An analytical essay on asymmetric military specialisation for middle-income nations
The Problem with Trying to Do Everything
A country with a modest defence budget faces a brutal arithmetic problem. Building a full-spectrum military — aircraft carriers, fifth-generation fighters, ballistic missiles, nuclear deterrence — costs hundreds of billions of dollars and decades of sustained investment. The United States, China, and Russia occupy that tier. Everyone else must make choices.
The smarter question is not “how do we build a complete military?” but rather “in which one or two domains can we achieve genuine, world-class competence — and why would those particular domains serve us well?”
This is the logic of niche military specialisation: concentrate limited resources on a field where geography, existing talent, or strategic necessity gives you an edge, then develop it to a level of real excellence. The result is a military that cannot fight every war but can credibly deter certain threats, contribute meaningfully to coalitions, and earn geopolitical respect disproportionate to its size.
Estonia is perhaps the cleanest proof of concept. With only 1.3 million citizens, its population and GDP are tiny — yet thanks to its successful adoption, mastery, and promotion of digital technologies and cyber excellence, it has earned a seat at the table and a voice that finds a global audience.¹ It learned that in cyberspace, it is possible for tiny states to provide added value and have real influence, and it leveraged that to attain a more secure position in international alliances.
Malaysia is not Estonia, but the structural lesson is identical. So what niches make sense for a country like Malaysia, and why?
Malaysia’s Starting Position
Before recommending a strategy, it helps to assess the baseline honestly.
Malaysia’s defence budget reached MYR 21.13 billion (approximately EUR 4.5 billion) in 2025, a 7.08% increase over the previous year, and is projected to grow at a compound annual growth rate of 8.4% through 2028, reaching approximately USD 6.2 billion.² That sounds impressive until you compare it to the spending of peer competitors in the region. The money exists, but it must be spent with surgical precision.
Malaysia’s defence capabilities today are largely focused on lower-technology products: small arms, ammunition, armoured vehicles, and small vessels. Due to limited domestic capacity for manufacturing advanced defence technology, Malaysia remains substantially reliant on international suppliers.³ It currently ranks 42nd out of 145 countries in the Global Firepower index — a solid mid-tier position, but one that reflects a conventional force without significant high-technology differentiators.
Malaysia’s own Defence White Paper (DWP), published in 2020, already pointed the compass in the right direction. It emphasised the need to develop a modernised “smart army” approach that integrates cyber technology, drones, and unmanned systems — shifting away from traditional military assets.⁴ The Mid-Term Review of the DWP, launched by Defence Minister Khaled Nordin in September 2025, reinforced this direction, reflecting growing institutional concern about cyber insecurity and maritime tensions in the South China Sea — particularly in response to what the document describes, without naming China explicitly, as the “aggressive stance and rapid increase in military capability of a country that claimed almost the entire South China Sea.”⁵
MINDEF has also identified five strategic areas — known as the “5Ts” — where big data and AI can strengthen national security: threat monitoring, trend analysis, performance tracking, transformation drivers, and touchpoint integration.⁶
That is an encouraging institutional posture. But naming priorities and building genuine capability are two different things. Below are the three domains where a country like Malaysia has the most realistic path to world-class competence.
Niche One: Maritime Surveillance and Domain Awareness
Why this fits Malaysia almost perfectly.
Malaysia has one of the most strategically complex maritime territories on earth. It shares the Strait of Malacca — one of the world’s most critical shipping chokepoints — with Singapore and Indonesia. It has coastline on both the South China Sea and the Andaman Sea. Its territory is split across Peninsular Malaysia and the states of Sabah and Sarawak in Borneo, separated by open sea.
The federal government has been significantly bolstering its military presence in East Malaysia, driven by the region’s expansive geography, strategic location within the South China Sea’s territorial waters, and abundant natural resources, particularly oil and gas. MINDEF has outlined a comprehensive defence plan for Sarawak from 2024 to 2030, with an estimated investment of MYR 500 million, including establishing a naval base in Bintulu.⁷ The key security challenges motivating this include foreign vessel incursions, smuggling, and illegal immigration across Malaysia’s vast and porous maritime borders.
