Talk on Cyber Terrorism

bls31

New member
I am happy to inform all friends that I gave a talk on Cyber Terrorism during the Annual Technical Convention of IETE at Hotel Leela International Bombay. Brig Lakshman Singh
 
I hope we will have little update and details on the topic before we get it from other news sources i wish to have it through JL
 
PART ONE
CYBER TERRORISM
Brig Lakshman Singh, VSM (Retd)​
Cyber terrorism is the premeditated use of disruptive activities, or the threat thereof, against computers and/or networks, with the intention to cause harm or further social, ideological, religious, political or similar objectives, or to intimidate any person in furtherance of such objectives
Business, government and industry have all become addicted to information. Their reliance on information creates opportunities for terrorism. Imagine a day without the Internet. What would the impact be? Computer networks do more than systems --they run the business of daily life the nature of cyber security threats pose not only to critical infrastructures but ultimately to the economy and the citizens
If one looks at the projected e-Commerce number, with a projected e-Commerce purchase volume expected to reach over $355 Billion in North America alone over the next three years, the Internet being down for just one day could disrupt a mind boggling worth of transactions.
More than just e-Commerce transactions flow over the Internet .e Mail, voice communications, some banking machines, credit card authorizations for physical stores and the list goes on and on. Information is the life blood of commerce, regulatory oversight and even social status. The importance of the information and the ability to access it, transfer it and act upon it has increased to the point that it is unfathomable for all but the smallest of businesses to operate without computers or networks. As the value of the computing infrastructure increases so to does the value of disruption. The financial implications are one thing, but the psychological impact of the Internet disruption could be even more damaging.
How likely is this to happen? It is not, if it will happen, but when. The likelihood of a cyber terrorism attack disrupting the Internet increases every day. The increased reliance on the Internet by business, government and society has made it a prime target for terrorist intent on disrupting our economy and way of life.
​
Security professionals have expressed their increasing concern over not only the increase in frequency of attacks against the Internet, but also the increase in the level of sophistication of these attacks. While the complexity of the attacks is increasing, the skill level of the intruder that launched the attack is decreasing. This is a very troubling trend. As the terrorists learn from every attack what works and what doesn't, where the vulnerabilities are, how we respond, and the methods we use to detect these attacks, they gain the knowledge that will increase their odds for success.
What is the current state of attack?
Despite significant investment in technology and infrastructure, cyber terrorism represents one of the greatest challenges in combating terrorism. Every day the Internet and countless other computer systems are under attack.

Most studies to date have shown that critical information infrastructures are potentially vulnerable to a cyber terrorist attack. The increasing complexity of information systems creates new vulnerabilities and challenges for IT management. Even if the technology is armour plated, insiders acting alone or in concert with other terrorists may be able to exploit their access capabilities to wreak considerable harm.
What would the impact be of Terrorism attack?
The intention of a cyber terrorism attack could range from economic disruption through the interruption of financial networks and systems or used in support of a physical attack to cause further confusion and possible delays in proper response. Although cyber attacks have caused billions of dollars in damage and affected the lives of millions, we have yet witness the implications of a truly catastrophic cyber terrorism attack. What would some of the implications be?
Direct Cost Implications

  • Loss of sales during the disruption
  • Staff time, network delays, intermittent access for business users
  • Increased insurance costs due to litigation
  • Loss of intellectual property - research, pricing, etc.
  • Costs of forensics for recovery and litigation
  • Loss of critical communications in time of emergency
Indirect Cost Implications

  • Loss of confidence and credibility in our financial systems
  • Tarnished relationships& public image globally
  • Strained business partner relationships - domestic and internationally
  • Loss of future customer revenues for an individual or group of companies
[FONT=&quot]Loss of trust in the government and computer [/FONT]

Bls31
 
Part TWO
When will it happen?
As discussed earlier as the value of our information infrastructure further increases and the capabilities of the cyber terrorists' increase, the likelihood of a significant incident increases.

