Government Cyber Storm Ends

← Back to Stories (view on slashdot.org)

Posted by CmdrTaco on Sunday February 12, 2006 @05:09AM from the guess-who-is-to-blame dept.

Bemmu writes "Mainichi Daily News and BBC News are reporting that the 'Cyber Storm' operation, for testing how prepared America is for fending off cyber attacks, has now concluded. Apparently they even used bloggers as part of the operation, as relayers of misinformation!"

15 of 124 comments (clear)

Misinformation? by Winlin · 2006-02-12 05:11 · Score: 5, Funny

Are you trying to tell me bloggers aren't reliable??? My whole worldview has come crashing down.
1. Re:Misinformation? by Zeinfeld · 2006-02-12 06:20 · Score: 4, Insightful
  
  the gov don't want you getting information off the oficial channels. stick to your tv and leave the internet alone.
  This lot don't want people to take information from anywhere else than themselves, Fox News and the Washington Times.
  But I suspect that the reason Blogs were in the simulation was because of their speed of reaction rather than anything else.
  The biggest cyberwar effect being seen today is freebooting groups of partisans launching unofficial (and possibly sometimes official) actions. A big concern in the intel community is that these unofficial actors my tip an international incident into a crisis.
  Take the current spate of attacks by Islamist hackers attacking targets in Denmark. Imagine if Denmark was a crazy-actor like Libya or Iran and a cyberattack by one of those unofficial freebooters took out a major infrastructure. Or imagine what might happen if Iranian hackers attacked Denmark, took out a major infrastructure and Danish hackers retaliated in kind.
  Add freebooter hackers into an environment where diplomats are doing everything they can to avoid escalation and the potential for disaster is large.
  
  --
  Looking for an Information Security student project suggestion?
  Try http://dotcrimeManifesto.com/
Lies! by elleomea · 2006-02-12 05:13 · Score: 5, Funny

Clearly it han't ended and slashdot is just being used for misinformation!
Internet attack? by xxxJonBoyxxx · 2006-02-12 05:14 · Score: 4, Funny

"It was carried out on secure computers in the basement of the Secret Service in Washington DC."
Sounds realistic...
1. Re:Internet attack? by Rosco+P.+Coltrane · 2006-02-12 05:22 · Score: 4, Funny
  
  "It was carried out on secure computers in the basement of the Secret Service in Washington DC." Sounds realistic...
  
  Dude, the simulation is supposed to be accurate, remember? I bet the SS guys playing the 3v1l h4x0rs even drew pimples on their faces, wore CCC-branded shirts, didn't wash for 2 weeks, bought the latest issue of 2600 and messed up the basement with old slices of pizza before doing their simulated deeds...
  
  --
  "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
"Apparently they even used bloggers..." by Anonymous Coward · 2006-02-12 05:15 · Score: 5, Funny

Man, I am so linking to this.
Uh oh by rwebb · 2006-02-12 05:18 · Score: 5, Insightful

If the exercise Hurricane Pam is to Hurricane Katrina as Cyberstorm is to an actual cyber attack, then we're in deep doodoo. No smiley.

--
Trusted by cats.
1. Re:Uh oh by carpe_noctem · 2006-02-12 05:58 · Score: 5, Insightful
  
  Hey, that's a rather unfair comparison. The Hurricane Pam exercise accurately pointed out everything bad that would happen in case of a category-5 hurricane, and it also outlined the government's areas where they were not prepared (well, up until the point when the exercise was cancelled, that is). The exercise itself could have been very useful, had the government actually used information from this exercise. However, gross amounts of miscommunication (which seems to be the norm in the US government these days) led to the katrina disaster.
  
  --
  "Quoting famous computer scientists out of context is the root of all evil (or at least most of it) in programming." - K
Cyber-BS by Rosco+P.+Coltrane · 2006-02-12 05:18 · Score: 4, Insightful

The exercise had given the US "an excellent opportunity to enhance our nation's cyber security," the US said.

What? they finally told Microsoft to release a secure OS or else...?

Seriously, most "cyber-attacks" are as much the result of criminals, professional spammers and teenage virus writers as it is the result of the single shoddy OS they target. Both are needed for an attack to work. The rest can easily be taken care of by training IT professionals better and by selecting more secure OSes.

And no, before you ask, I'm not trying to push *nix or MacOS against Windows: while I do believe Windows is badly designed at core and will always be insecure one way or the other, if Microsoft could make it secure, it would most certainly give a lot less headaches to the DHS folks.

--
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
This just in... by coastin · 2006-02-12 05:21 · Score: 5, Funny

After thinking that the Internet had doged a bullet from the Cyber Storm of the century, reports are now coming in that several cyber levys have been breeched and the internet is filling with spam.

--
I lost my sig...
Crack by Anonymous Coward · 2006-02-12 05:33 · Score: 5, Funny

I wonder what happens when they use crackers instead of hackers.
Mock attack = Mock results by t7 · 2006-02-12 05:35 · Score: 5, Insightful

"The war game drew in 115 agencies from the FBI and CIA to the Red Cross, the Department of Homeland Security said."

"IT companies and state and foreign governments also played a role in responding to the mock attacks."

These "simulated" attacks are all well and good, but they are being performed by entities meant to keep the system secure. Isn't that only attacking from one angle? Did these groups attack the systems like scriptkiddies would? Like seasoned professionals not skewed or influenced by "standard corporate security measures"? Did they take into account social engineering and attacks from the inside?
Quick - someone save the internet by MECC · 2006-02-12 05:59 · Score: 4, Funny

"The Internet survived, even against fictional abuses against the world's computers."

I've got this picture of DHS undercover agents running around screaming "the sky is falling, the sky is falling!", and then making chicken-clucking noises. Nobody panics, and they proclaim "Right then, all is well".

My tax dollars hard at work...

--
"We are all geniuses when we dream"
- E.M. Cioran
Re:Press Release by Max+Threshold · 2006-02-12 06:28 · Score: 4, Interesting

Seriously, though... I think the do this all the time. They've been testing the public and the media for decades to see who calls bullshit. Their lies and obfuscation have slowly gotten more outrageous, and people have been conditioned to think nothing of scandals that just a generation or two ago would have resulted in civil war.
Slashdot CyberSecurity Consulting by tritab · 2006-02-12 06:58 · Score: 4, Insightful

How many comments do we need asking "what if this", "what about that", "why don't they make Microsoft fix their insecure OS", etc? I for one, am excited that the government even attempted this exercise. The smart folks who were involved with this definitely learned valuable lessons. Likely, as was seen with hurricane Katrina, communication was the biggest obstacle. Even the PHB's will notice the major problems. Please keep in mind that the government is a large bureaucracy and as such, is large and hard to change.

Also keep in mind that the information security profession is still very immature. Remember that doctors and lawyers "practice" their professions. Do we "practice" information security? Engineers are legally required to submit their designs for peer review for all municipal projects. Is that same level of review required for information security for government efforts?

We still have quite a way to go, but we are making steps forward.