Boyd on CyberWar

The hacking (cracking) attack on Google et al has caused a phenomenon that actually puts those companies and even countries at risk. Over the last year, the response by companies and countries to these cracking episodes has been to lock down their intranet/internet systems, filtering content and making access more restrictive. As an example, the Air Force Material Command, even after relenting on bans with certain types of social media, still enacts a robust filtering policy that continues to restrict blogs, wikis, and the like. Australia is even considering filtering incoming internet traffic echoing China and other totalitarian countries.

The giant risk of this fortress mentality is that it actually makes the organization less secure because it makes the organization less nimble. By enacting more security, an organization inevitably enacts more bureaucracy which creates friction and slows reaction ability to a grinding halt. This phenomenon is captured well in the Starfish and the Spider (I synopsize it here) and was a central tenet in John Boyd’s discussions on how armies win wars. I propose that rather than locking down access to the internet, organizations relinquish control and let employees, partners, and other supporter’s route crackers and malcontents via an organic set of decentralized tactics (this may already be taking place). Twitter is indeed mission critical. In cyber operations, observing, orienting, and acting faster than the adversary is the only way win.

Twitter Is Mission Critical

I've been pushing for greater adaption of social media (and other Web 2.0 stuff) for a while now. I recently came across the CogBlog, which had this great comment on the US military's current approach to computer network security and operations.

To fight kinetic wars, the military gives its soldiers armor and modern weapons and trains them to exploit the native battlefield infrastructure and terrain. In contrast, to fight information wars, the military attempts to encase its soldiers in impenetrable bubbles that insulate them from the “information battlefield.” The analogy in kinetic space would be to encase our soldiers their vehicles and equipment in giant “hamster balls” and have them roll as best they can across the native infrastructure and terrain.

Exactly! When we decide to block off the most important and interesting parts of the internet, not allowing military types to use them to accomplish the mission, we're basically putting people in hamster balls, which doesn't exactly help.