Thursday, July 08, 2021

Cyberspace is an Analogy, Not a Domain: Rethinking Domains and Layers of Warfare for the Information Age


Michael P. Kreuzer
July 8, 2021


For ten years, the United States military has defined cyberspace as the fifth domain of war, equating it with the four physical domains of warfare as a core planning assumption.[1] But classifying cyberspace as a domain is fatally flawed both because it obscures the purpose of recognizing the four physical domains, and because it unnecessarily puts cyber into too small a box.[2] The buzzwordification of the term domain has long passed the point of diminishing returns, and nowhere is that a greater hazard than with cyber operations.[3] It’s time to re-think cyber to reflect the realities of modern war, and with it the broader lexicon of what constitutes domains and layers of warfare.

This article proposes the United States re-focus the definition of domains of warfare on the four physical domains, which require distinct organizations and doctrines to effectively control and exploit, while elevating the parallel concept of functional multidomain operations such as Special Operations and Cyber Operations with fixed representation at the Undersecretary of Defense level. This is necessary not because denying cyberspace or information as a domain would diminish its importance, but because it is a flawed analogy that both undercuts the need for the current service structure and would treat cyber as a separate pillar of defense.[4] It implies cyberspace should have an independent service—which is the wrong solution to the growing all-domain challenges of cyber operations.[5]
DOMAINS OF WARFARE: AN UNDEFINED DOCTRINAL FOUNDATION

Domains of warfare sit at the core of U.S. and NATO military doctrine, defining the purpose for major military services of Western powers and shaping the lenses through which soldiers, airmen, sailors, marines, and guardians understand the operating environment. But a lack of precise language clouds critical discussions of space and cyber, and even why we need to maintain some of the arrangement of the United States’ current services.[6] In recent years, other concepts have been proposed as domains, to include the electromagnetic spectrum and human domains.[7,8]

View fullsize



How did we get to this point? Domains entered the lexicon with the 2000 publication of Joint Vision 2020, with information proposed as a new domain “as important as those conducted in the domains of sea, land, air, and space.”[9] Before this point what we now know as domains were called dimensions, and “domain of warfare” itself was left undefined.[10] As with most military terms, the word has clear non-military definitions that are instructive.[11] In law it is “[c]omplete and absolute ownership of land…or a territory over which dominion is exercised.”[12] A common alternative definition is a “sphere of knowledge, influence, or activity,” as in a domain of knowledge. In math it is a “set of numbers that define a function.”[13] In computing, it is a realm of administrative autonomy—from a website to a top-level domain (e.g., .org).

The first definition was likely the basis for the use of the term in Joint Vision 2020, as “full spectrum dominance” was its central message. The Air Force’s creation of AFCYBER—the US Air Force’s service-specific Cyber Command—proclaimed as much, stating fighting in the cyber domain means cyber domain dominance.[14] This is also a source of confusion because outside of land, physical control of other domains has been based on transitory control—the ability to freely operate while limiting one’s adversaries’ ability to do so.[15]

Absent a fixed doctrinal definition of domain itself, only the standing definitions of the five currently assumed and recognized domains remain. Each has a clear definition, but together they lack internal consistency:

Land Domain: The area of the Earth’s surface ending at the high-water mark and overlapping with the maritime domain in the landward segment of the littorals.

Maritime Domain: The oceans, seas, bays, estuaries, islands, coastal areas, and the airspace above these, including the littorals.

Air Domain: The atmosphere, beginning at the Earth’s surface, extending to the altitude where its effects upon operations become negligible.

Space Domain: The area above the altitude where atmospheric effects on airborne objects become negligible.

Cyberspace: A global domain within the information environment consisting of the interdependent networks of information technology infrastructures and resident data, including the Internet, telecommunications networks, computer systems, and embedded processors and controllers.[16]

The first four place the word domain in the term to be defined, while cyberspace places it in the definition itself. The first four are defined by physical—if somewhat arbitrary and disputed—boundaries within which organizations, technology, and doctrines are the variables; in cyberspace there are no fixed boundaries, as rapidly evolving technology itself defines the domain.[17]

THE PROBLEM WITH CYBERSPACE

The original three domains of land, maritime, and air developed separate identities and independent services because unique characteristics dictated distinct requirements for humans to fight in those domains, unique equipment, organizations, and perspectives of the operating environment yielding unique systems of warfare. The land domain is directly tied to the existence of the state—preservation of sovereignty through direct physical control of territory—dictating large manpower-centric forces to compel the state’s will through firepower and maneuver.[18] War at sea secures the state’s vital interests, but requires ships for humans to operate, different operational concepts for naval warfare, and a different concept of control from land. The air domain added the vertical dimension of warfare, range, speed, and put advanced technology at the forefront to facilitate aerial combat and support ground operations. Space is moving closer to parity with the first three as the unique physical environment of space distinct from the air—defined by orbital mechanics, the physical limitations of space lift, and an environment hostile to human life—and has led to the realization of an independent U.S. Space Force to organize, train, and equip forces that had previously been neglected by other services focused on other domains.
View fullsize

