15 July 2021

Cyberspace Is an Analogy, Not a Domain: Rethinking Domains and Layers of Warfare for the Information Age

Michael P. Kreuzer

For ten years, the United States military has defined cyberspace as the fifth domain of war, equating it with the four physical domains of warfare as a core planning assumption.[1] But classifying cyberspace as a domain is fatally flawed both because it obscures the purpose of recognizing the four physical domains, and because it unnecessarily puts cyber into too small a box.[2] The buzzwordification of the term domain has long passed the point of diminishing returns, and nowhere is that a greater hazard than with cyber operations.[3] It’s time to re-think cyber to reflect the realities of modern war, and with it the broader lexicon of what constitutes domains and layers of warfare.

This article proposes the United States re-focus the definition of domains of warfare on the four physical domains, which require distinct organizations and doctrines to effectively control and exploit, while elevating the parallel concept of functional multidomain operations such as Special Operations and Cyber Operations with fixed representation at the Undersecretary of Defense level. This is necessary not because denying cyberspace or information as a domain would diminish its importance, but because it is a flawed analogy that both undercuts the need for the current service structure and would treat cyber as a separate pillar of defense.[4] It implies cyberspace should have an independent service—which is the wrong solution to the growing all-domain challenges of cyber operations.[5]

Domains of Warfare: An Undefined Doctrinal Foundation

Domains of warfare sit at the core of U.S. and NATO military doctrine, defining the purpose for major military services of Western powers and shaping the lenses through which soldiers, airmen, sailors, marines, and guardians understand the operating environment. But a lack of precise language clouds critical discussions of space and cyber, and even why we need to maintain some of the arrangement of the United States’ current services.[6] In recent years, other concepts have been proposed as domains, to include the electromagnetic spectrum and human domains.[7,8]

How did we get to this point? Domains entered the lexicon with the 2000 publication of Joint Vision 2020, with information proposed as a new domain “as important as those conducted in the domains of sea, land, air, and space.”[9] Before this point what we now know as domains were called dimensions, and “domain of warfare” itself was left undefined.[10] As with most military terms, the word has clear non-military definitions that are instructive.[11] In law it is “[c]omplete and absolute ownership of land…or a territory over which dominion is exercised.”[12] A common alternative definition is a “sphere of knowledge, influence, or activity,” as in a domain of knowledge. In math it is a “set of numbers that define a function.”[13] In computing, it is a realm of administrative autonomy—from a website to a top-level domain (e.g., .org).

The first definition was likely the basis for the use of the term in Joint Vision 2020, as “full spectrum dominance” was its central message. The Air Force’s creation of AFCYBER—the US Air Force’s service-specific Cyber Command—proclaimed as much, stating fighting in the cyber domain means cyber domain dominance.[14] This is also a source of confusion because outside of land, physical control of other domains has been based on transitory control—the ability to freely operate while limiting one’s adversaries’ ability to do so.[15]

Absent a fixed doctrinal definition of domain itself, only the standing definitions of the five currently assumed and recognized domains remain. Each has a clear definition, but together they lack internal consistency:

Land Domain: The area of the Earth’s surface ending at the high-water mark and overlapping with the maritime domain in the landward segment of the littorals.

Maritime Domain: The oceans, seas, bays, estuaries, islands, coastal areas, and the airspace above these, including the littorals.

Air Domain: The atmosphere, beginning at the Earth’s surface, extending to the altitude where its effects upon operations become negligible.

Space Domain: The area above the altitude where atmospheric effects on airborne objects become negligible.

Cyberspace: A global domain within the information environment consisting of the interdependent networks of information technology infrastructures and resident data, including the Internet, telecommunications networks, computer systems, and embedded processors and controllers.[16]

The first four place the word domain in the term to be defined, while cyberspace places it in the definition itself. The first four are defined by physical—if somewhat arbitrary and disputed—boundaries within which organizations, technology, and doctrines are the variables; in cyberspace there are no fixed boundaries, as rapidly evolving technology itself defines the domain.[17]

The Problem with Cyberspace

The original three domains of land, maritime, and air developed separate identities and independent services because unique characteristics dictated distinct requirements for humans to fight in those domains, unique equipment, organizations, and perspectives of the operating environment yielding unique systems of warfare. The land domain is directly tied to the existence of the state—preservation of sovereignty through direct physical control of territory—dictating large manpower-centric forces to compel the state’s will through firepower and maneuver.[18] War at sea secures the state’s vital interests, but requires ships for humans to operate, different operational concepts for naval warfare, and a different concept of control from land. The air domain added the vertical dimension of warfare, range, speed, and put advanced technology at the forefront to facilitate aerial combat and support ground operations. Space is moving closer to parity with the first three as the unique physical environment of space distinct from the air—defined by orbital mechanics, the physical limitations of space lift, and an environment hostile to human life—and has led to the realization of an independent U.S. Space Force to organize, train, and equip forces that had previously been neglected by other services focused on other domains.

