Intelligence the key to understanding Russia’s intentions.

Intelligence the key to understanding Russia’s intentions.

Intelligence the key to understanding Russia’s intentions.

By Philip Ingram MBE

Last week U.S. national security advisor Jake Sullivan said that the U.S. is not certain that Putin has made a final decision to invade Ukraine. But “it may well happen soon.” Ben Wallace the UK Secretary of State for Defence told The Sunday Times that “Russia invading Ukraine is “highly likely” and warned that the military presence on the border has now reached such a size that they could “launch an offensive at any time”.”  Wallace has cancelled a planned long weekend holiday!

The question on everyone’s lips is how, how could we know what Russia is going to do? The only way to answer that question is through intelligence and the overriding caveat is that intelligence is not an exact science.  However, there are certain indicators that would point more to an invasion than a bluff and it is these I will explore in more detail.

So how do we know what is going on at the moment?  I examine the intelligence gathering effort in more detail in my blog here: https://greyharemedia.com/russia-and-ukraine-an-intelligence-goldmine/  However, there are a few things I want to pull out to set that background to this analysis.  The first is how do we know there are over 100,000 troops with the right equipment to invade Ukraine?

The first thing is Open-Source Intelligence or OSINT. Russia has declared it is carrying out manoeuvres in Belarus, in training areas around the Ukrainian border, in the Black Sea so we have definitively from the Russian Government that they are doing something. Next, we have what is being posted on special media; videos of convoys, trains full of equipment, soldiers leaving their home bases and more.

What must be considered with anything from open source is it could be being posted deliberately to mislead. Sun Tzu the infamous Chinese 6th century general and philosopher said in his book the Art of War, “All warfare is based on deception. Hence, when we are able to attack, we must seem unable; when using our forces, we must appear inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near.”  The Russians have a doctrine called маскировка (maskirovka) which is all about ‘masking’ or deception and is central to all they do; they follow the philosophy laid down by Sun Tzu.

Analysis of the vehicle and aircraft types, badges on soldiers’ uniforms, vehicle registrations and symbols can identify units and therefore where they are coming form, geo-referencing the imagery and from that, by comparing with historical data, if this is usual activity.  Alongside that, private social media posts by Russian military personnel will be looked at for indicators.  Again, маскировка (maskirovka) must be considered.

This OSINT will be fused with imagery intelligence from satellites and Measurement and Signature Intelligence (MASINT) gathered from Satellites, Drones and Fixed Wing Aircraft flying along the borders, staring into Russia and Belarus with specialist radars.  These radars can see anything in the open including equipment hidden in forests and or under camouflage nets and their numbers can be counted regularly to see and changes. It can also be used to identify what types of equipment there are and that in turn will indicate the unit or formation.  The same radars can track convoys and trains moving in real time, distinguishing military equipment from civilian traffic.  Other sensors can see if equipment has moved recently and how long ago often being able to identify where it has moved to.

What is key here is identifying what formations are where and what they are doing? So, if the deployment is being billed as just training on home territory, are all the formations and units participating in that training, what are the ones with the best levels of training and the best equipment’s doing as not every unit or formation is equal? What is happening to the unit and formations logistic tails as they move and train and do those logistic tails match what is a norm for practice manoeuvres or are they larger? (You would not use as much ammunition on manoeuvres as you would need for operations, or as many medical facilities, or as many spare parts for armoured vehicles, so are these natures pre dumped and if so, where?).

Next will be looking at supporting units and formations, communications networks, air defence, air support and artillery as well as Intelligence, surveillance, and reconnaissance (ISR) capabilities. The questions are what has been deployed to where and with what? For purely manoeuvres you do not need large numbers of live anti-aircraft missiles, or the artillery ammunition stocks you would need for offensive operations, or the same balance of ISR assets or the communications networks needed to control multi levels of ground offensive capabilities, and integrate it with air support, ISR feeds and logistic networks over the same geographical footprints.

Satellites, RC135, JSTARS and Global Hawk and other surveillance platforms will be hoovering up all of the information needed to work all of this out. Networks need to be tested, comms checked, radars positioned and tested, aircraft systems checked. No matter how good your comms plans are at suppressing emissions, you can never supress them all. Each emission is an indicator!

Air capability will play an important role, for manoeuvres you need a lot less than you would need for offensive operations and different types and certainly different weapons. Numbers and types will be critical. The first thing any Russian offensive operation would want to do is SEAD, suppression of enemy air defence (AD), i.e. destroy Ukraine’s ability to track and shoot down Russia’s aircraft so Ukrainian air assets could be targeted and then ground offensives begin.

