Mr. Gates' About Face

Barely eight months after he quashed Air Force plans to establish a "Cyber Command," Defense Secretary Robert Gates is expected to recommend creation of a similar organization, to face the escalating threat from cyber attacks.

According to NBC News, Mr. Gates has yet to make a final decision on the new command, but is leaning towards approval. A final decision is expected after the White House unveils its own strategy for cyber defense. Various administration spokesmen have warned that the U.S. is facing an ever-increasing threat against is computer systems, including those that support the military.

One senior defense official, speaking on the condition of anonymity, said the number of attacks against DoD computer networks have more than doubled over the last six months. Some Pentagon websites receive thousands of "probes" a day.

Word of the new cyber command comes amid claims that hackers successfully penetrated a computer network associated with the F-35 Joint Strike Fighter in 2007. Sources tell The Wall Street Journal that hackers stole more than a "terabyte" of information on the stealth attack jet. While the data was not classified, it did provide additional details on the F-35's capabilities.

But successful penetrations of our military aircraft are not limited to the JSF. In a speech earlier this month, the head of Office of the National Counterintelligence Executive reported that "counterfeit" computer chips have made their way into other military jets. The chips were designed to degrade system capabilities, at the time of an adversary's choosing.

Secretary Gates believes a new cyber command would enhance our defenses against such attacks, and reduce successful penetrations of DoD and contractor systems. Pentagon sources suggest that the new organization will be a "down-sized" unified command, combining elements of all the services, with leadership rotating among the various military branches.

There is, of course, a certain irony in Mr. Gates' plan. Not that long ago, he was moving to terminate the Air Force's effort to create its own cyber command; now he's scrambling to build his own organization, with a similar mission.

To be fair, there were a number of reasons behind the SecDef's decision. In military ricles, there was a perception that the USAF was pushing for supremacy in the cyber mission, at the expense of the other services. Some observers compared the move to another campaign that ended in failure--the service's attempt to become DoD's "executive agent" for UAVs, another proposal that was rejected for Mr. Gates.

Making matters worse, the Air Force even lobbied state governors for potential basing sites, suggesting that the new command might have a presence in dozens of states. As the other services began to push back, they found a willing ally in Mr. Gates. He pulled the plug on the venture last August, two months after firing its leading proponents, then-Air Force Secretary Michael Wynne and the service's Chief of Staff, General Mike Moseley.

While the service--and its leadership--deserve an "F" for marketing their plan, the cyber proposal was not without merit. The Air Force command would have been headquartered at Offut AFB, Nebraska or Barksdale AFB, Louisiana, in close proximity to U.S. Strategic Command (STRATCOM) and 8th Air Force, organizations charged with DoD's global strike mission.

Additionally, the proposed basing and command structure would have allowed the cyber organization to leverage the capabilities of the Air Force Intelligence, Surveillance and Reconnaissance (ISR) Agency, the service's preeminent cyber-warfare organization. It's also worth noting that the ISR Agency performs a number of missions in the joint arena; in fact, the organization's commander was (at one time) the senior officer for cyber missions within STRATCOM. In other words, while the propose Air Force command was a blue-suit organization, it definitely had a "purple" tint to it, with the ability to support the other services and their missions.

Now, Secretary Gates is talking about a somewhat similar, venture, except his enterprise will be a joint cyber command under--you guessed it--STRATCOM. Details have yet to be announced, but don't be surprised if major elements of the Air Force plan wind up in the new organization.

But a few things are certain. First, don't expect the boys in blue to get any credit for the organization that eventually "stands up" at Offut or another location; there's too much bad blood between Gates and the USAF. Secondly, don't look for Mike Wynne or Buzz Moseley to get an invitation to the ribbon-cutting ceremony, for the same reasons.

And finally, it's worth asking how many of those on-line attacks and probes might have been prevented, had Secretary Gates allowed the Air Force command to start operations last fall, as originally planned. Maybe Mr. Gates will finally realize that the USAF has its share of good ideas, and some of them deserve the fast-track.

Cyber Command on Hold?

According to the Associated Press, the Pentagon has put a hold on the Air Force's planned "Cyber Command" and may scrap the project altogether.

In a memo distributed throughout the Air Force this week, service officials announced that manning and budget transfers for Air Force Cyber Command have been suspended, delaying the command’s official Oct. 1 start. The Pentagon and the Air Force are expected to make a decision as to the command’s fate later this month. The command is temporarily based at Barksdale Air Force Base, La., and will eventually have a headquarters staff of about 500 people and 8,000 personnel total.

Offutt Air Force Base, which sits south of the Omaha, Neb., is among the bases being considered to house the command’s headquarters.

The Air Force considers cyberspace a “domain” for which the service should train and equip forces to defend, as it does airspace. There are about 3 million attempted penetrations of Defense Department networks every day, according to the Air Force.

A senior Pentagon official tells the AP that the mission to defend cyberspace might be better suited to U.S. Strategic Command, which is headquartered at Offut. Strategic Command, or "Strat Com" is responsible for cyber warfare across DoD.

The decision comes just days after Russia conducted a major computer network attack as part of its invasion of Georgia. The assault crippled information systems of the Georgian government, and denied internet access across much of the country.

Moscow's employment of cyberwarfare in Georgia provides a reminder of the potential danger to U.S. computer systems. Because of that threat, a former Air Force Secretary sees the "Cyber Command" decision as ill-timed, at best:

The Russians just shot down the government command nets so they could cover their incursion,” Wynne said. “This was really one of the first aspects of a coordinated military action that had cyber as a lead force, instead of sending in air planes. We need to figure out a way not only see the attack coming but to block it, and in blocking it close to home.”

“I think this is a very poor time to send a signal that the United States is not interested in focusing on warfighting in the cyber domain,” Wynne added.

Mr. Wynne was fired from his post earlier this year, after a series of problems with the service's nuclear program--and disputes with Defense Secretary Robert Gates.

But, on closer examination, the planned hold on "Cyber Command" may not be such a blow to the Air Force after all. Stratcom's cyber capabilities are chiefly rooted in two USAF Force organizations--Headquarters Eighth Air Force (based at Barksdale) and the Air Force Intelligence, Surveillance and Reconnaissance Agency, located at Lackland AFB, Texas.

In fact, the commander of the ISR Agency, Major General Craig Koziol, has the primary responsibility for cyber warfare, under the overall direction of Stratcom and its leader, General Kevin Chilton.

The Pentagon's decision may be viewed as something of a slap at the Air Force--and perhaps it is, to some degree. But the service's role in cyberwarfare is hardly diminished, and the USAF will retain a leading role in that mission, even as part of a unified command.

***

ADDENDUM: We wonder if the service's handling of CyberCommand basing and manning issues influenced the Pentagon's decision. After plans for the organization were announced, CyberCommand grew almost exponentially; there was talk of a "virtual" headquarters with cyber units in a number of states. The USAF began consulting state governors, who jockeyed for a piece of the cyber pie, just as they compete for a new manufacturing plant.

As the process became more politicized, CyberCommand looked more like a jobs and dollars program than a military effort. Apparently that didn't set well with DoD leadership, which decided to put a hold on the Air Force's newest command.