Tuesday, November 10, 2009

We've Already Had Our Cyber-Pearl Harbor. Yikes!

"If I were an attacker and I wanted to do strategic damage to the United States, I would either take the cold of winter or the heat of summer, I probably would sack electric power on the U.S. East Cost, maybe the West Coast, and attempt to cause a cascading effect. All of those things are in the art of the possible from a sophisticated attacker," McConnell explained.

"Do you believe our adversaries have the capability of bringing down a power grid?" Kroft asked.

"I do," McConnell replied.

Asked if the U.S. is prepared for such an attack, McConnell told Kroft, "No. The United States is not prepared for such an attack."

"It is now clear this cyber threat is one [of] the most serious economic and national security challenges we face as a nation," President Obama said during a speech.

Four months after taking office, Obama made those concerns part of our national defense policy, declaring the country's digital infrastructure a strategic asset, and confirming that cyber warfare had moved beyond theory.

"We know that cyber intruders have probed our electrical grid, and that in other countries cyber attacks have plunged entire cities into darkness," the president said.

President Obama didn't say which country had been plunged into darkness, but a half a dozen sources in the military, intelligence, and private security communities have told us the president was referring to Brazil.

Several prominent intelligence sources confirmed that there were a series of cyber attacks in Brazil: one north of Rio de Janeiro in January 2005 that affected three cities and tens of thousands of people, and another, much larger event beginning on Sept. 26, 2007.

That one in the state of Espirito Santo affected more than three million people in dozens of cities over a two-day period, causing major disruptions. In Vitoria, the world's largest iron ore producer had seven plants knocked offline, costing the company $7 million. It is not clear who did it or what the motive was.

But the people who do these sorts of things are no longer teenagers making mischief. They're now likely to be highly trained soldiers with the Chinese army or part of an organized crime group in Russia, Europe or the Americas.

"They can disrupt critical infrastructure, wipe databases. We know they can rob banks. So, it's a much bigger and more serious threat," explained Jim Lewis, director of the Center for Strategic and International Studies....

"In 2007 we probably had our electronic Pearl Harbor. It was an espionage Pearl Harbor," Lewis said. "Some unknown foreign power, and honestly, we don't know who it is, broke into the Department of Defense, to the Department of State, the Department of Commerce, probably the Department of Energy, probably NASA. They broke into all of the high tech agencies, all of the military agencies, and downloaded terabytes of information."

How much is a terabyte?

"The Library of Congress, which has millions of volumes, is about 12 terabytes. So, we probably lost the equivalent of a Library of Congress worth of government information in 2007," Lewis explained.

"All stolen by foreign countries?" Kroft asked.


See also: http://www.nytimes.com/2009/08/27/technology/27compute.html?emc=eta1

Think about the threats to the 2016 Olympic Games in Brazil. Think about the possibilities of a Y2K-like terrorist disaster on a 12 million person city. No water, no electricity, no plumbing, no food. The looting and carnage would be insane. A well-planned, well-executed three-pronged attack could spin a city the size of Los Angeles into so much chaos it would make the Rodney King riots look like Romper Room. And, you could leave it to the FBI spokespersons to quickly say there's no link to terrorism within the first five minutes, just like they did directly following the November 5th shooting at Fort Hood. Pshaw. If that solider-killer isn't a terrorist, then I don't know who is.

November 5th was the day Johnny died while we were in Iraq two years ago. He and I served together many years ago on the police Special Reaction Teams on US Army posts in South Korea and at Fort Carson, Colorado.

I spoke with a senior instructor at the DOD Police Academy today who trained the lady cop who was shot -- and who shot -- the so-called Army Major who went on a shooting rampage. She's in good spirits, I'm told. Is it wrong to say I wished I could have shot the guy?

No comments: