Our friends at DefenseTech.org feature an excellent piece about a cyber attack on the U.S. military. The attack finally led to the military banning thumb drives and other portable memory tools from use on military networks.
The article is by Kevin Coleman. Here it is:
The Pentagon has suffered a direct hit from a cyber attack. The weapon used is said to be a hybrid computer worm/virus. Insiders say the hybrid rapidly spread through the thousands of interconnected defense computer networks. A computer worm is different from a computer virus. A worm is thought to be more dangerous because it can run itself where as a virus needs a host program to run. The DoD responded quickly and has taken steps to slow the advancement of the worm/virus by quarantining networks and systems until the worm/virus can be removed.
Cyber investigators have not pinpointed the entry point for the worm/virus, but insider sources point to removable storage devices as the most likely point of infection. This seems to be supported by the fact that U.S. Strategic Command has banned the use of removable media (thumb drives, CDRs/DVDRs, floppy disks) on all DoD networks and computers effective immediately. This incident has been deemed so severe that unprecedented defensive measures have been instituted to protect the military systems.
Oddly enough, all Internet users are being warned to stay vigilant by security experts who believe that Monday, Nov. 24 is poised to be the worst day of the year for computer attacks.
Security experts at Spy-Ops I spoke with said, "If this can happen to the Department of Defense it can happen to any organization." They went on to say that the cost of this attack could easily reach into the billions of dollars if the worm/virus destroys data. If that's not bad enough, one expert went on to say that the nightmare scenario is if the malicious code alters data rather than deleting it -- a much more difficult problem to resolve.
News of the cyber attack came on the heels of today's release of the "Global Trends 2025: A Transformed World" document by the Office of the Director of National Intelligence. The document stated that non-military means of warfare, such as cyber, economic, resource, psychological and information-based forms of conflict will become more prevalent in conflicts over the next two decades.
While the source of the attack remains classified, the usual cast of characters comes to mind. At the head of the list are of course China and the RBN -- Russian Business Network. If the attack is found to be sponsored by another country, could this be considered an act of cyber war?