SEAD would be carried out through a combination of Special Forces, Attack Helicopter, indirect fire usually from long range missiles and specialist SEAD aircraft as well as ground based and air based Electronic Warfare (jamming) capabilities. Where are the assets needed to do this and how ready are they and what are they equipped with?

These capabilities would need to ensure safe corridors to all Ukrainian air assets and ground formations were safely opened, so even if there were a geographically limited invasion of Ukraine, AD and air assets across the whole country would have to be targeted.  It would be highly unusual for these assets to be grouped and deployed in sufficient numbers just for manoeuvres.

Alongside all of these physical indicators, communications will be being listened to, whether that is over military communications means or civilian means, the technology to intercept and often decode exists. This will give a clear understanding of the quality of military communications, readiness of units and formations and some will give indications of intent. However, communications can also be used for маскировка (maskirovka).

Adding another layer on top of this are the Human intelligence (HUMINT) assets, at the strategic level running agents into the decision-making organisations in Moscow, military command headquarters and elsewhere and at the more tactical level, people reporting what is going on on the ground. Good HUMINT assets can get a real understanding of thinking and intent but getting good HUMINT agents with the right access is a massive challenge.

What must be considered at all times is that lovely word маскировка (maskirovka) – it could all be a huge expensive bluff, we have to remember that during the Second World War in preparation for D Day the allies had Operation Fortitude where amongst other things they created a fake army with a real commander, fake tanks, fake aircraft, fake radio transmissions, and fake spies with fake plans delivered to the Germans in a novel way through Operation Mincemeat. We knew what the Germans were looking for and provided it to them. The Russians know what we are looking for. That is partially why the intelligence game is very complex.

However, the subtle military indicators, with the sophisticated collection capabilities we have today compared to what existed during WW2 will give a much clearer picture of readiness and intent. This is what our politicians are being briefed and for them to order citizen’s out of the country and for the Defence Secretary to cancel his personal holiday, the indications supplest an invasion is more likely than not.

I have examined the why and what the possible objectives could be in another blog here: https://greyharemedia.com/what-is-driving-putins-thinking-on-ukraine/. My conclusions today remain as they were when I wrote that. There are so many other possible indicators such as status and loading of Russian Naval vessels, the defensive posture of the Kaliningrad Oblast and around Russian Naval bases in Syria, the Northern, Baltic, and Pacific fleet bases, but to examine them all would be a book.   We are seeing one of the most dangerous, complex political and military events in Europe since the Cold War or even before that.

Philip INGRAM MBE is a former Colonel in British Military Intelligence and was a senior military planner, he is available for comment.

 

 

Sun Tzu and the Art of Fake News

Sun Tzu and the Art of Fake News

by Philip Ingram MBE

“That is #FakeNews” is one phrase that has rocketed to fame last year. President Trump’s legacy has already been left in Twitter land but why has it come to the fore, is it new and more importantly is it something that individuals or enterprise should be concerned about?  Philip Ingram MBE  takes a look at fake news, but with a 6th century twist.

There are elements of the press who seem to suggest that fake news is something new, it isn’t, and it has its roots back to the 6th century, but before I delve that far back I want to take a quick look to only 74 years ago. The Second World War shows just how important “fake news” was to the war effort; fake news, when targeted for an effect is also known as Propaganda. William Brooke Joyce, nicknamed Lord Haw-Haw, an American-born, Anglo-Irish Fascist who became the Nazi propaganda broadcaster to the United Kingdom during World War II was probably the most famous mouth of fake news, but the Japanese had English speaking female broadcasters who were nicknamed Tokyo Rose.

The use of fake news or propaganda was not limited to the Germans or Japanese and arguably the greatest military success of the Second World War, D Day, was enabled by fake news through an operation called Operation Fortitude.  With this being linked to a military operation this is where I want to bring in 6th century teachings.

Sun Tzu the 6th century Chinese general, military strategist, and philosopher, arguably the greatest military tactician and strategic thinker ever, said in his book the Art of War, “All warfare is based on deception. Hence, when we are able to attack, we must seem unable; when using our forces, we must appear inactive; when we are near, we must make the enemy believe we are far away; when far away, we must make him believe we are near.” His teachings have stood the test of time!

Operation Fortitude was a massive deception operation conducted by the Allied Forces to lead the Germans to believe that they would be landing in Pas-de-Calais and Norway, masking the true invasion through Normandy.

