http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/ The Future of the Military, Law Enforcement and National Security Fri, 10 Feb 2012 09:29:01 +0000 hourly 1 http://wordpress.org/?v=3.3.1 http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175365 any Sun, 31 May 2009 03:12:08 +0000 http://deftech.usmilblog.com/?p=3850#comment-175365 href="http://tiffany.order24hours.com">Tiffany Jewelry Official Store; Buy the cheapest and top quality Tiffany; Up To 38% Discount; Free Shipping; Order Now!!! href=“http://tiffany.order24hours.com”>Tiffany Jewelry Official Store; Buy the cheapest and top quality Tiffany; Up To 38% Discount; Free Shipping; Order Now!!!

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175360 2moons dil Wed, 13 Aug 2008 08:36:11 +0000 http://deftech.usmilblog.com/?p=3850#comment-175360 All things are the memories, before all things have been imprinted in my mind, the friends all have left the 2moons, sometimes before when the sleeping I often think of the previous screen, together with friends upgrade, earn the 2moons dil and together play with friends, playing now I also feeling some tired, I do not know what things I persist in? All things are the memories, before all things have been imprinted in my mind, the friends all have left the 2moons, sometimes before when the sleeping I often think of the previous screen, together with friends upgrade, earn the 2moons dil and together play with friends, playing now I also feeling some tired, I do not know what things I persist in?

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175359 flyff penya Wed, 13 Aug 2008 08:17:40 +0000 http://deftech.usmilblog.com/?p=3850#comment-175359 the lingering shadow of shaking in my face, in order to play this game I spend money to buy the flyff penya, the BB again left me at the same time, same situation when I hard to get it, my angry can not use the words describe the lingering shadow of shaking in my face, in order to play this game I spend money to buy the flyff penya, the BB again left me at the same time, same situation when I hard to get it, my angry can not use the words describe

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175350 ro zeny Sat, 02 Aug 2008 08:13:08 +0000 http://deftech.usmilblog.com/?p=3850#comment-175350 I played RO that I used the first account was a girl number of wave, a knight. The number also has a little ro zeny. I still remember that the world has just stepped into the RO; I stood the door of Pulongdela South, I even have my own way can not see, I looked at the lawn in front of do not know how to operate. At that time, wave on the line, he stood outside and said: come out, come out to see, use a mouse. I played RO that I used the first account was a girl number of wave, a knight. The number also has a little ro zeny. I still remember that the world has just stepped into the RO; I stood the door of Pulongdela South, I even have my own way can not see, I looked at the lawn in front of do not know how to operate. At that time, wave on the line, he stood outside and said: come out, come out to see, use a mouse.

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175345 You don't know who you are dealing with Sun, 24 Feb 2008 19:32:11 +0000 http://deftech.usmilblog.com/?p=3850#comment-175345 I wish to expand a bit on what I wish to expand a bit on what