Then-Secretary of the Air Force Barbara Barrett, Space Force Command Senior Enlisted Leader CMSgt Roger Towberman and CMSgt Roger Towberman present President Donald Trump with the official flag of the United States Space Force in the Oval Office in May 2020. (Samuel Corum-Pool/Getty)

Cyberspace appeared a natural extension to this evolution, and in its early years it likely appeared the ability to control and exploit cyberspace was the next iteration for defense. The problem, however, is there is no cyberspace.[19] There is instead a metaphor to help humans understand the near instantaneous sharing of information across widespread computer networks—much like the cloud, which may no longer be someone else’s computer, but is certainly not data floating in space like physical clouds.[20] The term cyberspace first arose in the 1960s, then gained widespread appeal in the 1990s when the internet appeared new, distinct, and distant.[21] In the era of the internet of things, cyberspace is increasingly “a layer on top of our existing reality,” permeating all equipment across all domains of warfare.[22,23] Operations rely on cyber power to execute remotely piloted operations, reach-back support, and global command and control.[24] Space control is also almost entirely reliant on cyber operations.[25] Even the foot soldier is increasingly networked, from their blue force tracker and other GPS-guided tools, to increasing use of automated equipment.[26]

As the U.S. concept of cyberspace evolved, so too has its definition. More recent definitions run more than a standard paragraph in length, discussing networks, nodes, networks of networks, and power relationships.[27] As cyber continues to evolve to an all-encompassing aspect of life, the inability to define what does not constitute part of cyberspace puts it in marked contrast to the other domains. The physical domains may have arbitrary boundaries that are subject to debate, but that is a left/right boundary debate over fixed space, not ongoing technological change redefining reality.[28]

Re-thinking the Foundation: Domains, Layers, and Operating Constructs

If cyberspace is not a domain of warfare, then what is it? Cyber is certainly a critical sphere of knowledge distinct from other fields, but by this logic in this sense any military specialty can be called a domain of some form. The Defense Department definition appears to make it the operational domain of the information environment, but this is problematic as well. Cyberspace is within the information environment, but many parts of the information environment are excluded from the cyber definition—and at the same time most of cyber exists in the physical environment as physical systems and nodes, further complicating the definition. Cyber may be an operating warfighting space depending on the lens that the operating environment is viewed, but there are many sub-components of the operating environment that do not qualify in the U.S. Department of Defense as domains of warfare, which is a particularly concise list.

In arguing that cyber is not a domain, the goal is not to minimize it or suggest it is less important than land, sea, air, or space—in some regards it is far more important and will only grow more so in the coming years. The doctrinal lexicon and how it shapes first norms and second U.S. organization and budgets is really the larger challenge. To ensure cyber operations receive the budgetary and acquisitions priority it needs, the United States has worked to shoehorn it into the domains of warfare category, historically the highest echelon of importance for Defense Department constructs. Rather than pursuing this route, and eventually evaluating other potential would-be domains of warfare, this article argues for a re-evaluation of how the U.S. defines the parameters of the operating environment itself, and in turn how that shapes its organizations. This new model would comprise three equally important foundational constructs: two parameters to define the operating environment, and one focused on multi-domain exploitation.