Thwarting Cyber Terrorism

“Critical” Infrastructure and “Key Resources”
The growing threat of international terrorism in the mid-1990s renewed federal Government interest in infrastructure issues. On July 15, 1996, President Clinton signed Executive establishing the President’s Commission on Critical Infrastructure Protection (PCCIP). The Directive’s goal was to establish a national capability within five years to protect “Critical” infrastructure from intentional disruption. To help achieve its goal, it directed certain federal agencies to lead the government’s security efforts and identify private sector liaisons in specific critical infrastructure sectors.

Following the terror attacks of September 11, 2001, President Bush signed new Executive Orders relating to critical infrastructure protection.
The Executive Order signed October 8, 2001, established the Office of Homeland Security and the Homeland Security Council. Among the duties assigned the Office was to coordinate efforts to protect: energy production, transmission, and distribution services and critical facilities and other utilities, telecommunications, facilities that produce, use, store, or dispose of nuclear material, public and privately owned information systems, special events of national significance, transportation, including railways, highways, shipping ports and waterways, airports and civilian aircraft, livestock, agriculture, and systems for the provision of water and food for human use and consumption. In response to the terror attacks of September 11, 2001, Congress passed the USA PATRIOT Act of 2001 The PATRIOT Act was intended to “deter and punish terrorist acts in the United States and around the world, to enhance law enforcement investigatory tools, and for other purposes.”

- Congress Research Service Report for Congress October 1 2004
The Obama administration is finalizing plans for a new Pentagon command to coordinate the security of military computer networks and to develop new offensive cyber-weapons, sources said last night. Planning for the reorganization of Defense Department and intelligence agencies is underway, and a decision is imminent, according to a person familiar with the White House plans. The new command would affect U.S. Strategic Command, whose mission includes ensuring U.S. "freedom of action" in space and cyberspace, and the National Security Agency, which shares Pentagon cyber security responsibilities with the Defense Information Systems Agency. The Pentagon plans do not involve the Department of Homeland Security, which has responsibility for securing the government's non-military computer domain.
-Washington Post April 22 2009
Indian Scene

The Indian Express dated February 6th reported of the setting up of the National Security Board (NIB) consisting of the three defence chiefs, the Cabinet secretary, the It secretary and the RAW chief and draw on the expertise of all intelligence agencies.. The NIB will be the nodal agency for the interception of SMS, e-mail:, this has come on the heels of the setting up of the Cyber Emergency Response Team (CERT) a nodal agency for tracking cyber crime across the country and digging their origins.

What needs to be done by Corporates

Corporates must be forced to wage an all-out war against cyber terrorism. Securing the information infrastructures will require a substantial effort on everyone's part. Close collaboration between government and the private sector is critical. Even more critical is the close collaboration within the computer, networking and software industries. These industries must work closely and continue efforts to enhance technology security capabilities. Security is designed in, not added on. Until the weakest links in the network are protected we all are vulnerable and may be impacted. The government sector must institute tougher penalties for cyber crimes and increased funding for law enforcement efforts to fight it., though easier said than done. This must be accomplished with a high degree of collaboration globally. Getting countries to agree on anything these days seems to be an almost unachievable task. Is cyber terrorism the shape of future conflict? Is a digital underground developing right now? Will our scientists, software engineers, and technical resources be able to stay one step ahead of these faceless terrorists? Only time will tell!

