Colorado: The US service academies are ramping up efforts to groom a new breed of cyberspace warriors to confront increasing threats to the nation’s military and civilian computer networks that control everything from electrical power grids to the banking system.
Students at the army, navy and air force academies are taking more courses and participating in elaborate cyber warfare exercises as the military educates a generation of future commanders in the theory and practice of computer warfare.
The academies have been training cadets in cyber security for more than a decade, but the effort has taken on new urgency amid warnings that hostile nations or organisations might be capable of crippling attacks on critical networks.
James Clapper, director of national intelligence, called cyber attacks the top threat to national security when he presented the annual Worldwide Threat Assessment to Congress this month. “Threats are more diverse, interconnected and viral than at any time in history,” his report stated. “Destruction can be invisible, latent and progressive.”
China-based hackers have long been accused of cyber intrusions and earlier this year the cybersecurity firm Mandiant released a report, with new details allegedly linking a secret Chinese military unit to years of cyber attacks against US companies. This year, The New York Times, The Wall Street Journal and The Washington Post all reported breaches in their computer systems and said they suspected Chinese hackers. China denies carrying out cyber attacks.
On Tuesday, hackers compromised Associated Press Twitter accounts and sent out a false tweet. AP quickly put out word that the report was false and that its accounts had been hacked. AP’s accounts were shut down until the problem was corrected.
Once viewed as an obscure and even nerdy pursuit, cyberspace is now seen as one of the hottest fields in warfare — “a great career field in the future,” said Ryan Zacher, a junior at the Air Force Academy outside Colorado Springs, Colorado, who switched from aeronautical engineering to computer science.
Last year the US Naval Academy in Annapolis, Maryland, began requiring freshmen to take a semester on cyber security, and it is adding a second required cyber course for juniors next year.
The school offered a major in cyber operations for the first time this year to the freshman class and 33 midshipmen, or about 3 per cent of the freshmen, signed up for it. Another 79 are majoring in computer engineering, information technology or computer science, bringing majors with a computer emphasis to about 10 per cent of the class.
“There’s a great deal of interest, much more than we could possibly, initially, entertain,” said the academy’s superintendent, Vice Adm. Michael Miller.
Since 2004, the Air Force Academy has offered a degree in computer science-cyberwarfare — initially called computer science-information assurance — that requires cadets to take courses in cryptology, information warfare and network security in addition to standard computer science. The academy is retooling a freshman computing course so that more than half its content is about cyberspace and is looking into adding another cyber course.
“All of these cadets know that they are going to be on the front lines defending the nation in cyber,” said Martin Carlisle, a computer science professor at the Air Force Academy and director of the school’s Centre for Cyberspace Research.
About 25 Air Force cadets will graduate this year with the computer science-cyberwarfare degree, and many will go on to advanced studies and work in their service’s cyber headquarters or for US Cyber Command at Fort Meade, Maryland, the defense department command responsible for defensive and offensive cyberwarfare.
Almost every army cadet at the US Military Academy at West Point, New York, takes two technology courses related to such topics as computer security and privacy. West Point also offers other cyber courses and a computer security group meets weekly. One of the biggest cyber security challenges is keeping up with the head-spinning pace of change in the field.
“You know American history is pretty much the same” every year, said Lt. Col. David Raymond, who teaches a cyber security course. “In this domain, it’s really tough to keep up with how this thing evolves.”
In his congressional report, Clapper noted that the chance of a major attack by Russia, China or another nation with advanced cyber skills is remote outside a military conflict, but that other nations or groups could launch less sophisticated cyberattacks in hopes of provoking the US or in retaliation for US actions or policies overseas. South Korea accused North Korea of mounting a cyberattack in March that shut down thousands of computers at banks and television broadcasters.
Gen. Keith Alexander, head of US Cyber Command, told Congress in March that the command is creating teams to carry out both offensive and defensive operations. A spokesman said the command is drawing cyber officers from the service academies, officer schools and Reserve Officer Training Corps programmes.
Teams from the three academies compete in events such as last week’s National Security Agency Cyber Defense Exercise, in which they try to keep simulated computer networks running as National Security Agency ‘aggressor team’ attacks. Teams from the US Coast Guard and Merchant Marine academies also took part, along with graduate students from the US Naval Postgraduate School and Canada’s Royal Military College.
Air force won among undergraduate schools, while the Royal Military College won among graduate schools.
That hands-on experience is invaluable, said 2nd Lt. Jordan Keefer, a 2012 Air Force Academy graduate now pursuing a master’s degree in cyber operations at the Air Force Institute of Technology.
“You can’t just go out there and start hacking,” he said. “That’s against the law.” The competitions, he said, “gave me actual experience defending a network, attacking a network.”
Counter-terrorism expert Richard Clarke, noting that really high-level computer skills are rare, suggested the military might have to re-examine some of its recruiting standards to attract the most adept cyber warriors.
“Hackers are the 1 per cent, the elite and the creators,” said Clarke, who served as White House cybersecurity adviser during the Clinton administration. “I wouldn’t worry a whole heck of a lot [about whether they] can they run fast or lift weights.”
Cyber’s appeal was enough to get Keefer to put aside his dream of becoming a fighter pilot, a job with undeniable swagger. “It’s a challenge, and for people who like a challenge, it’s the only place to be,” Keefer said.