While Russia is the more urgent cyber threat, says Easterly, China could do more damage in the long term. As for non-state actors like ISIS carrying out major cyberattacks, there is "low probability, but high impact.” The bigger problem, she adds, may be nations that use cyber to do somewhat lawful things like collecting intelligence, but then use such practices for nefarious purposes. The US government has finally gotten serious about protecting itself from cyberattacks, but still needs cooperation from the private sector to drive down risk to the nation, Easterly explains, noting that the Cyber Incident Reporting for Critical Infrastructure Act will now require whoever operates critical infrastructure to report attacks coming from state and non-state actors.
Podcast: How the US will fight cyber wars
