Brandon Pragosa
Threat Assessment
Dr. Urban
6 June 2015
China’s Cyber Attacks Against US Military & Associated Private Firms
Introduction:
Based on current sources available, we have medium confidence that China will continue to conduct cyber espionage against United States defenses and military systems. It is not a new development as China’s People’s Liberation Army (PLA) cyber team has been behind many attacks against US defense firms and military systems as early as 2007. The KIQ for this assessment is: How vulnerable our Military and Defense sectors systems to cyber-attacks? It is imperative to US National Security, because outside actors, like the PLA, are exploiting our defense and military systems that can disrupt future operations both domestic and abroad. After a short background on China we will address the fallowing: Their motives, methods, targets, and challenges we face to combat Chinese cyber warfare.
China’s Background: China’s political situation allows them to pursue their interests in cyber space with little objections from the world’s superpowers. Even when questioned about their actions, the Chinese government continue to deny their involvement in security breaches of US security systems. To counter-act the allegations of China’s involvement, they show how other countries attack them first giving them an obligation to defend themselves. China is also free from overt scrutiny solely based upon the needs of China’s business and economy for US
Cyber espionage is the act of attempting to penetrate an adversarial system for the purposes of extracting sensitive or protected data of either social or technical in nature. They are illicit activities that range from the commercial and economic to the political and strategic. They include small nuisance attacks to matters of high magnitude and importance like the national security and intelligence (Cornish 2012). Chinese cyber espionage has continued to escalate in recent years; it has continued to gain attention in many institutions including the media, the technology and information services industries, in scientific research and innovations, and as well as the general public. All these institutions are aware that china is taking part in the systematic development of cyber techniques that they intentionally use to invade international organizations, national governments, commercial companies, universities, and research institutes (Cornish, 2012).
Since the onset of the first packet switching event that many believe to be beginning of the internet, no other technology besides the printing press has ever transformed the ability to deliver information. Although the internet is used by a large percentage of the civilized world, few Americans realize how vital cyberspace is to our national infrastructure. Today, we are faced with even more threats although it has been a recognized problem since 2009, when President Barrack Obama said “The cyber threat is one of the most serious economic and national security challenges we face as a nation. It’s also clear that we’re not as prepared as we should be, as a government or as a country (Obama, 2009).” Every industry that operates in the United States is dependent on the internet for some aspect of their business. Commerce, transportation, financial institutions, military, as well as industrial control systems are all interconnected. This interconnectedness has created vulnerabilities within their infrastructure that have increasingly become targets of terrorists, script kiddies, foreign governments and hackers of all types.
Most ISIS practice customs from the 7th century, but the methods they use to fight a war are 21st century techniques. ISIS have an advanced computer network that uses social media to attract terrorists worldwide to help them attack countries like the United States. Many countries have been victims of cyber attacks but may not realize it until long after the security breach occurred.
The book “Conquest in Cyberspace” went in depth on the United States’, Russia’s, and China’s views on information warfare and cyber warfare. It also discussed the areas where their policies, guidance, and operations differ and are the same. One of the most interesting things which I noticed in the completion of this assignment is how the United States has the most well defined and in depth policies and governances regulating their information warfare and cyber warfare operations and how both China and Russia has taking the policies and governances created by the United States and mimicked them in the creation of their own policies and governances for information
The United States is under attack. To be exact, the nation’s power grid is under attack in the form of cyber warfare. On May 21st, 2013 Congressmen Edward J. Markey and Henry A Waxman published a report that provided the findings from information that they had requested from over 150 utility companies (of which 60% responded). More than a dozen utilities reported “daily, constant, or frequent attempted cyber-attacks” (Markey & Waxman) with one utility reporting that they have about 10,000 attempted attacks per month!
Cyber security is a major concern for every department, business, and citizen of the United States because technology impacts every aspect of our daily lives. The more we use technology the more complacent, we get with the information that is stored within our cyber networks. The more complacent, we get, the more vulnerable we become to cyber-attacks because we fail to update the mechanisms that safeguard our information. Breaches to security networks are detrimental to personal, economic, and national security information. Many countries, like Russia, China, Israel, France, and the United Kingdom, now have the abilities and technology to launch cyber-attacks on the United States. In the last five years there have been several attacks on cyber systems to gain access to information maintained by major businesses and the United States Government. Cyber-attacks cause serious harm to the United States’ economy, community, and the safety, so we need to build stronger cyber security mechanisms. Based on my theoretical analysis, I recommend the following:
For thousands of years warfare remained relatively unchanged. While the tactics and weapons have changed as new methods of combat evolved, men and women or their weapons still had to meet at the same time and place in order to attack, defend, surrender or conquer. However, the advent of the of the internet has created a new realm of combat in which armies can remotely conduct surveillance, reconnaissance, espionage, and attacks from an ambiguous and space-less digital environment. Both state and non-state actors have already embraced this new realm and utilized both legal and illegal means to further facilitate their interests. What complicates cyber security further is as states attempt to protect themselves from cyber-warfare, private
Most nations today fear terror attacks that include bombing use of reinforcements like machines guns and other firearms. This is because terror attacks most of the times leave many people dead and others disabled while others are left without families. However, there is another attack today in many nations that can be destructive like a terror attack and this is the cyber-attack and threats. Cyber-attacks can be responsible for large mass destructions by making all systems connected to cyber networks fail to work (Rhodes 20). An example is the Morris worm that affected the world cyber infrastructures and caused them to slow down to a position of being impractical. Therefore, as a result of these cyber-attacks resources are being established and designed to help counter the attacks.
Davis, M. in his Stuxnet: How It Happened and How Your Enterprise Can Avoid Similar Attacks, indicated that another case example of SCADA systems being attacked was the cyber-attacks conducted in 2009 and 2010 when the worm referred to as Stuxnet was used. This worm was primarily directed at Iran in their nuclear facilities and was mainly for disruption of their processing mechanism in their enriched uranium deposits industry. Piggin, R. in his journal The Reality of Cyber Terrorism 2010, stated that the whole idea behind the Stuxnet worm was in reprogramming the systems in a way that would result in the plant sabotage and somehow hide the changes that would be made from the users and programmers in Iran. As explained earlier, one crucial flaw of these type of cyber-attacks is the potential that the government or company will be unable to detect the resultant damages from such attacks therefore, will not be in a position to effectively counter the attack and the damage that results from it. Henry, W., Jacob, S. and Eric, T. in their Pearl Harbor 2.0: When Cyber-Acts Lead to the Battlefield 2010, indicated that many of the U.S cyber-attacks seem to be originating from China, however, a connection has never been proved as to whether these attacks are sponsored by the state but it is believed that Chinese patriots could be behind the attacks being witnesses on most of the websites belonging to Americans for so long now. The motivation drivers that influence China to conduct
A cyber attack was made on Estonia in 2007, on 26 April 2007 at sharp 10'o clock; government of Estonia was made the target for a preplanned cyber attack by some secret foe (Stacy Prowell, 2010).
The branches of the military, for a couple generations, have always been the Army, Navy, Air force, Marine Corps, and the Coast Guard; however, in an ever evolving digital world, the notion that outer space would be the next military front is being rapidly replaced by the idea that cyber space will be the next arms race. The United States has been defending attacks on their infrastructure day after day, night after night, when one hacker on one side of the world sleeps, another takes their place to attempt to compromise the US government. The motives may range from a political ‘hacktivist’ trying to prove a point, to an economic spy, trying to gain a competitive edge on its more upstart rivals, to an attempt to control the United States
By the year of 2016, investments in online security are expected to reach $86bn (Contu et al, 2012). Although this might seem a large sum of money, it is considered necessary since there is an increase in online risks from all over the world. Professional hackers develop malware on a global scale and on a 24/7 basis. Hackers have five objectives when spreading malware over the Internet: to infect/distribute, to steal, to persist, to control and for intelligence (Morris, 2010).
In 2007 Estonia was one of the most developed nations in Europe in terms of information and communication technology advancement. Estonia had a common practice of relying on the internet for business transactions. In the early weeks of spring, Estonia was hit by a series of politically motivated cyber-attacks. Numerous parties and organisation suffered different forms of denial of service. The main parties included the Estonian government agencies, schools, banks and Internet Service Providers. The motivation for the cyber attack was due to the fact that the Estonian government made the decision to move a Soviet memorial of World War II from its previous or initial location in central Tallinn to a military cemetery. This resulted to an outburst and riots in the Estonian streets, violence towards the Ambassador of Estonia, Russia implementing indirect economic sanctions and the most relevant, politically motivated cyber-attack against Estonia. The Estonian state wasn’t critically affected from the cyber attack of 2007, since to a high extend the state functions and objects of demanding information infrastructure were not interrupted. However, the world received a wake up call on the new and emerging threats of cyber attacks.
According to the U.S. Department of Homeland Security in the article Cyber Threats to Mobile Phones, phones are now sharing hardware and software similar to a PC and becoming each time more like a PC. Therefore, the risks of being hacked are increasing, allowing hackers to attack mobile devices the same way as if they were doing it with a regular PC. Personal and professional information are more often stored on mobile devices therefore it is imperative to have our data secure. Security solutions for mobile devices are not as broad or high-tech as those for PCs. The majority of mobile security relies on the proper use and smart choices that the user makes on a daily basis to be protected against cyber attacks. Even the most careful person can be attacked but the possibilities of that happening are less when you are proactive.
The damage of a full-fledged cyber attack would be devastating, the destruction would be unparalleled to any other tragedy that has occurred America. Since technology is responsible for providing America with vital entities and resources, an unadulterated cyber attack would nearly fail the American economy; this is what is known as critical systems failure. Weapons of mass destruction and cyber attacks present imminent threats of critical systems failure. Although currently Americas’ critical infrastructures are coordinated by controlled systems, majority of these systems are indeed connected to the American cyberspace. This exposes one of America’s most vulnerable spot amidst cyber security. Another major vulnerable spot within the nations IT security would be the geographical physical location for each of Americas primary infrastructures, as well as their productivity. Due to the proximal locations, the major infrastructures could very well be infiltrated by one efficient CNA.