Slashdot Mirror
Mathematical Model Helps Estimate Optimal Timing of Cyber Attack
sciencehabit writes "Have you been missing the grim mathematical war games that strategists once used to map out possible nuclear confrontations? Don't worry, the games are back — this time applied to computer security. Researchers have now mathematically formalized the strategy of computer hacking, potentially enabling anyone — governments, activist hackers, cybermafia — to determine the optimal timing of attacks."
If you don't do it now, *they* will.
I've worked out the optimal time to pull down their coffee machine.
Where will these strategists be without their coffee, eh?
Also FatPhil on SoylentNews, id 863
What a strange game. The only winning move is not to play.
What about a nice game of chess?
Hmm, the best time to attack is in the early morning local time?
The NSA encouraged weakening of number randomizers and randomization algorithms which weaken encryption. They don't report vulnerabilities in software.
We brought a world of less secure computer networks and electronic banking and commerce upon ourselves.
Hell we even gave hackers a damn fine model on how to attack.
From the article:"The Stuxnet worm, for instance, was supposed to quietly delete itself after doing its harm, but it was unintentionally released âoeinto the wild, where it is no doubt being tweaked, reverse-engineered, and readied for fresh exploits by others."
Pay no attention to the man behind the curtain with all your metadata.
Good website. Welcome back mey blog page. Health
e-tedavi.gen.tr
While this is not quite what the article is talking about, right around the holidays is probably the best time to stage an attack, as I think the BBC (?) found out already. Where I work, the place was running on a skeleton crew, with the IT staff at a bare minimum and handling service calls instead of doing any network monitoring or maintenance (what do you deal with first -- system maintenance or someone in sales who can't connect to the server and is making a big stink about it?). Social engineering probably works great in the week or so before the holidays...figure out where the company Christmas party is going to be, then crash it. Find someone who's sloshed and start talking them up. If not that, people are still busy and distracted, gifts are often delivered, and so on. Everyone in a company, and especially IT managers, really need to step up their awareness during this time of year, not get lax about it.
"A classic example is the British decision in World War II to allow German spies to continue gathering damaging intelligence for Hitler years after the spies’ identities were discovered" link
There were no spys allowed to freely operate prior to D-Day, they were all captured and utilized to feed the enemy false information. Reason being the British were reading the encrypted communications to the spies from Bletchley Park. link
once you look at it.... and TELL EVERYONE....... it changes.
Should be pretty easy to deduce without a computer, right? Any time before and after school, on holidays and weekends... Pretty sure I saw this in Death Note.
It isn't called a lunchtime attack for nothing.
Captain obvious called. Extended weekends, Xmas and summer holidays.
Dominos Pizza delivery!
Back in the '90s the FBI warned an "Above Top Secret" Defense Agency to curtail their habit of Dominos Pizza deliveries after tasked with a secure operation because a steady flow of Dominos Pizza cars/trucks was a dead giveaway that something BIG was up. True story!