The problem is not a lack of will — it is a lack of persistent, comprehensive awareness of what is moving through Malaysian waters at any given moment. This is precisely where a specialised investment strategy makes sense.
What “maritime domain awareness” actually means in practice: it is the integrated ability to track vessels, aircraft, and submarine activity across a defined geographic area, correlate that data with commercial shipping registers and threat databases, and make real-time decisions. It combines satellite imagery, radar networks, automated identification systems (AIS), patrol assets, and — increasingly — UAVs.
Malaysia has already taken concrete steps in this direction. MYSA, the Malaysian Space Agency, issued a tender in 2024 for a high-resolution Earth observation satellite targeted for completion by 2027, part of the National Space Policy 2030. Notably, Malaysia is already the only Southeast Asian country capable of receiving data from SPOT, Pléiades, and TerraSAR-X satellites, with over 50 in-house applications using Airbus satellite imagery for resource management and maritime monitoring.⁸ That is a meaningful head start.
At the commercial-military overlap, Kongsberg Norcontrol partnered with local firm Lync Lab Sdn Bhd to deliver a Vessel Traffic Management System for the Sabah Ports and Harbours Department, emphasising data analytics and advanced sensor technologies.⁹ That kind of public-private, foreign-local partnership is exactly the right model for capability transfer — the goal is not to buy a system and operate it forever with foreign technicians, but to absorb the knowledge and run it independently within a defined number of years.
If Malaysia were to develop genuine expertise in integrated maritime surveillance — including the data fusion, analytics, and command-and-control layers — it would be a credible and valued partner to ASEAN neighbours, to the United States Pacific Fleet, and to commercial maritime insurers and shipping companies. That expertise translates into geopolitical leverage.
Niche Two: Unmanned Aerial Systems — Surveillance and Counter-Drone
The strategic logic for drones.
For a country with Malaysia’s geography — vast maritime spaces, dense jungle terrain in Borneo, porous borders — persistent aerial surveillance without persistent human pilots is not a luxury but a structural necessity. Stationing manned aircraft over the South China Sea for twelve hours a day is ruinously expensive. A medium-altitude, long-endurance (MALE) drone can do it for a fraction of the cost.
The 2020 war between Armenia and Azerbaijan over Nagorno-Karabakh served as a wake-up call for defence planners globally: Azerbaijani forces, equipped with Turkish-made Bayraktar TB2 drones and Israeli HAROP loitering munitions, routed Armenia’s military in just six weeks.¹⁰ The lesson was stark — a country that develops drone expertise gains asymmetric deterrence. A country that does not is dangerously exposed.
Malaysia has already made a concrete commitment. MINDEF allocated MYR 400 million (approximately EUR 86.1 million) for Phase 1 procurement of ANKA medium-altitude, long-endurance drones from Turkish Aerospace Industries (TAI), along with ground control stations and a comprehensive training and logistics package. These drones are anticipated to be operational at Labuan Air Base in Sabah by 2026, specifically tasked with Intelligence, Surveillance, and Reconnaissance (ISR) missions in the South China Sea.¹¹
This procurement is strategically significant beyond the hardware itself. Turkey developed the ANKA — and its more famous cousin, the Bayraktar TB2 — as a middle-income nation deliberately building drone expertise from scratch. Malaysia’s partnership with TAI, if structured to include genuine technology transfer rather than mere platform purchase, could seed a domestic UAV competence over the coming decade.
The counter-drone dimension is equally important. As drones proliferate globally — among state militaries, non-state actors, and criminal organisations — the ability to detect, track, and neutralise hostile UAVs becomes a premium capability. Counter-drone systems rely on electronic jamming, signal spoofing, directed energy, and physical interdiction, all of which overlap heavily with the cyber and signals intelligence domain. A country that becomes expert in C-UAV technology has something it can deploy domestically, offer to allies, and potentially export. The expertise compounds.
Military drones rely heavily on embedded computers, navigation hardware, and complex software, making their guidance, communications, and onboard systems vulnerable to GPS manipulation, firmware tampering, and compromised supply-chain components.¹² The overlap between cyber and drone warfare is deep — expertise in one reinforces expertise in the other.
Niche Three: Cybersecurity and Signals Intelligence
The Estonia model, adapted for Malaysia.
Estonia — a country of 1.3 million people — became the third-ranked nation in the world for cyber defence infrastructure according to the 2021 Global Cybersecurity Index, behind only the United States and Saudi Arabia.¹³ It achieved this not through massive defence spending but through a deliberate, sustained investment in digital infrastructure, talent, and institutions — beginning in earnest after the devastating Russian cyberattacks of 2007.
The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE), established in Tallinn in 2008, became the centrepiece of Estonia’s global cyber leadership — a military think-tank conducting research, developing policy, and running exercises such as the annual Locked Shields event, the world’s largest live-fire cyber defence exercise.¹⁴ Estonia’s lesson is that cybersecurity is a domain where small nations can genuinely lead, because it requires brain power and institutional design more than capital-intensive physical infrastructure.
Malaysia has structural advantages here. It has a functioning university sector, an established technology industry centred around Cyberjaya and the Multimedia Super Corridor, and a young, tech-literate workforce. The talent pool exists.
Concrete moves are already underway. BlackBerry has established its first Cybersecurity Centre of Excellence (CCoE) in Malaysia and Southeast Asia. Fortinet has partnered with the Sabah State Government to create a dedicated cybersecurity hub. MINDEF’s Future Force Directive explicitly aims to restructure Malaysia’s warfare architecture in the cyber and electromagnetic arenas, including enhancement of firewalls, encryption systems, and the recruitment of personnel skilled in AI and cyber operations.¹⁵
Three sub-fields within cyber are most achievable for Malaysia:
Defensive cyber operations — protecting government systems, critical infrastructure, and military networks. This is the foundation without which everything else fails, and it is squarely within Malaysia’s existing capacity to develop.
Signals intelligence (SIGINT) analysis — the ability to monitor, collect, and interpret electronic communications relevant to national security. Malaysia’s geographic position at the intersection of major sea lanes and air corridors makes it a natural collection environment. SIGINT capability, once developed, is of high value to intelligence-sharing partnerships.
Cyber forensics and attribution — the technical ability to investigate intrusions, attribute attacks, and provide evidence-quality data. This is an emerging field where Malaysia could develop a credible regional reputation, particularly given the growth in state-sponsored cyber activity targeting Southeast Asian governments and commercial entities.
What Not to Do
Equally important is avoiding the classic mistakes that leave middle-income nations with expensive, underperforming militaries.
Don’t buy prestige platforms without a doctrine to use them. Malaysia’s defence modernisation has historically been hampered by budget constraints, delays, and cancellations — including the troubled Maharaja Lela-class littoral combat ship programme and prolonged negotiations over aircraft acquisitions.¹⁶ An expensive platform sitting in a hangar waiting for foreign technicians to maintain it is a drain, not a capability.
Don’t confuse acquisition with mastery. Buying ANKA drones from Turkey or cyber tools from a foreign vendor does not make a country capable in those domains. Real capability means the ability to operate, maintain, adapt, and eventually improve the technology with indigenous personnel. MINDEF’s 2026 procurement reforms now require a minimum of 30% local content in all defence procurements, and maintenance, repair, and overhaul work must be conducted by local firms after the warranty period.¹⁷ That is a step in the right direction — genuine technology transfer rather than perpetual dependency.
Don’t scatter investment across too many domains. The temptation is always to want everything. The strategic discipline is to choose and to sustain that choice across multiple administrations and budget cycles, regardless of political change.
The Rationale, Stated Plainly
A country like Malaysia will not outspend China or match the United States in any conventional domain. What it can do is become genuinely indispensable in a small number of high-value areas.