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175344 Camp Sun, 24 Feb 2008 18:38:27 +0000 http://deftech.usmilblog.com/?p=3850#comment-175344 Kevin, You're right, being dependent upon Service Providers, who do not maintain adequate alternate routes & contracts through different Carriers is a problem. Other variables might also attribute to such events, intended or not. For me, the how & why is where the real story remains. Why didn't they have the necessary backups in place & what's being done to fix that. You can also run into management issues, such as when Providers & Carriers don't implement proper QoS policies, during times of beaucoup traffic. My earlier reference, to Cole, wasn't so much about normal traffic, but more to do with the possible actions of determined nation states. Along the idea that just because a connection is 'virtually' disconnected, or a single line is physically cut, that won't guarantee all traffic is eliminated or filtered. Likewise, countries can still affect the internet by or through third party means. And then you have questions such as, what happens when the carrier & service providers are largely owned by an enemy state, it's ally, or a cover Corp. Etc. Etc. Regarding NATO's use of public Carriers. I'd like to think that they'd at least have guaranteed QoS & multiple pipes with all companies that transit through any European country. NATO Expeditionary units hopefully have Comms. contingency plans in place for every operation it conducts, with real-time updates. As well as standing orders & training for regional commands (stars to bars) in case "WTF!" occurs. If it's not doing it today, then it'll probably take a swift kick in the balls someday... Unfortunately. :\ On another story. I'm a bit surprised companies like Cisco & Google haven't already put a High Speed Internet Satellite into orbit over the U.S.. Similar to Japans 'Kazuna', "aimed at providing high-speed Internet access across Asia". While it may not be perfect, Point-to-Point is theoretically optimal & overall cheaper.... That is, as long as redundancies can be maintained. In the future try sticking more to the How & Why. For example, 'How was SilentBanker introduced into systems?', 'How does it work?', 'Why did it work?', 'Why didn't PenTesting prevent this event?'. Just my 2 cents. :) Then again, I don't know much... Insaint, Did you even read the article, or Dl'd the 'Goolag Scanner' for that matter? :) Bob, IP's can be "spoofed" & manipulated to mask or falsify the actual address. So it may or may not have originated from China... could have been your neighbor. ;) Kevin & Insaint are also correct, China ain't what it used to be. Kevin,
You’re right, being dependent upon Service Providers, who do not maintain adequate alternate routes & contracts through different Carriers is a problem. Other variables might also attribute to such events, intended or not. For me, the how & why is where the real story remains. Why didn’t they have the necessary backups in place & what’s being done to fix that. You can also run into management issues, such as when Providers & Carriers don’t implement proper QoS policies, during times of beaucoup traffic.
My earlier reference, to Cole, wasn’t so much about normal traffic, but more to do with the possible actions of determined nation states. Along the idea that just because a connection is ‘virtually’ disconnected, or a single line is physically cut, that won’t guarantee all traffic is eliminated or filtered. Likewise, countries can still affect the internet by or through third party means. And then you have questions such as, what happens when the carrier & service providers are largely owned by an enemy state, it’s ally, or a cover Corp. Etc. Etc.
Regarding NATO’s use of public Carriers. I’d like to think that they’d at least have guaranteed QoS & multiple pipes with all companies that transit through any European country. NATO Expeditionary units hopefully have Comms. contingency plans in place for every operation it conducts, with real-time updates. As well as standing orders & training for regional commands (stars to bars) in case “WTF!” occurs. If it’s not doing it today, then it’ll probably take a swift kick in the balls someday… Unfortunately. :\
On another story. I’m a bit surprised companies like Cisco & Google haven’t already put a High Speed Internet Satellite into orbit over the U.S.. Similar to Japans ‘Kazuna’, “aimed at providing high-speed Internet access across Asia”. While it may not be perfect, Point-to-Point is theoretically optimal & overall cheaper.… That is, as long as redundancies can be maintained.
In the future try sticking more to the How & Why. For example, ‘How was SilentBanker introduced into systems?’, ‘How does it work?’, ‘Why did it work?’, ‘Why didn’t PenTesting prevent this event?’. Just my 2 cents. :)
Then again, I don’t know much…
Insaint,
Did you even read the article, or Dl’d the ‘Goolag Scanner’ for that matter? :)
Bob,
IP’s can be “spoofed” & manipulated to mask or falsify the actual address. So it may or may not have originated from China… could have been your neighbor. ;) Kevin & Insaint are also correct, China ain’t what it used to be.

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175343 The Cenobyte Sun, 24 Feb 2008 15:30:06 +0000 http://deftech.usmilblog.com/?p=3850#comment-175343 Everything listed above I am sure is true and a million other scary stats, but lets be honest here when put into context they are not that big of a deal. The internet is large (Especially given we have come to include LAN and WAN networks as part of it) and with trillions of dollars of transactions (private, public and corporate), plus trillions in time spent (Employment and leisure), and trillions in equipment (military, corp., govt, and private computer routers, fiber cables, etc all count) operating here it's not hard to see how people could cause a few billion in damage now and again. So as I have said before and will say again. As a guy really looking at this on the inside (at least from a corp. level), it's not what people like this make of it. There are very real and very scary (Especially for the individual that is compromised) things that 'hackers' can do and it's something that spending tens even hundreds of billions on is worthwhile. But in anything but the most critical type of systems are these people doing anything more than scratching at the surface, like graffiti artists only allowed to use pencils (It's annoying but the overall damage is pretty low). As a result systems can easily be put in place to detect you have had a problem and relieve pain and suffering for those affected (Insurance, you bank gives you your credit card money back, etc) which is far cheaper than trying to be 100% protected against these attacks 100% of the time. IE some of these attacks are expected. Never forget to apply simple cost benefit to these problems. Military data and communications are about the only exception to this, Even Power, water, etc are so old and simple that interruption of the systems on a large scale would require more than sitting at a workstation). These systems people lives really do rely on and as a result even small failures can constitute a catastrophe. These systems need to be 100%, 100% of the time. Everything listed above I am sure is true and a million other scary stats, but lets be honest here when put into context they are not that big of a deal. The internet is large (Especially given we have come to include LAN and WAN networks as part of it) and with trillions of dollars of transactions (private, public and corporate), plus trillions in time spent (Employment and leisure), and trillions in equipment (military, corp., govt, and private computer routers, fiber cables, etc all count) operating here it’s not hard to see how people could cause a few billion in damage now and again.
So as I have said before and will say again. As a guy really looking at this on the inside (at least from a corp. level), it’s not what people like this make of it. There are very real and very scary (Especially for the individual that is compromised) things that ‘hackers’ can do and it’s something that spending tens even hundreds of billions on is worthwhile. But in anything but the most critical type of systems are these people doing anything more than scratching at the surface, like graffiti artists only allowed to use pencils (It’s annoying but the overall damage is pretty low). As a result systems can easily be put in place to detect you have had a problem and relieve pain and suffering for those affected (Insurance, you bank gives you your credit card money back, etc) which is far cheaper than trying to be 100% protected against these attacks 100% of the time. IE some of these attacks are expected. Never forget to apply simple cost benefit to these problems.
Military data and communications are about the only exception to this, Even Power, water, etc are so old and simple that interruption of the systems on a large scale would require more than sitting at a workstation). These systems people lives really do rely on and as a result even small failures can constitute a catastrophe. These systems need to be 100%, 100% of the time.

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-70193 Kevin Sun, 24 Feb 2008 15:29:37 +0000 http://deftech.usmilblog.com/?p=3850#comment-70193 Dear Pedestrian You missed the point. The point is that with so much B2B with China and the resulting economic impact the chance that Washington would ever be able to make that move is ZERO. A solution has to be realistic and acceptable - banning all B2B with China doesn't meet those requirements! Dear Pedestrian
You missed the point. The point is that with so much B2B with China and the resulting economic impact the chance that Washington would ever be able to make that move is ZERO. A solution has to be realistic and acceptable — banning all B2B with China doesn’t meet those requirements!

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175342 pedestrian Sun, 24 Feb 2008 05:44:49 +0000 http://deftech.usmilblog.com/?p=3850#comment-175342 >Did you know that Kevin Coleman has made a business out of scaring the living daylights out >of people? Bussiness? Prediction and prevention of catastrophy is not pure bussiness, and I'll bet that it might even save your life some day. I'll tell you cyber attacks can kill people and in fact attempts were made. I can tell you Kevin probably has very good source and connections, and not a man to mess with :-) There are more scary stories that you will never imagine, and more tools of devastating catstrophies that has not reached the public yet. >Did you know that Kevin Coleman has made a business out of scaring the living daylights out
>of people?
Bussiness? Prediction and prevention of catastrophy is not pure bussiness, and I’ll bet that it might even save your life some day. I’ll tell you cyber attacks can kill people and in fact attempts were made. I can tell you Kevin probably has very good source and connections, and not a man to mess with :-)
There are more scary stories that you will never imagine, and more tools of devastating catstrophies that has not reached the public yet.

]]> http://defensetech.org/2008/02/21/analyzing-the-threat-of-cyber-attack/#comment-175341 pedestrian Sun, 24 Feb 2008 05:16:17 +0000 http://deftech.usmilblog.com/?p=3850#comment-175341 >"Hackers use Google to find website vulnerabilities" There is something better. Just select "source" from "view" on IE, and skim through the source code for vulnerabilities. I'd rather use a port scanner to knock every door to check for any doors open. Just say "Knock! Knock! Can I invade your port 80?" >“Hackers use Google to find website vulnerabilities“
There is something better. Just select “source” from “view” on IE, and skim through the source code for vulnerabilities. I’d rather use a port scanner to knock every door to check for any doors open. Just say “Knock! Knock! Can I invade your port 80?”

]]>