Then-Secretary of the Air Force Barbara Barrett, Space Force Command Senior Enlisted Leader CMSgt Roger Towberman and CMSgt Roger Towberman present President Donald Trump with the official flag of the United States Space Force in the Oval Office in May 2020. (Samuel Corum-Pool/Getty)


Cyberspace appeared a natural extension to this evolution, and in its early years it likely appeared the ability to control and exploit cyberspace was the next iteration for defense. The problem, however, is there is no cyberspace.[19] There is instead a metaphor to help humans understand the near instantaneous sharing of information across widespread computer networks—much like the cloud, which may no longer be someone else’s computer, but is certainly not data floating in space like physical clouds.[20] The term cyberspace first arose in the 1960s, then gained widespread appeal in the 1990s when the internet appeared new, distinct, and distant.[21] In the era of the internet of things, cyberspace is increasingly “a layer on top of our existing reality,” permeating all equipment across all domains of warfare.[22,23] Operations rely on cyber power to execute remotely piloted operations, reach-back support, and global command and control.[24] Space control is also almost entirely reliant on cyber operations.[25] Even the foot soldier is increasingly networked, from their blue force tracker and other GPS-guided tools, to increasing use of automated equipment.[26]

As the U.S. concept of cyberspace evolved, so too has its definition. More recent definitions run more than a standard paragraph in length, discussing networks, nodes, networks of networks, and power relationships.[27] As cyber continues to evolve to an all-encompassing aspect of life, the inability to define what does not constitute part of cyberspace puts it in marked contrast to the other domains. The physical domains may have arbitrary boundaries that are subject to debate, but that is a left/right boundary debate over fixed space, not ongoing technological change redefining reality.[28]

RE-THINKING THE FOUNDATION: DOMAINS, LAYERS, AND OPERATING CONSTRUCTS

If cyberspace is not a domain of warfare, then what is it? Cyber is certainly a critical sphere of knowledge distinct from other fields, but by this logic in this sense any military specialty can be called a domain of some form. The Defense Department definition appears to make it the operational domain of the information environment, but this is problematic as well. Cyberspace is within the information environment, but many parts of the information environment are excluded from the cyber definition—and at the same time most of cyber exists in the physical environment as physical systems and nodes, further complicating the definition. Cyber may be an operating warfighting space depending on the lens that the operating environment is viewed, but there are many sub-components of the operating environment that do not qualify in the U.S. Department of Defense as domains of warfare, which is a particularly concise list.

In arguing that cyber is not a domain, the goal is not to minimize it or suggest it is less important than land, sea, air, or space—in some regards it is far more important and will only grow more so in the coming years. The doctrinal lexicon and how it shapes first norms and second U.S. organization and budgets is really the larger challenge. To ensure cyber operations receive the budgetary and acquisitions priority it needs, the United States has worked to shoehorn it into the domains of warfare category, historically the highest echelon of importance for Defense Department constructs. Rather than pursuing this route, and eventually evaluating other potential would-be domains of warfare, this article argues for a re-evaluation of how the U.S. defines the parameters of the operating environment itself, and in turn how that shapes its organizations. This new model would comprise three equally important foundational constructs: two parameters to define the operating environment, and one focused on multi-domain exploitation.

In this typology, the operating environment is divided between two major lenses: layers of warfare and domains of warfare. The layers of warfare are defined as mediums of the operating environment through which military operations can be conducted and operational effects achieved that span all domains of warfare. A domain of warfare is defined as a sphere of the operating environment that has physical characteristics requiring unique doctrines, organizations, and equipment for military forces to effectively control and exploit in the conduct of military operations. The fixed nature of physical domains serve as the basis of uniformed services, while the interplay of the domains and layers with evolving technology would shape more organizationally flexible, multi-domain operating constructs with service-equivalent leadership through the U.S. Defense Department and Functional Unified Commands.

View fullsize



Table of Proposed Typology of Warfare (Author’s Work)



Layers of warfare are part of the natural environment in which military operations take place, both in the physical and social contexts. They are not inherently distinct from one another either, as all occupy the same physical space and functionally are interconnected. The information and cognitive layers focus on the human and technological sides of the joint operating environment, with the former being data- and communication-centric and the latter focusing on the culture, psychology, sociology, and other contextual factors that define how states and organizations make decisions. The electromagnetic layer is also a physical, though invisible and non-Newtonian part of the battlespace. Interestingly, the U.S. Defense Department notes “the [electro-magnetic spectrum] is not a separate domain of military operations because the [electro-magnetic spectrum] is inseparable from the domains established in joint doctrine,” a situation cyber similarly finds itself in as the reach of cyber has grown.[29]

The four domains remain the four physical domains previously defined, with the additional note of three trans-domain regions that have resulted in differing solutions to mitigate challenges. The maritime/land boundary, the littoral regions, has roles for the U.S. Army and Navy, but the Marine Corps is historically the primary service for force projection from the sea. The gap between air and surface has been more complicated, with key functions dispersed among all U.S. military services—the Army controlling anti-aircraft missiles and artillery, the Air Force controlling fixed wing air support, and the Navy retaining maritime air operations. As space exploration grows, the conception of space may morph to a trans-domain region of orbital space, and the space domain as interplanetary to intergalactic space. But absent ambiguity surrounding trans-domain regions, there is a clear dividing line between regions that require distinct capabilities—two surface domains with unique challenges on land and at sea, and two vertical domains defined by atmospheric versus orbital effects.

In this typology, cyberspace would be a multi-domain operational construct, more akin to special operations or intelligence operations than the space domain. These constructs are function-centric, often concerned with issues critical to modern warfare but not always in the conventional military environment. Special Operations are “activities or actions requiring unique modes of employment, tactical techniques, equipment, and training often conducted in hostile, denied, or politically sensitive environments.”[30] Intelligence operations are “the variety of intelligence and counterintelligence tasks and activities within the intelligence process, to include globally integrated [intelligence, surveillance, and reconnaissance] and human intelligence operations.”[31] These constructs operate across all layers and domains of warfare, with the main distinctions being their primary emphasis, and with the overlap and shifts in the focus of operations contingent on the evolving character of warfare. Their focus is not control of territory, but operational effects often in the absence of control or under ambiguous control. The concepts do not organize, train, and equip distinct forces, but instead executes operations with specialists drawn from each of the physical domains of war to perform highly specialized operations affecting and drawing from all domains of warfare, in a command structure with similar U.S. Department of Defense status to a service, but with an operations-focused role. Cyber operations, then, would be the employment of electronic network capabilities to create denial effects in the physical domains, and to identify and defeat threats to friendly networks including malware, physical attack, or the unauthorized activities of users.

As with intelligence and special operations, cyber operations pose a number of non-traditional challenges to organization and execution of operations. How should military cyber operations be executed under Title 10, Title 50, and within Posse Comitatus limitations?[32] Given how cyber operations transcend state boundaries and much is within the private sector, multinational, and/or proprietary, to what degree are state military forces ultimately responsible for active cyber defense of private companies with servers in foreign nations, or does this problem-set more closely resemble espionage than warfare?[33] Should the National Security Agency remain operationally tied to U.S. Cyber Command given the level of overlap in vital functions?[34] For these reasons and more, it makes better logical sense and will make cleaner multi-domain doctrine to keep cyber and special operations in the same, equally important but distinct, category from the physical domains of warfare.
CONCLUSION

It is tempting to draw attention to new concepts by either attaching new terms to them or trying to categorize them with other important concepts. This has the short-term effect of drawing attention in a more familiar, established way, but in the long-term confuses implementers. When it comes to the terms themselves, the label is less important than the meaning. This article has identified domains of warfare as being the four physical domains of land, maritime, air, and space, and the dimensions of war as natural environmental factors of the battlespace that cross and affect all domains, the physical, electromagnetic, information, and cognitive layers. By standardizing this typology, the U.S. joint force and its partners will be better positioned to operationalize cyber power, to understand the need for and purpose of independent military services, and to better integrate multi-domain operations.


Michael P. Kreuzer is a U.S. Air Force officer and an assistant professor of international security at Air University. He has written extensively on integration of technology into military forces and the nature of revolutions in military affairs. All views presented are his own and do not represent the Department of Defense.

