Forty-five percent of corporate chief security officers believe a "digital Pearl Harbor" will take place eventually, with 13 percent anticipating such an attack within a year, according to a survey by CSO Magazine. . The survey defined a "digital Pearl Harbor" as an attack that "plunge(s) America into chaos by using computer technology and the Internet to attack national critical infrastructures." Derek Slater, Editor of CSO Magazine, a specialty magazine for security professionals, told United Press International he was surprised that so many respondents thought such an attack would happen. Slater suggested that the threat drawing the most concern is what he termed a blend-in thread, where "a physical event is magnified by a nearly-simultaneous digital attack that would ... limit people's ability to get information." More than half of responding CSOs characterized themselves as not very or not at all confident in the government's ability to successfully respond to cyber-emergencies; 77 percent of respondents suggested the government establish better communication with the private sector to better safeguard cyberspace, and nearly half suggested creating a high-level cyber-security position at the Department of Homeland Security, a development that did occur not long after the survey was taken.. A recent poll uncovers concerns among CSOs regarding the threat of a digital Pearl Harbor type assault on the nation’s critical systems and the repercussions for overall security.. Corporate Security, Cyber Threats, Digital Pearl Harbor, Cybersecurity Awareness. . Brittany Day
A fledgling nonprofit group working to develop an automated cyber-attack early warning system, the Cyber Incident Detection Data Analysis Center (CIDDAC), is about to begin a pilot project to collect data on network intrusions from a group of companies in national-infrastructure industries. . Backed by a grant from the U.S. Department of Homeland Security, CIDDAC has set up an operations center at the University of Pennsylvania's Institute of Strategic Threat Analysis and Response laboratory. Around 30 organizations will eventually participate in the project, although some are still being selected, according to CIDDAC Executive Director Charles "Buck" Fleming. He expects to have useful data from the pilot test in about five months. CIDDAC has been two years in the making. Fleming, the former president of Philadelphia-based Linux services company LinuxForce Inc., says that after the Sept. 11, 2001, terrorist attacks he began talking with others in the IT industry about the need for protections against a terrorist attack on the nation's electronic infrastructure. CIDDAC's focus is on linking together organizations in industries such as banking, electrical power, gas and oil, telecommunications and transportation. CIDDAC doesn't disclose the names of its members, and none are yet willing to publicly identify themselves, according to CIDDAC representatives. However, the organization's board of directors includes executives from Liberty Bell Bank, the Federal Reserve Bank of Philadelphia, gas company Air Products and Chemicals Inc. and energy consultancy Kema Inc., according to CIDDACs Web site. The link for this article located at InfoWorld is no longer available. . Backed by a grant from the U.S. Department of Homeland Security, CIDDAC has set up an operations cen. fledgling, nonprofit, group, working, develop, automated, cyber-attack, early, warning, system. . Brittany Day
Richard Clarke, chairman of the president's Critical Infrastructure Protection Board, recently spoke with Computerworld reporter Dan Verton about the nature and potential of the threat to the nation's critical infrastructure and what he sees as his biggest challenges with respect to national cybersecurity. Can you briefly explain the cybersecurity threat for those who still may not be sure who or what the enemy is. . .. Richard Clarke, chairman of the president's Critical Infrastructure Protection Board, recently spoke with Computerworld reporter Dan Verton about the nature and potential of the threat to the nation's critical infrastructure and what he sees as his biggest challenges with respect to national cybersecurity. Can you briefly explain the cybersecurity threat for those who still may not be sure who or what the enemy is ? A: There's a spectrum of threats out there, some of which we experience every day. That spectrum runs from [individuals] who simply vandalize Web pages to those who conduct nuisance denial-of-service attacks. That's on the low end, which is usually conducted by young hackers -- so-called script kiddies. In the middle, you have criminals who conduct fraud and industrial espionage online. The middle range of threats is usually carried out by organized crime, companies and also nation-states. The link for this article located at ComputerWorld is no longer available. . Richard Clarke, chairman of the president's Critical Infrastructure Protection Board, recently spoke. richard, clarke, chairman, president's, critical, infrastructure, protection, board, recently, spoke. . Anthony Pell
The results of the "Digital Pearl Harbor" conducted last month at the US Naval War College are now available. The goal of the simulation was to conduct an organized, well-funded electronic attack directed at various facets of national infrastructure: telecommunications, . . . . The results of the "Digital Pearl Harbor" conducted last month at the US Naval War College are now available. The goal of the simulation was to conduct an organized, well-funded electronic attack directed at various facets of national infrastructure: telecommunications, electric power, finance, and the Internet. The exercise did demonstrate that damage was, in fact possible. However, nothing as bad as dreaded cyberterrorism related judgement day that government officials and the media have perpetuated since September 11. Many of the suggested means of attack, phone networks, automated payment systems, etc, were vulnerable, but nothing so open as to cause irrepairable national damage. The Gartner group has released the results are they are available here. The Register has an excellent summary/analysis of the report. . The results of the 'Digital Pearl Harbor' conducted last month at the US Naval War College are now a. results, 'digital, pearl, harbor', conducted, month, naval, college. . Anthony Pell
The FBI's National Infrastructure Protection Center warned Friday of an increased threat of distributed denial of service (DDoS) attacks on computer networks. According to an advisory released at the NIPC Web site, the organization "has reason to believe that the potential for future DDoS attacks is high.". . .. The FBI's National Infrastructure Protection Center warned Friday of an increased threat of distributed denial of service (DDoS) attacks on computer networks. According to an advisory released at the NIPC Web site, the organization "has reason to believe that the potential for future DDoS attacks is high." The NIPC advised network infrastructure operators to "take a defensive posture and remain vigilant at a higher state of alert." The warning did not say whether any specific networks were at particular risk of DDoS attacks, nor did it identify any groups or individuals suspected of launching potential attacks. The NIPC did note that anti-U.S. protesters have said they are targeting for defacement sites operated by the Department of Defense and by "organizations that support the critical infrastructure of the United States." The link for this article located at Newsbytes is no longer available. . Department of Homeland Security cautions about an increasing risk of cyber assaults targeting American digital infrastructures. Remain vigilant!. DDoS Threat,Cybersecurity Alert,Network Protection,Infrastructure Security. . LinuxSecurity.com Team
The Bush administration is wrapping up details on a new governmentwide structure to lead national cybersecurity efforts, again rejecting the idea of having a security czar. White House officials have been working for months on ways to reorganize the government's initiatives . . . . The Bush administration is wrapping up details on a new governmentwide structure to lead national cybersecurity efforts, again rejecting the idea of having a security czar. White House officials have been working for months on ways to reorganize the government's initiatives for protecting the information systems that support the nation's critical infrastructure. The critical infrastructure protection (CIP) effort started under President Clinton in 1998, when he signed Presidential Decision Directive 63. Many have suggested establishing a cybersecurity czar with a role similar to John Koskinen's position leading the federal government's Year 2000 efforts. But Clinton, concerned that agencies would pass responsibility to a czar, in PDD 63 created a national coordinator at the National Security Council to oversee agency CIP efforts. The link for this article located at USAToday is no longer available. . The Bush administration is wrapping up details on a new governmentwide structure to lead national cy. administration, wrapping, details, governmentwide, structure, national. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.