Just before the American-led strikes against Libya in March, the Obama administration intensely debated whether to open the mission with a new kind of warfare: a cyber offensive to disrupt and even disable the Qadhafi government's air-defence system, which threatened allied warplanes.
While the exact techniques under consideration remain classified, the goal would have been to break through the firewalls of the Libyan government's computer networks to sever military communications links and prevent the early-warning radars from gathering information and relaying it to missile batteries aiming at North Atlantic Treaty Organisation (NATO) warplanes.
But administration officials and even some military officers balked, fearing that it might set a precedent for other nations, in particular Russia or China, to carry out such offensives of their own, and questioning whether the attack could be mounted on such short notice. They were also unable to resolve whether the President had the power to proceed with such an attack without informing Congress.
In the end, American officials rejected cyberwarfare and used conventional aircraft, cruise missiles and drones to strike the Libyan air-defence missiles and radars used by Col. Muammar el-Qadhafi's government.
This previously undisclosed debate among a small circle of advisers demonstrates that cyber offensives are a growing form of warfare. The question the United States faces is whether and when to cross the threshold into overt cyberattacks.
Last year, a Stuxnet computer worm apparently wiped out a part of Iran's nuclear centrifuges and delayed its ability to produce nuclear fuel. Although no entity has acknowledged being the source of the poisonous code, some evidence suggests that the virus was an American-Israeli project. And the Pentagon and military contractors regularly repel attacks on their computer networks — many coming from China and Russia. The Obama administration is revving up the nation's digital capabilities, while publicly emphasising only its efforts to defend vital government, military and public infrastructure networks.
“We don't want to be the ones who break the glass on this new kind of warfare,” said James Andrew Lewis, a senior fellow at the Center for Strategic and International Studies, where he specialises in technology and national security.
The Osama attack
That reluctance peaked during planning for the opening salvos of the Libya mission, and it was repeated on a smaller scale several weeks later, when military planners suggested a far narrower computer-network attack to prevent Pakistani radars from spotting helicopters carrying Navy Seal commandos on the raid that killed Osama bin Laden on May 2.
Again, officials decided against it. Instead, specially modified, radar-evading Black Hawk helicopters ferried the strike team, and a still-secret stealthy surveillance drone was deployed.
“These cybercapabilities are still like the Ferrari that you keep in the garage and only take out for the big race and not just for a run around town, unless nothing else can get you there,” said one Obama administration official briefed on the discussions.
The debate about a potential cyberattack against Libya was described by more than a half-dozen officials, who spoke on the condition of anonymity because they were not authorised to discuss the classified planning.
In the days ahead of the American-led airstrikes to take down Libya's integrated air-defence system, a more serious debate considered the military effectiveness — and potential legal complications — of using cyberattacks to blind Libyan radars and missiles.
“They were seriously considered because they could cripple Libya's air defence and lower the risk to pilots, but it just didn't pan out,” said a senior Defence Department official.
After a discussion described as thorough and never vituperative, the cyberwarfare proposals were rejected before they reached the senior political levels of the White House.
Gen. Carter F. Ham, the head of the military's Africa Command, which led the two-week American air campaign against Libya until NATO assumed full control of the operation on March 31, would not comment on any proposed cyberattacks. In an interview, he said only that “no capability that I ever asked for was denied.”
Senior officials said one of the central reasons a cyber offensive was rejected for Libya was that it might not have been ready for use in time, given that the rebel city of Benghazi was on the verge of being overrun by government forces.
Not an easy strategy
While popular fiction and films depict cyberattacks as easy to mount — only a few computer keystrokes needed — in reality it takes significant digital snooping to identify potential entry points and susceptible nodes in a linked network of communications systems, radars and missiles like that operated by the Libyan government, and then to write and insert the proper poisonous codes. Had the computer-network attack gone ahead, administration officials said they were confident it could have been confined to Libyan networks and offered high promise of disrupting the regime's integrated air-defence system. In describing its actions to Congress and the American people, the White House argued that its use of conventional forces in the Libyan intervention fell short of the level of hostilities requiring In the end, Libya's air-defence network was dangerous but not exceptionally robust. American surveillance identified its locations, and it was degraded through conventional attacks. ( Charlie Savage contributed reporting .) — New York Times News Service