NOTES:

[1] Jacquelyn Schneider et al. (2020). Ten Years In: Implementing Strategic Approaches To Cyberspace. Newport: U.S. Naval War College, December 2020. NATO similarly adopted this assumption in 2016, expanding the construct to all key U.S. allies. See Steve Evans. “Cyberspace is the New Domain for War: NATO.” in Infosecurity Magazine, June 16 2016. Accessed 24 June 2021 from https://www.infosecurity-magazine.com/news/cyberspace-is-new-domain-for-war/

[2] Chris Demchak. “Cybered Conflict vs. Cyber War.” The Atlantic Council New Atlanticist. October 20, 2010. https://www.atlanticcouncil.org/blogs/new-atlanticist/cybered-conflict-vs-cyber-war/

[3] For discussion on buzzwords and their merits/harm to Defense concepts, see Sydney J. Freedberg, Jr. “DIB Calls BS On Buzzwords: Defense Innovation Board,” in Breaking Defense. October 24, 2018. Accessed June 24, 2021 from https://breakingdefense.com/2018/10/dib-calls-bs-on-buzzwords-defense-innovation-board/ and Kate Bateman. “War on (Buzz)Words,” in Proceedings, January 2019. Accessed June 24, 2021 from https://www.chds.us/ed/resources/uploads/2019/01/War-On-Buzz-Words.pdf

[4] One example of confusion of terms (is information a domain or instrument of power? is information or cyber the domain?) while critiquing those who question its status can be seen at this link: https://www.cyberdominance.com/cyberdominance/dominate-the-information-domain-synchronize-strategy-and-cyber-efforts/

[5] This argument was made again most recently by David Barno and Nora Bensahel. “Why the United States needs an independent Cyber Force.” War on The Rocks, May 4, 2021. Accessed May 21, 2021 from https://warontherocks.com/2021/05/why-the-united-states-needs-an-independent-cyber-force/

[6] For a prominent example, see Robert M. Farley. Grounded: The Case for Abolishing the United States Air Force. Lexington: University of Kentucky Press, 2014.

[7] Sydney J. Freedberg, Jr. “VCJCS Mulls Newest Domain: Electromagnetic Spectrum,” in Breaking Defense. April 22, 2016. Accessed June 24, 2021 from https://breakingdefense.com/2016/04/vcjcs-mulls-newest-domain-electromagnetic-spectrum/

[8] Erik Heftye, “Multi-Domain Confusion: All Domains Are Not Created Equal,” The Strategy Bridge, May 26, 2017. Accessed online May 17, 2021, from https://thestrategybridge.org/the-bridge/2017/5/26/multi-domain-confusion-all-domains-are-not-created-equal

[9] Department of Defense. Joint Vision 2020. June, 2000. Accessed 24 June 2021 from https://www.hsdl.org/?view&did=446826

[10] Heftye, 2017.

[11] Merriam-Webster Online Dictionary. s.v. “Domain.”https://www.merriam-webster.com/dictionary/domain

[12] Ibid.

[13] Ibid.

[14] Staff Sgt. C. Todd Lopez. “Fighting in cyberspace means cyber domain dominance.” Air Force Print News, February 28, 2007. Accessed online May 17, 2021, from https://www.af.mil/News/Article-Display/Article/127803/fighting-in-cyberspace-means-cyber-domain-dominance/

[15] Heftye, 2017.

[16] All definitions pulled from the DOD Dictionary of Military and Associated Terms, January 2021, Accessed May 17, 2021 from https://www.jcs.mil/Portals/36/Documents/Doctrine/pubs/dictionary.pdf?ver=2019-05-29-162249-290

[17] For an example of the Air Force and Army dispute over the Air Domain and Land Domain boundary with respect to the Fire Support Coordination Line, see R. Kent Laughbom, Synchronizing Airpower and Firepower in the Deep Battle, Maxwell: Air University Press, 1999. Accessed May 17, 2021 from https://media.defense.gov/2017/Nov/21/2001847061/-1/-1/0/CP_0003_LAUGHBAUM_SYNCHRONIZING_AIRPOWER_FIREPOWER.PDF

[18] Stephen Biddle. Military Power: Explaining Victory and Defeat in Modern Battle. Princeton: Princeton University Press, 2004. p. 6.

[19] One strong argument outlining the problem with cyberspace as originally defined and as it has evolved in understanding can be found at P.J. Patella-Rey. “There is no ‘Cyberspace’”. February 21, 2012. Accessed 24 June 2021 from https://thesocietypages.org/cyborgology/2012/02/01/there-is-no-cyberspace/

[20] For further discussion of the challenges with cloud computing analogies, see Mary Branscomb. ”Stop saying the cloud is just someone else's computer - because it's not.” ZDNet. July 12, 2016 (Accessed 17 May 2021 from https://www.zdnet.com/article/stop-saying-the-cloud-is-just-someone-elses-computer-because-its-not/) and Reuven Cohen. “An Inconvenient Truth about Cloud Analogies.” Information Week, December 6, 2013 (Accessed 17 May 2021 from https://www.informationweek.com/cloud/software-as-a-service/an-inconvenient-truth-about-cloud-analogies/d/d-id/1112944?).

