Click here to close now.


PHP Authors: Carmen Gonzalez, Hovhannes Avoyan, Lori MacVittie, Trevor Parsons, Andreas Grabner

Blog Feed Post

A Storify Dialog on Cyber Hurricane Katrina


Editor’s note: What follows is extracted from a storify post . This is a first post in this format for the CTOvision blog. Let us know what you think  on any aspect of this, including format in your browser, format in your newsletters and of course content- bg.

The Foreign Policy Research Institute recently held a webinar on Why “Cyber Pearl Harbor” Won’t Be Like Pearl Harbor At All…

I listened in.

First: I expressed some skepticism at the flashy premise of the webinar, as WWII metaphors are a tad overdone in security circles

The webinar opened with a lecture/powerpoint by Edward Turzanksi, whose name I finally got right on the 10th try. He started describing in some detail the different direct impacts of Pearl Harbor & 9/11, and of US immediate response…

…then immediately broke from the flashy title to point out that cyber is very different from conventional war.

The answer to why Cyber isn’t just signals intelligence? Cyber can directly attack infrastructure, not just communications.

a bit unfair of me here.^ Cyber attacks, as described for this presentation, have a political goal. Criminal networks don’t; disruptive though they may be, they are less about attacking states and instead focus on being left alone by them.

Using carpet bombing to describe cyber will always be a stretch, but the actual point of infrastructure being targeted at war holds.

the book described above? Unrestricted Warfare, published in 1999 but featuring a very misleading cover depicting the 9/11 attacks.

Of course, STUXNET itself played with gradual disruption, but the way this was described reminded me of nothing so much as this.

that clip? Children stomping bugs from Starship Troopers. Turzanski actually recommended stomping unknown flash drives as a way to stop them creating/exploiting vulnerabilities. I recommend we term this “boot-gapping.”

Shamoon was targeted specifically at Aramco, and was apparently the work of amateurs.

Husick addressed this later, noting that the invisible hand is really bad at addressing vulnerabilities present in the commons.

The actual problem here was not Windows software itself, which can update and be corrected, but that pirated/unlicensed Windows systems are paygapped from those updates despite those unauthorized copies being, according to Turzanski, 40% of operating systems. Here is a direct example of private sector poorly correcting a vulnerability opened up in the commons.

That above link is to a piece written for CTOVision, about how old-fashioned detective work, human intelligence, and boots on the ground caught a hacker who hid himself well online. Boots & detectives aren’t a quality we usually think of for countering cyber, but they absolutely should be.

The possibility of Estonia invoking NATO Article V for a cyber attack was brought up. Estonia has a stronger claim to this than most – incredibly tech-dependent and was clearly under a coordinated cyber attack. But incredibly unlikely anyone will start a shooting war over it, which calls into the question of cyberwar as a concept itself.

as a post-K New Orleans resident for four years, this metaphor seemed to match what I learned of people’s experience: misplaced investment, clear vulnerabilities shoved just a bit too hard, and then a long slow rebuilding in the directly-damaged area with unclear revision to response capability or actual resilience. A clear failure, but a contained failure.

That was not the actual answer. I paraphrased for space constraints, but the gist was the same.

Here an example was given of a 2003 rail failure, as one freight company linked it’s operational control computers to the internet proper and subsequently suffered a malware attack that left them blind, stranding all trains east of the Rockies for I believe he said 13 hours.

Redteaming: it works.

Maybe bootgapping is a viable strategy?Next we went to the Q & A, which was surprisingly infomative, despite it being a Q & A session.

Also mentioned in the response above was a modified nuke designed to EMP. Either would destroy solid-state drives, making it a destructive attack for which kinetics are a perfectly appropriate response, but also outside the realm of cyber security proper. This seems like the fundamental problem with terming Cyber things cyberwar – when they clearly cause war-like damage, that’s just war. When they don’t, they are crime or covert action. “Cyberwar” seems to be so thin a line that it is nonexistent.

Besides responding with overwhelming force, Farraday cages are a way to protect something from an EMP. Here’s instructions on a DIY version.

As a category, dark web is just what can’t be found conventionally online. In the above context, it refers to internet channels that won’t be effected if something like Google goes down.

The tragedy of the cyber commons was alluded to earlier – it makes little economic sense for anyone using the commons to devote resources to securing it from cyber attacks, and is especially unlikely for everyone to do so at once. (The second part of that tweet? Academia tangent: Mark Vail was a former professor of mine, whose work focused a lot on how European welfare states sought to solve the problems of the commons)

This lack of motivation to fix the problem is perhaps the best reason to start using “Cyber Hurricane Katrina” instead of “Cyber Pearl Harbor.”

It’s really, really hard to negotiate an arms treaty (of sorts) or a rule of battlefield ethics (which is what this would be) when the arms are rapidly evolving, can be designed and wielded by nonstate actors, and the actual battlespace is as broadly defined as any computer that could potentially be exposed to an attack. Compounding this are nations justifiably wanting to develop weapons in secret. My guess for a Cyber Geneva Convention? Only after a major problem reveals them to be both deadlier and less useful than anyone wants, like post-WWI chemical weapons.

