Cyclones in cyberspace: Information shaping and denial in the 2008 Russia

Abstract

While the rhetoric of cyber war is often exaggerated, there have been recent cases of international conflict in which cyberspace has played a prominent role. In this article, we analyze the impact of cyberspace in the conflict between Russia and Georgia over the disputed territory of South Ossetia in August 2008. We examine the role of strategic communications, information operations, operations in and through cyberspace, and conventional combat to account for the political and military outcomes of the conflict. The August 2008 conflict reveals some emergent issues in cyber warfare that can be generalized for further comparative research: the importance of control over the physical infrastructure of cyberspace, the strategic and tactical importance of information denial, the emergence of cyber-privateering, the unavoidable internationalization of cyber conflicts, and the tendency towards magnifying unanticipated outcomes in cyber conflicts – a phenomenon we call ‘cyclones in cyberspace’.

Keywords

international relations cyberspace strategic communications information operations 2008 South Ossetia war

Get full access to this article

View all access options for this article.

References

Adair

(2008a) Georgian attacks: Remember Estonia? Shadowserver Foundation. Available at: http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20080813 (accessed 18 October 2011).

Adair

(2008b) The website for the president of Georgia under attack – Politically motivated? Shadowserver Foundation. Available at: http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20080720 (accessed 18 October 2011).

Adair

(2008c) Georgian websites under attack – DDoS and defacement. Shadowserver Foundation. Available at: http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20080811 (accessed 18 October 2011).

Arquilla

Karasik

(1999) Chechnya: A glimpse of future conflict? Studies in Conflict and Terrorism 22(3): 207–229.

Arquilla

Ronfeldt

(1999) The Emergence of Noopolitik: Toward an American Information Strategy. Washington, DC: RAND Corporation.

Bayles

(2001) The ethics of a computer network attack. Parameters 31(1): 44–58.

BBC News (2008) Russian tanks enter South Ossetia. 8 August. Available at: http://news.bbc.co.uk/2/hi/7548715.stm (accessed 18 October 2011).

Bremmer

(2010) Democracy in cyberspace: What information technology can and cannot do. Foreign Affairs 89(6).

Bumgarner

Borg

(2009) Overview by the US-CCU of the Cyber Campaign Against Georgia in August of 2008. The US Cyber Consequences Unit. Available at: http://www.registan.net/wp-content/uploads/2009/08/US-CCU-Georgia-Cyber-Campaign-Overview.pdf (accessed 18 October 2011).

10.

CERT Estonia (2008) Information about cyber attacks in Georgia, sent by CERT Estonia experts from Georgia. Available at: http://www.ria.ee/30024 (accessed 18 October 2011).

11.

Collings

Rohozinski

(2006) Shifting Fire: Information Effects in Counterinsurgency and Stability Operations. Carlisle, PA: Center for Strategic Leadership, US Army War College and the Advanced Network Research Group. Available at: http://www.carlisle.army.mil/DIME/documents/Shifting%20Fire%20-%20Full%20Version.pdf (accessed 18 October 2011).

12.

Corrales

Westhoff

(2006) Information technology adoption and political regimes. International Studies Quarterly 50(4): 911–933.

13.

Danchev

(2008) Coordinated Russia vs Georgia cyber attack in progress. Zdnet, 11 August. Available at: http://blogs.zdnet.com/security/?p=1670 (accessed 18 October 2011).

14.

Deibert

Rohozinski

(2010a) Control and subversion in Russian cyberspace. In: Deibert

Palfrey

Rohozinski

Zittrain

(eds) Access Controlled: The Shaping of Power, Rights and Rule in Cyberspace. Cambridge, MA: MIT Press, 15–34.

15.

Deibert

Rohozinski

(2010b) Undercover of the Net. In: Clunan

Trinkunas

(eds) Ungoverned Spaces? Alternatives to State Authority in an Era of Softened Sovereignty. Stanford, CA: Stanford University Press, 255–275.

16.

Deibert

Rohozinski

(2010c) Beyond denial: Introducing next-generation information access controls. In: Deibert

Palfrey

Rohozinski

Zittrain

(eds) Access Controlled: The Shaping of Power, Rights and Rule in Cyberspace. Cambridge, MA: MIT Press, 3–14.

