Is the Cyberterror Threat Credible?

Scott Pinzon writes "Is the idea that cyber terrorists might take down US networks or utilities realistic, or over-hyped? One of the authors of the Patriot Act and several Black Hat 2005 speakers debated the issue informally at WatchGuard's "Security and Beer Roundtable." Participants include Dan Kaminsky, Johnny "Google Hacker" Long, Tim Mullen, Sensepost penetration testers, a guy from Microsoft's ISA team, and others."

Comments

No

[techsoldaten]

No, there is no threat posed by cyberterrorism. It's just a way to make the federal government feel justified in paying CISSPs $1000 an hour for pen testing. Yes, there are people on contracts like this.

M

Re:Are critical systems on the internet?

[revelCyllufyalP]

Actually yes, there are critical systems on the internet. Not critical in the sense that OMG WE'RE GONNA GET HACKED AND THEY'LL USE OUR NUKES, but critical in the sense that it could cause a major disruption in the way we live, work, and do business.

For example, take the power company's website you mentioned. Suppose it was taken down by hackers. Now at first this wouldn't seem like a big deal, but think about all the customers that pay their bills online. Not only will they not be able to pay their power bills but also the hackers potentially have access to their credit card information.

Granted, these kinds of attacks don't pose a serious threat, but there's also the possibility that the compromise of the web server leads to the compromise of more mission critical systems. The web server may not even be connected to any of these systems but maybe the same passwords are used of something of the like (obviously bad security policy, but you must take into account the fact that there will also be a factor of human stupidity).

Oh and one more thing. What exactly did you mean that half the internet can be taken down with a backhoe? I know that you were exaggerating but honestly, do you think physical attacks of any simple nature would be able to take out even a single website? Obviously if you destoryed a whole server farm (this would definately fall under the category of not simple) you could take out some sites, but some have hosting in multiple locations and thus your attack would be futile.

In summary, YES cyberterrorism is a threat. Certainly not the biggest one facing us right now but a threat none the less. And NO, the internet cannot be easily disabled.