En garde! 'Cyber-war has begun' – and France will hack first, its defence sec declares

Parly-vous cyber-security? No plan to surrender, military bug bounty coming

FIC2019 France’s defence secretary Florence Parly today declared: “Cyber war has begun.”

And she said the Euro nation's military will use its “cyber arms as all other traditional weapons… to respond and attack,” as well as setting up a military bug bounty program.

Parly made her pledges during a speech to the Forum International de Cybersecurite (FIC) in the northern French town of Lille. Her speech was on a topic that most Western countries shy away from addressing directly in public.

“The cyber weapon is not only for our enemies,” said France’s defence secretary this afternoon, speaking through a translator. “No. It’s also, in France, a tool to defend ourselves. To respond and attack.”

Her remarks will be seen as moving the debate about offensive cyber capabilities – not just so-called “active defence” but using infosec techniques as another weapon in the arsenal of state-on-state warfare – to a new level. Coming from a prominent NATO member and EU country, it could set the tone for future discussion of nation states' offensive cyber doctrines.

As well as having “published the main lines of that [offensive] doctrine” of the use of cyber weapons last week, Parly called for “more co-operation and partnerships and convergence with our European allies because if a threat is over the heads of all of us, that’s the cyber threat and it has no border.”

"Today I would like to make a proposition to our defence industrialists," she continued. "Let’s unite our strengths to protect, from the cyber threat, our supply chain."

Parly also revealed that France’s Ministry of Defence (MoD) has established no less than a military bug bounty program, saying: “When I talk about trust it goes very far. A partnership has been done between [France’s military] cyber command and the startups. That is called Yes We Hack. I announce it.

South Korea reckons mystery hackers cracked open advanced weapons servers


"At the end of February we are going to announce the first bug bounty of the MoD. Ethical hackers were recruited in the cyber operational research [department] and they’re going to track down the faults of our systems. If they find some they will be rewarded for it.”

Britain, which prides itself on its defensive hacking capabilities, as well as taking a much more muted line about its offensive cyber capabilites, tends to shy away from talking about its own hacking plans openly. That said, the UK's abilities in the area have been quietly acknowledged by officials.

France’s new approach to its industrial supply chain will raise some eyebrows on the far side of the English Channel as well. Parly said she “intends to engage” with SMEs to further develop France’s cyber defences, adding: “we need to create links between the MoD and our defence industrialists, between ministry and SMEs, and we need to work for a [EU] of cyber defence.”

In contrast, Britain’s Ministry of Defence spends a relatively small £80m a year on funding good ideas from SMEs, with the vague hope that the better ones will be adopted by the ministry for frontline use. While cyber forms a part of the Defence Innovation Initiative, France appears to have gone all in with a dedicated push to develop offensive cyber capabilities in full partnership with its private sector.

This is a sharp contrast to the UK, where large defence contractors (“primes” in the lingo) are the ones snapping up contracts for major military cyber work. Whether, in the post-Brexit world, the UK will change tack and adopt elements of the French approach remains to be seen. ®

Send us news

STMicroelectronics and GlobalFoundries to build wafer fab in France

US and Swiss companies to receive 'significant' French investment

Large Hadron Collider experiment reveals three exotic particles

Tetraquarks and other discoveries as CERN revs up for Run 3

Google location tracking to forget you were ever at that medical clinic

Plus: Cyber-mercenaries said to target legal world, backdoor found on web servers, and more

Beijing probes security at academic journal database

It's easy to see why – the question is, why now?

Israeli air raid sirens triggered in possible cyberattack

Source remains unclear, plenty suspect Iran

France levels up local video game slang with list of French terms to replace foreign words

Goodbye cloudy retro-gaming, bonjour ‘rétrojeu video en nuage’

Hackers weigh in on programming languages of choice

Small, self-described sample, sure. But results show shifts over time

Stolen-data market RaidForums taken down in domain seizure

Suspected admin who went by 'Omnipotent' awaits UK decision on extradition to US

Google must pay €150 million fine to French Competition Authority, court orders

'Opaque and difficult' ad rules cost biz 20 hours of annual profit

Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

Hitting big targets, untouchable, technically proficient. Who will it inspire next?

American diplomats' iPhones reportedly compromised by NSO Group intrusion software

Reuters claims nine State Department employees outside the US had their devices hacked

Bepanted shovel-toting farmer wins privacy payout from France TV

Unwitting star of #Slipgate viral images awarded reduced damages, tempts Streisand effect