Panetta Sounds Alarm on Cyber-War Threat - TIME

Defense Secretary Leon Panetta issued what he said is a "clarion call" Thursday for Americans to wake up to the growing threat posed by cyber war.

"The whole point of this is that we simply don't just sit back and wait for a goddamn crisis to happen," Panetta told Time. "In this country we tend to do that, and that's a concern."

Panetta came to the nation's financial hub – New York City – to issue his battle cry. The city is the brightest bulls-eye on the American target for foes wishing to cripple the U.S. economy with computerized "worms" and "malware."

"It is the kind of capability that can basically take down a power grid, take down a water system, take down a transportation system, take down a financial system," he told Time editors. "We are now in a world in which countries are developing the capability to engage in the kind of attacks that can virtually paralyze a country."

Aware his alarmn might be drowned out by Thursday night's vice presidential debate, Panetta stopped by the magazine's midtown offices Thursday afternoon to detail his concerns to a Time editorial board gathering.

"Everybody knows what their iPhone can do, everybody knows what their computer can do, but I think there are too few people out there who understand the potential for the kind of attack that could cripple this country," Panetta said. "The American people just have to be made aware of that."

Panetta highlighted a series of attacks against U.S. companies, and also cited the so-called "Shamoon" virus attack on the Saudi Arabian state oil company, Aramco, that wiped out 30,000 of the companies computers two months ago. It created the image of a burning U.S. flag on the infected computers and "it basically burned them up," Panetta said. It marked, he said, a significant escalation in cyber warfare.

In the hour-long session with the magazine's editors, he also said:

– "We are facing the threat of a new arena in warfare that could be every bit as destructive as 9/11 — the American people need to know that. We can't hide this from the American people any more than we should have hidden the terrorism-attack threat from the American people."

– "The three potential adversaries out there that are developing the greatest capabilities are Russia, China, Iran."

– "Out of a scale of 10, we're probably 8. [But potential foes] are moving up on the scale – probably the others are about a 3, somewhere in that vicinity, but they're beginning to move up."

He also said the U.S. military is stepping up its offensive cyber war capability:

– "It has to be both. I think we have to develop the ability to conduct counter-operations against a country we know, or anticipate, that they're going to launch that kind of attack. So we have to have both defensive and offensive capabilities."

Beyond merely shutting down enemy systems, the U.S. military is crafting a witch's brew of stealth, manipulation and falsehoods designed to lure the enemy into believing he is in charge of his forces when, in fact, they have been secretly enlisted as allies of the U.S. military. The U.S. already has deployed such technology against Iran's nuclear program, the New York Times has reported.

Panetta said "potential aggressors" are already probing for weaknesses in U.S. cyber defenses. "They're beginning to exploit transportation systems, power systems, energy systems," he said. "Our concern is that in doing that kind of exploration, they're doing it for purposes of determining how could they attack."

The defense chief added that the Pentagon's still-fuzzy rules of engagement for waging war in cyber space are being tightened, and will allow the Pentagon to defend other U.S. networks, in and out of government, from such attacks. Major defense contractors see cyber defense as the next post-9/11 money pot – annual cyber spending is about $12 billion.

In his speech Thursday night before Business Executives for National Security from the hangar deck of the Intrepid Sea, Air and Space Museum, Panetta warned of cyber terrorists derailing U.S. passenger trains – as well as trains laden with lethal chemicals. He told Time's editors that both Congress and U.S. businesses have been hesitant to pass legislation – and make the investments necessary – to defend the nation's critical cyber infrastructure from attack. Part of the reason for speaking out, he said, is to generate public pressure on lawmakers to act.

That's one reason President Obama designated October as National Cybersecurity Awareness Month. Private-sector companies seem willing to wait for an "electronic Pearl Harbor" to justify the investments they would need to make to protect their info-infrastructure. But Panetta and others fear that could be too late.

"Government depends on these networks to defend this country," Army General Keith Alexander, chief of U.S. Cyber Command, told the U.S. Chamber of Commerce Oct. 4. "And it depends on the power grid to operate. So we have a vested interest in making sure that that works."

Panetta said his prior job – running the CIA – gave him a close-up look at the damage a cagey cyber warrior could do to the U.S. "I can tell you from my old job, the level of expertise that I saw – and I don't consider myself to be schooled in the art of knowing what the hell cyber systems [do] and how it all works –- I'm not close to being there — but I saw people that are extremely bright, extremely able. They can develop the kind of malware that has tremendous potential to bring down systems very effectively," he said, making clear the U.S. is exploring offensive cyber weapons. "Frankly, in my past capacity, having seen that potential — and now, as secretary of defense, I'm now beginning to see how that is beginning to get in to the arena of other countries that are saying: `Whoa, this has got some great potential.'"