Security

En garde! 'Cyber-war has begun' – and France will hack first, its defence sec declares

Parly-vous cyber-security? No plan to surrender, military bug bounty coming

33 Got Tips?

FIC2019 France’s defence secretary Florence Parly today declared: “Cyber war has begun.”

And she said the Euro nation's military will use its “cyber arms as all other traditional weapons… to respond and attack,” as well as setting up a military bug bounty program.

Parly made her pledges during a speech to the Forum International de Cybersecurite (FIC) in the northern French town of Lille. Her speech was on a topic that most Western countries shy away from addressing directly in public.

“The cyber weapon is not only for our enemies,” said France’s defence secretary this afternoon, speaking through a translator. “No. It’s also, in France, a tool to defend ourselves. To respond and attack.”

Her remarks will be seen as moving the debate about offensive cyber capabilities – not just so-called “active defence” but using infosec techniques as another weapon in the arsenal of state-on-state warfare – to a new level. Coming from a prominent NATO member and EU country, it could set the tone for future discussion of nation states' offensive cyber doctrines.

As well as having “published the main lines of that [offensive] doctrine” of the use of cyber weapons last week, Parly called for “more co-operation and partnerships and convergence with our European allies because if a threat is over the heads of all of us, that’s the cyber threat and it has no border.”

"Today I would like to make a proposition to our defence industrialists," she continued. "Let’s unite our strengths to protect, from the cyber threat, our supply chain."

Parly also revealed that France’s Ministry of Defence (MoD) has established no less than a military bug bounty program, saying: “When I talk about trust it goes very far. A partnership has been done between [France’s military] cyber command and the startups. That is called Yes We Hack. I announce it.

South Korea reckons mystery hackers cracked open advanced weapons servers

READ MORE

"At the end of February we are going to announce the first bug bounty of the MoD. Ethical hackers were recruited in the cyber operational research [department] and they’re going to track down the faults of our systems. If they find some they will be rewarded for it.”

Britain, which prides itself on its defensive hacking capabilities, as well as taking a much more muted line about its offensive cyber capabilites, tends to shy away from talking about its own hacking plans openly. That said, the UK's abilities in the area have been quietly acknowledged by officials.

France’s new approach to its industrial supply chain will raise some eyebrows on the far side of the English Channel as well. Parly said she “intends to engage” with SMEs to further develop France’s cyber defences, adding: “we need to create links between the MoD and our defence industrialists, between ministry and SMEs, and we need to work for a [EU] of cyber defence.”

In contrast, Britain’s Ministry of Defence spends a relatively small £80m a year on funding good ideas from SMEs, with the vague hope that the better ones will be adopted by the ministry for frontline use. While cyber forms a part of the Defence Innovation Initiative, France appears to have gone all in with a dedicated push to develop offensive cyber capabilities in full partnership with its private sector.

This is a sharp contrast to the UK, where large defence contractors (“primes” in the lingo) are the ones snapping up contracts for major military cyber work. Whether, in the post-Brexit world, the UK will change tack and adopt elements of the French approach remains to be seen. ®

Sign up to our NewsletterGet IT in your inbox daily

33 Comments

Keep Reading

Stuck inside with time on your hands? The US govt would like to remind you it's paying $5m for Nork hacking scalps

US-Cert issues new report on misdeeds of North Korean groups

Want to stay under the radar for a decade or more? This Chinese hacking crew did it... by aiming for Linux servers

BlackBerry says Winnti-derived group is playing it quiet with rootkit attacks

China tells America, with a straight face, it will absolutely crack down on hacking and copyright, tech blueprint theft

Wow, it's all coming up Trump right now, huh?

San Francisco trial of Russian bloke extradited and accused of hacking LinkedIn, Dropbox, Formspring stalls again amid pandemic lockdown

Case that has rumbled on since 2016 may have to be started again from scratch

Senator demands deep probe into spyware-for-cops after NSO Group touts hacking toolkit to American plod

Updated 'Aggressive oversight' needed, Congress urged

Feds cuff Detroit man for allegedly hacking University of Pittsburgh Medical Center

Data pilfered from PeopleSoft HR database sold to tax fraudsters, it is claimed

Disgraced ex-Kaspersky guy made me do it, says bloke in Russian court on hacking charges

Oh no I didn't, says disgraced ex-Kaspersky guy

Among those pardoned by Trump this week: Software maker ex-CEO who admitted hacking into rivals' systems

There's always a tech angle

FBI called in to investigate 2018 Mountain State mobile voting system hacking

'West Virginia, mobile ballots, country votes, nearly pwned'

What do you get when you allegedly mix Wireshark, a gumshoe child molester, and a court PC? A judge facing hacking charges

Beak denies wrongdoing in baffling malware probe case

Tech Resources

Building an Incident Response Plan

A well-crafted IR plan will help your organization perform at its best by preparing for the worst.

Latency is the New Outage

More organizations are tying their future success to digital and online business.

Phishing Campaign Targets Multiple U.S., International Government Procurement Services

Anomali researchers have identified a credential harvesting campaign.

An Executive's Guide to Integrating SecOps and NetOps

Read this white paper for the five key value drivers of an integrated SOC and NOC, as well as clear strategies to help you move forward.