US would lose cyberwar: former intel chief

by Chris Lefkow
WASHINGTON-The United States would lose a cyberwar if it fought one today, a former US intelligence chief has warned.

Michael McConnell, a retired US Navy vice admiral who served as ex-president George W. Bush's director of national intelligence, also compared the danger of cyberwar to the nuclear threat posed by the Soviet Union during the Cold War.

"If we went to war today in a cyberwar, we would lose," McConnell told a hearing Tuesday on cyber security held by the Senate Committee on Commerce, Science and Transportation.

"We're the most vulnerable, we're the most connected, we have the most to lose."

"We will not mitigate this risk," added McConnell, now an executive vice president for consulting firm Booz Allen Hamilton's national security business. "And as a consequence of not mitigating this risk, we are going to have a catastrophic event."

Tuesday's hearing came a little over a month after Internet giant Google revealed that it and other US companies had been the target of a series of sophisticated cyber attacks originating in China.

"National security and our economic security are at stake," said Democratic Senator Jay Rockefeller, the panel's chairman and a co-sponsor of a bill seeking to bolster public and private sector cyber security cooperation.

"A major cyber attack could shut down our nation's most critical infrastructure -- our power grid, telecommunications, financial services."

James Lewis, a cyber security expert at the Center for Strategic and International Studies, said that government intervention would probably be needed to crack down on the "Wild West" the Internet has become.

The greatest threat to the United States comes from cyber espionage and cyber crime, he said, calling them a "major source of harm to national security."

"We have lost more as a nation to espionage than at any time since the 1940s," Lewis said.

Scott Borg, director of the US Cyber Consequences Unit, also warned of the economic damage from cyber attacks.

"Cyber attacks are already damaging the American economy much more than is generally recognized," said Borg, whose independent research institute investigates the economic and strategic consequences of cyber attacks.

"The greatest damage to the American economy from cyber attacks is due to massive thefts of business information.

"This type of loss is delayed and hard to measure, but it is much greater than the losses due to personal identity theft and the associated credit card fraud," he added.

In his prepared remarks, McConnell said the United States needs a "national strategy for cyber that matches our national strategy that guided us during the Cold War, when the Soviet Union and nuclear weapons posed an existential threat to the United States and its allies."

He pointed to US President Barack Obama's appointment of a cyber security coordinator in December and his national cyber security initiative as moves in the right direction, but said they were not enough.

"The federal government will spend more each year on missile defense than it does on cyber security," he said, despite the potential for attacks that "could destroy the global financial system and compromise the future and prosperity of our nation."

In order to secure cyberspace, McConnell suggested the United States provide a "more robust commitment" in leadership, policies, legislation and resources.

He called for establishing a National Cyber security Center modeled after the National Counter Terrorism Center set up after the September 11, 2001 attacks on New York and Washington.

The center would integrate elements of the Pentagon's proposed Cyber Command, the Department of Homeland Security's National Cyber security and Communications Integration Center and the cyber operations of the Federal Bureau of Investigation, state and local governments and the private sector.

It would also serve as "the hub of information sharing and integration, situational awareness and analysis, coordination and collaboration," McConnell said.