Computer and information security, data protection, and privacy are all growing problems. No single technology or product will eliminate threats and risk. One wonders if we have even begun to think of the social and economic implications of a considerable cyber terrorism attack against our infrastructure. Securing our computers, information, and communications networks secure our economy and our country. A global strategy and policy for combating this type of terrorism is need now.
BLS31
 
Part 3

Cyber terrorism Prevention Checklist​
​
Find out whether your IT, security, and human resource personnel have put in place the necessary security precautions to protect you from becoming an unwitting collaborator.
Intelligence Gathering
This area includes three possible security lapses that allow for penetration of systems with the goal of stealing information or sensitive data. The key here is to get your organization, company, or institution on a wartime footing and control access to your building, personnel, and information systems.
1: Identity Impersonation and/or Identity Theft
Many organizations—businesses especially—fall down on this simple yet effective threat
Prevention.
2: Spyware
Spyware is software that sits on your system and tries to be invisible while collecting as much information as possible to be sent offsite.
3: Internal Threats
This area is often overlooked by organizations, but employees can be a great source of information-gathering for unauthorized use.
Systems Damage
This area includes four possible security lapses that allow for the disruption or damage of data and your information infrastructure
4: Breakdowns in the Human Firewall
People are the weakest link in a security plan. Proper training can prevent a majority of security lapses.
5: System/Browser Vulnerabilities
Bugs or other code flaws can allow an unauthorized user to execute arbitrary code.
6: Wireless Insecurity
Wireless networks are bringing installed by organizations at a rapid rate, opening their networks to “drive-by hacking.”
7: Denial-of-Service (DoS) Attacks
These attacks are becoming more and more sophisticated, and in some cases initiated as a side effect of some other attack.
System Hijacking
In this area, three possible security lapses allow the use of established communications vehicles for clandestine operatives to secretly communicate with others.
8: Steganography
Steganography is the art and science of hiding the fact that communication is happening.
It involves hiding messages inside text, images, sounds, or other binary files for clandestine communications.
9: Tunneling
Tunneling allows communication in an environment where communication may not be possible due to firewalls or proxies that limit traffic. For example, an application called HTTP-Tunnel allows people behind a firewall (which allows only web surfing) to use any Internet application. HTTP-Tunnel runs as a SOCKS server or via port mapping and can tunnel both TCP and UDP.
10: Worms, Trojan Horses, and Viruses
These attacks are becoming more prevalent and much more sophisticated. Next generation
worms, Trojan horses, and viruses will be more intelligent and attack
through multiple methods of distribution

Disinformation
This area includes two possible security lapses that allow for the dissemination of propaganda such as the following:
Spreading false • rumors electronically that are picked up by the media as true
Cracking into • news servers to plant false or misleading stories
Entering false • or misleading information in databases, thus undermining the effectiveness of organizations relying on that information
11: DNS Poisoning and Domain Hijacking
DNS poisoning is convincing a name server that a domain has a different IP address. Domain hijacking involves stealing a domain at the registrar level.
12: Changing Web Site Contents
Web site defacement is widespread and has evolved to being used as a method of distributing propaganda, rumors, and misinformation (as opposed to just plain vandalism).

-Frank Fiore and Jean Francois

The problem
The resource to launch a cyber attack are common place:-a computer and an internet connection is all that is needed to wreck havoc, added to this is public and private sectors are relatively ignorant to there dependence on computers and the venerability of these computers.

THE NEXT GENERATIO OF TRANSNATIONAL CYBER TERRORISTS UNDERSTANDS​
THAT A HAND ON MOUSE CAN BE MORE LETHAL THAN A FINGER ON TRIGGER​
BLS31