In this typology, the operating environment is divided between two major lenses: layers of warfare and domains of warfare. The layers of warfare are defined as mediums of the operating environment through which military operations can be conducted and operational effects achieved that span all domains of warfare. A domain of warfare is defined as a sphere of the operating environment that has physical characteristics requiring unique doctrines, organizations, and equipment for military forces to effectively control and exploit in the conduct of military operations. The fixed nature of physical domains serve as the basis of uniformed services, while the interplay of the domains and layers with evolving technology would shape more organizationally flexible, multi-domain operating constructs with service-equivalent leadership through the U.S. Defense Department and Functional Unified Commands.
Table of Proposed Typology of Warfare (Author’s Work)

Layers of warfare are part of the natural environment in which military operations take place, both in the physical and social contexts. They are not inherently distinct from one another either, as all occupy the same physical space and functionally are interconnected. The information and cognitive layers focus on the human and technological sides of the joint operating environment, with the former being data- and communication-centric and the latter focusing on the culture, psychology, sociology, and other contextual factors that define how states and organizations make decisions. The electromagnetic layer is also a physical, though invisible and non-Newtonian part of the battlespace. Interestingly, the U.S. Defense Department notes “the [electro-magnetic spectrum] is not a separate domain of military operations because the [electro-magnetic spectrum] is inseparable from the domains established in joint doctrine,” a situation cyber similarly finds itself in as the reach of cyber has grown.[29]

The four domains remain the four physical domains previously defined, with the additional note of three trans-domain regions that have resulted in differing solutions to mitigate challenges. The maritime/land boundary, the littoral regions, has roles for the U.S. Army and Navy, but the Marine Corps is historically the primary service for force projection from the sea. The gap between air and surface has been more complicated, with key functions dispersed among all U.S. military services—the Army controlling anti-aircraft missiles and artillery, the Air Force controlling fixed wing air support, and the Navy retaining maritime air operations. As space exploration grows, the conception of space may morph to a trans-domain region of orbital space, and the space domain as interplanetary to intergalactic space. But absent ambiguity surrounding trans-domain regions, there is a clear dividing line between regions that require distinct capabilities—two surface domains with unique challenges on land and at sea, and two vertical domains defined by atmospheric versus orbital effects.

In this typology, cyberspace would be a multi-domain operational construct, more akin to special operations or intelligence operations than the space domain. These constructs are function-centric, often concerned with issues critical to modern warfare but not always in the conventional military environment. Special Operations are “activities or actions requiring unique modes of employment, tactical techniques, equipment, and training often conducted in hostile, denied, or politically sensitive environments.”[30] Intelligence operations are “the variety of intelligence and counterintelligence tasks and activities within the intelligence process, to include globally integrated [intelligence, surveillance, and reconnaissance] and human intelligence operations.”[31] These constructs operate across all layers and domains of warfare, with the main distinctions being their primary emphasis, and with the overlap and shifts in the focus of operations contingent on the evolving character of warfare. Their focus is not control of territory, but operational effects often in the absence of control or under ambiguous control. The concepts do not organize, train, and equip distinct forces, but instead executes operations with specialists drawn from each of the physical domains of war to perform highly specialized operations affecting and drawing from all domains of warfare, in a command structure with similar U.S. Department of Defense status to a service, but with an operations-focused role. Cyber operations, then, would be the employment of electronic network capabilities to create denial effects in the physical domains, and to identify and defeat threats to friendly networks including malware, physical attack, or the unauthorized activities of users.

As with intelligence and special operations, cyber operations pose a number of non-traditional challenges to organization and execution of operations. How should military cyber operations be executed under Title 10, Title 50, and within Posse Comitatus limitations?[32] Given how cyber operations transcend state boundaries and much is within the private sector, multinational, and/or proprietary, to what degree are state military forces ultimately responsible for active cyber defense of private companies with servers in foreign nations, or does this problem-set more closely resemble espionage than warfare?[33] Should the National Security Agency remain operationally tied to U.S. Cyber Command given the level of overlap in vital functions?[34] For these reasons and more, it makes better logical sense and will make cleaner multi-domain doctrine to keep cyber and special operations in the same, equally important but distinct, category from the physical domains of warfare.

Conclusion

It is tempting to draw attention to new concepts by either attaching new terms to them or trying to categorize them with other important concepts. This has the short-term effect of drawing attention in a more familiar, established way, but in the long-term confuses implementers. When it comes to the terms themselves, the label is less important than the meaning. This article has identified domains of warfare as being the four physical domains of land, maritime, air, and space, and the dimensions of war as natural environmental factors of the battlespace that cross and affect all domains, the physical, electromagnetic, information, and cognitive layers. By standardizing this typology, the U.S. joint force and its partners will be better positioned to operationalize cyber power, to understand the need for and purpose of independent military services, and to better integrate multi-domain operations.

No comments: