Congress To Amend NDAA To Give DoD & NSA Greater 'Cyberwar' Powers

from the say-what-now dept

SEC. 954. MILITARY ACTIVITIES IN CYBERSPACE.



Congress affirms that the Department of Defense has the capability, and upon direction by the President may conduct offensive operations in cyberspace to defend our Nation, Allies and interests, subject to— (1) the policy principles and legal regimes that the Department follows for kinetic capabilities, including the law of armed conflict; and



(2) the War Powers Resolution (50 U.S.C. 1541 et seq.).

SEC. 954. MILITARY ACTIVITIES IN CYBERSPACE.



‘‘(a) AFFIRMATION.—Congress affirms that the Secretary of Defense is authorized to conduct military activities in cyberspace.



‘‘(b) AUTHORITY DESCRIBED.—The authority referred to in subsection (a) includes the authority to carry out a clandestine operation in cyberspace— ‘‘(1) in support of a military operation pursuant to the Authorization for Use of Military Force (50 U.S.C. 1541 note; Public Law 107-40) against a target located outside of the United States; or



‘‘(2) to defend against a cyber attack against an asset of the Department of Defense. ‘‘(c) RULE OF CONSTRUCTION.—Nothing in this section shall be construed to limit the authority of the Secretary of Defense to conduct military activities in cyberspace.’"

Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community. Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis. While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

Remember the NDAA? Yeah, for a variety of reasons that bill got a lot of attention last year -- mostly focused on the question of detainment of terrorists. But there are some other nuggets in the bill, including one tidbit about "military activities in cyberspace." The existing version of the NDAA does grant the Defense Department the ability to conduct such military activities, but only "upon direction by the President" and if the purpose is to "defend our Nation, Allies and interests," subject to existing laws.Here's the existing text:However, the House Armed Services Committee is getting ready to do a markup on the NDAA that includes a change to that section (section 954), which expands the powers of the Defense Department, and basically gives it broad powers to conduct any military actions online -- with it specifically calling outoperations online. Here's the text they want to substitute:Note a bunch of slightly sneaky things going on here. First, it gives blanket powers to the DoD, rather than saying it can only take actions on the President's direction. While we may not have much faith that the President wouldn't let the DoD do such things, giving such blanket approval upfront, rather than requiring specific direction is a pretty big change.Second, and perhaps more important, the new language specifically grants the DOD (and the NSA, which is a part of DOD) the power to conduct "clandestine operations." This is (on purpose) left basically undefined. Combine this with the fact that the "Authorization of Use of Military Force" is so broadly defined in the current government, this then grants the DOD/NSA extremely broad powers to conduct "clandestine" operations with little oversight. Related to this is that it removes the restriction that the DOD must take actions that are "subject to the policy principles and legal regimes that the Department follows for kinetic capabilities, including the law of armed conflicts." Instead it lets them use such powers, without these restrictions, against anyone declared an enemy under the AUMF (lots and lots of people) or in any effort to stop a cyberattack against the DOD -- which again you can bet would be defined broadly. This is a pretty big expansion of online "war" powers for the Defense Department, with what appears to be less oversight. And all done while people are looking the other way...

Filed Under: congress, cyberwar, dod, ndaa, nsa