| Carl von Clausewitz’s On War—support these claims may appear surprising. After all, many experts consider both the U.S. Army and the Prussian military theorist diehard apostles of the cult of the offensive.4 Yet, when read carefully, U.S. Army doctrine and Clausewitz’s classic text support these claims. This essay seeks to import their insights about the advantages of defense into the virtual realm. Such insights could help the United States develop a cyber strategy that does not rely too heavily on offensive cyber capabilities and their concomitant dangers. These defensive tactics and strategy have numerous advantages for the United States as it wrestles with cyber threats and prepares for future cyber crises. Inevitably, the U.S. military became involved in responding to the dangers and opportunities in cyberspace. Between 2009 and 2010, the U.S. government created the United States Cyber Command and the Air Force, Navy, and Army all established their own cyber units.5 And, in some cases, commanders are seeking greater latitude to conduct offensive cyber operation.6 However, giving the military a prominent role in the cyber realm has raised alarms in the media and among cyber experts.7 Among their concerns is that military officers subscribe to the old adage: “the best defense is a good offense.”8 Some fear that they will import their aggressive outlook into the cyber realm, militarize cyberspace, and use cyber weapons preemptively.9 However, this narrow view of the military mindset overlooks important contributions that military thinking can make, especially regarding the advantages of defensive cyber operations.10 While military officers do highlight the virtues of offensive action, they also have a deep appreciation for the advantages of the defense. This appreciation is especially important now that the offense is seen as preeminent in cyberspace. It is important for offensive capabilities to have a place in U.S. cyber strategy. |