How the U.S. Approach to Cyber Conflict Evolved in 2018—and What Could Come Next

How the U.S. Approach to Cyber Conflict Evolved in 2018—and What Could Come Next
Large video displays in the Department of Homeland Security’s National Cybersecurity and Communications Integration Center in Arlington, Virginia, Aug. 22, 2018 (AP photo by Cliff Owen).

2018 was in many ways a watershed year for the United States in cyberspace. Washington revamped its cyber strategy. It loosened authorities for military cyber operators. It responded to large-scale global cyberattacks. And it dealt with chilling intrusions on its critical infrastructure. Looking back, though, what did all these changes mean, and how well did U.S. cyber policy fare?

Let’s start with the good news. In two particular areas—attribution and indictments—the United States has shown clear improvements in responding to inappropriate behavior in cyberspace. Over the past year, the Department of Justice significantly increased the pace of indictments against Chinese, Russian, Iranian and North Korean individuals for state-linked cyber activities. The department announced, for example, only one such indictment in 2014, but at least eight in 2018. Such steps, with some exceptions, are not usually enough to change national policies, and more data and analysis are needed to judge their real impact. In theory, though, and especially over the longer term, indictments and sanctions can make it harder for countries to recruit young talented hackers, who may not want to be restricted from travelling to or dealing financially with the United States and Europe.

Another important shift has been the increase in coordinated international attribution of malicious behavior in cyberspace. In the past, official U.S. statements of attribution for cyberattacks were unusual; the rare public finger-pointing at North Korea for the 2014 hack on Sony Pictures Entertainment was a notable exception. In 2018, however, governments became much more willing to attribute cyberattacks, and to do it together. This demonstrates that attribution is increasingly possible, if often slow. And when a state makes a public attribution, they are more likely to step up with additional measures.

Keep reading for free!

Get instant access to the rest of this article as well as three free articles per month. You'll also receive our free email newsletter to stay up to date on all our coverage:

Or, Subscribe now to get full access.

Already a subscriber? Log in here .

What you’ll get with an All-Access subscription to World Politics Review:

A WPR subscription is like no other resource — it’s like having your own personal researcher and analyst for news and events around the globe. Subscribe now, and you’ll get:

  • Immediate and instant access to the full searchable library of 15,000+ articles
  • Daily articles with original analysis, written by leading topic experts, delivered to you every weekday
  • Weekly in-depth reports on important issues and countries
  • Daily links to must-read news, analysis, and opinion from top sources around the globe, curated by our keen-eyed team of editors
  • Your choice of weekly region-specific newsletters, delivered to your inbox.
  • Smartphone- and tablet-friendly website.
  • Completely ad-free reading.

And all of this is available to you when you subscribe today.

More World Politics Review