CYBER INTELLIGENCE SECURITY- France has announced its first cyber-warfare army unit, aimed at increasing the country’s hacking skills as concerns grow in Europe and the United States about Russian capabilities.
Defence Minister Jean-Yves Le Drian (pictured) likened the impact of hacking on warfare to the effect of the first aircraft on conflicts in the early 20th century.
“The emergence of a new area, a new cyber-battlefield, must make us rethink profoundly our way of approaching the art of war,” Le Drian said as he unveiled a new doctrine for the army in northwest France.
Le Drian said that under the new approach a cyberattack could constitute an act of war, which would require an appropriate response from a new specialised unit known as Cybercom.
If hackers were identified as coming from a country that had failed to stop them, “the responsibility of this state could be called into question,” he said.
“Our offensive cyber-capabilities must allow us to breach the systems and networks of our enemies to cause damage, service suspensions or temporary or definitive neutralisations,” he added.
The new French force will also work to identify foreign hackers and help identify weaknesses in important military IT networks, such as those used to pilot drones.
France’s announcement mirrors, plans drawn up by Britain, which recently launched a new cyber-defence plan backed by 2.1 billion euros ($2.2 billion) of funding.
The French unit will begin and a team of up to 2,600 specialists will be created by 2019, Le Drian said.
As well as attacks on infrastructure or sensitive government computer networks, intelligence agencies are increasingly worried about the ability of hackers to spread propaganda or misinformation.
American media reported recently that the CIA had concluded that Russia sought to influence the US election in favour of Donald Trump by hacking the Democratic National Committee’s emails.
US Vice President Joe Biden has hinted that the US could make use of its newly enhanced digital arsenal after saying in October that Russia would be sent a message “at the time of our choosing”.
The allegations of Russian involvement were denied by Moscow, Trump’s camp and by WikiLeaks, which leaked embarrassing emails related to Trump’s Democrat challenger Hillary Clinton during the campaign.
The US concerns are shared in many western European nations, particularly in the Baltic countries bordering Russia. Allegations of state involvement in hacking have not been restricted to Russia.
The United States and Israel are thought to have been behind the Stuxnet worm that sabotaged Iran’s nuclear infrastructure in 2010, but the famous cyberattack has never been claimed.
Russia has said that it had uncovered plans by foreign intelligence services to carry out massive cyber-attacks targeting the country’s financial system.
Bernard Barbier, the former head of signals intelligence (SIGINT) between 2006 and 2014 at France’s foreign intelligence agency (DGSE), gave a speech at one of France’s top engineering schools in which he reflected on his career and imparted some of his wisdom to students.
He also said some things that he probably shouldn’t have, like confirming that France was behind the Animal Farm advanced persistent threat, commenting on the SIGINT capabilities of European allies, and reacting to the revelation that the US National Security Agency (NSA) had compromised the networks of the French presidency.
Recently, Barbier’s speech surfaced on https://www.youtube.com/watch?v=BRpmb8CHb54 but was quickly taken down. However, it was up long enough for French daily Le Monde to transcribe some of the highlights. Here they are, paraphrased and translated from the original French.
Bernard Barbier, ancien chef de la direction technique de la Direction générale de la sécurité http://www.lefigaro.fr/flash-actu/201…
1. Shouting At Americans
“I got the order from Mr. Sarkozy’s successor [current President Hollande] to shout at the Americans … it was a great moment in my professional career”
Barbier recalls that he was first informed of a possible compromise at the Élysée palace in 2012, when a former colleague working IT security at the palace reached out for analysis on a piece of malware. With the help of a new metadata capability the French obtained in 2012 and Edward Snowden’s revelation of the NSA’s QUANTUM capability in 2013, Barbier’s staff concluded that the attack on the Élysée was the work of the United States. Barbier recalls:
I received the order from Mr. Sarkozy’s successor to go to shout at the Americans. It was on April 12, 2013 and it was really a great moment in my professional career. We were convinced it was them. At the end of the meeting, Keith Alexander [director of the NSA from 2005 to 2014] was not happy. While we were in the bus, he told me he was disappointed because he never thought they would have been caught. He added: “You are pretty good.” As allies, we didn’t spy on them. The fact that the Americans broke this rule took us by surprise.
2. “And yes, it was a Frenchman”
In 2014, Le Monde published documents from the Snowden archive revealing that Canada’s SIGINT agency, the Communications Security Establishment (CSE), suspected that Paris was behind a cyber espionage campaign that began in 2009 targeting Iran’s nuclear program but also targeting computers in Canada. CSE was able to attribute the campaign to the French based on some reverse engineering revealing that the malware developer used references to a French children’s cartoon character, Babar the Elephant. That reference also led Kaspersky to baptise the malware Animal Farm. Barbier recalls that CSE “concluded that he [the malware author] was French. And yes, it was a Frenchman.”
3. Merger with Germany’s BND
The pipe-dream of united European intelligence agency and the possibility of merging French and German intelligence. In one of the more surprising aspects of Barbier’s speech, he mused about the possibility of creating a European intelligence agency but quickly dismissed the notion, noting that only a fusion of French and German intelligence agencies would be feasible.
It is impossible to build a single European intelligence agency with twenty-eight countries that don’t have the same capabilities or the same culture. The best, by population size, are the Swedes. The Italians are bad. The Spanish are a bit better, but don’t have the capabilities. And the Brits, with 6,500 staff at GCHQ [Government Communications Headquarters, the UK SIGINT agency] are very good, but are they European? And France has the strongest technical capabilities for intelligence collection in continental Europe.
That leaves the Germans, who are solid partners. I’ve worked a lot with them, sometimes transmitting our knowhow and bringing them some technical capability. German and French engineers work very well together. In contrast, a British engineer with a French engineer is complicated.
To be more effective, I told French politicians that we had to merge the BND [the German foreign intelligence agency] and the DGSE. It’s the only solution. It would be a an agency with 15,000 staff. The NSA has 60,000 people, and the SIGINT section of the DGSE is 3,000 agents. But the French politicians never followed up.
Merging the BND and the DGSE would have made for some awkward conversations given that last year, news reports revealed that the BND had been spying on France.
4. Snowden is a traitor that “rather helped us”
Finally, Barbier gives his opinion on Edward Snowden, presumably in response to a question from the audience.
“For me, Snowden is a traitor to his country, but he has nothing to do with Julian Assange. The Americans made Snowden, who was an external contractor, a systems administrator. Those who do that job in the DGSE are bureaucrats that have between fifteen and twenty years of seniority. The possibility of having a Snowden in France is very low. Snowden showed that espionage between allies existed and that Americans compromised hardware, such as that sold by Cisco and poses a problem for technological independence. In that sense, Snowden rather helped us.”