Maritime surveillance makes Malaysia the authoritative voice on what is happening in its own waters — waters that the entire world depends on. Drone and counter-drone expertise gives Malaysia asymmetric deterrence, concrete ISR capability in the South China Sea, and a domain it shares with an emerging partner in Turkey. Cybersecurity gives Malaysia a role in regional digital governance and a defensive capability that costs far less than the threats it is designed to deter.
None of these paths requires becoming a major weapons manufacturer. All of them require sustained political will, serious investment in education and training, and the institutional discipline to resist the glamour of large conventional platforms in favour of less visible but more strategically sound capabilities.
The countries that figure this out — that choose their lane, master it, and make themselves indispensable in it — are the ones that still matter in a world dominated by powers vastly larger than themselves.
Footnotes
¹ Josh Gold, “How Estonia uses Cybersecurity to Strengthen its Position in NATO,” International Centre for Defence and Security (ICDS), 27 May 2019. https://icds.ee/en/how-estonia-uses-cybersecurity-to-strengthen-its-position-in-nato/
² Orissa International, Opportunities in Malaysia: Trade Report for the Ministry of Foreign Affairs of the Republic of Estonia — Focus Sector: Defence, 13 January 2025, p. 2. https://www.vm.ee/sites/default/files/documents/2025-03/Malaysia%20Strategy_Defence.pdf
³ Ibid., p. 1.
⁴ U.S. International Trade Administration, “Malaysia — Aerospace and Defense,” Country Commercial Guide. https://www.trade.gov/country-commercial-guides/malaysia-aerospace-and-defense
⁵ Kuik Cheng-Chwee, “Malaysia Reassesses Security: The Mid-Term Review of the Malaysian Defence White Paper,” ISEAS Perspective 2026/11, ISEAS – Yusof Ishak Institute, 11 February 2026, pp. 2–5. https://www.iseas.edu.sg/wp-content/uploads/2026/01/ISEAS-Perspective_2026_11.pdf
⁶ Orissa International, Opportunities in Malaysia, op. cit. (citing MINDEF DWP 2024 Mid-Term Review priorities).
⁷ Ibid., p. 3.
⁸ Ibid., p. 4.
⁹ Ibid., p. 3.
¹⁰ Crispin Burke, “Small Drones, Big Limits: A Smarter Drone Strategy,” Small Wars Journal, 22 September 2025. https://smallwarsjournal.com/2025/09/22/small-drones-big-limits-a-smarter-drone-strategy/
¹¹ Orissa International, Opportunities in Malaysia, op. cit., p. 3. (ANKA MALE drone procurement, MYR 400 million Phase 1, operational at Labuan Air Base by 2026.)
¹² “Cybersecurity Challenges and Defense Strategies for Military Drones,” Perimeterwatch via Medium, November 2025. https://medium.com/@Perimeterwatch/cybersecurity-challenges-and-defense-strategies-for-military-drones-2373aadd67e3
¹³ “Lessons From Estonia: How to Become Cyberproof,” 3 Seas Europe, 14 June 2023. https://3seaseurope.com/cybersecurity-estonia-cyberproof/
¹⁴ “Estonia as an International Cybersecurity Leader,” e-Estonia. https://e-estonia.com/estonia-as-an-international-cybersecurity-leader/
¹⁵ Orissa International, Opportunities in Malaysia, op. cit., p. 4.
¹⁶ GlobalData / Asia Pacific Defence Reporter, “Military modernisation to drive Malaysia defence budget at 8.4% CAGR over 2024–28,” September 2023. https://asiapacificdefencereporter.com/military-modernisation-to-drive-malaysia-defence-budget-at-8-4-cagr-over-2024-28/
¹⁷ U.S. International Trade Administration, “Malaysia Defense Industry Policy and Procurement Reforms,” March 2026. https://www.trade.gov/market-intelligence/malaysia-defense-industry-policy-and-procurement-reforms