 
Right Said

Cyber terrorism Prevention Checklist​
Find out whether your IT, security, and human resource personnel have put in place the necessary security precautions to protect you from becoming an unwitting collaborator.
Intelligence Gathering
This area includes three possible security lapses that allow for penetration of systems with the goal of stealing information or sensitive data. The key here is to get your organization, company, or institution on a wartime footing and control access to your building, personnel, and information systems.
1: Identity Impersonation and/or Identity Theft
Many organizations—businesses especially—fall down on this simple yet effective threat
Prevention.
2: Spyware
Spyware is software that sits on your system and tries to be invisible while collecting as much information as possible to be sent offsite.
3: Internal Threats
This area is often overlooked by organizations, but employees can be a great source of information-gathering for unauthorized use.
Systems Damage
This area includes four possible security lapses that allow for the disruption or damage of data and your information infrastructure
4: Breakdowns in the Human Firewall
People are the weakest link in a security plan. Proper training can prevent a majority of security lapses.
5: System/Browser Vulnerabilities
Bugs or other code flaws can allow an unauthorized user to execute arbitrary code.
6: Wireless Insecurity
Wireless networks are bringing installed by organizations at a rapid rate, opening their networks to “drive-by hacking.”
7: Denial-of-Service (DoS) Attacks
These attacks are becoming more and more sophisticated, and in some cases initiated as a side effect of some other attack.
System Hijacking
In this area, three possible security lapses allow the use of established communications vehicles for clandestine operatives to secretly communicate with others.
8: Steganography
Steganography is the art and science of hiding the fact that communication is happening.
It involves hiding messages inside text, images, sounds, or other binary files for clandestine communications.
9: Tunneling
Tunneling allows communication in an environment where communication may not be possible due to firewalls or proxies that limit traffic. For example, an application called HTTP-Tunnel allows people behind a firewall (which allows only web surfing) to use any Internet application. HTTP-Tunnel runs as a SOCKS server or via port mapping and can tunnel both TCP and UDP.
10: Worms, Trojan Horses, and Viruses
These attacks are becoming more prevalent and much more sophisticated. Next generation
worms, Trojan horses, and viruses will be more intelligent and attack
through multiple methods of distribution

Disinformation
This area includes two possible security lapses that allow for the dissemination of propaganda such as the following:
Spreading false• rumors electronically that are picked up by the media as true
Cracking into• news servers to plant false or misleading stories
Entering false• or misleading information in databases, thus undermining the effectiveness of organizations relying on that information
11: DNS Poisoning and Domain Hijacking
DNS poisoning is convincing a name server that a domain has a different IP address. Domain hijacking involves stealing a domain at the registrar level.
12: Changing Web Site Contents
Web site defacement is widespread and has evolved to being used as a method of distributing propaganda, rumors, and misinformation (as opposed to just plain vandalism).

-Frank Fiore and Jean Francois

The problem
The resource to launch a cyber attack are common place:-a computer and an internet connection is all that is needed to wreck havoc, added to this is public and private sectors are relatively ignorant to there dependence on computers and the venerability of these computers.

THE NEXT GENERATIO OF TRANSNATIONAL CYBER TERRORISTS UNDERSTANDS​
THAT A HAND ON MOUSE CAN BE MORE LETHAL THAN A FINGER ON TRIGGER​
BLS31
Sir Jiase Purane jamane mein kahate the Kalam Talwar ki dhar se tej hoti hai, Same is about internet. Intnet ki dhar bhi bahoot tej. We use the internet daily , we can't survive without it, we eat internet , we drink internet. Even the day is not far that we well stop using the physical money , all the transaction are done on the internet.
As we fly on the aircraft and we know the consequences in case of crash. So we use internet daily and we must know our liabilities, if we are not cautious enough we are likely to loose either the password or the money from the bank online account or some times whole data in our computer can be hacked.
 
While Cyber Terrorism is a real threat for countries like US and UK where internet is embedded too deep in the daily lives. People there actually check the internet before going out to see if they need take an umbrella or not.

In India, one can still see people in long queue getting their passbook updated in the PSU banks. So the information is very well distributed, even if all the SBI servers fail, people would still have the information with them.

The real users of the information network (IT) in India are the private companies and they have adequate protection to safe guard their business (money).

On the other hand, the real threat in India is the espionage and compromise of personal information. I remember reading an article some time back which questioned about too much use of Chinese equipments in India as it would be easier for Chinese to break-in through them.

