[1]An Example of Deterrence in Cyberspace:

    In 2016, the US was successfully deterred from attacking Russia in
    cyberspace because of fears of Russian capabilities against the US.

    I have two citations for this. The first is from the book [2]Russian
    Roulette: The Inside Story of Putin's War on America and the
    Election of Donald Trump, by Michael Isikoff and David Corn.
    [3]Here's the quote:

    The principals did discuss cyber responses. The prospect of hitting
    back with cyber caused trepidation within the deputies and
    principals meetings. The United States was telling Russia this sort
    of meddling was unacceptable. If Washington engaged in the same type
    of covert combat, some of the principals believed, Washington's
    demand would mean nothing, and there could be an escalation in cyber
    warfare. There were concerns that the United States would have more
    to lose in all-out cyberwar.

    "If we got into a tit-for-tat on cyber with the Russians, it would
    not be to our advantage," a participant later remarked. "They could
    do more to damage us in a cyber war or have a greater impact." In
    one of the meetings, Clapper said he was worried that Russia might
    respond with cyberattacks against America's critical infrastructure
    - and possibly shut down the electrical grid.

    The second is from the book [4]The World as It Is, by President
    Obama's deputy national security advisor Ben Rhodes. [5]Here's the
    New York Times writing about the book.

    Mr. Rhodes writes he did not learn about the F.B.I. investigation
    until after leaving office, and then from the news media. Mr. Obama
    did not impose sanctions on Russia in retaliation for the meddling
    before the election because he believed it might prompt Moscow into
    hacking into Election Day vote tabulations. Mr. Obama did impose
    sanctions after the election but Mr. Rhodes's suggestion that the
    targets include President Vladimir V. Putin was rebuffed on the
    theory that such a move would go too far.

    When people try to claim that there's [6]no [7]such thing as
    deterrence in cyberspace, this serves as a counterexample.

    Tags: [8]cyberattack, [9]cyberwar, [10]national security policy,
    [11]Russia

  (Via [12]Schneier on Security)

  Well said and cited.
    __________________________________________________________________

  My original entry is here: [13]An Example of Deterrence in Cyberspace.
  It posted Thu, 07 Jun 2018 13:01:59 +0000.
  Filed under: business,

References

  1. https://www.schneier.com/blog/archives/2018/06/an_example_of_d.html
  2. https://www.amazon.com/gp/product/B075WVX3MS
  3. https://www.motherjones.com/politics/2018/03/why-the-hell-are-we-standing-down/
  4. https://www.amazon.com/World-Memoir-Obama-White-House/dp/0525509356/
  5. https://mobile.nytimes.com/2018/05/30/us/politics/obama-reaction-trump-election-benjamin-rhodes.html
  6. https://www.thecipherbrief.com/column_article/no-thing-cyber-deterrence-please-stop
  7. https://www.sciencedirect.com/science/article/pii/S0030438717300431
  8. https://www.schneier.com/cgi-bin/mt/mt-search.cgi?search=cyberattack&__mode=tag&IncludeBlogs=2&limit=10&page=1
  9. https://www.schneier.com/cgi-bin/mt/mt-search.cgi?search=cyberwar&__mode=tag&IncludeBlogs=2&limit=10&page=1
 10. https://www.schneier.com/cgi-bin/mt/mt-search.cgi?search=national security policy&__mode=tag&IncludeBlogs=2&limit=10&page=1
 11. https://www.schneier.com/cgi-bin/mt/mt-search.cgi?search=Russia&__mode=tag&IncludeBlogs=2&limit=10&page=1
 12. http://www.schneier.com/blog/atom.xml
 13. https://www.prjorgensen.com/?p=1197