Report: Countries prepping for cyber war

By Elinor Mills, CNET News.com
Tuesday, November 17, 2009 01:42 PM

Major countries and nation-states are engaged in a "Cyber Cold War," amassing "cyber weapons," conducting espionage, and testing networks in preparation for using the Internet to conduct war, according to a new report to be released on Tuesday by McAfee.

In particular, countries gearing up for cyber offensives are the U.S., Israel, Russia, China, and France, the says the report, compiled by former White House Homeland Security adviser Paul Kurtz and based on interviews with more than 20 experts in international relations, national security and Internet security.

"We don't believe we've seen cases of cyber warfare," said Dmitri Alperovitch, vice president of threat research at McAfee. "Nations have been reluctant to use those capabilities because of the likelihood that [a big cyber attack] could do harm to their own country. The world is so interconnected these days."

Threats of cyber warfare have been hyped for decades. There have been unauthorized penetrations into government systems since the early ARPANET days and it has long been known that the U.S. critical infrastructure is vulnerable.

However, experts are putting dots together and seeing patterns that indicate that there is increasing intelligence gathering and building of sophisticated cyber attack capabilities, according to the report titled Virtually Here: The Age of Cyber Warfare.

"While we have not yet seen a 'hot' cyber war between major powers, the efforts of nation-states to build increasingly sophisticated cyber attack capabilities, and in some cases demonstrate a willingness to use them, suggest that a 'Cyber Cold War' may have already begun," the report said.

Because pinpointing the source of cyber attacks is usually difficult if not impossible, the motivations can only be speculated upon, making the whole cyber war debate an intellectual exercise at this point. But the report offers some theories.

For instance, Alperovitch speculates that the Jul. 4 attacks denial-of-service on Web sites in the U.S. and South Korea could have been a test by an foreign entity to see if flooding South Korean networks and the transcontinental communications between the U.S. and South Korea would disrupt the ability of the U.S. military in South Korea to communicate with military leaders in Washington, D.C., and the Pacific Command in Hawaii.

"The ability of the North Koreans to disable cyber communications between the U.S. and South Korea would give them a huge strategic advantage" if they were to attack South Korea, he said.

There have been earlier attacks that smack of cyber warfare too. Estonian government and commercial sites suffered debilitating denial-of-service attacks in 2007, and last year sites in Georgia were attacked during the South Ossetia war, orchestrated by civilian attackers, the report said.

The report concludes that if we aren't seeing it already, cyber warfare will be a reality soon enough.

"Over the next 20 to 30 years, cyber attacks will increasingly become a component of war," William Crowell, a former NSA deputy director, is quoted as saying. "What I can't foresee is whether networks will be so pervasive and unprotected that cyber war operations will stand alone."

This article was first published as a blog post on CNET News.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Reviewing scheduled task inventory for Windows Server 2008 R2

Windows Server

Default installations of Windows Server 2008 R2 enumerate a number of default scheduled tasks, many of which you may not need.


Read more »



Don't CC me, I'll CC you

Blog thumbnail

Carbon paper fascinated me when I was younger. Write once, get two copies. What a great invention and work tool, I thought.

Then came e-mail, and making carbon copies of important..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web