The availability of cheap cyber weapons has made cyber-terrorism a growing threat to the stability of America's critical infrastructures and society in general. Needless to say that cyber terrorism is a major issue for American policymakers and IT professionals. The growing threat to commercial and government entities has prompted organizations to develop effective strategies and methods to protect their resources and assets from the threat of attackers. Such strategies and methods include but are not limited to continual risk and vulnerability assessment, upgrade of software and use of tools such as encryption, firewalls and intrusion detection systems and the implementation of disaster recovery and business continuity plans in the case of a cyber incident. The following paper will offer a few basic definitions to illustrate the concept of cyber terrorism, discuss the physical and human aspects of cyber terrorism, offer assessment of the most pressing threats and the most vulnerable targets, recommend methods to combat national and international cyber terrorism. Finally, several preventative actions will be recommended for implementation. Finally, a basic checklist/template is also provided in order to better illustrate and summarize recommendations and suggestions.
What is Cyber-Terrorism and Information Warfare? In order to provide a better conceptual understanding of the concept of cyber terrorism, consider the following definition by Czosseck and Geers (2009) as
Since the onset of the first packet switching event that many believe to be beginning of the internet, no other technology besides the printing press has ever transformed the ability to deliver information. Although the internet is used by a large percentage of the civilized world, few Americans realize how vital cyberspace is to our national infrastructure. Today, we are faced with even more threats although it has been a recognized problem since 2009, when President Barrack Obama said “The cyber threat is one of the most serious economic and national security challenges we face as a nation. It’s also clear that we’re not as prepared as we should be, as a government or as a country (Obama, 2009).” Every industry that operates in the United States is dependent on the internet for some aspect of their business. Commerce, transportation, financial institutions, military, as well as industrial control systems are all interconnected. This interconnectedness has created vulnerabilities within their infrastructure that have increasingly become targets of terrorists, script kiddies, foreign governments and hackers of all types.
Clarke and Knake use a mixed method research approach in Cyber War to support their hypothesis that offensive prowess is meaningless without solid defense in cyberspace, and that the United States need immediately fix our defensive cyber shortfalls, or face apocalyptic doom. Specifically, the authors define ‘cyber war’ as “actions by a nation state to penetrate another nation’s computers or networks for the purposes of causing damage or disruption.” This infers that they are really talking about ‘warfare’ and
Cyber-terrorism is the convergence of terrorism and cyberspace. It is generally understood to mean unlawful attacks and threats of attack against computers, networks, and the information stored therein when done to intimidate or coerce a government or its people in furtherance of political or social objectives.
The existence of cyberterrorism has been around since the 1980’s, but defining cyberterrorism has proven to be difficult especially within the United States. Devising a common terminology has been extremely difficult because there have been various published definitions from agencies such as the Federal Bureau of Investigation (FBI), the Department of Defense (DoD), The Department of Homeland Security (DHS) and the Department of Justice (DOJ). Each agency has there own distinct understanding of what cyberterrorism means and because of the lack of a more unified definition, the area of cyberterrorism suffers from a limited source base to draw upon based on variables that are not so easily identified.
To qualify as a cyberterrorism, the attack must have all the components of terrorism covered.
Terrorism has been an ongoing problem in society; however, Cyberterrorism is relatively new. Our country has to adapt to all media threats and how to handle them effectively. A strategic plan needs to be put into action such as finding the enemies goal for the threat, who the enemy is, what their operational techniques are, as well as the resources they have to actually carry out this threat. Terrorist groups now utilize technology to carry out and construct their attacks, which is a possible threat to the United States. This article discussed how military, legal, and political parties confront a threat, and the difficulties associated with cyber- terrorism. For prevention, they analyze domestic and international law and address vulnerabilities in the system, such as setting up a firewall. Also, changing, or rethinking, previous understanding of cyber terrorism by focusing on response and responsibility. Additionally, there are other ways to prevent cyber-terrorism. For example, tradeoffs, tensions, calculations and choices. Every tactic in this article is very descriptive; therefore, I chose three important points to further explain in depth, which are domestic and international law, addressing vulnerabilities, and trade-offs and tensions.
Cyber security is a major concern for every department, business, and citizen of the United States because technology impacts every aspect of our daily lives. The more we use technology the more complacent, we get with the information that is stored within our cyber networks. The more complacent, we get, the more vulnerable we become to cyber-attacks because we fail to update the mechanisms that safeguard our information. Breaches to security networks are detrimental to personal, economic, and national security information. Many countries, like Russia, China, Israel, France, and the United Kingdom, now have the abilities and technology to launch cyber-attacks on the United States. In the last five years there have been several attacks on cyber systems to gain access to information maintained by major businesses and the United States Government. Cyber-attacks cause serious harm to the United States’ economy, community, and the safety, so we need to build stronger cyber security mechanisms. Based on my theoretical analysis, I recommend the following:
"The next generation of terrorists will grow up in a digital world, with ever more powerful and easy-to-use hacking tools at their disposal." - Dorothy E. Denning. This is becoming more and more apparent as time goes on. You hear something new every day about some company being "hacked" by the Chinese, Russians, Iranians, or North Koreans. The world we live in is becoming more and more digitized and, perhaps unsurprisingly, the threat of cyber-terrorism is only growing with the evolving technology. Tensions have been rising rapidly largely due to the multiple cyber-attacks being waged every day against various political
Cyber-space and cyber-warfare are two terms that have varied definitions from between agencies and institutions. Since there are varying definitions of cyber-space it is important to accurately define the new digital domain where cyber-warfare will take place. A comprehensive definition of cyberspace explicated by Thomas Wingfield states,
Most nations today fear terror attacks that include bombing use of reinforcements like machines guns and other firearms. This is because terror attacks most of the times leave many people dead and others disabled while others are left without families. However, there is another attack today in many nations that can be destructive like a terror attack and this is the cyber-attack and threats. Cyber-attacks can be responsible for large mass destructions by making all systems connected to cyber networks fail to work (Rhodes 20). An example is the Morris worm that affected the world cyber infrastructures and caused them to slow down to a position of being impractical. Therefore, as a result of these cyber-attacks resources are being established and designed to help counter the attacks.
Prevalent to the current trend now is the dependency of the society on Information technology and communication systems. Every aspect of human life is one way or the other linked and controlled by information technology tools. The importance of information technology cannot be over emphasized as its unavailability could lead to a form of disaster or the other. Pivotal infrastructures like finance, healthcare, education and security are driven by information technology. However, information technology and its benefits are accompanied by vulnerabilities and risks that can be exploited by people with the necessary technical skills. Individuals like ‘Hackers’ and ‘Cyber Terrorist’ can cause disruption to information systems, commit financial fraud and also attack computers and networks. These attacks and disruptions could result to violence against people and properties. In some cases, death, serious injuries and severe economic loss could occur as a result of these attacks.
The drawback of Estonia's information technology framework was that its defensive protocol was not much secure and could be easily hacked. Moreover, the country was much depended on internet.
1. Physical loss of systems – Physical information technologies systems, i.e., computers, servers and other electronic equipment are required for the cyber activity. Consequently, it is very important to consider the risks related to the damage or loss of the physical electronic equipment. Risks can be for example, internal water damage in the office building damaging the computers and other equipment or fire in server room as a result of temperature change and other risks.
In this modern world, Information Technology forms the integral part of any kind of business. In the 21st century, countries across the globe have come to rely on complex computer networks that form the infrastructural backbone of even the most basic necessities of life, including electric power grids, global finance, food distribution, medical care, clean drinking water, petroleum production, and most types of communication. The protection of such networks, known as cyber security, is among the highest priorities in the civilized world, alongside planning and operations for major contingencies, including antiterrorism and land warfare. (Al-Saud, 2012:75).In Middle East region, the IT industry is dynamically growing along
The threat of cyber –attack is not only likely to target the military and government institutions but also poses a potential risk to private companies as well. The major private firms that are potentially at high risk of being attacked are the private companies that are given the functions of monitoring critical infrastructure particularly in the United States and the telecommunications sector is one of those industries that lies within the mercies of cyber criminals. Communications in any country is considered a very crucial and important infrastructure that is necessary to efficient and effective relay of information within the country, this is so because in a situation where disaster strikes, keeping communication lines open is very crucial in order to coordinate activities appropriately. This case study is based on a telecommunications company where information is derived from an interview with an Information Security Analyst.