Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Georgia cyberwar overblown

Security: Risk and Reward By Andreas M. Antonopoulos , Network World , 08/19/2008
Andreas Antonopoulos
  • Share/Email
  • Comment
  • Print

Last week Russian tanks rolled into South Ossetia while Russian bombers were taking out critical communications infrastructure. But even before the first tank rolled across the disputed borders, another war was brewing in cyberspace.

Armies of hackers started attacking critical cyberinfrastructure in Georgia. A counter-offense of Georgia hackers fought back to control major routing exchanges. Then a disturbing escalation: Georgian hackers were able to take control of Russian strategic launch capabilities. The Russian defense AI was defeated and forced to begin the launch sequence of ICBMs toward strategic targets everywhere. At the last moment, a Russian teenager with top-secret network access gained over an open Wi-Fi in his high-school network was able to persuade the Russian AI to back off by showing it the futility of war through a game of tic-tac-toe. Oh, wait a second – that's a movie plot! None of this actually happened

For all the reports of cyberwar between opposing arming of cyberwarriors, you'd think that a big part of the war was being fought in cyberspace. A few instances of denial of service (DoS) were being amplified by the media into a cyberwar. I got e-mails and calls from journalists asking me about the implications of cyberwarfare, the vulnerability of U.S. infrastructure and the potential for electronic Pearl Harbor. What a load of [redacted:TOPSECRET]!

There are two problems with the theory of cyberwarfare in the Caucusus. The first is that all of the reported attacks consisted of DoS against Web sites, mostly connected with government functions. There were no reports of attacks against critical infrastructure, electronic jamming of stock exchanges, SCADA-hack explosions in substations or anything like that. This was not a battalion of elite army-trained hackers from the Russian Southern Command of Cyber Warfare (Unit 1337). In all likelihood it was groups of run-of-the-mill script kiddies with control of a botnet, stroking their egos with the higher cause of injured nationalism. More "Boris waz ere" than "All your SCADA are belong to us."

The second problem is that in order for cyberwarfare to be successful there needs to be a lot of cyberinfrastructure to attack. Georgia and Russia are both making tremendous strides in development of Internet infrastructure but let's not kid ourselves. These are not info-economies running all their banking in virtual reality on top of Second Life. The targets that were attacked were mostly government brochure-sites. Even in the United States, where a lot of government services are delivered over the Web, a sustained DoS attack against government Web sites would not really affect the economy. It would simply make the online experience more like the real-life DMV experience, and we somehow survived that fine up to 1995.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (1)
Login
Forgot your account info?

Small NumbersBy Anonymous on August 21, 2008, 6:53 pmThe report I keep reading is 300 million attacks per day. I know my number is 1/20th the size but we are filtering 15 million per day and we don't spend any time...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed