{"id":27354,"date":"2019-07-25T13:45:24","date_gmt":"2019-07-25T13:45:24","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2019\/07\/25\/is-pearl-harbor-still-a-valid-cyber-metaphor\/"},"modified":"2026-08-18T20:58:10","modified_gmt":"2026-08-18T20:58:10","slug":"is-pearl-harbor-still-a-valid-cyber-metaphor","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/07\/25\/is-pearl-harbor-still-a-valid-cyber-metaphor\/","title":{"rendered":"Is \u2018Pearl Harbor\u2019 still a valid cyber metaphor?"},"content":{"rendered":"\n

Former Secretary of Defense Leon Panetta recently renewed his warnings about a looming \u201ccyber Pearl Harbor.\u201d Such a scenario, he said, could involve cyberattacks on critical infrastructure \u201ccost[ing] lives\u201d and \u201cparalyz[ing] our country.\u201d It is a warning he has trumpeted since at least 2012.<\/p>\n\n\n\n

Others have foretold of an impending cyber Pearl Harbor for more than two decades. These warnings underscore that the Pearl Harbor metaphor continues to have great purchase in the U.S. cybersecurity debate. Certainly, improving critical infrastructure cybersecurity is an important priority. Nonetheless, continued framing of cybersecurity challenges in terms of cyber Pearl Harbor-like doom scenarios is a dangerous distraction.<\/p>\n\n\n\n

“In a recent study<\/a>, we examined uses of the Pearl Harbor metaphor in the United States cybersecurity debate from its earliest appearance in 1991 until just before the Russian cyberattack on the 2016 U.S. presidential election.\u201d Over time, cyber Pearl Harbor has had a largely stable meaning focused on catastrophic physical impacts from cyberattacks on critical infrastructure. Though academic and industry experts have criticized this framing, government officials have continued to warn of a cyber Pearl Harbor and news media have uncritically circulated their claims. This is despite the fact that these claims are often ambiguous and lack evidence about who might carry out such an attack. Just months before the 2016 Russian cyber attacks, even Director of National Intelligence James Clapper told Congress that \u201ccyber Armageddon\u201d-like scenarios were not the real threat.<\/p>\n\n\n\n

He was right. The 2016 Russian operations looked nothing like the apocalyptic cyber Pearl Harbor that has framed 25 years of cybersecurity debate in the United States.<\/p>\n\n\n