Dartmouth Institute provides cyber attack analysis report

Posted 09/25/01

A report released this week by researchers at Dartmouth's Institute for Security Technology Studies (ISTS) states that the United States can expect cyber attacks in the wake of the September 11 tragedy. The report, titled "Cyber Attacks During the War on Terrorism: A Predictive Analysis," is for government officials, lawmakers and decision-makers, law enforcement staff, and private companies and organizations. The goal is to provide fact-based analysis of potential cyber attacks that could be aimed at the United States and its allies during the war on terrorism.

Using recent conflicts, physical and cyber, as case studies, the report warns of impending cyber attacks during the war on terrorism. Three major lessons can be learned from the case studies: cyber attacks immediately accompany physical conflicts; cyber attacks are increasing in volume, sophistication and coordination; and cyber attackers are attracted to high-value targets. The lessons indicate that U.S. retaliatory strikes for the tragic September 11 events may result in cyber attacks against the American electronic infrastructure.

"This report examines the likelihood of cyber attacks against the United States and allied information infrastructure in the wake of expected U.S. retaliatory measures against terrorists and their nation state sponsors. We believe that our predictive analysis will be of great value to policymakers, intelligence analysts, law enforcement officials and systems administrators. It goes well beyond the widespread speculation about the possibility of such attacks and examines the potential types, targets and sources of attacks. It also recommends concrete protective actions. It is our hope that this report will assist those in government and industry responsible for securing our information infrastructure against malicious attacks," said Michael Vatis, Director of ISTS. "The potential for cyber attacks is real, and our defense against them must be part of our overall strategy during our war on terrorism."

Web defacements, denial of service, malicious worms and disabling infrastructure attacks are among the threats highlighted. Many of the nation's web sites, communication networks and critical infrastructures are at risk. Recommendations include updating software and operating systems regularly, maintaining strict password policies, securing information assets (like routers and servers), and remaining on high-alert status watching for warning signs of impending hostile cyber activity.

Established in 2000, the ISTS serves as a principal national center for counter-terrorism technology research, development and assessment. It is funded in part through the U.S. Justice Department's National Institute of Justice, Office of Science and Technology. The Institute studies and develops technologies addressing counter terrorism and cyber security.

EDITOR'S NOTE:

Michael Vatis is available to speak with media on this topic. To arrange for an interview, please call (603) 646-3661. On Wednesday, September 26, he will testify before the House Committee on Government Reform, Subcommittee on Government Efficiency, Financial Management, and Intergovernmental Relations. The title of the hearing will be "Information Technology: Essential Yet Vulnerable. How Prepared Are We For Attacks?"

Michael A. Vatis is the Director of the Institute for Security Technology Studies (ISTS) at Dartmouth. Vatis came to Dartmouth from Washington, D.C., where he served most recently as founder and first director of the National Infrastructure Protection Center (NIPC), an interagency organization responsible for detection, warning and response to cyber attacks. Under Vatis' leadership, NIPC developed the federal government's principal capability for warning of and responding to computer intrusions, viruses, cyber terrorism and computer-based espionage.

An attorney with extensive experience in national security issues, Vatis also served as Associate Deputy Attorney General and Deputy Director of the Executive Office for National Security with the U.S. Department of Justice from 1994 to 1998. He advised the Attorney General and Deputy Attorney General on matters of counter terrorism, high-tech crime, encryption, intelligence, foreign policy and infrastructure protection. From 1993 to 1994, Vatis was a Special Counsel in the Department of Defense.