Fort Meade, MD --
In October 2018, Airman Magazine sat down for a conversation with Maj. Gen. Robert J. Skinner, Twenty-fourth Air Force commander; Air Forces Cyber commander and Joint Force Headquarters-Cyber commander, Joint Base San Antonio-Lackland, Texas. He is responsible for providing Air Force component and combatant commanders with trained and ready cyber forces to plan, direct and execute global cyberspace operations.
Airman Magazine: In July, the Twenty-fourth AF moved from Air Force Space Command to Air Combat Command. At the same time you moved from AFSPC to ACC. What are the reasons for that restructuring?
Maj. Gen. Skinner: This allows Gen. Raymond, as the Air Force Space Command commander, to truly focus on space operations. The other thing is this brings cyber within Air Combat Command, which has intelligence, surveillance and reconnaissance; command and control and the air domain. Bringing all these forces together under one four-star MAJCOM (major command) commander, Gen. Holmes, allows him some more flexibility to be able to present forces across the spectrum of operations.
The networks for those operations need to be resilient and they need to be protected. When you bring together the ISR, cyber, information operations, electronic warfare and command and control, that’s a lot under one hat. But it allows us greater integration as we move forward. At the end of the day, this is about multi-domain operations and the more we can bring those together, the more successful we’ll be.
Airman Magazine: How are your responsibilities divided between your three commands? It seems that just the information technology portion alone would be a huge demand on your resources.
Maj. Gen. Skinner: Cyber operations have four or five different lines of effort. One is to actually build the networks, build the applications and build the systems.
Another is to operate and maintain the networks, but also secure and protect them from vulnerability to adversaries. We also defend networks for our maneuver forces and then we have full spectrum operations, which is on the offensive side.
We also have combat communications Airmen and engineering installation Airmen who extend the network out to a multitude of places, whether that’s tactical basing or at the forward battle edge.
With that said, information technology is still a key part of the cyberspace domain and we are moving forward in the Enterprise IT as a service. We are going to utilize things industry does very well as a commodity type of action activity.
We are going to leverage what industry does great, providing some services and network infrastructure, and re-mission our Airmen to do core Air Force missions on the defensive and offensive side, while providing assurance for the many missions the Air Force presents to the combatant commanders on the joint side.
The bottom line is we’re in the cyber operations business—information technology, networks, both operating and defending—and we provide full spectrum operations in this thing we call the cyberspace domain.
Airman Magazine: Would you explain your duties as commander of the Air Force component at Cyber Command? How is that different from the hat you wear as commander of Twenty-fourth AF and Air Force Cyber?
Maj. Gen. Skinner: This could actually be a dissertation. To break it down a little bit, the Twenty-fourth AF is where we organize, train and equip our Airmen. The perfect example is we have an organization down at Hurlburt Field—they train almost every cyber professional. Now we do a lot more than that, but that’s one example of the Twenty-fourth AF piece.
In the Air Force cyber piece, I am charged by the Air Force to present forces to Gen. Paul Nakasone, the U.S. Cyber Command commander, for his missions and functions as the combatant commander.
We provide offensive forces and defensive forces, DODIN (Department of Defense Information Networks) ops cyber professionals and ISR professionals to Gen. Nakasone, so he can perform his mission.
Then the third area is the Joint Force Headquarters side. That’s where Gen. Nakasone has asked us to align to three different combatant commanders to provide additional joint support for their missions.
We have planning elements that are aligned to these three combatant commanders, as well as some cyber teams supporting the commanders’ efforts in defense of the mission. Our teams are able to deploy and employ forces against a particular adversary at the time and place of the combatant command commanders’ choosing.
Our job within Twenty-fourth AF, AF Cyber JFHQC and Cyber Command, is to be ready at a moment’s notice to protect our systems and defend the networks and defend the core missions of our military and our joint war fighters. Then deter, disrupt and degrade an enemy’s ability to perform those functions against us. Part of that goes into making sure that we have persistent engagement, a persistent presence, and a persistent innovation as we continue to move forward.
