Cybercrime: Threats, Risks, and Countermeasures

Author: Daniel Martin
Publisher:
Publish Date: 2002-12-01
Features: Never forget that the steps toward globalization in history are irreversible. This issue not only concerns a vast number of users but also relates to every person in the information industry. Therefore, it is something we all share. The new cybercrimes discussed in this book should be understood as a snapshot of a specific moment in an ongoing evolutionary process—a snapshot. Like traditional case investigations, we draw initial conclusions from the details of specific cases before considering countermeasures and defense strategies. Of course, we have always emphasized, and increasingly emphasized, the importance of the human factor everywhere.
III. Threats to the Nation
(1) Vulnerable Infrastructure
All government departments are targets of cybercrime. The U.S. Department of Defense manages over 2 million computers, overseeing more than 100,000 regional networks and over 100 remote networks. The FBI estimates that the defense system faces tens of thousands of attacks annually. A report by the U.S. National Security Agency reveals that a single hack could disable the command system of the U.S. Pacific Fleet, numbering over 100,000 people, or disrupt the U.S. power grid within days. Recent statistics on attacks against military intelligence networks are particularly revealing. 88% of attacks succeed, with only 4% of targeted networks identifying the source of the attack, and officially reported illegal attacks account for less than 0.5%. According to the U.S. Government Accountability Office (GAO, equivalent to France's Court of Auditors), U.S. government networks are truly "funnels." The organization tested 24 government departments and found that 7 scored only 3 out of 20, while the average score was just 7 out of 20. The U.S. Departments of Labor, Interior, Health and Human Services, Agriculture, and Justice all failed. On the website of the Department of Health and Human Services, it is relatively easy to access data on all U.S. Social Security beneficiaries with a bit of effort. All government departments face significant challenges in monitoring the entry of sensitive information.
(2) Hackers Targeting Government Networks
Government networks are also frequently targeted by hackers. Recently, a U.S. Pentagon cybersecurity official admitted that the Mexican Revolutionary Party guerrillas had attacked the Pentagon's website in 1998. Just a short while ago, a group of hackers broke into a Japanese government website for fun, leaving behind numerous messages and links to adult services. These messages could also be political, for example. The homepage of the Japanese Ministry of Research, Science, and Technology was replaced with an article written in Chinese, claiming that the Japanese government refuses to acknowledge the Nanjing Massacre of 1937 and calling on the Chinese people to strongly protest the Japanese government's actions. In December 2000, two Turkish hackers attacked the website of the Turkish Prime Minister to protest the government's insufficient salary increases for civil servants. Both hackers were children of government employees. The website of the Communist Party of Bohemia and Moravia in the Czech Republic was also recently hacked. Hackers posted messages on the homepage and linked the site directly to the website of a major right-wing force in the Czech Republic, forcing the site to shut down for several days. The internet has now become a stage for hostile political factions to clash. In October 2000, the main website of the Lebanese Islamic Party, Hezbollah News Agency, was disrupted. For several days, hackers from Europe, Canada, South Africa, the U.S., and Israel launched coordinated attacks, eventually crippling the site. The site normally receives 100,000 to 300,000 visitors daily, but during the attack, traffic surged to 9 million daily, overwhelming the system. The internet has become a new battlefield, where any means can be used. News agencies have also become victims of hacker attacks. In July 1997, a news release issued by TASS claimed that Pol Pot had arrived at Ystad Airport in Sweden and had requested political asylum from the Swedish government. However, it was actually a hacker prank. TASS clarified the matter, but its reputation was still severely damaged! In recent Chechen conflicts, Russia has been reported to deliberately disrupt Chechen websites, which are now largely non-existent. Worse still. A recent report by the U.S. Government Accountability Office indicates that several spaceflight systems may also be vulnerable, such as those used for precise calculations of satellites orbiting Earth and systems that process data sent to these satellites. The Global Positioning System (GPS), closely linked to these satellites, is also at risk. Without GPS, what would happen? All mobile phone would be affected, which would be a true disaster. Air traffic control is well-protected. However, what about systems for ticket booking and flight plan allocation? Imagine the chaos at an airport where no one knows where to go or which flight to take. Of course, returning to a manual operation era is now impossible. A general malfunction in the passenger baggage registration system at Paris Orly Airport caused flight delays. The computers of national meteorological systems are even more critical! They ensure maritime safety and are vital for energy production and transportation. These computers are highly advanced and centralized, making them particularly vulnerable. However, according to the French Court of Auditors, investing billions of euros to secure these fragile computer systems is simply not feasible.
(3) "Red Teams"
Governments in developed countries have established internal teams to attack their own websites. These groups are nicknamed "Red Teams." Thanks to such organizations, we can better understand various flaws and risks, thereby improving defense strategies. This method also allows for testing attack techniques. Because, even though no one is willing to admit it, better defense requires learning through offense, it is undeniable that most developed countries now possess the capability for cyberattacks. Evidence of this is the addition of a cyber warfare threat (Informatique) alongside traditional NBC threats (nuclear, biological, and chemical). This is why people now speak of NBCI threats.
(4) Revisiting "Echelon"
Echelon is an extremely sensitive eavesdropping tool. Modern surveillance includes targeted eavesdropping (e.g., monitoring specific individuals like terrorists), total surveillance, or long-term surveillance. In this field, electronic surveillance systems and interception systems work in tandem. For months, media, the European Parliament, and public opinion have been deeply concerned about the threats posed by the Echelon network. MEP Peuchet submitted an investigation report to the Committee on Defense and Armed Forces, focusing on electronic surveillance and interception systems that could endanger national security. Available evidence suggests that the Echelon system is a product of a long-standing security treaty. The treaty, signed in 1947, includes the U.S., the UK, and several former British colonies such as Canada, New Zealand, and Australia, primarily aimed at monitoring Soviet bloc communications. The geographic distribution of member countries covers nearly the entire globe, making it easier to monitor Soviet and Soviet satellite communications. This is the world's only multilateral communication surveillance system. During the Cold War, the legitimacy of this system was unquestionable, providing intelligence services to NATO members to some extent.