Obviously, the private companies are not too much bothered about personal information as it is not there business (they don’t loose any money). So it’s all “ram bharose” on this front.
On the espionage front, Indian companies hardly do any R&D to worry about it and MNC do not keep sensitive data in India.
 
Sir We use the internet daily , we can't survive without it, we eat internet , we drink internet. Even the day is not far that we well stop using the physical money , all the transaction are done on the internet.
I agree .
From my talk itself
Computer networks do more than systems --they run the business of daily life the nature of cyber security threats pose not only to critical infrastructures but ultimately to the economy and the citizens
bls31
 
Actually sir I am more worried about actual terrorism than cyber terrorism...

Sorry to burst your bubble but any 5th standard pass student knows about this " CYBER TERRORISM", not much is done for the actual terrorism prevalent everywhere...

Enjoy....
 
I agree in that mine was a small bubble, confined in a bigger and thicker balloon of the Annual Technical Convention of IETE spread over two days, with five technical sessions with four to five, much more eminent than me, speakers each in each session. One can gauge the importance of the Topic that it was attended by the Deputy National Security Adviser.

bls31
 
Sounds very impressive sir but it just told me that the deputy national security adviser wastes a lot of his time attending such events.

Put your ego aside for a minute and think about its usefulness..
 
it appears that the thread is going on a different direction as as it usually happens.

I have no ego's , what ego a 79 year old can have ? MY idea was to make some friends and those interested in the subject, aware of the important issue. It appears that I have ruffled some feathers . So I switch off from the thread for others to express and exchange their views regardless. BLS31
 
Last edited:
For Moderator .

In view of the fact that some view this thread to be serving no purpose and also have passed some derogatory comments on some senior functionaries, You may consider locking the thread . BLS 31
 
You are too sensitive... The whole world will never agree with whatever you post, Cynics like me always find something to criticize... I can't believe I am telling this to such an experienced person like you...
 
Mr. Kadian, negative criticism is never good. If you don't have anything positive to put here you should refrain to spit your harsh words.

And show some respect to senior person of your grandpa age.

Thanks !


You are too sensitive... The whole world will never agree with whatever you post, Cynics like me always find something to criticize... I can't believe I am telling this to such an experienced person like you...
 
Last edited:
Mr. Kadian, negative criticism is never good. If you don't have anything positive to put here you should refrain to spit your harsh words.

And show some respect to senior person of your grandpa age.

Thanks !



Jit I don't automatically respect someone if he/she just happens to be born before me..

It was not negative criticism, I just said terrorism is more important than cyber terrorism...
 
Hmm, Kadian hame to hamare bade-bujurgo ne apne se bado ka respect karna hi sikhaya hai, but if ulta-modern guys like you don't agree with it, makes no sense to advice. :rolleyes:

Anyways, You know Cyber terrorism has become an integral part of Terrorism and it is actually making it hi-tech and more effective. Terrorism is also becoming advance with time using various techniques like using of Emails, VoIP phones and online fund-transfer and more.

Have a look into following articles with keeping ur eyes n mind open -

http://www.symantec.com/avcenter/reference/cyberterrorism.pdf

http://news.zdnet.com/2100-1009_22-124765.html

http://www.directionsmag.com/article.php?article_id=432

Now let's not derail the thread.


Jit I don't automatically respect someone if he/she just happens to be born before me..

It was not negative criticism, I just said terrorism is more important than cyber terrorism...
 
Brig Singh
Please accept my apologies if some young spring chicken has crossed the threshold of decorum on how to talk to a senior officer.
It was a very good talk and indeed the message is clear and that was, there are lessons to be learned here for Indian Military and Intel agencies. IMHO All three service branch and respective Intel Agencies must establish cyber units. Indian Military must have their own dedicated backbone infrastructure that is fibre optic laced with security encryption such that if in case of breach the administrators will be informed and data either encrypted or bit changed in such manner that whole data become worthless. Copper based backbone is very prone to theft, circumvent information.
 
Back
Top