Article Preview
TopIntroduction
In the context of information operations and related cyber espionage (Geers, 2015), as well as what Russian General Valery Gerasimov (2016) described as hybrid warfare, this comparative international case study provides an open-source analysis of cyberattacks against three modern and Internet-reliant democracies: Estonia in 2007 (Kozlowski, 2014), the United States in 2012 (Goldman, 2012), and Ukraine during the 2013-2015 conflict (Woehrel, 2015). The analysis is important for historically evaluating the threats that cyber warfare now and in the future may pose to international security (Maigre, 2015; Shackelford, 2009) in light of evolving technologies and doctrines of warfare that have made cyberattacks an integral part of modern warfare (Bachmann & Gunneriusson, 2015) and enabled the Internet to manipulate critical infrastructure (Geers, 2015; Lee, Assante, & Conway, 2016; Szoldra, 2016; Volz, 2016).
Describing this threat to material things and human life, the United States Department of Homeland Security (USDHS) (2016) stated, “[T]here are 16 critical infrastructure sectors whose assets, systems, and networks, whether physical or virtual, are considered so vital to the United States that their incapacitation or destruction would have a debilitating effect on [national security].” These sectors include: energy, defense, nuclear, transportation, food and agriculture, emergency services, communication, chemical, dams, finance, healthcare, information technology, commercial facilities, and government facilities (USDHS, 2016). NATO has defined the term similarly, stating, “It is our critical infrastructure that makes modern society possible” (Kerigan-Kyro, 2014, p. 1).
Now capable of inflicting considerable material damage to critically important systems of government, communications, and daily life (Tucker, 2014), the Internet as a platform of cyber warfare also has broadened the battlefield to include state and non-state actors (Geers, 2015), who “increasingly rely on technological means to execute their operations utilizing cyber capabilities… against the IT infrastructure of a target” (Bachmann & Gunneriusson, 2015, p. 198). Recognizing this threat, since 2011, the United States Department of Defense has considered cyberspace a domain of war similar to the physical dimensions of air, land, and sea (Brownlee, 2015), despite a lack of national and international consensus defining cyber war, cyber warfare, and related terms (Gervais, 2012; Hathaway, et al., 2012; NATO, n.d.). Generally, hybrid warfare refers to the combined utilization of both kinetic and non-kinetic forms of combat, including economic sanctions, energy blockades, information warfare, and cyberattacks (Gerasimov, 2016; Maigre, 2015; McDermott, 2014; U.S. Army Special Operations Command, 2015).