17.

Deibert

Rohozinski

(2011) The new cyber military industrial-complex. Globe and Mail, 28 March. Available at: http://www.theglobeandmail.com/news/opinions/opinion/the-new-cyber-military-industrial-complex/article1957159/ (accessed 4 November 2011).

18.

Deibert

Rohozinski

Crete-Nishihata

(2011) Data fusion methodology and the geopolitics of cyberspace. Paper presented at the Annual Convention of the International Studies Association, Montreal, 16–19 March. Available at: http://www.allacademic.com/meta/p498717_index.html (accessed 18 October 2011).

19.

Denning

(2007) The ethics of cyber conflict. In: Himma

Tavani

(eds) The Handbook of Information and Computer Ethics. New York: John Wiley & Sons, 407–428.

20.

Der Derian

(1996) Global swarming, virtual security, and Bosnia. The Washington Quarterly 19(3): 45–56.

21.

Diamond

(2010) Liberation technology. Journal of Democracy 21(3): 69–83.

22.

Dodge

(2005) The role of maps in virtual research methods. In: Hine

(ed.) Virtual Methods: Issues in Social Research on the Internet. New York: Berg, 113–128.

23.

Dodge

Kitchin

(2000) Mapping Cyberspace. London and New York: Routledge.

24.

Drezner

(2004) The global governance of the Internet: Bringing the state back in. Political Science Quarterly 119(3): 477–498.

25.

Dunn-Cavelty

Krishna-Hensel

Mauer

(eds) (2008) Power and Security in the Information Age: Investigating the Role of the State in Cyberspace. Farnham: Ashgate.

26.

Eriksson

(2006) The information revolution, security, and international relations: (IR)relevant theory? International Political Science Review 27(3): 221–244.

27.

Eriksson

Giacomello

(eds) (2007) International Relations and Security in the Digital Age. London and New York: Routledge.

28.

European Union (2009) Independent International Fact-Finding Mission on the Conflict in Georgia. Available at: http://www.ceiig.ch/Report.html (accessed 18 October 2011).

29.

Faris

Villeneuve

(2008) Measuring global Internet filtering. In: Deibert

Palfrey

Rohozinski

Zittrain

(eds) Access Denied: The Practice and Policy of Global Internet Filtering. Cambridge, MA: MIT Press, 5–27.

30.

George

Bennett

(2005) Case Studies and Theory Development in the Social Sciences. Cambridge, MA: MIT Press.

31.

Georgia Update (2008) Russian Cyberwar on Georgia. Available at: http:///www.georgiaupdate.gov.ge/doc/10006922/CYBERWAR-%20fd_2_.pdf. (accessed 18 October 2011).

32.

Giacomello

(2004) Bangs for the buck: A cost–benefit analysis of cyberterrorism. Studies in Conflict and Terrorism 27(5): 195–212.

33.

Goldsmith

(2006) Who Controls the Internet? Illusions of a Borderless World. New York: Oxford University Press.

34.

Gorbachev

(2008) Russia never wanted a war. New York Times, 19 August. Available at: http://www.nytimes.com/2008/08/20/opinion/20gorbachev.html (accessed 18 October 2011).

35.

Hansen

Nissenbaum

(2009) Digital disaster, cyber security, and the Copenhagen School. International Studies Quarterly 53(4): 1155–1175.

36.

Heinrich

Tanaev

(2009) Georgia and Russia contradictory media coverage of the August war. Caucasian Review of International Affairs 3(3): 244–260.

37.

Hughes

(2010) A treaty for cyberspace. International Affairs 86(2): 523–541.

38.

Jane’s Intelligence Review (2008) Baiting the bear: Georgia plays Russian roulette. 14 August.

39.

Jane’s Information Group (2008) Jane’s sentinel security assessment – Russia and the CIS. 8 September.

40.

Johnson

(2008) Georgian websites under attack: Don’t believe the hype. Shadowserver Foundation, 12 August. Available at: http://www.shadowserver.org/wiki/pmwiki.php/Calendar/20080812 (accessed 18 October 2011).

41.

