In cyber attacks, the U.S. military is described as being what?

• A. Only victim
• B. Both victim and perpetrator
• C. Only perpetrator
• D. Neither

Answer: (B)

In cyber conflicts, a nation-state can play dual roles: as a victim and as a perpetrator. The U.S. military may be the target of cyber intrusions that disrupt operations, leak data, or degrade capabilities, which makes it a victim. At the same time, it possesses offensive cyber capabilities and may conduct operations to deter adversaries, degrade hostile networks, or gather information, which makes it a perpetrator. Attribution in cyberspace is often challenging, but the existence of both offensive capability and exposure to attacks means the same actor can be seen in both lights. That combination is why describing the U.S. military as both victim and perpetrator is the best characterization.