Thread by @jseldin

"#Russia|n cyber forces, as well as their traditional forces, underperformed" during the initial invasion of #Ukraine in February, @DeptofDefense's @MiekeEoyang tells #AspenCyberSummit

"Russia [in #cyberspace] was not prepared for the conflict to go on as long as it did"

In #Ukraine, "the context of the armed conflict dwarfs the cyber impacts" per @MiekeEoyang

"Things that Russians tried to disrupt via cyber could not actually did not have the strategic impact that they wanted & they sought to destroy those things physically"

"When you think about the cybersecurity of data centers for example it's not just abt patching & closing those things,it is abt the physical security of those data centers" per @MiekeEoyang

"It is abt whether or not those data centers are within the range of #Russia|n missiles"

Lesson from #Ukraine - "We also have to think abt what it means for Ukrainians to be able to continue to communicate w/the world" per @MiekeEoyang "The ability of average Ukrainians to tell their story on TikTok, on Twitter, on Facebook to share video..."

"...has denied #Russia the information environment that they want to prosecute this conflict" per @MiekeEoyang

"This is the 1st conflict that we're seeing where the ability of people to tell their stories as their experiences of armed conflict is very different" per @MiekeEoyang

"The information space here is a very different environment than what we've seen before"

"You can see #Russia trying to take away from #Ukraine the ability to control its own fate & its traffic by trying to reroute traffic thru Russia as they take over territory" per @MiekeEoyang

#cyber lessons - #Ukraine

#Ukraine lessons/questions-"How do we ensure that they can continue essential government function as you look at attempts to destroy the kind of essential data that makes a country a country..." per @MiekeEoyang

"... such as such as passport records, birth records, property records, as you see #Russification efforts happening in occupied territories" per @MiekeEoyang

"What do governments need to be able to continue to operate its essential function?"

New twist - "There is a tremendous influence of non-state actors, both the private sector's assistance to #Ukraine, but also individuals who have not wearing the uniform of any particular country who are coming to the assistance of one side or another" per @MiekeEoyang

"In cyber, you do see non-state actors who have capability that can rival that of state actors, & so it does mean that it becomes a very complicated thing to defend against" per @MiekeEoyang

"Not only that, it complicates attribution..."

"...bcs then how do you engage in deterrence or response if you are not sure that the ppl that have attacked you are state actors or non-state actors?" per @MiekeEoyang

"That forces a little slowdown in the cyber response process as as you try to unwind that to make sure that you are not inadvertently taking a step in response against someone who didn't actually come at you in the first place" per @MiekeEoyang

"I do think that we are seeing what happens when when #Russia is forced to make choices abt how it allocates the cyber capacity that it has..." per @MiekeEoyang

"I don't think any of us know what the escalation calculus is going to be [for #Russia], at what point we might be having to really think abt attacks on US infrastructure" per @MiekeEoyang "But it is really important that we are taking all the steps that we can to prepare"