Kalathil

Boas

(2003) Open Networks, Closed Regimes: The Impact of the Internet on Authoritarian Rule. Washington, DC: Carnegie Endowment for International Peace.

42.

Kelly

Etling

(2008) Mapping Iran’s Online Politics and Culture in the Persian Blogosphere. Cambridge, MA: Berkman Center for Internet & Society. Available at: http://cyber.law.harvard.edu/publications/2008/Mapping_Irans_Online_Public (accessed 18 October 2011).

43.

Kelsey

J TG

(2008) Hacking into international humanitarian law: The principles of distinction and neutrality in the age of cyber warfare. Michigan Law Review 106(7): 1427–1452.

44.

Korenovska

(2008) Russia sends tanks into Georgia. Washington Post, 9 August. Available at: http://www.washingtontimes.com/news/2008/aug/09/russia-sends-tanks-into-georgia/ (accessed 18 October 2011).

45.

Korns

Kastenberg

(2008) Georgia’s cyber left hook. Parameters 38(4): 60–76.

46.

Krasnaya Zvezda (2008) Interview with chief of armed forces’ communications, 18 October.

47.

Latham

(ed.) (2003) Bombs and Bandwidth: The Emerging Relationship Between Information Technology and Security. New York: The New Press.

48.

Levy

(2008) Russia backs independence of Georgian enclaves. New York Times, 26 August. Available at: http://www.nytimes.com/2008/08/27/world/europe/27russia.html (accessed 18 October 2011).

49.

Lukanin

(2008) Tsena pobedy [The price of victory]. Trud, 18 August. Available at: http://www.trud.ru/issue/article.php?id=200808181520301 (accessed 18 October 2011).

50.

McDermont

(2009) Russia’s conventional armed forces and the Georgian war. Parameters 39(1): 65–80.

51.

Manjikian

(2010) From global village to virtual battle space: The colonizing of the internet and the extension of realpolitik. International Studies Quarterly 54(2): 381–401.

52.

Medvedev

(2008) Statement on the situation in South Ossetia. 8 August. Available at: www.kremlin.ru/eng/speeches/2008/08/08/1553_type82912type82913_205032.shtml (accessed 18 October 2011).

53.

Menn

(2008) Expert: Cyber attacks on Georgia websites tied to mob, Russian government. LA Times, 13 August. Available at: http://latimesblogs.latimes.com/technology/2008/08/experts-debate.html (accessed 18 October 2011).

54.

Morozov

(2008) An army of ones and zeroes: How I became a solider in the Georgia–Russia cyberwar. Slate, 14 August. Available at: http://www.slate.com/id/2197514/ (accessed 18 October 2011).

55.

Mueller

Mathiason

Klein

(2007) The internet and global governance: Principles and norms for a new regime. Global Governance 13(2): 237–254.

56.

National Bank of Georgia (2008) All commercial banks in Georgia are operating business as usual. Statement, 18 August. Available at: http://www.nbg.gov.ge/index.php?m=340&newsid=832 (accessed 18 October 2011).

57.

Nazario

(2008) Georgia DDoS attacks: A summary of observations. Arbor Networks, 12 August. Available at: http://asert.arbornetworks.com/2008/08/georgia-DDoS-attacks-a-quick-summary-of-observations/ (accessed 18 October 2011).

58.

Nichol

(2008) Russia–Georgia Conflict in South Ossetia: Context in Implications for US Interests. Washington, DC: Congressional Research Service. Available at: http://fpc.state.gov/documents/organization/110841.pdf (accessed 18 October 2011).

59.

Nizza

(2008) Georgia’s leader under siege online and off. The Lede (New York Times news blog), 11 August. Available at: http://thelede.blogs.nytimes.com/2008/08/11/georgias-leader-under-siege-online-and-off/ (accessed 18 October 2011).

60.

OpenNet Initiative (2010) Georgia. In: Deibert

Palfrey

Rohozinski

Zittrain

(eds) Access Controlled: The Shaping of Power, Rights and Rule in Cyberspace. Cambridge, MA: MIT Press, 173–90.

61.

Park

Willinger

(eds) (2005) The Internet as a Large-Scale Complex System. New York: Oxford University Press.

62.

