Simulated Terrorist Cyberattack Exposes Problems - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
News

Simulated Terrorist Cyberattack Exposes Problems

It simulated physical and computer attacks on banks, power companies, and the oil and gas industry.

WASHINGTON (AP) -- The Homeland Security Department's first simulation of a terrorist attack on computer, banking, and utility systems exposed problems with the ways victimized industries communicated vital information during the crisis, the government's new cybersecurity chief said Monday.

Experts inside government and the Institute for Security Technology Studies at Dartmouth College are still formally evaluating results of the so-called "Livewire" exercise, carried out over five days late in October. It simulated physical and computer attacks on banks, power companies, and the oil and gas industry, among others.

"There were some gaps," said Amit Yoran, the newly hired chief of the agency's National Cyber-Security Division. "The information flow between various sectors was not as smooth as we would perhaps have liked." He assessed government's performance as "certainly a B+, better than my personal expectations."

Yoran said mock attacks during the exercise tried to broadly disrupt services and communications across major industrial sectors, enough to make consumers lose economic confidence. It modeled bombings at communications facilities outside Washington and cyberattacks aimed at companies and other networks.

Even before the Sept. 11, 2001, terror attacks, the government organized its cyberprotection efforts around early-warning centers operated separately by banks, water utilities, technology companies, and the electric industry.

But critics have long pointed to problems with the ways that these centers exchange information with each other, making it far more difficult for banks to describe their internal problems with a power utility than with other financial institutions that also may be under attack.

Yoran said that in some cases, the exercise exposed problems as simple as uncertainty about which companies and industries can be contacted in the middle of the night with urgent information about an ongoing attack; most mock failures occurred during the day.

In some cases, victim companies weren't told explicitly about an attack; organizers might send them clues, such as E-mails purportedly from customers who mysteriously couldn't access their bank accounts.

Yoran said the exercise affirmed that troublesome interdependencies exist throughout the nation's most important systems. A broad power outage could also bring down key telephone or computer networks, disrupting repair efforts.

Homeland Security officials said it was the first large-scale exercise carried out with the agency. Officials at the National Security Council and departments of Defense and Treasury also were involved.

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
State of the Cloud
State of the Cloud
Cloud has drastically changed how IT organizations consume and deploy services in the digital age. This research report will delve into public, private and hybrid cloud adoption trends, with a special focus on infrastructure as a service and its role in the enterprise. Find out the challenges organizations are experiencing, and the technologies and strategies they are using to manage and mitigate those challenges today.
Slideshows
What Digital Transformation Is (And Isn't)
Cynthia Harvey, Freelance Journalist, InformationWeek,  12/4/2019
Commentary
Watch Out for New Barriers to Faster Software Development
Lisa Morgan, Freelance Writer,  12/3/2019
Commentary
If DevOps Is So Awesome, Why Is Your Initiative Failing?
Guest Commentary, Guest Commentary,  12/2/2019
Register for InformationWeek Newsletters
Video
Current Issue
Getting Started With Emerging Technologies
Looking to help your enterprise IT team ease the stress of putting new/emerging technologies such as AI, machine learning and IoT to work for their organizations? There are a few ways to get off on the right foot. In this report we share some expert advice on how to approach some of these seemingly daunting tech challenges.
White Papers
Slideshows
Twitter Feed
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.
Sponsored Video
Flash Poll