|
Returning to the discussion of current, measurable threats to our critical infrastructure, in June 2002 in Randall's Island, New York City, a backhose operator accidentally ripped up five 13,000-volt power cables, plunging approximately 63,000 customers into power outtages. The affects of the accidental disaster caused traffic jams when signal lights went dark, but otherwise power was restored and the city back to normal in eight hours. If our infrastructure is so resilient where tangible, physical damage is concerned, would it be any less resilient where the rather intangible, non-physical, cyber-threat is concerned?
| "like a member of the Syndicate once said to Agent Fox Mulder in the TV show, The X-Files: The best way to predict the future is to invent it."
|
Ralf Bendrath, author of "The Cyberwar Debate: Perception and Politics in US Critical Infrastructure Protection", describes Cyberwar as "a growth market in the US" and notes in his study that the risks are "especially open to political interpretation and instrumentation." Ralf goes on to note that, "Compared to the traditional security threat, which consists of the dimensions actor, intention, and capabilities, cyberwar threats cannot easily be categorized." Specifically, with a range of tools and exploits
available, attacks can as easily originate from bored teenagers with no specific agenda to hardened hackers with a terrorist agenda. Such attacks also rely on opportunity, that is to say, the ability to locate and exploit compromisable systems. Ralf's research delves into the history of the many agencies spawned by the federal government in an attempt to justify and address the threat of cyber-terrorism. He also questions the futuristic scenarios laid out by paranoid officials, first asking "How plausible are these scenarios?" and then humorously compares it to a scene in a legendary series, "like a member of the Syndicate once said to Agent Fox Mulder in the TV show, The X-Files: The best way to predict the future is to invent it."
If terms such as cyber-terrorism and "digital Pearl Harbor" are based on think-tank scenarios and there is no real evidence of the type danger their very name implies, one is then forced to ask why the terms and the concept have been widely embraced. With a proposed $50 billion dollar budget earmarked for Homeland Security Information Technology penciled in by President Bush for 2003, one may not need to look far for an answer. Clarke's campaign to win votes for a cyber-armageddon certainly isn't hurt by his pledge to open the coffers for vendor products and new development. Art Jahnke, Editorial Director for CSO magazine, gives food for thought in a recent editorial. "Cynical readers wont be surprised to learn that the BSA, a group of 19 powerful hardware and software manufacturers, recommends the immediate establishment of 'true private-public sector partnerships.' In other words, the government should hire BSA members to help. And fast."
Of course, let's not forget Walt H. Whether a full-blown cyberattack worthy of the title "digital Pearl Harbor" ever occurs, current day threats do exist and damage is always subjective, regardless of the cause. Certainly the warnings and predictions shouldn't be ignored simply due to lack of evidence. Fortunately, there are steps that can be taken both in the enterprise and among home users that will serve to protect your data while greatly reducing the potential of any cyber threat, be it digital warfare, viruses, DDoS attacks, or cracking. Indeed, by shoring up our corner of cyberspace to protect our own assets, we make the Internet a safer place for everyone to be - and perhaps even free up that $50 Billion budget to be spent on areas of real concern.
|