Robinson

Antidze

(2008) Georgia says phone taps show Russia launched war. Reuters, 16 September. Available at: http://www.reuters.com/article/idUSLG70183 (accessed 18 October 2011).

63.

Rogers

(2010) Internet research: The question of method – A keynote address from the YouTube and the 2008 election cycle in the United States conference. Journal of Information Technology and Politics 7(2): 241–260.

64.

Rogers

Ben-David

(2008) The Palestinian–Israeli peace process and transnational issue networks: The complicated place of the Israeli NGO. New Media and Society 10(3): 41–72.

65.

Rosenau

(1990) Turbulence in World Politics: A Theory of Change and Continuity. Princeton, NJ: Princeton University Press.

66.

Saakashvili

(2008) Russia is the West’s challenge. The Washington Post, 14 August. Available at: http://www.washingtonpost.com/wp-dyn/content/article/2008/08/13/AR2008081303364.html (accessed 18 October 2011).

67.

Saradzhyan

(2008) Obsolete hardware revealed in military analysis. The Moscow Times, 17 August.

68.

Stephenne

Burnley

Ehrlich

(2009) Analyzing spatial drivers in quantitative conflict studies: The potential and challenges of geographic information systems. International Studies Review 11(3): 502–522.

69.

Stiennon

(2008) Estonia sending cyber defense experts to Georgia. Network World, 11 August. Available at: http://www.networkworld.com/community/node/30935 (accessed 18 October 2011).

70.

Svensson

(2008a) Georgian president’s web site moves to Atlanta. AP News, 11 August. Available at: http://www.usatoday.com/tech/products/2008-08-11-2416394828_x.htm (accessed 18 October 2011).

71.

Svensson

(2008b) Russian hackers continue attacks on Georgian websites. USA Today, 12 August. Available at: http://www.usatoday.com/tech/news/computersecurity/hacking/2008-08-12-russia-hackers-georgia_N.htm (accessed 18 October 2011).

72.

Swabey

(2008) Google embroiled in Georgian conflict. Information Age, 12 August. Available at: http://www.information-age.com/home/information-age-today/460666/google-embroiled-in-georgian-conflict.html (accessed 18 October 2011).

73.

Thomas

Cook

(eds) (2005) Illuminating the Path: The Research and Development Agenda for Visual Analytics. Richland, WA: National Visualization and Analytics Center, US Department of Homeland Security. Available at: http://nvac.pnl.gov/agenda.stm#book (accessed 18 October 2011).

74.

Thomas

(2000) Manipulating the mass consciousness: Russian and Chechen ‘information war’ tactics in the second Chechen conflict. In: Aldis

(ed.) The Second Chechen War. London: Strategic and Combat Studies Institute.

75.

Thomas

(2009) The bear went through the mountain: Russia appraises its five-day war in South Ossetia. Journal of Slavic Military Studies 22(1): 31–67.

76.

US Department of Defense (2003) Information Operations Roadmap. Washington, DC: US Department of Defense.

77.

US Department of Defense (2006) National Military Strategy for Cyberspace Operations. Washington, DC: US Joint Chiefs of Staff.

78.

US Department of Defense (2010) Department of Defense Dictionary of Military and Associated Terms. Joint Publication (JP) 1-02. Washington, DC: US Joint Chiefs of Staff.

79.

Villeneuve

(2009) Ru-Ge skepticism. Nart Villeneuve: Malware Explorer, 25 August. Available at: http://www.nartv.org/2009/08/25/ru-ge-skepticism/ (accessed 18 October 2011).

80.

Weimann

(2006) Terror on the Internet: The New Arena, the New Challenges. Washington, DC: US Institute of Peace Press.

81.

Wilby

(2008) Georgia has won the PR war. The Guardian, 18 August. Available at: http://www.guardian.co.uk/media/2008/aug/18/pressandpublishing.georgia (accessed 18 October 2011).

82.

Zmijewski

(2008) Georgia clings to the ‘net. Renesys Blog, 10 August. Available at: http://www.renesys.com/blog/2008/08/georgia-clings-to-the-net.shtml (accessed 18 October 2011).

Cyclones in cyberspace: Information shaping and denial in the 2008 Russia–Georgia war

Abstract

Keywords

Get full access to this article

References