Airman Magazine: Across the Air Force, joint force, partner agencies and nations, do cyber operations equate to kinetic operations or is that a completely different animal?
Maj. Gen. Skinner: I would say it is not a completely different animal. To be successful in cyber operations and have cyberspace superiority at the time and place of our choosing, we need a team of teams that is internal to the Air Force.
Every single Airman in our Air Force needs to be a cyber sentinel. We need every Airman to be very conscious of cyber security, cyber hygiene and things that are going on within the cyberspace domain.
We have branched out and are part of several joint organizations that perform functions and missions within the cyber domain. The National Security Agency is a huge partner with us as we perform these missions, as well as the Central Intelligence Agency, Defense Information Systems Agency and Department of Homeland Security—a lot of different agencies across the board.
We are also great partners with commercial industry and academia because we’re all in the same field and in the same cyber domain.
Within Twenty-fourth AF, we have a United Kingdom representative and an Australian liaison officer, but most of our allies and partners are really up at the Cyber Command level. We leverage those partners through U.S. Cyber Command, NATO and other organizations.
Airman Magazine: What is it that makes your cyber Airmen “cyber warriors”?
Maj. Gen. Skinner: Our Airmen are absolutely warriors. We have teams in the fight operating constantly: 7 days a week, 365 days a year, Christmas and New Year’s.
If you’ve heard Gen. Nakasone speak recently you’ve heard him say we’re no longer solely responding to network intrusions, we have cyber forces persistently engaged against state and non-state adversaries, actively identifying and countering threats in the cyber domain.
This achieves several benefits at once: first and foremost, it gives us control over the cyber terrain that serves as the foundation for superiority in cyberspace. It also keeps our operators ready and their skills honed and imposes cost on the adversary so they can no longer operate freely without repercussion. There’s already a massive demand signal for our cyber operators that will only increase, so we have to ensure we’re fielding proficient, ready and lethal operators at scale.
Because of this, we are investing not only the readiness of our mission, but also in the readiness of our people. This means examining everything within our scope of control, including the effect the operational tempo of our 24/7/365 mission has on our operators.
Just like you see within the (remotely piloted aircraft) field, cyber can mean long periods away from the sunlight and abnormal sleep hours, and that can absolutely have an effect on people. Any leader will tell you—if you take care of the people, they will take care of the mission.
Airman Magazine: What part does the total force play in cyber operations and defense?
Maj. Gen. Skinner: I will tell you, we could not do our job on a day-to-day basis without the total force. The majority of the forces within Twenty-fourth AF are guard and reserve components.
Our engineering installation mission is 85 to 90 percent within the guard. More than 50 percent of our combat communications capability, which extends and expands our capabilities to the tactical edge, is in the guard. We have guard organizations up in Washington. We have some in Rhode Island. We have some here in Texas. I will tell you they provide great day-to-day work.
What’s even more important is the expertise that they bring from their civilian jobs. We have vice presidents of some corporations who are part of our total force as well. Bringing that expertise, leadership, things that the public is good at and things that industry is focused on benefits the military and vice versa. They take lessons learned from the military and take it to their company. So it’s a great yin-yang relationship.
Whether it’s an offensive operation or a defensive operation or even DODIN ops, there has to be a tight tie between all of those as we move forward because the defense learns from the offense and the offense learns from the defense. DODIN ops learn from defense to figure it out where we need to be resilient, where some of our mission critical assets are and how to defend them.
All the computer networks, email, applications and systems in the cyberspace domain are what we call the Department of Defense Information Networks. There are pay applications that we have in the Air Force that are part of DODIN. If you get paid electronically within the Air Force that’s part of the DoD information network.
Airman Magazine: Is it an advantage that those reserve and National Guard personnel tend to have long histories with one unit?
Maj. Gen. Skinner: I would say sometimes it’s an advantage and sometimes it’s not. In some places having continuity is good. I would say having too much continuity isn’t necessarily good in cyber because you want some fresh blood, some fresh ideas.
Airman Magazine: Would a technical track for active-duty cyber operators benefit the force?
Maj. Gen. Skinner: Similar to other domains and weapon systems, we have to be proficient to be effective. Since cyber is a technical domain we do need technical expertise.
However as our people gain that expertise and increase in rank and responsibility, we need them to be leaders and lead teams to success while still maintaining credibility in their profession. We, ACC and Headquarters Air Force are working closely together to determine what the right “path to greatness” will look like, in order to build a force that generates maximum lethality.
Airman Magazine: As cyber tools and methods seem to change constantly, ow can the acquisitions process be altered to make sure the Air Force has the best technologies and practices in the cyber domain?
Maj. Gen. Skinner: The Air Force and DoD leadership are laser-like focused on our ability to acquire things in a more agile, fast and relevant way. We have leveraging other authorities, like 804 authorities, to bring on the future faster and to bring innovation faster.
As an Air Force we are becoming more of a software force than a hardware force. The ability to bring the new wave of agile software development operations, DevOps, is going to be key in maintaining our superiority and operating within the enemy’s OODA loop (time it takes to observe, orient, decide, and act).
We’re bringing in individuals who understand the old waterfall model is not the right model because by the time that you set the requirements and start developing to those requirements, the environment, threats and priorities have changed.
If you’re spending weeks, months and years identifying and defining hundreds or thousands of requirements, you definitely can’t meet those requirements in a timely manner. So leverage industry, leverage developers who are innovative, define the left and right limits or requirements.
So you get a three to five-page requirements document, which is much better than a 100 to 200-page document. Let them innovate and come back with a solution and in a much more timely manner—days and weeks versus months and years. Then you iterate and you continue to iterate on that minimum viable product.
Then also leverage some of those techniques to buy the right hardware in a timely fashion and focus on the approval top rate process, to reduce the amount of time to approve either software or hardware for connecting to the network. I know that Dr. Roper, Air Force Acquisition and the chief and secretary are very focused on bringing the future faster.
Airman Magazine: The Air Force is considering launching a cyber rapid capabilities office. How would that benefit the Twenty-fourth AF and the cyber community as a whole?
Maj. Gen. Skinner: The traditional slow-and-steady acquisition model is great for buying a fleet of fifth-generation aircraft, but it isn’t ideal for cyberspace where the landscape is changing constantly and where the state-of-the-art is available to anyone interested in buying. We need to get faster.
The DNA of the Air Force RCO brings agility and flexibility, which drives down timelines and increases capability. Right now we can’t say what form a cyber RCO would take, but will benefit us by getting the right capabilities and weapons at the right time to our operators. We need to respond to malicious cyber activity with greater speed and tempo employing a calculated, “spectrum of risk” framework which is properly delegated at echelon to enable responsible and responsive cyberspace operations in support of assigned missions.
Airman Magazine: What effect will advances in big data research have on cyber operations?
Maj. Gen. Skinner: Data is the game changer in our business. If I own the data battle space, then I will definitely be within the OODA loop of the adversary. Being able to leverage quantum computing, artificial intelligence and analysis of big data platforms is really the future of our mission.
There is so much data out there in today’s environment there is no way that you can get through all of it (manually). So you may miss a key data point that would help you make a decision. In a future conflict, being able to have the right data at the right time analyzed at the right tempo is key to success.
We’re putting a lot of effort into better understanding the data, not just from cyber standpoint, but also in logistics, in intelligence and even in personnel. The more we can analyze the data, the better that we can perform education and training, perform timely logistics, perform ISR operations. Every single Air Force core mission is reliant on data to be more effective, more efficient and more successful.
Airman Magazine: Can you talk about Hack the Air Force and its value to the force?
Maj. Gen. Skinner: The first Hack the Air Force iteration was in late 2017, after the successful Hack the Pentagon initiative by Defense Digital Services. When the first hackathon sprint kicked off it took less than a minute for a hacker to find a valid vulnerability. By the end, over 200 holes in our boundary had been patched—and that was just the first iteration.
Hack the Air Force gets after two important focus areas: first, it builds capacity for the Air Force by leveraging expertise from a multitude of places, and second, it leverages innovative thinking to find vulnerabilities we otherwise might not uncover.
