From Estonia, lessons for the Age of Cyberwar
Loading...
| FRANKFURT
Long before Moscow became the prime suspect in the Democratic National Committee data breach, hackers tied to the Russian government have sought to sew听political discord听via the internet.
Most notably, many experts believe that in 2007 Russian operatives unleashed a series of devastating cyberattacks on neighboring Estonia following a dispute with Moscow over a Soviet-era war memorial.
At the time,听Estonia had the world's most connected society, giving attackers plenty of targets. They succeeded in taking down听government computers, banks, and newspaper sites, trying to paralyze the "e-way of life" Estonians painstakingly听crafted after听the Soviet Union dissolved听in 1991.
And now, as a growing number of digital attacks听hit countries' most critical systems, from听听迟辞听electric utilities听迟辞听, Estonia has become a critical voice and an听important model when it comes to preparing for escalating conflict in cyberspace.
"Estonia's drum-beating has helped increase the dialogue among other nation-states about what aggressive actions in cyberspace warrant either a political, military, or economic response, or a combination of these," says John Bumgarner, research director at the US Cyber Consequences Unit, an independent, nonprofit research institute in Washington.
Indeed, in the听years after the 2007 attacks, and with President听Toomas Hendrik Ilves听taking the lead, Estonia has challenged the world to pay closer attention to cyberwarfare.听
"The first battle in the wars of the future will be over the control of cyberspace," said Lani Kass, a special assistant to the US Air Force chief of staff, four months after the digital assault on Estonia.听"If we don鈥檛 dominate cyberspace, we won鈥檛 be able to dominate air, space, land, or sea domains."
In 2008, NATO established its听center of excellence for cyberdefense in Tallinn, Estonia's capital city. Today, it's where Americans meet with allies to conduct hands-on cyberwar simulation exercises.
"It鈥檚 about how those countries would come together if an aggressor听like听Russia caused some harm on an another member," says Mr. Bumgarner.听
That's a conversation that's taking place in Washington in light of allegations that Russians breached the networks of the Democratic National Committee and separate reports of hackers compromising state election boards.听
As a result of those reports, US lawmakers and government officials are considering a range of measures including new federal legislation that would safeguard the polls.
After the 2007 attacks, Estonia went to great lengths to harden its digital security.听It's currently in the process of improving its听encrypted digital ID card that citizens use when doing everything from听filing taxes to paying library fines to buying bus passes to casting votes.听Estonia started issuing e-residency听cards to nonresidents in late 2014.
The ID card provides an important layer of protection for the country, say Estonian officials. "Security is multilayered. If there is a weakness, this does not mean that attacker can hack to system and cause harm," said听Agu Kivim盲gi, a听former IT head for Estonia's interior ministry.
And that helps protect Estonia's digital voting system, too, he said.听"The electoral system is the basis of democracy, and you must defend it."
To be sure, the introduction of听Estonian-like electronic ID cards听would face tremendous opposition in the US and other Western democracies. Critics of relatively new laws in several states that require voters show photo ID at the polls say the practice can be discriminatory and even discourage people to vote.
"Estonia is a good model, but one that would be hard for the US to duplicate,"听says James Lewis, senior vice president at the Center for Strategic and International Studies in Washington.
"At the end of the day,听cybersecurity is a government responsibility," said Mr. Lewis. "Estonia鈥檚 government led the rest of the country in creating an integrated defense. [The US is]听bigger and is in a slow-moving constitution crisis."
Still, Piret听Pernik of the Tallinn-based International Centre for Defense and Security, Russia's alleged tampering with US politics and election systems "put into question the reliability of the system, the accuracy of the election results for the general public."
And even if there's no tangible effect of the breaches on the outcome of the upcoming presidential election, "In that sense, Russians may have achieved their political goals," she said.
And, like many other experts, Ms.听Pernik drew parallels between the DNC hack to the 2007 Estonian attacks.听"The methods are not the same but the main goal, to discredit western rule power, confuse society, and undermine the western system of democracy, is the same."
听