Husick specifically mentioned that Saudi would label Pat Robertson’s website itself a work of cyber war. Layer that on top of the problems already expounded above, and Cyber Geneva Convention seems nigh-impossible.

Here we should be looking at cyber as covert action/spycraft/crime, where the channels of communication are important to maintain. The follow-up to this was that the US might expect cyber attacks on our allies, as China is less worried about severing economic ties with them. And, yes, the continued ability to steal US intellectual property was given as a reason for why China would not cyber-attack the US.

This led really well into the next point – STUXNET was able to disrupt Iranian centrifuges in a way that made Iran question it’s own equipment until they figured out, months and months and months later and after actually sitting around watching the centrifuges, that it was a virus at work.

Point referenced here is one from Gartenstein-Ross’s book Bin Laden’s Legacy, and very subtly illustrated by the burning dollar bill on the cover. An attack that yields a massively disproportionate expenditure in response is one that has succeeded in causing economic harm, whatever else it’s objective.

Read the original blog entry...

More Stories By Bob Gourley

Bob Gourley, former CTO of the Defense Intelligence Agency (DIA), is Founder and CTO of Crucial Point LLC, a technology research and advisory firm providing fact based technology reviews in support of venture capital, private equity and emerging technology firms. He has extensive industry experience in intelligence and security and was awarded an intelligence community meritorious achievement award by AFCEA in 2008, and has also been recognized as an Infoworld Top 25 CTO and as one of the most fascinating communicators in Government IT by GovFresh.

