Despite probing and trolling, a Russian cyberattack is the dog that did not bark in Tuesday's midterm elections. This is the assessment of the Department of Homeland Security, which says there were no signs of a coordinated campaign to disrupt U.S. voting.
This welcome news raises a relevant and important question: Were cyber adversaries actually deterred from infiltrating voter databases and changing election results? That was a very real fear in the 2016 presidential election.
In September, the White House unveiled a new policy aimed at deterring Russia, China, Iran and North Korea from hacking U.S. computer networks in general and the midterms in particular. National Security Adviser John Bolton acknowledged as much last week when he said the U.S. government was undertaking "offensive cyber operations" aimed at "defending the integrity of our electoral process."
There aren't many details. Reportedly this entailed sending texts, pop-ups, e-mails and direct messages warning Russian trolls and military hackers not to disrupt the midterms. U.S. officials tell me there is much more going on that remains classified.
It is part of a new approach from the Trump administration that purports to unleash U.S. Cyber Command to hack the hackers back, to fight them in their networks as opposed to America's. Bolton has said the policy reverses previous restrictions on military hackers to disrupt the networks from which rival powers attack the U.S.
Sometimes this is called "persistent engagement" or "defend forward." And it represents a shift in the broader U.S. approach to engaging adversaries in cyberspace. Jason Healey, a historian of cyber conflicts at Columbia University's School for International and Public Affairs, says the administration's cyber posture is the most significant change in this policy since 1998, when the Pentagon first defined what computer network attacks were.
Cyber offense is not new for the U.S. (remember the Stuxnet attack on Iran's nuclear centrifuges). But those attacks, which were considered intelligence operations, were approved at the highest levels of the U.S. government. The difference now is that America's cyber warriors will routinely try to disrupt cyberattacks before they begin.
This approach is also a form of deterrence, which is a peculiar concept when applied to cyber conflicts. Compare it to nuclear deterrence, where the objective is to never use the weapon: You nuke us, we nuke you. In cyberspace, the weapons are constantly being deployed. The efficacy of malware or implants in an adversary's network deteriorates over time, because a hole or exploit can eventually be patched.