The aim was also to make them believe that the Normandy landings in May 1944 and in the south of France in June 1944 were mere diversions, so that the German army would concentrate its troops in the wrong place. The German authorities clung to their belief that the landing would occur in Pas-de-Calais right until September 1944.  Operation Fortitude held onto the principals set out so eloquently by Sun Tzu. The bluff worked but highlights how a country with extensive national intelligence assets looking at a situation unfolding, can be deceived.

The Russian term маскировка (maskirovka) literally masking, was defined in the International Dictionary of Intelligence from 1990 as the Russian military intelligence (GRU) term for deception. Vladimir Putin would have “grown up” in an organisation where maskirovka was a normal part of everyday thinking.  At every level of my military training we studied maskirovka, so imagine my surprise when Robert Hannigan, the ex-director of the UK spy agency CGHQ, said of the Russian threat in an interview this year, ‘We didn’t see Russian use of disinformation coming‘.  It clearly demonstrates a naivety with the UK’s senior intelligence officials, charged with keeping our politicians abreast of the threat to that which underpins our way of life, democracy.

This failure highlights that those self-same senior intelligence officials have forgotten one of Sun Tzu’s most famous quotes. “If you know your enemies and know yourself, you will not be imperilled in a hundred battles; … if you do not know your enemies nor yourself, you will be imperilled in every single battle.”

Should we be worried? Well in my professional opinion, I think we should be extremely worried.  This is not just something targeted country on country, it is being exploited by terrorists and so-called ISIS are masters at it, it is being exploited to gain commercial advantage especially when rumours can be generated in the money markets, huge sums can be gained, or lost.

In May last year many respected media outlets reported concerns by the US Securities and Exchange Commission (SEC) over false reporting.  The FT outlined that the regulators were concerned that fake news was affecting investment decisions and reported evidence that seemingly independent outlets were being paid to promote stories.  They reported the SEC as saying, “keep in mind that fraudsters may generate articles promoting a company’s stock to drive up the stock price and to profit at your expense.

Supporters of so called ISIS are very quick to post across their networks details and pictures from any attack, thereby taking de facto responsibility in the eyes of their supporters even before any official statements are released.  This has the effect of stimulating potential copycat or other attacks as well as giving “oxygen” to their terror message, to paraphrase Margaret Thatcher. The manipulation of media messaging is extensively used by todays terror organisations.

The one factor that enables fake news to have such a rapid impact today is control, or lack of it.  Operation Fortitude was a carefully orchestrated national plan controlled at the highest levels, so all messaging was coherent and worked to a common aim. Today, fake news can be delivered to millions of people at the click of a button via social media and the average person in the street can send a message that the President of the US may read personally, without it going through his normal staffing and advisory chain.  The power of social media is phenomenal.

The Russians continue to use maskirovka as part of their global engagement techniques. We are already seeing proof of their involvement in the US elections and likely in the UK Brexit referendum and more.  Sun Tzu highlighted how this works when he said, “Speed is the essence of war. Take advantage of the enemy’s unpreparedness; travel by unexpected routes and strike him where he has taken no precautions.”  Remember, Robert Hannigan said he didn’t see it coming and those unexpected routes were Facebook, Twitter, big data manipulation, main stream press and good old fashioned human influence, powered by the internet.

Arguably Kim Jong Un from North Korea knows how to play President Trump using Sun Tzu.  As the 6thcentury tactician said, “If your opponent is temperamental, seek to irritate him. Pretend to be weak, that he may grow arrogant. If he is taking his ease, give him no rest. If his forces are united, separate them. Attack him where he is unprepared, appear where you are not expected.” It is this last line that is keeping the world’s breath held.  Kim Jong Un’s understanding of President Trump’s temperament is clearly excellent when he applies Sun Tzu’s principal, “If your opponent is of choleric temperament, seek to irritate him.” Trump gets irritated easily by ‘Rocket Man.’

With the ease of spread of fake news and its ability to influence, it is something that enterprise should be concerned about.  The instability caused by state on state activity is one thing but there is clear evidence of state on enterprise actions in cyberspace with the theft of IP. Fake news is another cyber enabled activity and the potential for enterprise on enterprise use of fake news is growing.

As an intelligence officer looking at a threat you ask 2 questions.  The first, does the capability exist and the answer is yes.  The second, is there intent to use it, and again the proof is that the answer is yes. Now is the time for risk managers in companies to ensure the impact of Fake News is something they plan for, remember it is a cyber enabled threat.

In one of Sun Tzu’s opening statements he said, “If your enemy is secure at all points, be prepared for him. If he is in superior strength, evade him.” The time has come for preparedness as you cannot evade this threat.

Note: If you would like any further comment from Philip, please contact him by clicking HERE