Comments on: Inside a Cyber Attack

By: Jay Campbell

Jay Campbell — Mon, 17 Dec 2007 12:35:36 +0000

If we are serious about fixing the security problem with DOD computers, then disconnect the stinking internet! The only way to prevent any kind of attack, without spending hundreds of millions of dollars, is to cut the connection. Internet access is not required for the military to do it’s job. Compare the costs of what is being spent on security, against what is should cost for imbedded communications systems and the determine how best to tackle the problem. It may be too late because those who are up and coming in the military have grown up with the internet, and everything they do revolves around the internet.

By: Kevin COleman

Kevin COleman — Sun, 16 Dec 2007 03:00:27 +0000

James
I am not a stuffed suit. Outside of being the Chief Strategist of Netscape, a masters in computer science and I have been working in the software industry and starting hacking code back in the late 80s.

By: covertsurf

covertsurf — Sun, 16 Dec 2007 02:24:43 +0000

Prevention starts with the original program disigner. Such attacks are enevatable. Well Planned far in advance, extreamly difficult to dicover.Embedded to be executed precisely for a designated breach.
Often the program is designed by some of the pioners in the industry!
Our I.T counter intel people should take a intense look at some C.E.O.S of major public companys i.e E-Bay for example.
Look into P. Omydar just for fun (Deep)
Also alot of Oxford students of the same time period.
Covertsurf Out!
518971

By: Dennis

Dennis — Sat, 15 Dec 2007 14:12:46 +0000

Thanks TB, I missed the point a bit.
Until Kevin elaborated on what actually happened I thought it was not that bad.
Shutting down all card transactions could put a real dent into someone

By: James

James — Sat, 15 Dec 2007 05:51:00 +0000

“Kevin Coleman certified management consultant” and this makes qualified to talk on Network Security ?
That is equitant to asking senior accounts Manager at Cisco What’s the best to configure my network switch.
Judging by the way Kevin is talking he’s a suit with a vague understanding a about the issue. As for the Cyber Operations & Cyber Terrorism Handbook 1.02 its written by suits for suits. its written more like a magazine article than a hand book. Is contents no useful information.

By: Camp

Camp — Fri, 14 Dec 2007 22:16:38 +0000

Concerned, :)
It’s all good, the youtube’d link was a parody on the old “Smurf Attack”, using the U.N. video to terrorize children. ;)
http://www.cert.org/advisories/CA-1998–01.html
Theinquirer.net is just nice BrItIsh site for techie stUff.

By: Concerned

Concerned — Fri, 14 Dec 2007 18:56:03 +0000

I would click on the links that you have listed but I am affraid then I would become one of the schmucks you talk about!

By: Camp

Camp — Fri, 14 Dec 2007 16:12:43 +0000

Since we’re talking about network security…

Oh, the parody! ;)
Anybody get the joke? Anybody? Nobody… Oh, well.
PS.
“US military propaganda team busted“
http://www.theinquirer.net/gb/inquirer/news/2007/12/13/military-propaganda-team-busted
“Help! I’ve been spammed by Nato“
http://www.theinquirer.net/gb/inquirer/news/2007/11/14/nato-does-spam
“Cyber attack on Estonia scary, says Bush“
http://www.theinquirer.net/gb/inquirer/news/2007/06/26/cyber-attack-on-estonia-scary-says-bush
I wonder if some day governments hand out a Letters of Marquee during “Cyber Wars”… it’s a strange world.

By: Kevin Coleman

Kevin Coleman — Fri, 14 Dec 2007 15:57:34 +0000

A bit of additional intel about the cyber war.
Proposed NATO Cyber Defense Centre
The aim of the centre would be to promote cooperation between NATO members on cyber defence, to draft training programmes and deal with the legal aspects of fighting cyber terrorism.
The centre would not be countering attacks in cyber space but would deal with conceptual work.
One recent report
http://www.mcafee.com/us/research/criminology_report/default.html

By: Kevin Coleman

Kevin Coleman — Fri, 14 Dec 2007 14:04:28 +0000

A few more pieces of information if I may.
1. At the peak the DDoS generated 4 million bogus transactions per second.
2. This was traced back to Russia
3. The reason for the war/attack was that Estonia moved a statue of a Russian war hero
4. NATO responded with their cyber team about two weeks into the event.
5. The information infrastructure of Estonia was totally disrupted — neither credit card transactions, nor debit card transactions.
6. As one United Nations source put it “the only thing missing was a declaration of war”