By: Mark Pomerleau
Why are the protocols and rules of engagement for defending cyberspace seemingly different than in the physical world? Especially when it comes to defending the private sector?
If a missile hit a private company, there is no question what the protocols would be. However, cyberspace offers a different paradigm, leading retired Army Gen. Keith Alexander, the former National Security Agency director and U.S. Cyber Command commander, to say “our approach to defending our country in cyberspace is not where it needs to be. It’s broken.”
During an appearance at an event hosted by the Aspen Institute July 18, Alexander outlined his vision for defending the nation in cyberspace, noting that the gist of this plan is what he briefed to President Trump during a recent meeting on securing the nation.
Alexander explained that most agree the government and private sector own this responsibility; however, for the private sector, if they can’t see what or who is attacking them, they can’t ask for help.
“If a nation state were to throw a missile into Sony it would be Northern Command’s responsibility to stop that missile because Northern Command can see the missile coming in. NORAD would see it, they would work and shoot down that missile, hopefully. That’s a military response,” he said. “In cyber, the issue is how do you create the rules of engagement that go at network speed? Remember shooting down a missile you got 25-30 minutes … In cyber it can go around the world [in] 134 milliseconds.”










/arc-anglerfish-arc2-prod-mco.s3.amazonaws.com/public/WCDAW2PLRREIREINHR4V2DWJ4A.jpg)
Retired Gen. Keith Alexander, the former National Security Agency director and U.S. Cyber Command commander, spoke about national cyber defense as part of the Aspen Institute's McCloskey Speakers Series. (Alex Wong/Getty Images)
