THE FIFTH DOMAIN

Hacking, cracking, and stealing, whether elections or state secrets or cash—it’s all in a day’s work for the bad guys who populate the pages of this treatise on electronic security.

If you’re an individual computer user, you can do things to keep yourself secure like using two-factor authentication and secret password phrases. But what if you’re a nation-state? Cybersecurity experts Clarke and Knake (co-authors: Cyber War: The Next Threat to National Security and What To Do About It, 2010, etc.), both of whom logged time inside the cybersecurity arms of presidential administrations, have much to say about the ways in which governments and companies have tried to make themselves safe from the legions of hackers out there, from your ordinary black hats to agents of Russia, China, Iran, North Korea, and other entities. The militaries of those nations in particular are actively working to best our cyberdefenses—as the authors write, “the Russian military has not only used cyber weapons to collect intelligence, but has also employed cyber weapons to damage, disrupt, and destroy physical objects in the real world, beyond the realm of 1s and 0s.” Does this mean we’re at war? Regardless of the answer, the Russians are bad at covering their tracks—that’s how we know. Clarke and Knake survey the landscape: As they note, most governments may be bad at hiding information, but Apple, Amazon, and Microsoft “have security budgets that dwarf the GDP of Palau," and the private sector is likely to be the driver behind any real reform in cybersecurity and subsequent hardening of the fortress. Meanwhile, the authors counsel reassuringly, as companies finally make the transition to more secure systems of transmission, encryption, and data storage, there is hope that the threats of old will one day be a footnote. For the moment, the cost of mounting an attack on a bank is vanishingly small compared to the amount the bank is spending on keeping secure, so those attacks will keep coming.

Largely of interest to policymakers and security experts, though with much for the Wired crowd as well.