Cybersecurity and the Battle for the Fifth Domain

November 4, 2022

The traditional battlefields where humans seek dominance to gain power and control over others are the four classical domains: land, sea, air, and space, with cyberspace being the most recent. What challenges does the emergence of a new battlefield present? The need for cybersecurity to protect us from the warfare in this fifth domain.

Cybersecurity is a topic that has gained significant relevance in the last decade, especially since humanity faced the greatest crisis in recent times, the COVID-19 pandemic. Although power and control—impossible to truly possess, as Foucault might argue—continue to drive passions, entire nations, and human activity, pushing it to new limits.

The threats present in all areas of human development are magnified in the fifth domain of cyberspace. This is because much of human life has been replicated in this space, which serves not only as a vehicle for information but also as a mechanism for expression, socialization, education, health, and more. Since we are so integrated with cyberspace, we are also at its mercy, exposed to the dangers that may operate within it. This alarm about the importance of cybersecurity in the all-encompassing world of cyberspace extends beyond the personal realm of our information and social interactions to include states and the media. Since 2010, The Economist has warned about the expansion of technology and how it will change the landscape in various areas, such as the control countries seek over cyber weapons, and we can begin to consider the existence of cyberwarfare.

La seguridad en el quinto dominio implica a todo el mundo.

Cybersecurity and Governments

Increasingly, we observe that various governments are victims of cyberattacks on their computer systems, which can lead to major crises in the organization of the services they provide, such as the attack on Costa Rica’s government in April or the attack on Chile's National Consumer Service (SERNAC).

However, the threats governments face are not only from hacker groups and cyberterrorism but also from attacks between countries. For instance, on March 24, the BBC reported on U.S. President Joe Biden’s call for digital doors to be closed in the face of the threat of Russian cyberattacks due to the conflict with Ukraine. Some of the most well-known cyberattacks by Russian military hackers include:

BlackEnergy, Attack on Critical Infrastructure:

In 2015 and 2016, Ukraine suffered a disruption in its energy grid due to a cyberattack.

NotPetya, Uncontrollable Destruction:

Russian hackers spread through an infected update of Ukrainian software, causing approximately $10 billion in damage across the United States, the UK, and the European Union.

Colonial Pipeline, Intensification of Cybercrime:

The attack on a key U.S. pipeline was attributed to the ransomware group DarkSide, operating from Russia. The company managing the pipeline had to pay a ransom of $4.4 million in bitcoins to resume operations. The state concern over such cases and the ongoing discussions in international forums like NATO highlight the importance of cybersecurity in all fields, revealing cyberspace as a new battleground. In this context, it is important to note that cyberattacks can sometimes jeopardize national security, as seen in the case of Latin American military revelations published by the Guacamaya group after hacking various government systems.

La ciberseguridad atañe tanto a gobiernos como empresas y ciudadanos.

Cybersecurity and Businesses

Just as governments are concerned about the potential problems in cyberspace that could affect the functioning of their essential services and the handling of sensitive information such as military data, businesses too have been affected by attacks in this fifth domain, which has led to a rise in cybersecurity measures.

According to PwC Digital Trust Insights 2022, 38% of businesses expect greater cyberattacks through the cloud. This correlates with the 45% of security and IT executives who believe ransomware attacks will increase in 2023. Given this growing concern and the already rising number of cyberattacks in recent years, it is evident that the cybersecurity sector will continue to grow.

This increasing concern allows for the expansion and specialization of security offerings, attempting to keep pace with the evolving strategies of cybercrime. This global scenario has also had significant effects in Latin America. According to IDC Latin America Research 2022, investments in cybersecurity increased by 34.2% compared to the previous year. For example, Mexico invested $1.091 billion in cybersecurity.

The report also forecasts that cybersecurity revenues will increase to $7.005 billion by 2026, with projected growth of 66.3% in the region. This is reflected in the trend of many users seeking companies with better security protocols and data protection. The growing concern about cybersecurity is aligned with the virtualization of companies and the search to position themselves in virtual space, just as many have done in the traditional physical space. The quest to dominate competition in the fifth domain also impacts the way companies interact with this space and manage its potential risks.

Es indispensable gestionar la seguridad en el ciberespacio.

Outlook and Challenges

One of the main aspects to consider in the war within this fifth domain is that we are all involved. The COVID-19 pandemic pushed many of us into the largely unknown territory of remote work. Even now, as restrictions have been lifted worldwide, the shift toward semi-remote work remains a difficult innovation to undo.

For this reason, every business is, in some way, involved in the fifth domain and, thus, benefits from its conveniences while assuming its risks. From this perspective, we all share a degree of vulnerability that we must protect. Based on analysis and a review of the main threats observed in recent years, we can highlight three primary concerns.

Ransomware:

Far from disappearing, ransomware has become a constant threat, increasing in danger each year and finding new ways to gain power over data and operations in the fifth domain. Security and encryption mechanisms must be refined to contain this varied threat.

2. Supply Chain Attacks:

Although not the most common form of cyberattack, supply chain attacks can cause the greatest damage to businesses. The increasing virtualization of processes can create security gaps in logistical systems that lead to attacks.

3. Controlling Human Resources:

Human error or inadequate handling of virtual systems is the primary cause of vulnerability in organizations. Therefore, it is essential to train and monitor employees in the use of virtual tools and cybersecurity protocols.

In summary, considering this scenario, it is crucial to evaluate or reconsider the necessary security protocols to safeguard all processes carried out in companies at various levels. Similarly, in every type of organization, cybersecurity must not only be a concern for controlling systems but also for survival in the fifth domain.

Sources: