Cisco 2010 Midyear Security Report

Total Page:16

File Type:pdf, Size:1020Kb

Cisco 2010 Midyear Security Report Cisco 2010 Midyear Security Report The impact of global security threats and trends on the enterprise Web 2.0, mobility, virtualization, and other dramatic shifts in how we communicate and collaborate are carving out a new landscape for business and for enterprise security. The Cisco® Midyear Security Report examines these changes and their impact on the enterprise, and highlights other significant trends and threats creating security challenges for organizations worldwide. The report also includes recommendations from Cisco security experts designed to help enterprises strengthen their security. 2 Enterprises and the Tectonic Forces of Change Cisco Study: Collaboration Critical to Employee Success 4 The Technologic Shift: The Proliferation of Mobile and Connected Devices The Mobile Device Onslaught What’s Disrupting the Enterprise? Consumerization of IT Risk Alert: IP-Addressable Devices: Who’s Listening to Your Network? What’s Disrupting the Enterprise? Mobility 8 The Economic Shift: Virtualization of Operations What’s Disrupting the Enterprise? Virtualization 10 The Demographic Shift: The Role of Collaboration and Social Networks Social Media for Enterprises: Upside and Downside It’s 3 p.m.—What Are Your Employees Doing? Tending Their Virtual Fields What’s Disrupting the Enterprise? Social Media 13 Worldwide Government Trends: The Impact on Business Multiple Governments, Multiple Stances on Security Global Security Guidelines: Should Business Become a Player? U.S. Government Update Privacy Issues Moving to the Forefront 16 Taking Action to Reduce Innovation Gaps Criminals Now Protecting Their Intellectual Property The Spread of IPv6 and Domain Name System Security Risk Alert: A “Perfect Storm” of Technological Change Explosive Growth in Connected Devices and Applications—Along with New Threats 20 Insight from the Security Researchers: Hackers Are Choosing Their Own Adventure Risk Alert: Advanced Persistent Threats Risk Alert: The Downside of Being a VIP (or Just Working for One) Small Targets, Big Rewards What Keeps Your IT Security Team Awake at Night? 25 Five Ways Enterprises Can Strengthen Their Security by 2011 30 Security Trends: Midyear Notes 32 Cisco Security Intelligence Operations Cisco Security IntelliShield Alert Manager Service All contents are Copyright © 2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. Cisco 2010 Midyear Security Report 1 Enterprises and the Tectonic Forces of Change The business world continues to evolve due to spectacular revolutionary forces that are changing the way we work, live, learn, and play, and how we communicate and share information. These changes aren’t something enterprises can choose to take part in or ignore; in fact, they’re already having a profound impact on your business and your life at this very moment, whether you are unaware of or welcome the change. These changes are part of the dramatic They likely would be most surprised about How do these changes affect an enterprise’s shifts—“tectonic forces”—that are making not having to go to a specific location, such plans to protect its data? Since workers it essential for businesses to rethink their as an office, to get their work done. People now collaborate and share vital information approach to enterprise security. Gone are are increasingly dependent on smart- outside of the workplace, security that’s the days when a network firewall would phones and other mobile devices for limited to the network edge is bound to deter teenagers looking to hack into everyday communication, collaboration, fail. The emerging “borderless network” corporate databases for the challenge, and work, and are using this technology has no defined edge or boundary; instead, notoriety, or for the fun of it. Now, serious more often beyond the traditional office it has many borders that are constantly and well-resourced criminals with and network boundaries. changing. And for the most part, enterprises business plans are intent on stealing both Users also are relying on social network- cannot effectively control the myriad personal data and business intelligence ing services such as Facebook and devices/endpoints on the network. they can sell—and perimeter-based Twitter, online collaborative work tools like This hastens the need for a new model security alone cannot stop them. Google Docs, and software-as-a-service for security that acknowledges the move- What are these forces? Primarily, the (SaaS) applications that don’t live on the ment of corporate data among offices, rise of social networking, the enthusiastic company’s servers. Even if an organization smartphones, workers’ home computers, adoption and proliferation of network- attempts to ban access to certain web laptops, Internet cafes, and any other connected devices, and the embrace services or sites, savvy users will find a place where employees choose to work. of virtualization are altering the threat way around these attempts to continue to Workers want access to customer lists landscape. Time travelers from the 1970s access the services they find useful—and and project data from their iPhones and would barely recognize today’s workplace. believe are necessary to do their jobs. BlackBerry devices, whether they are sitting in the coffee shop near their office 2 Cisco 2010 Midyear Security Report All contents are Copyright © 2010 Cisco Systems, Inc. All rights reserved. This document is Cisco Public Information. or waiting at an airport gate halfway across defense against security threats, instead Businesses are a prime target for today’s the world. The enterprise is tasked with of on the offense with long-range plans for online criminals, which is why the Cisco granting them this “borderless” access, managing security. 2010 Midyear Security Report is tailored while ensuring the data stays safe. In addition, employees are too often for the business community. In particular Effective controls are needed to address categorized as “part of the security focus are the three “tectonic forces” of the potential security and productivity problem” and not willing participants change, which are dramatically altering issues that can arise from uncontrolled who can play a key role in improving an the cybersecurity landscape: access to social networking services. New organization’s security process. Fearful • The technologic shift: The proliferation data from Cisco shows that employees of data loss or theft, enterprises may of mobile and connected devices accessing interactive games via Facebook unilaterally bar employees from accessing • The economic shift: Virtualization of can spend an hour or more a day playing webmail or social networking sites, or will operations these games (see graphic on page 11 forbid any smartphone that’s not approved for details). To manage security and for use by management. This way of thinking • The demographic shift: The role of productivity, organizations should enact does little to improve security—as stated, collaboration and social networks clear policies regarding access to social workers will figure out how to circumvent This report also examines another networking sites; in addition, they can rules—and makes for a resentful workforce. significant challenge organizations must consider limiting access to social While some businesses may not see the face in the midst of all this dramatic networking to those employees whose value in making the technological and cul- change: responding to the demands of jobs require it (for example, PR and tural shifts necessary for modern security, still-evolving security regulations and marketing functions). today’s threat landscape demands expectations in the countries where they There are technical challenges—and more comprehensive security to protect conduct business. solutions—for this emerging environment. against criminals who operate online and Some enterprises may find that meeting For a security solution to be effective, a are armed with the same sophisticated today’s security challenges is a daunting change in mindset must take place. Too software tools (and talents) claimed by task, but many will find it’s worth the effort: often, enterprises view security as an the most tech-savvy businesses. Effective security practices are an asset add-on, rather than a business enabler. Criminal enterprises are entirely that can strengthen a company’s reputation IT departments tend to operate on the professional in their approach to stealing and competitive edge. The good news is sensitive information. They are driven to that viable solutions do exist. succeed and receive the payoff. They also have key advantages that most network security administrators do not: plenty of time and resources to accomplish their tasks. Cisco Study: Collaboration Critical to Employee Success Today’s employees expect to collaborate The study divided respondents into intend to champion collaborative work extensively with their colleagues—and four categories. Workers identified as processes, they must welcome the use believe it’s not just beneficial, but essential “Collaboration Enthusiasts”—those who of tools and solutions that may feel to their careers and to the business. In a believe collaboration is a key business uncomfortable, from a security standpoint. recent study, Cisco surveyed employees differentiator—use an average of 22 tools, at midmarket and enterprise businesses including social networking sites, blogs, in the United States and found that when and wikis, to connect with colleagues. workers embrace
Recommended publications
  • Rethinking Documentary Photography
    RETHINKING DOCUMENTARY PHOTOGRAPHY: DOCUMENTARY AND POLITICS IN TIMES OF RIOTS AND UPRISINGS —————————————————— A Thesis Presented to The Honors Tutorial College Ohio University —————————————————— In Partial Fulfillment of the Requirements for Graduation from the Honors Tutorial College with the degree of Bachelor of Arts in Art History —————————————————— by Jack Opal May 2013 Introduction I would like to think about documentary photography. In particular, I would like to rethink the limits of documentary photography for the contemporary. Documentary, traditionally, concerns itself with the (re)presentation of factual information, constitutes a record.1 For decades, documentary – and especially social documentary – has been under siege; its ability to capture and convey and adequately represent “truth” thrown into question, victim to the aestheticization of the objects, fading trust in their authors, and technological development. So much so that the past three decades have prompted photographer, documentarian, and art historian Martha Rosler to question first its utility, then its role, and finally its future in society. All of this has opened up the possibility and perhaps the need to reconsider the conditions and purpose of documentary practice, and to consider the ways in which it has been impacted by recent technological and historical developments. The invention of the internet and the refinement of the (video) camera into ever more portable devices and finally into the smartphone, and the rise to ubiquity within society of these inventions, signifies a major shift in documentary. So, too, have certain events of the past two decades – namely, the beating of Rodney King (and the circulation of the video of that event) and the development and adoption of the occupation as a major tactic within the political left.
    [Show full text]
  • Deterring Iran After the Nuclear Deal
    MARCH 2017 COVER PHOTO NIEL HESTER | FLICKR 1616 Rhode Island Avenue NW Washington, DC 20036 202 887 0200 | www.csis.org Lanham • Boulder • New York • London 4501 Forbes Boulevard Lanham, MD 20706 301 459 3366 | www.rowman.com Deterring Iran After the Nuclear Deal PROJECT DIRECTORS AND EDITORS Kathleen H. Hicks Melissa G. Dalton CONTRIBUTING AUTHORS Melissa G. Dalton Thomas Karako Jon B. Alterman J. Matthew McInnis Michael Connell Hijab Shah Michael Eisenstadt Michael Sulmeyer ISBN 978-1-4422-7993-3 Farideh Farhi Ian Williams Kathleen H. Hicks 1616 Rhode Island Avenue NW Washington,Ë|xHSLEOCy279933z DC 20036v*:+:!:+:! 202-887-0200 | www.csis.org Blank MARCH 2017 Deterring Iran after the Nuclear Deal PROJ ECT DIRECTORS AND EDITORS Kathleen H. Hicks Melissa G. Dalton CONTRIBUTING AUTHORS Melissa G. Dalton Thomas Karako Jon B. Alterman J. Matthew McInnis Michael Connell Hijab Shah Michael Eisenstadt Michael Sulmeyer Farideh Farhi Ian Williams Kathleen H. Hicks Lanham • Boulder • New York • London 594-68742_ch00_6P.indd 1 3/13/17 7:13 AM About CSIS For over 50 years, the Center for Strategic and International Studies (CSIS) has worked to develop solutions to the world’s greatest policy challenges. T oday, CSIS scholars are providing strategic insights and bipartisan policy solutions to help decisionmakers chart a course toward a better world. CSIS is a nonprofit organ ization headquartered in Washington, D.C. The Center’s 220 full- time staff and large network of affiliated scholars conduct research and analy sis and develop policy initiatives that look into the future and anticipate change. Founded at the height of the Cold War by David M.
    [Show full text]
  • Cyberwar: the ISIL Threat & Resiliency in Operational Technology
    Cyberwar: The ISIL Threat & Resiliency in Operational Technology Thesis Presented to the Faculty of the Department of Information and Logistics Technology University of Houston In Partial Fulfillment of the Requirements for the Degree Master’s of Information Systems Security By Gregory S. Anderson May 2017 Cyberwar: The ISIL Threat & Resiliency in Operational Technology ____________________________________ Gregory S. Anderson Approved: Committee Chair: ____________________________________ Wm. Arthur Conklin, PhD Computer Information Systems and Information System Security Committee Member: ____________________________________ Chris Bronk, PhD Computer Information Systems and Information System Security Committee Member: ____________________________________ Paula deWitte, PhD Computer Information Systems and Information System Security ____________________________________ ____________________________________ Rupa Iyer, PhD Dan Cassler Associate Dean for Research and Graduate Interim Chair for Department of Information Studies, College of Technology and Logistics Technology THIS PAGE INTENTIONALLY LEFT BLANK Acknowledgments First, I would like to thank Dr. Chris Bronk and Dr. Art Conklin for their support and guidance throughout my time at the University of Houston. Their dedication to students is unparalleled for any other professor I have come across during my education. I would also like to thank my family for their ongoing encouragement and love. The fostering environment to peruse knowledge and “never settle for less” has been a constant inspiration throughout my life. Lastly, to my partner of 7 years, Lorelei. None of my achievements these past few years would have come to fruition without her continuous love, support, and willingness to sacrifice for the greater good is deeply appreciated. Thank you for being the most patient and steadfast person I have ever known, I love you.
    [Show full text]
  • Ethical Hacking
    Ethical Hacking Alana Maurushat University of Ottawa Press ETHICAL HACKING ETHICAL HACKING Alana Maurushat University of Ottawa Press 2019 The University of Ottawa Press (UOP) is proud to be the oldest of the francophone university presses in Canada and the only bilingual university publisher in North America. Since 1936, UOP has been “enriching intellectual and cultural discourse” by producing peer-reviewed and award-winning books in the humanities and social sciences, in French or in English. Library and Archives Canada Cataloguing in Publication Title: Ethical hacking / Alana Maurushat. Names: Maurushat, Alana, author. Description: Includes bibliographical references. Identifiers: Canadiana (print) 20190087447 | Canadiana (ebook) 2019008748X | ISBN 9780776627915 (softcover) | ISBN 9780776627922 (PDF) | ISBN 9780776627939 (EPUB) | ISBN 9780776627946 (Kindle) Subjects: LCSH: Hacking—Moral and ethical aspects—Case studies. | LCGFT: Case studies. Classification: LCC HV6773 .M38 2019 | DDC 364.16/8—dc23 Legal Deposit: First Quarter 2019 Library and Archives Canada © Alana Maurushat, 2019, under Creative Commons License Attribution— NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0) https://creativecommons.org/licenses/by-nc-sa/4.0/ Printed and bound in Canada by Gauvin Press Copy editing Robbie McCaw Proofreading Robert Ferguson Typesetting CS Cover design Édiscript enr. and Elizabeth Schwaiger Cover image Fragmented Memory by Phillip David Stearns, n.d., Personal Data, Software, Jacquard Woven Cotton. Image © Phillip David Stearns, reproduced with kind permission from the artist. The University of Ottawa Press gratefully acknowledges the support extended to its publishing list by Canadian Heritage through the Canada Book Fund, by the Canada Council for the Arts, by the Ontario Arts Council, by the Federation for the Humanities and Social Sciences through the Awards to Scholarly Publications Program, and by the University of Ottawa.
    [Show full text]
  • Cyber, Intelligence, and Security
    Cyber, Intelligence, and Security Volume 3 | No. 1 | May 2019 European Countries Facing the Challenge of Foreign Influence on Democracy—Comparative Research David Siman-Tov and Mor Buskila The Threat of Foreign Interference in the 2019 Elections in Israel and Ways of Handling it Pnina Shuker and Gabi Siboni The INF Treaty and New START: Escalation Control, Strategic Fatalism, and the Role of Cyber Stephen J. Cimbala Iranian Cyber Capabilities: Assessing the Threat to Israeli Financial and Security Interests Sam Cohen Outsourcing in Intelligence and Defense Agencies: A Risk of an Increase in the Proliferation of Cyber Weapons? Omree Wechsler The Academization of Intelligence: A Comparative Overview of Intelligence Studies in the West Kobi Michael and Aaron Kornbluth Forty-Five Years Since the Yom Kippur War: Intelligence and Risk Management in the Thirty Hours Preceding the War Shmuel Even National Cyber Security in Israel Yigal Unna Cyber, Intelligence, and Security Volume 3 | No. 1 | May 2019 Contents European Countries Facing the Challenge of Foreign Influence on Democracy—Comparative Research | 3 David Siman-Tov and Mor Buskila The Threat of Foreign Interference in the 2019 Elections in Israel and Ways of Handling it | 27 Pnina Shuker and Gabi Siboni The INF Treaty and New START: Escalation Control, Strategic Fatalism, and the Role of Cyber | 41 Stephen J. Cimbala Iranian Cyber Capabilities: Assessing the Threat to Israeli Financial and Security Interests | 71 Sam Cohen Outsourcing in Intelligence and Defense Agencies: A Risk of an Increase in the Proliferation of Cyber Weapons? | 95 Omree Wechsler The Academization of Intelligence: A Comparative Overview of Intelligence Studies in the West | 117 Kobi Michael and Aaron Kornbluth Forty-Five Years Since the Yom Kippur War: Intelligence and Risk Management in the Thirty Hours Preceding the War | 141 Shmuel Even National Cyber Security in Israel | 167 Yigal Unna The purpose of Cyber, Intelligence, and Security is to stimulate Cyber, and enrich the public debate on related issues.
    [Show full text]
  • DISAPPEAR HERE Violence After Generation X
    · · · · · · · · · · · · · · · · DISAPPEAR HERE Violence after Generation X Naomi Mandel THE OHIO STATE UNIVERSITY PRESS / COLUMBUS All Rights Reserved. Copyright © The Ohio State University Press, 2015. Batch 1. Copyright © 2015 by The Ohio State University. All rights reserved. Library of Congress Cataloging-in-Publication Data Mandel, Naomi, 1969– author. Disappear here : violence after Generation X / Naomi Mandel. pages cm Includes bibliographical references and index. ISBN 978-0-8142-1286-8 (cloth : alk. paper) 1. Violence in literature. 2. Violence—United States—20th century. 3. Generation X— United States—20th century. I. Title. PN56.V53M36 2015 809'.933552—dc23 2015010172 Cover design by Janna Thompson-Chordas Text design by Juliet Williams Type set in Adobe Sabon Printed by Thomson-Shore, Inc. Cover image: Young woman with knife behind foil. © Bernd Friedel/Westend61/Corbis. The paper used in this publication meets the minimum requirements of the American National Standard for Information Sciences—Permanence of Paper for Printed Library Materials. ANSI Z39.48-1992. 9 8 7 6 5 4 3 2 1 All Rights Reserved. Copyright © The Ohio State University Press, 2015. Batch 1. To Erik with love and x x x All Rights Reserved. Copyright © The Ohio State University Press, 2015. Batch 1. All Rights Reserved. Copyright © The Ohio State University Press, 2015. Batch 1. contents · · · · · · · · · List of Illustrations vi Acknowledgments vii introduction The Middle Children of History 1 one Why X Now? Crossing Out and Marking the Spot 9 two Nevermind: An X Critique of Violence 41 three The Game That Moves: Bret Easton Ellis, 1985–2010 79 four Something Empty in the Sky: 9/11 after X 111 five Not Yes or No: Fact, Fiction, Fidelity in Jonathan Safran Foer 150 six I Am Jack’s Revolution: Fight Club, Hacking, Violence after X 178 conclusion X Out 210 Works Cited 227 Index 243 All Rights Reserved.
    [Show full text]
  • BENCHMARKING CYBER OPS 2018 an Initiative by Onnet for OOAT
    BENCHMARKING CYBER OPS 2018 An initiative by OnNet for OOAT //UNCLASSIFIED FOREIGN GOVERNMENT CYBER UNITS EXAMPLES • ISRAEL = UNIT8200 • US = U.S. CYBERCOM, NSATAO, DHS NCCIC • ISRAEL/US = “EQUATION GROUP” Name give by Kaspersky • UK = GHCQ-JTRIG, NCSC, MYNOC • SA = COMSEC • Australia = ASD • CANADA = CSEC • CHINA = PLA61398 • NKOREA = LAZARUSGROUP • RUSSIA = GRU6thDIR-FSO, GTsST • IRAN = INCA • DUTCH = JSCU AFRICA • Only cyber warfare unit known is under South African Government • Owned under National Intelligence Agency NIA • Formerly Electronic Communications Security ELS • Interagency with OIC, Office of Interception Centre EXAMPLES OF KNOWN NATION STATE CYBER WARFARE EVENTS • Estonia cyber attack by Russia • Crimea cyber attack by Russia • Operation Olympic games by TAO and Unit8200 (EquationGroup) against IRAN • Operation Nitro Zeus By TAO against IRAN by US • Operation Socialite by JTRIG/MYNOC, done by UK • Operation Rolling Thunder by JTRIG, operations by UK • Ethiopian use of HackingTeam software RCS to spy on ESAT journalists and Activists • Operation Aurora by Unit61398, operations in China • Operation Disttrack by ICA, Operations in Tehran to respond to US • Operation Turla Uroburos by Russian GRU6th Directorate in Russia • Operation DarkHotel Unit61398, from Israel EXAMPLES OF KNOWN NATION STATE CYBER WARFARE EVENTS • Sony pictures attack by LazarusGroup responding to a movie potraying Nkorea Leader • Red October – Unknown Nation State actor • Operation Ghostnet by Unit61398 from China • Operation NewsCaster by INCA in Tehran
    [Show full text]
  • The Day of the Cyber Wolf
    Regis University ePublications at Regis University All Regis University Theses Fall 2014 The aD y of the Cyber Wolf Ryan K. Buch Regis University Follow this and additional works at: https://epublications.regis.edu/theses Part of the Criminology and Criminal Justice Commons Recommended Citation Buch, Ryan K., "The aD y of the Cyber Wolf" (2014). All Regis University Theses. 210. https://epublications.regis.edu/theses/210 This Thesis - Open Access is brought to you for free and open access by ePublications at Regis University. It has been accepted for inclusion in All Regis University Theses by an authorized administrator of ePublications at Regis University. For more information, please contact [email protected]. Regis University College for Professional Studies Graduate Programs Final Project/Thesis Disclaimer Use of the materials available in the Regis University Thesis Collection (“Collection”) is limited and restricted to those users who agree to comply with the following terms of use. Regis University reserves the right to deny access to the Collection to any person who violates these terms of use or who seeks to or does alter, avoid or supersede the functional conditions, restrictions and limitations of the Collection. The site may be used only for lawful purposes. The user is solely responsible for knowing and adhering to any and all applicable laws, rules, and regulations relating or pertaining to use of the Collection. All content in this Collection is owned by and subject to the exclusive control of Regis University and the authors of the materials. It is available only for research purposes and may not be used in violation of copyright laws or for unlawful purposes.
    [Show full text]
  • Hacker, Hoaxer, Whistleblower, Spy: the Story of Anonymous
    hacker, hoaxer, whistleblower, spy hacker, hoaxer, whistleblower, spy the many faces of anonymous Gabriella Coleman London • New York First published by Verso 2014 © Gabriella Coleman 2014 The partial or total reproduction of this publication, in electronic form or otherwise, is consented to for noncommercial purposes, provided that the original copyright notice and this notice are included and the publisher and the source are clearly acknowledged. Any reproduction or use of all or a portion of this publication in exchange for financial consideration of any kind is prohibited without permission in writing from the publisher. The moral rights of the author have been asserted 1 3 5 7 9 10 8 6 4 2 Verso UK: 6 Meard Street, London W1F 0EG US: 20 Jay Street, Suite 1010, Brooklyn, NY 11201 www.versobooks.com Verso is the imprint of New Left Books ISBN-13: 978-1-78168-583-9 eISBN-13: 978-1-78168-584-6 (US) eISBN-13: 978-1-78168-689-8 (UK) British Library Cataloguing in Publication Data A catalogue record for this book is available from the British library Library of Congress Cataloging-in-Publication Data A catalog record for this book is available from the library of congress Typeset in Sabon by MJ & N Gavan, Truro, Cornwall Printed in the US by Maple Press Printed and bound in the UK by CPI Group Ltd, Croydon, CR0 4YY I dedicate this book to the legions behind Anonymous— those who have donned the mask in the past, those who still dare to take a stand today, and those who will surely rise again in the future.
    [Show full text]
  • The Fibreculture Journal Issn: 1449-1443 DIGITAL MEDIA + NETWORKS + TRANSDISCIPLINARY CRITIQUE
    The Fibreculture Journal issn: 1449-1443 DIGITAL MEDIA + NETWORKS + TRANSDISCIPLINARY CRITIQUE issue 26: Entanglements - Activism and Technology FCJ-191 Mirroring the Videos of Anonymous: Cloud Activism, Living Networks, and Political Mimesis. Adam Fish Lancaster University Abstract: Mirrors describe the multiplication of data across a network. In this article, I examine the politics of mirroring as practiced on videos by the hacktivist network Anonymous. Mirrors are designed to retain visibility on social media platforms and motivate viewers towards activism. They emerge from a particular social structure and propagate a specific symbolic system. Furthermore, mirrors are not exact replicas nor postmodern representations. Rather, mirroring maps a contestation over visibility that entangles both cloud activists and platform firms. doi: 10.15307/fcj.26.191.2015 Introduction In August 2012, Wikileaks was hit with a massive Distributed Denial of Service (DDoS) attack from a mysterious group appropriately titled Antileaks. DDoS assaults occur when multiple 85 FCJ-188 fibreculturejournal.org FCJ-191 Mirroring the Videos of Anonymous computers simultaneously ‘refresh’ a website causing it to overload and shutdown. A shaken-up Wikileaks tweeted: ‘The range of IPs used is huge. Whoever is running it controls thousands of machines or is able to simulate them’ (Kerr, 2012). This is a constant problem for Wikileaks. Their website reads: ‘WikiLeaks is currently under heavy attack. In order to fully protect the CableGate archives, we ask you to mirror it again’ (Wikileaks. org). Eventually repelling the Antileaks attack, Wikileaks again took to Twitter to boast: ‘DDoS proof, financially & geographically diverse. We’re ready to rumble’ (Kerr, 2012). For Wikileaks, mirroring means copying and pasting the CableGate archives in resilient servers so that the content remains visible.
    [Show full text]
  • Hacking Nation-State Relationships: Exploiting the Vulnerability of the Liberal International Order
    Fordham University DigitalResearch@Fordham Senior Theses International Studies Spring 5-16-2020 Hacking Nation-State Relationships: Exploiting the Vulnerability of the Liberal International Order Ray Marie Tischio Follow this and additional works at: https://fordham.bepress.com/international_senior Part of the International and Area Studies Commons Hacking Nation-State Relationships: Exploiting the Vulnerability of the Liberal International Order Ray Marie Tischio [email protected] International Studies: Global Affairs Track Fordham University Class of 2020 Thesis Advisor: Christopher Toulouse [email protected] Seminar Advisor: Dotan Leshem [email protected] ABSTRACT This thesis explores the implications of nation-state cyberwarfare and cyber conflict in the context of geopolitics and international studies. The emergence of nation-state cyber conflict has increased in frequency and severity in the last decade. In order to investigate what renders cyberwarfare a new and unique challenge to specific geopolitical climates and international systems at large, research on state-level cyber conflict within bilateral relationships—all of which cyber activity is significantly prevalent—is presented in the following three case studies: US- China, US-Iran, and US-Russia. Findings of these three case studies are used in subsequent analysis to articulate the specific ways in which state cyber conflict differs from conventional state kinetic warfare. Finally, after characterizing cyber conflict and the new challenges it presents to geopolitics, these defining qualities are situated into the current debate surrounding the deterioration of the liberal international order. I conclude that nation-state cyberwarfare exploits the postwar interconnected transparency of liberalism, and fundamentally challenges the continuity of US hegemony and the liberal order.
    [Show full text]
  • Deterring Iran After the Nuclear Deal
    MARCH 2017 Deterring Iran after the Nuclear Deal PROJ ECT DIRECTORS AND EDITORS Kathleen H. Hicks Melissa G. Dalton CONTRIBUTING AUTHORS Melissa G. Dalton Thomas Karako Jon B. Alterman J. Matthew McInnis Michael Connell Hijab Shah Michael Eisenstadt Michael Sulmeyer Farideh Farhi Ian Williams Kathleen H. Hicks Lanham • Boulder • New York • London 594-68742_ch00_6P.indd 1 3/13/17 7:13 AM 04 Cyberspace: A Growing Domain for Ira nian Disruption Michael Sulmeyer ROLE OF CYBER TOOLS IN IRAN’S BROADER STRATEGY A se nior Ira nian Islamic Revolutionary Guard Corps (IRGC) official described a war in cyberspace as “more dangerous than a physical war.”1 This statement was likely made in 2012, in response to a wave of publicly reported cyber operations against Iran, including Stuxnet,2 Duqu,3 and Flame.4 Since these operations, Iran has expanded the role of cyber capabilities in its broader national security strategy. Iran uses its cyber capabilities to expand the regime’s control over the information to which its population has access.5 The Ira nian leadership exercises its power in cyberspace to censor and block certain forms of social media content, and to surveil individuals and organ izations of concern to the state.6 Its control of information also enables the regime to leverage cyberspace to further a narrative for its domestic audience that frames Iran as a growing technological power, able to 1. “Iran Sees Cyber Attacks as Greater Threat than Actual War,” Reuters, September 25, 2012, http:// www . reuters . com / article / iran - military - idUSL5E8KP7HV20120925 . 2. Nicolas Falliere, Liam O Marchu, and Eric Chien, “W32.Stuxnet Dossier,” Symantec Report 2011, February 2011, https:// www .
    [Show full text]