Take, for example, the person who won the first hackathon sprint, a 17-year-old high school student from Chicago. Maybe his path won’t lead him to the Air Force, but we were still able to use his talents to make ourselves more resilient. To me that’s a win.
Airman Magazine: What lessons can be learned from commercial companies about practices that enable those fresh ideas to come forward?
Maj. Gen. Skinner: There are a lot of great lessons learned from Silicon Valley and I would offer Silicon Valley has also learned from the Department of Defense.
As I’ve said many times over my 33-year career to date, if I came into the military today, compared with a talent level of the individuals that we have now, I would not be as successful as I have been.
The talent today is amazing and our job as senior leaders is how do we unleash that talent? How do we have the right policies and the right directives leveraging the right acquisition authorities and unleash this talent on the hard problems that our force and our nation face today.
The key is getting the right people in the room to determine how best to provide solutions, whether it’s software development, hardware acquisition or cyberspace operations. It’s getting the right people in the room and getting through the bureaucracy, pushing the bureaucracy to the side and being able to unleash the talent.
Airman Magazine: How can, especially when it comes to the cyber domain, the Air Force compete with civilian industry to attract more STEM (science, technology, engineering and math) talent?
Maj. Gen. Skinner: There was always a competition between academia, research labs, commercial industry and the military. We as a military cannot compete from a dollar standpoint.
But where we can compete is with the great things you can do within the DoD, that you probably can’t do within the commercial world. We have great missions coming from the research we’re doing.
Some of the operations we’re doing on a day-to-day basis, you can’t do that on the commercial side. We have opportunities for individuals at a variety of levels to perform things they couldn’t do outside of the military. That’s our calling card.
Airman Magazine: Peer and near-peer competitors have been going to school on us since World War II; how do we offset that advantage?
Maj. Gen. Skinner: I would say every threat is an opportunity. While we have been focused over the last 10 to 15 years on the violent extremist, the latest National Defense Strategy, National Security Strategy and National Cyber Strategy outline strategic competition, peer competitors, and has turned the focus there.
You’ll hear a lot about readiness. Readiness is very important to our chief, very important to our secretary and very important to the secretary of defense. We need to make sure that we have a lethal force. In order to do that, you need to have a ready force.
In order to be ready, you need to have a disciplined force. Especially when there is strategic competition out there and adversaries who on a day-to-day basis are performing actions and operations that are probably right below the level of conflict.
But, I would not want to go and do a mission against a threat with anyone else but the Airmen we have in our service today. Our Airmen, with our joint partners in the other services, still have the most critical, credible and lethal force in the world.
Airman Magazine: You talked about having a disciplined force in order to be lethal. What constitutes discipline in the cyber world?
Maj. Gen. Skinner: Discipline is key. I’m not talking about discipline from a uniform code of military justice aspect. This is discipline in processes, discipline in procedures and discipline in command and control. We spent a lot of time going back and trying to figure out what happened on something because there was an undisciplined tactic, technique, procedure or process. We’re trying to leverage discipline to make our force more effective and more capable and build capacity.
Then we come to a readiness standpoint. Readiness, as you know, is made up of personnel, equipment, procedures and training. We are continually leveraging our innovative Airmen to improve the training they receive, how we purchase equipment, how we educate our Airmen.
Part of all this is proficiency. Proficiency against a violent extremist organization is much different than proficiency against strategic competitors. Our focus continues to be how to maintain and improve the readiness and proficiency against strategic competitors.
We are also leveraging our Airmen and technology to be more efficient and more effective.
Leveraging artificial intelligence can decrease the amount of time that our Airmen spend doing manual work so they can focus on the higher end discussions of cognitive actions and activities.
For example, manually looking through thousands of pages of data takes a very long time. We have Airmen who are leveraging technology, whether it’s using keywords or bringing a couple of technologies together, that can take those thousands of documents and run through them in minutes versus hours, days or weeks.
Then taking what the technology has given you and put the human eye on it—are there any other needles in the haystack?
That’s what our Airmen are doing on a day-to-day basis. Whether it’s from a data collection standpoint, whether it’s from a cyber operation standpoint, whether it’s looking through logs to see if we have an adversary presence on our networks. Looking through logs to make sure that our user experience is where it needs to be on a daily basis, but leveraging technology to reduce the amount of manual steps.
Airman Magazine: With a kinetic weapon, the effects are apparent and there is an inherent process to be able to determine origin, intent and purpose. The very nature of cyber is to hide the hand that dealt the cards. What kind of challenges does determining attribution pose for a commander?
Maj. Gen. Skinner: So attribution is a very significant challenge. There are not as well defined international norms in the cyberspace domain and therefore a multitude of nations and multitude of criminals and the multitude of other individuals are continuing to push the limits.
It is often very apparent in the other domains, from an effect or an outcome, who the actors are. In the cyber domain, you can have the same type of effects in as in other domains, but it is harder to determine the source, which is really important when you start talking about multi-domain operations.
Cyber is a critical enabler while also a critical operation because cyber can be both supporting and supported within multi-domain operations. As we continue to refine our operations, to refine our tactics, techniques and procedures, we will continue to get better at understanding attribution, understanding the outcomes, and making sure that we refine and define those outcomes and bound the outcomes to meet our mission objectives.
As cyber continues to get more profound and more pronounced in the day-to-day operations, attribution is going to become that much harder.
Airman Magazine: How do you convince people that cyber and space have become foundational to everything that the Air Force, and our society as a whole, does on a daily basis?
Maj. Gen. Skinner: I’ll give you a perfect example, the Global Positioning System is operated by Air Force Space Command: not only for the nation, but the whole world. The U.S. Air Force supplies and supports the system and satellites that enable the GPS navigation we use in our cars and on our phones every day, millions of times around the world.
It also provides timing. Every financial transaction is supported by the GPS system. So when you purchase something and put your credit card into that reader, there’s a timing aspect that is being supported by GPS. So the Air Force is supporting billions of activities and actions all the time.
Airman Magazine: The chief of staff and secretary have made it a priority to push command level decisions down to the lowest level possible. How is that manifested in your command?
Maj. Gen. Skinner: Its not only because the chief and the secretary say they want it done. We have the greatest Airmen in the world and we have the greatest commanders in the world—pushing authorities and responsibility down to the lowest level really enables them to unleash the talent around them and enables us to unleash their talent.
You don’t need higher headquarters micromanaging and directing things on a daily basis. Our commanders are boarded. We have a tradition of great commanders in our Air Force and we need to let them run. We need to let them determine how best to run their organizations and how best to be effective. The more that we can push decision authority down, the more bureaucracy we can eliminate and the more agile, lethal and effective we can be as an Air Force.
From a higher headquarters level and higher commander level, our responsibility is to give the left and right limits to those organizations and then let them run.
If we are in a conflict, especially against a peer competitor, the amount of time it would take to micromanage our tactical-level units would not allow us to be inside the OODA loop of our adversary.
We need to allow our commanders, in peacetime, to train like they are going to fight. To have that authority to perform the mission as they see fit. With more guidance, directives and limitations to that commander, there’s going to be some negative learning, first and foremost, but secondly, the safety of our airmen will be put in jeopardy.
Airman Magazine: As commander of Joint Force Headquarters Cyber, you’re responsible for cyber affects in campaign plans from U.S. Central Command to U.S. Transportation Command. How does that integration take place?
Maj. Gen. Skinner: Aligned to each of those combatant commanders we have an element called the Cyber Operations Integrated Planning Element. We are just now standing those up and they are at the combatant commanders’ headquarters.
They’re kind of our picture window into that combatant commander to enable cyber operations planning to be part of their overall plan. Each combatant commander has either a function or a region they’re responsible for and they have what we call a scheme of maneuver, which is either day-to-day or in conflict. It is the commander’s plan of how to ensure sure we are successful in that campaign.
These planning elements are aligned there so we can be part of that plan and make sure that cyber isn’t just bolted on, but integrated into that plan. Cyber will be one of the first options that are available to that combatant commander below the level of conflict to make sure that we are meeting our objectives.
Airman Magazine: How do you get everyone with a piece of the huge cyber puzzle speaking the same language? How do you communicate capabilities and vulnerabilities to leadership, agency partners and Airmen who are not cyber experts?
Maj. Gen. Skinner: I would say today we have the best understanding and the best alignment from the cyber domain standpoint that we’ve ever had with all the strategy documents – the National Defense Strategy, which is underneath the National Security Strategy, the National Cyber Policy and Strategy, the DoD Cyber Strategy and the Cyber Posture Review.
All of these documents are perfectly aligned and it’s a great understanding of the capabilities that we provide, but also the importance of cyber to the multi-domain operations. The education is continual, but I offer that our Air Force leadership understands the cyber domain. They understand how important the cyber domain is to multi-domain operations.
We continue to educate the entire forest. We’re continuing the education process of all of our Airmen, from the highest level to the most junior Airman and the joint community, but from a joint standpoint and a national standpoint cyber is more understood than it ever has been.
Airman Magazine: Do you see the Continuum of Learning concept and applications like the Cyber Learning Hub being developed by the Center for Cyberspace Research, Air Force Cyber College and U.S Air Force Academy’s CyberWorx, as aiding in that effort?
Maj. Gen. Skinner: There are a lot of great opportunities with that as cyber continues to be more and more integrated into the day-to-day operations.
We currently have the Air Force Warfare Center where we bring a lot of different mission systems together, integrate them, exercise and train and cyber is a significant part of that.
From an education standpoint we send people to the Air Force Institute of Technology. They not only have general education classes, but we they have Cyber 100, Cyber 200, Cyber 300 and Cyber 400 courses.
We have the 39th Information Operations Squadron, which does our cyber training. Keesler Air Force Base has a lot of our cyber courses. Just as Gen. Raymond over the last year has been working with Air University to make sure we have more space in our professional military education, we’re doing the same thing from a cyber standpoint.
We’re working with Gen. Cotton at Air University and Gen. Kwast at Air Education and Training Command to make sure that we continue to improve the amount of cyber and relevant topics in cyber education in basic military training through professional military education and to highlight cyber, both from a professional and a personal standpoint, because it impacts every part of your life.
Airman Magazine: In that vein, what would you like every Airman to be aware of in their daily connectivity?
Maj. Gen. Skinner: One of the biggest vectors that our adversaries use to get into our networks is email. It’s called spear phishing. You can get those at your home and at the office. We continue to educate that you should know who the sender of an email is, that you do not click on links that you’re not certain are good links. If it looks too good to be true, it probably is.
If you get an email offering a free vacation, there’s probably not a free vacation. That’s probably someone trying to gain access to your personal information or gain access into our Air Force systems to cause havoc and disrupt our ability to do our missions.
Additionally, be aware that our adversaries can put different pieces of unclassified information together, which in the aggregate actually become classified. So you always have to be careful when you’re outside of work, or even inside work, of what you talk about in the open.
You have to monitor your computer systems. Make sure your systems are patched, especially at home, because that is the quickest way for an adversary to exploit your system. Some vulnerabilities have been out there for years. We find that both on the commercial side and the government side – there are systems out there that have not been patched in a long time, even though a patch has been out there.
We’re continuing to leverage technology to make that a little easier, to make sure that we’re updating and protecting all those systems.
Airman Magazine: The Air Force places a premium on building leaders. What twists and turns has your career taken that culminated in command of the Twenty-fourth AF?
Maj. Gen. Skinner: I’ve had multiple mentors who have taken a special interest in my career. They have said you need to go to this position. I questioned it. I didn’t understand it. But it turns out that developed a place in my leadership that was not refined well enough. We spend a lot of time and energy on managing our talent. What differentiates us from other nations and other militaries is our Airmen, whether officer, enlisted or civilian.
Our Airmen are our most precious asset. It is our solemn duty to professionally develop our Airmen to the best extent possible. We take special interest in placing them where they professionally develop, while making sure our missions continue to be successful.