2021-11-22-国防研究与分析研究所-利用网络力量_主要大国的做法和对策研究（英）_107页_993kb

Leveraging Cyber Power: Analysis of Major Powers' Approaches

Introduction

The monograph examines how major powers—such as the US, France, and China—leverage cyber power to maintain dominance, enhance national security and shape international norms. It addresses the Cyber Power Index, National Cybersecurity Index, and challenges in quantifying cyber power. Cyber capabilities are integral to national power, encompassing defense, offense, and diplomacy, with vulnerabilities arising from rapid technological evolution.

Military and Cyber Power

US Military

• Established US Cyber Command in 2009 to defend networks and conduct offensive operations. Challenges include bureaucratic hurdles (e.g., coordination with NSA), resource constraints, and difficulties integrating cyber capabilities into traditional doctrines.
• Evolving doctrine emphasizes "persistent engagement" and "defending forward," aiming to disrupt adversary cyber activities and protect critical infrastructure. However, legacy issues and legacy systems hinder full adaptation.

French Military

• France separates offensive and defensive cyber functions, with COMCYBER handling offensive operations under strict legal and ethical guidelines. Doctrine focuses on proactive measures, including deterrence and hybrid warfare, but faces challenges coordinating with civilian agencies and aligning national and military objectives.

Chinese Military

• The PLA integrated cyber capabilities under the Strategic Support Force (SSF) in 2015, treating cyberspace as a domain for warfare. China emphasizes "unrestricted warfare," combining peacetime and wartime strategies. Cyber actions remain discreet, with limited transparency, raising concerns about sovereignty.

Comparative Study of Cyber Commands

• US Cyber Command: Focuses on defensive cyber operations and offensive cyber effects (e.g., PPD 20 and beyond). Faces issues in staffing, technical integration, and scaling capabilities to address peer competitors like Russia and China.

• French COMCYBER: Pursues an offensive-first approach under the strategic framework of "persistent presence," with clear redlines and legal oversight. It seeks operational superiority through unified command and international collaboration, despite challenges in asymmetrical threats.

• China's Strategic Support Force: Prioritizes comprehensive domain awareness, including cyber, space, and electromagnetic warfare. Differently, it centralizes command and tailors capabilities for hybrid warfare, but maintains opacity on strategies and activities.

Technology and Regulatory Regimes

Wassenaar Arrangement

• Efforts to control cyber technologies under the Wassenaar Arrangement faced strong opposition from security researchers and companies, as proposed rules threatened legitimate security research and cross-border collaboration. Mechanisms for technology denial remain ineffective due to commercial interests and the dual-use nature of cyber tools.

Regional Cooperation

ASEAN and BIMSTEC

• Regional forums like ASEAN and BIMSTEC aim to foster cybersecurity cooperation, but varying capabilities and political sensitivities limit progress. South Asia lacks a dedicated regional organization, hindering collective action and norm development. The BIMSTEC initiative shows promise but is still nascent.

South Asian Cyber Maturity

• Countries like India and Pakistan face gaps in cybersecurity infrastructure, legal frameworks, and coordination. India has made strides with CERTs and a Cyber Defence Agency but needs clearer doctrines and regional engagement. Pakistan and Bangladesh struggle with outdated laws and enforcement capabilities, rendering them vulnerable.

Conclusion

Major powers use cyber power strategically to deter, coerce, and dominate, but face challenges in doctrine development, technological adaptation, and cross-sector coordination. Regional cooperation is crucial but hampered by disparities in capabilities and geopolitical interests. Future strategies must balance offensive/defensive capabilities with norms-based approaches and address the risks of technology denial and escalation. Cyber power is not a standalone domain but enhances traditional military endeavor.