Defining Deterrence in Cyberspace Working Toward a Framework to Integrate Cyber Deterrence

The goal of deterrence is not to deter the use of a particular weapon. Rather, a nation deters undesirable behavior. Cyber warfare can produce three basic effects SCADA attacks that cause physical destruction, loss of confidence in ones information, and disruption. These effects and their associated limitations will not produce a strategically decisive result. Cyber warfare must be used in conjunction with other instruments of power to successfully coerce another nation to accede to political demands. However, denying a potential adversary the benefits of cyber coercion or raising the costs of attempting it comprise important components a deterrence strategy. To deny benefits, defensive measures will prevent attacks from being successful. Alternatively, resiliency of critical systems will allow mitigate the value of attacks. The costs of attack consist of words and deeds. Clear, culturally appropriate communication of response measures helps dissuade actions. The actual retaliation after a cyber attack deters future attacks. Looking toward the future, a deterrence posture must include resiliency, organizational changes across the board, use of technology, and appropriate, integrated response measures.