@ThingsExpo Stories
In his session at @ThingsExpo, Tony Shan, Chief Architect at CTS, will explore the synergy of Big Data and IoT. First he will take a closer look at the Internet of Things and Big Data individually, in terms of what, which, why, where, when, who, how and how much. Then he will explore the relationship between IoT and Big Data. Specifically, he will drill down to how the 4Vs aspects intersect with IoT: Volume, Variety, Velocity and Value. In turn, Tony will analyze how the key components of IoT influence Big Data: Device, Connectivity, Context, and Intelligence. He will dive deep to the matrix...
When it comes to IoT in the enterprise, namely the commercial building and hospitality markets, a benefit not getting the attention it deserves is energy efficiency, and IoT’s direct impact on a cleaner, greener environment when installed in smart buildings. Until now clean technology was offered piecemeal and led with point solutions that require significant systems integration to orchestrate and deploy. There didn't exist a 'top down' approach that can manage and monitor the way a Smart Building actually breathes - immediately flagging overheating in a closet or over cooling in unoccupied ho...
Scott Guthrie's keynote presentation "Journey to the intelligent cloud" is a must view video. This is from AzureCon 2015, September 29, 2015 I have reproduced some screen shots in case you are unable to view this long video for one reason or another. One of the highlights is 3 datacenters coming on line in India.
“The Internet of Things transforms the way organizations leverage machine data and gain insights from it,” noted Splunk’s CTO Snehal Antani, as Splunk announced accelerated momentum in Industrial Data and the IoT. The trend is driven by Splunk’s continued investment in its products and partner ecosystem as well as the creativity of customers and the flexibility to deploy Splunk IoT solutions as software, cloud services or in a hybrid environment. Customers are using Splunk® solutions to collect and correlate data from control systems, sensors, mobile devices and IT systems for a variety of Ind...
SYS-CON Events announced today that ProfitBricks, the provider of painless cloud infrastructure, will exhibit at SYS-CON's 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. ProfitBricks is the IaaS provider that offers a painless cloud experience for all IT users, with no learning curve. ProfitBricks boasts flexible cloud servers and networking, an integrated Data Center Designer tool for visual control over the cloud and the best price/performance value available. ProfitBricks was named one of the coolest Clo...
You have your devices and your data, but what about the rest of your Internet of Things story? Two popular classes of technologies that nicely handle the Big Data analytics for Internet of Things are Apache Hadoop and NoSQL. Hadoop is designed for parallelizing analytical work across many servers and is ideal for the massive data volumes you create with IoT devices. NoSQL databases such as Apache HBase are ideal for storing and retrieving IoT data as “time series data.”
Clearly the way forward is to move to cloud be it bare metal, VMs or containers. One aspect of the current public clouds that is slowing this cloud migration is cloud lock-in. Every cloud vendor is trying to make it very difficult to move out once a customer has chosen their cloud. In his session at 17th Cloud Expo, Naveen Nimmu, CEO of Clouber, Inc., will advocate that making the inter-cloud migration as simple as changing airlines would help the entire industry to quickly adopt the cloud without worrying about any lock-in fears. In fact by having standard APIs for IaaS would help PaaS expl...
Organizations already struggle with the simple collection of data resulting from the proliferation of IoT, lacking the right infrastructure to manage it. They can't only rely on the cloud to collect and utilize this data because many applications still require dedicated infrastructure for security, redundancy, performance, etc. In his session at 17th Cloud Expo, Emil Sayegh, CEO of Codero Hosting, will discuss how in order to resolve the inherent issues, companies need to combine dedicated and cloud solutions through hybrid hosting – a sustainable solution for the data required to manage I...
Apps and devices shouldn't stop working when there's limited or no network connectivity. Learn how to bring data stored in a cloud database to the edge of the network (and back again) whenever an Internet connection is available. In his session at 17th Cloud Expo, Bradley Holt, Developer Advocate at IBM Cloud Data Services, will demonstrate techniques for replicating cloud databases with devices in order to build offline-first mobile or Internet of Things (IoT) apps that can provide a better, faster user experience, both offline and online. The focus of this talk will be on IBM Cloudant, Apa...
Mobile messaging has been a popular communication channel for more than 20 years. Finnish engineer Matti Makkonen invented the idea for SMS (Short Message Service) in 1984, making his vision a reality on December 3, 1992 by sending the first message ("Happy Christmas") from a PC to a cell phone. Since then, the technology has evolved immensely, from both a technology standpoint, and in our everyday uses for it. Originally used for person-to-person (P2P) communication, i.e., Sally sends a text message to Betty – mobile messaging now offers tremendous value to businesses for customer and empl...
As more and more data is generated from a variety of connected devices, the need to get insights from this data and predict future behavior and trends is increasingly essential for businesses. Real-time stream processing is needed in a variety of different industries such as Manufacturing, Oil and Gas, Automobile, Finance, Online Retail, Smart Grids, and Healthcare. Azure Stream Analytics is a fully managed distributed stream computation service that provides low latency, scalable processing of streaming data in the cloud with an enterprise grade SLA. It features built-in integration with Azur...
SYS-CON Events announced today that HPM Networks will exhibit at the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. For 20 years, HPM Networks has been integrating technology solutions that solve complex business challenges. HPM Networks has designed solutions for both SMB and enterprise customers throughout the San Francisco Bay Area.
The enterprise is being consumerized, and the consumer is being enterprised. Moore's Law does not matter anymore, the future belongs to business virtualization powered by invisible service architecture, powered by hyperscale and hyperconvergence, and facilitated by vertical streaming and horizontal scaling and consolidation. Both buyers and sellers want instant results, and from paperwork to paperless to mindless is the ultimate goal for any seamless transaction. The sweetest sweet spot in innovation is automation. The most painful pain point for any business is the mismatch between supplies a...
The broad selection of hardware, the rapid evolution of operating systems and the time-to-market for mobile apps has been so rapid that new challenges for developers and engineers arise every day. Security, testing, hosting, and other metrics have to be considered through the process. In his session at Big Data Expo, Walter Maguire, Chief Field Technologist, HP Big Data Group, at Hewlett-Packard, will discuss the challenges faced by developers and a composite Big Data applications builder, focusing on how to help solve the problems that developers are continuously battling.
SYS-CON Events announced today that IBM Cloud Data Services has been named “Bronze Sponsor” of SYS-CON's 17th Cloud Expo, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. IBM Cloud Data Services offers a portfolio of integrated, best-of-breed cloud data services for developers focused on mobile computing and analytics use cases.
As enterprises capture more and more data of all types – structured, semi-structured, and unstructured – data discovery requirements for business intelligence (BI), Big Data, and predictive analytics initiatives grow more complex. A company’s ability to become data-driven and compete on analytics depends on the speed with which it can provision their analytics applications with all relevant information. The task of finding data has traditionally resided with IT, but now organizations increasingly turn towards data source discovery tools to find the right data, in context, for business users, d...
SYS-CON Events announced today that MobiDev, a software development company, will exhibit at the 17th International Cloud Expo®, which will take place November 3-5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. MobiDev is a software development company with representative offices in Atlanta (US), Sheffield (UK) and Würzburg (Germany); and development centers in Ukraine. Since 2009 it has grown from a small group of passionate engineers and business managers to a full-scale mobile software company with over 150 developers, designers, quality assurance engineers, project manage...
Learn how IoT, cloud, social networks and last but not least, humans, can be integrated into a seamless integration of cooperative organisms both cybernetic and biological. This has been enabled by recent advances in IoT device capabilities, messaging frameworks, presence and collaboration services, where devices can share information and make independent and human assisted decisions based upon social status from other entities. In his session at @ThingsExpo, Michael Heydt, founder of Seamless Thingies, will discuss and demonstrate how devices and humans can be integrated from a simple clust...
SYS-CON Events announced today that Cloud Raxak has been named “Media & Session Sponsor” of SYS-CON's 17th Cloud Expo, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. Raxak Protect automates security compliance across private and public clouds. Using the SaaS tool or managed service, developers can deploy cloud apps quickly, cost-effectively, and without error.
Who are you? How do you introduce yourself? Do you use a name, or do you greet a friend by the last four digits of his social security number? Assuming you don’t, why are we content to associate our identity with 10 random digits assigned by our phone company? Identity is an issue that affects everyone, but as individuals we don’t spend a lot of time thinking about it. In his session at @ThingsExpo, Ben Klang, Founder & President of Mojo Lingo, will discuss the impact of technology on identity. Should we federate, or not? How should identity be secured? Who owns the identity? How is identity ...