The SolarWinds hack: cyber attacks and national security with Reuters reporter Joseph Menn

Defense Strategy

The discussion highlights the imbalance between offensive and defensive strategies in cyber operations. Joseph Menn points out that the NSA's focus on offense has overshadowed its defensive capabilities, leading to vulnerabilities 1. He argues that prioritizing defense could deter attacks by raising the cost for adversaries. Nilay Patel compares this to Cold War deterrence strategies, suggesting that improving defense could reduce the frequency of attacks 1.

The way to actually win is to get really, really good at defense.

--- Joseph Menn

Additionally, the challenge of adapting to new threats is emphasized, as past defenses may not address current vulnerabilities 2.

   

Government Role

The role of government in cybersecurity is complex, with Joseph Menn noting the difficulty in establishing international norms and treaties 3. Despite efforts, significant cyber incidents like the NotPetya attacks have not led to effective global agreements. Nilay Patel questions whether such incidents have set new norms for acceptable behavior in cyber warfare 3.

There are so many proxies, both sort of literal and figurative.

--- Joseph Menn

Furthermore, the responsibility of defending against nation-state attacks is debated, with Menn asserting that it is unreasonable to expect private companies to fend off such threats alone 4.