Slashdot Mirror
Japan Will Stage Mock Cyberattacks
freaktheclown writes "Japan is set to start staging mock cyberattacks on various companies as precautionary exercises. According to the article: 'Japan will conduct nationwide exercises next year to prepare effectively for cyberattacks on computer networks. Mock cyberterrorists will simulate attacks on computer networks of businesses and government organizations to discover vulnerable areas, the Yomiuri Shimbun reported Wednesday. Participants in the exercises will include financial institutions, communications companies and Internet service providers, as well as the central government and local governments.'"
This is great. I hope we learn something important from observing this, and frankly I'm glad we (US) aren't having to pay for it.
.sigs are for post^Hers.
While I'm pretty sure you were being sarcastic...you wouldn't want to do this because if this type of attack is successful you may actually lose something.
Doubtful. Though it's not explicitly stated in the original article, for a test like this to be at all meaningful, the attackers and attackees will compare notes very carefully at the end of the test to help the attackees harden their servers against whatever attacks worked. Any other attacks during the test are likely to be examined in even more detail, by more skilled specialists, than usual.
--
The universe is a figment of its own imagination.
The universe is a figment of its own imagination.
For smaller companies and websites, yes, that's a fine way to test. Especially when you would otherwise not have resources to do so. However, a financial institution would be committing business and legal suicide to allow something like this to happen. If a hacker were successful, that means they compromised security around some VERY sensitive and important information. And once it's compromised...why not steal billions of dollars? Or sell personal information from the accounts you find?
It really doesn't work well for those types of scenarios.
They want to simulate attacks by a skilled and clandestine attacker, not the noisy fumbling of script kiddies, perhaps?
In my opinion, mock attacks largely allow people to feel good about their mock defenses.
This sig has absolutely no significance and serves only to take up screen space and waste the time of the reader.
Who says we're not paying for it?
A) We're "paying for it" by not simulating our own right away and experiencing it ourselves.
B) We're sitting by while someone else gets experienced hardened professionals out of it while we sit and watch.
C) We're hoping they'll share information with us about the attacks and precautions taken. Do you really think they'll share everything? Hell no.
My presumption is that we've been invited, but you never really know how much the US will be permitted to see or to participate.
"Love is like pi - natural, irrational, and very important." (Lisa Hoffman)