Comments on: Implications of Russian Cyber Battles http://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/ Online Defense and Acquisition Journal Thu, 09 Feb 2012 17:13:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: daskrohttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-1110 daskro Mon, 25 Aug 2008 14:01:04 +0000 http://www.dodbuzz.com/?p=556#comment-1110 C4rb4s satirical comment has a glimmer of truth in it. Botnet operators loosely associated with 4chan*, and dozens of other sites like it have just as much capability as these state-sponsored cyber attackers.The point is ANYONE with the will, time, patience, and a modicum of programming knowledge can create these kind of networks.* 4chan is a comedy site, not some hacker refuge, but its community has been known in the past to cause some havoc with botnets, such as with the Scientology attacks. C4rb4s satirical comment has a glimmer of truth in it. Botnet operators loosely associated with 4chan*, and dozens of other sites like it have just as much capability as these state-sponsored cyber attackers.

The point is ANYONE with the will, time, patience, and a modicum of programming knowledge can create these kind of networks.

* 4chan is a comedy site, not some hacker refuge, but its community has been known in the past to cause some havoc with botnets, such as with the Scientology attacks.

]]> By: C4r4b4shttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-1050 C4r4b4s Fri, 22 Aug 2008 18:49:16 +0000 http://www.dodbuzz.com/?p=556#comment-1050 I blame 4chan. I blame 4chan.

]]> By: Matthew G. Saroffhttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-1023 Matthew G. Saroff Thu, 21 Aug 2008 17:30:56 +0000 http://www.dodbuzz.com/?p=556#comment-1023 The "attacks" on Estonia were some college kid, IIRC. The “attacks” on Estonia were some college kid, IIRC.

]]> By: daskrohttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-1021 daskro Thu, 21 Aug 2008 13:22:28 +0000 http://www.dodbuzz.com/?p=556#comment-1021 This cyber warfare hype really needs to stop. The very technical nature of these attacks lend themselves to being very effective against countries with limited communication infrastructure combined with token network management expertise. There is only a finite amount of network denial capability out there and historically attempts made on larger networks end with slightly slower response times for the user and in the most extreme cases a network denial of hours.The reasons why are fairly straightforward. Effective botnets operate with tens, if not hundreds of thousands, of infected computers that are told to bombard a target network with data. Unlike with smaller targets, larger networks have both the bandwidth and network hardware/expertise to identify a vast majority of attacks from legitimate data and are able to minimize damage accordingly.Unlike traditional expansion of capability within the military, governments cannot create greater botnet capability through spending. Botnet creation is not only organic but also implemented by black hats in vicious competition to best one another. It is very much a zero-sum game in that the creation of a new botnet means taking already infected computers and placing them under your control.Eastern European gangs have been using botnets to extort money from mom and pop internet operations for years. These victims neither have the size nor the IT infrastructure to guard themselves against these attacks. They’d rather pay ransom than have their operation shut down for weeks on end.Sure, cyber warfare is not limited to denial attacks, but in the case of Estonia and Georgia, these are the examples brought up time and time again. This needs to stop. This cyber warfare hype really needs to stop. The very technical nature of these attacks lend themselves to being very effective against countries with limited communication infrastructure combined with token network management expertise. There is only a finite amount of network denial capability out there and historically attempts made on larger networks end with slightly slower response times for the user and in the most extreme cases a network denial of hours.

The reasons why are fairly straightforward. Effective botnets operate with tens, if not hundreds of thousands, of infected computers that are told to bombard a target network with data. Unlike with smaller targets, larger networks have both the bandwidth and network hardware/expertise to identify a vast majority of attacks from legitimate data and are able to minimize damage accordingly.

Unlike traditional expansion of capability within the military, governments cannot create greater botnet capability through spending. Botnet creation is not only organic but also implemented by black hats in vicious competition to best one another. It is very much a zero-sum game in that the creation of a new botnet means taking already infected computers and placing them under your control.

Eastern European gangs have been using botnets to extort money from mom and pop internet operations for years. These victims neither have the size nor the IT infrastructure to guard themselves against these attacks. They’d rather pay ransom than have their operation shut down for weeks on end.

Sure, cyber warfare is not limited to denial attacks, but in the case of Estonia and Georgia, these are the examples brought up time and time again. This needs to stop.

]]> By: Joseph B. Cryerhttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-1012 Joseph B. Cryer Wed, 20 Aug 2008 15:18:31 +0000 http://www.dodbuzz.com/?p=556#comment-1012 Colin thanks for writing this piece.Awareness is the first step in putting together a comprehensive solution.Regarding the Soviets (sorry I am OLD SCHOOL) we need to “collectively” try to put ourselves in there position.Or better yet, there mindset. As a Country I believe that “mentally” (as a whole) they are suffering from some sort of mental trauma with there recent history (WWII, Stalin Holocaust, fall of Communism, etc.).These ex-Soviet States bring back some of these unfortunate memories (paranoia) and we should be empathetic (to some degree) of this in our diplomatic/economic/military strategies.Once again (not to repeat myself) an unstable Russia is not in our National Security Interests. Colin thanks for writing this piece.

Awareness is the first step in putting together a comprehensive solution.

Regarding the Soviets (sorry I am OLD SCHOOL) we need to “collectively” try to put ourselves in there position.

Or better yet, there mindset. As a Country I believe that “mentally” (as a whole) they are suffering from some sort of mental trauma with there recent history (WWII, Stalin Holocaust, fall of Communism, etc.).

These ex-Soviet States bring back some of these unfortunate memories (paranoia) and we should be empathetic (to some degree) of this in our diplomatic/economic/military strategies.

Once again (not to repeat myself) an unstable Russia is not in our National Security Interests.

]]> By: Leon Houstonhttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-999 Leon Houston Wed, 20 Aug 2008 01:05:18 +0000 http://www.dodbuzz.com/?p=556#comment-999 This is an example of why we need to look at my concept of a "Perfect Battalion." Those who were there already could have had early warning of this happening and spiked back! This is an example of why we need to look at my concept of a “Perfect Battalion.” Those who were there already could have had early warning of this happening and spiked back!

]]> By: Tom Reynoldshttp://www.dodbuzz.com/2008/08/19/implications-of-russian-cyber-battles/#comment-998 Tom Reynolds Wed, 20 Aug 2008 00:59:36 +0000 http://www.dodbuzz.com/?p=556#comment-998 This type of warfare is very important. Remember in Bosnia when we "reprogrammed" the radar system of the enemy. That was done either by satellite or by a stealth plane. I don't know which but cyber warfare is critical is your are going to render an enemy inoperative with electronic equipment. No doubt we are mixed up in it as are the Russians. This type of warfare is very important. Remember in Bosnia when we “reprogrammed” the radar system of the enemy. That was done either by satellite or by a stealth plane. I don’t know which but cyber warfare is critical is your are going to render an enemy inoperative with electronic equipment. No doubt we are mixed up in it as are the Russians.

]]>