reading Show less

Why we're so self-critical of ourselves after meeting someone new

A new study discovers the “liking gap” — the difference between how we view others we’re meeting for the first time, and the way we think they’re seeing us.

New acquaintances probably like you more than you think. (Photo by Simone Joyner/Getty Images)
Surprising Science

We tend to be defensive socially. When we meet new people, we’re often concerned with how we’re coming off. Our anxiety causes us to be so concerned with the impression we’re creating that we fail to notice that the same is true of the other person as well. A new study led by Erica J. Boothby, published on September 5 in Psychological Science, reveals how people tend to like us more in first encounters than we’d ever suspect.

Keep reading Show less