[21] Mark Neale. No Map for These Territories. Video documentary accessed online 24 June 2021 from https://www.amazon.com/No-Maps-Territories-William-Gibson/dp/B08M93BDJC and “Highlighting Artificial Intelligence: An Interview with Paul Scharre.“ Strategic Studies Quarterly. September 26, 2017. Accessed May 17, 2021 from https://www.airuniversity.af.edu/Portals/10/SSQ/documents/Volume-11_Issue-4/Scharre.pdf

[22] Jacob Morgan. “A Simple Explanation of ‘The Internet of Things.’” In Forbes Magazine. May 13, 2014. Accessed on 24 June 2021 from https://www.forbes.com/sites/jacobmorgan/2014/05/13/simple-explanation-internet-things-that-anyone-can-understand/

[23] Scharre interview, 2017.

[24] Michael P. Kreuzer. Drones and the Future of Air Warfare. New York: Routledge, 2016.

[25] Pete Dowdy. “Cross-agency plans for space cybersecurity will strengthen the US in all domains.” C4ISR.net. Accessed online May 17, 2021 from https://www.c4isrnet.com/opinion/2020/12/01/cross-agency-plans-for-space-cybersecurity-will-strengthen-the-us-in-all-domains/

[26] “The Blue Force Tracker System.” In The Smithsonian Institute Series Time and Navigation: The Untold Story of Getting from Here to There. Accessed June 24, 2021 from https://timeandnavigation.si.edu/multimedia-asset/the-blue-force-tracker-system

[27] Marco Mayer et al. “How would You Define Cyberspace?” Accessed online May 17, 2021 from https://www.academia.edu/7096442/How_would_you_define_Cyberspace

[28] See Laughbom, 1999, and Nadia Drake. “Where, exactly, is the edge of space? It depends on who you ask.” National Geographic. December 20, 2018. Accessed May 17, 2021 from https://www.nationalgeographic.com/science/article/where-is-the-edge-of-space-and-what-is-the-karman-line

[29] Department of Defense Electromagnetic Spectrum Superiority Strategy, October 2020. Accessed May 17, 2021 from https://media.defense.gov/2020/Oct/29/2002525927/-1/-1/0/ELECTROMAGNETIC_SPECTRUM_SUPERIORITY_STRATEGY.PDF

[30] DOD Dictionary of Military and Associated Terms, January 2021

[31] U.S. Air Force. Air Force Doctrine Publication 2-0: Global Integrated ISR Operations. Accessed 24 June 2021 from https://www.doctrine.af.mil/Doctrine-Publications/AFDP-2-0-Global-Integrated-ISR-Ops/. Defense Intelligence Agency. Human Intelligence. Accessed 24 June 2021 from https://www.dia.mil/Careers-Internships/Career-Fields/Human-Intelligence/

[32] Extensive work is underway evaluating these key issues. For examples, see Robert Chesney, “Title 10 and Title 50 Issues When Computer Network Operations Impact Third Countries,” Lawfare (Accessed May 17, 2016 from https://www.lawfareblog.com/title-10-and-title-50-issues-when-computer-network-operations-impact-third-countries), and Susan W. Brenner, “Cyberthreats and the Posse Comitatus Act: Speculations,” St Johns Contemporary and International Law, 2013 (Accessed May 17, 2021 from https://heinonline.org/HOL/LandingPage?handle=hein.journals/sjjicl4&div=4&id=&page=)

[33] For examples of various categorizations of cyber attacks see Emily VanDerWerff and Timothy B. Lee, “The 2014 Sony hacks, explained,” Vox June 2015 (Accessed May 17, 2021 from https://www.vox.com/2015/1/20/18089084/sony-hack-north-korea), David Ignatius, “Russia’s SolarWinds hack was espionage, not an act of war,” The Washington Post Dec 22, 2020 (accessed May 17, 2021 from https://www.washingtonpost.com/opinions/russias-solarwinds-hack-was-espionage-not-an-act-of-war/2020/12/22/ffa8f88a-4498-11eb-b0e4-0f182923a025_story.html), and Hunter Walker, “Gingrich: ‘America Has Lost Its First Cyberwar,’ Business Insider December 2014 (Accessed May 17, 2021 from https://www.businessinsider.com/gingrich-america-has-lost-its-first-cyberwar-2014-12).

[34] James Di Pane. “Now is not the right time to split NSA and CYBERCOM.” C4ISR.net. December 29, 2020. Accessed May 17, 2021 from https://www.c4isrnet.com/opinion/2020/12/29/now-is-not-the-right-time-to-split-nsa-and-cybercom/


No comments: