Briefing Articles

Large-scale cyber attacks drive new defenses

  • July/August 2010
  • By Stephen Cass

Hackers gather at Dreamhack, the largest computer gathering in the world, held twice a year in Sweden.
Lars Lindqvist/Kontinent/Redux

Over the past few years, computer attacks, once largely a nuisance issue, have become a threat to national security. Organized criminals have taken advantage of the shift toward online banking and commerce to compromise the financial identity of millions. Even worse, it's now possible for hackers to cripple government websites during a conflict, or for governments to spy on businesses. Some people even fear that cyber terrorists could use the Internet to damage critical infrastructure such as power stations (see "Moore's Outlaws"). Concrete numbers on the economic impact of security failures are hard to come by, but the FBI says that losses from cyber crimes in the United States jumped 112 percent from 2008 to 2009.

Cyber attackers exploit fundamental weaknesses in our computer systems (see "The Attacker's Advantage"). And the threat only grows as more and more businesses around the world become dependent on the Internet, and as more critical infrastructure goes online. To prevent a disaster, experts are working on new defensive technologies, and organizations are even tightening up internal security to protect themselves from malicious insiders. But given that the attackers and their victims are often in different countries, international coöperation will be crucial to improving security, and the necessary agreements have proved hard to reach (see "Global Gridlock on Cyber Crime").

Print

Related Articles

Israel Vulnerable to Cyber Attack, Leaders Warn

A conference on cyber warfare in Tel Aviv reveals Israel's weaknesses—but a strategy to solve them is already in hand.

U.S. Aims Missiles at Hackers

The Pentagon will treat cyberattacks as acts of war—but how will it identify the enemy?

Close Comments

To comment, please sign in or register

Forgot my password

mattgroom

284 Comments

  • 589 Days Ago
  • 06/27/2010

defenses

At present the only real defense is to remove those services from the internet.

I can't see a good reason for having power supply controls on the internet or nuclear missile firing controls...Hence the latter arent.

Reply

wctopp

64 Comments

  • 588 Days Ago
  • 06/28/2010

Re: defenses

you can build a smart grid exclusively over the power lines and not connected to the internet, but it must be connected to the home electrical meter and that meter must be connected to the home network.  thus anyone with an electrical meter will have access to the power grid even if it's not on the internet.  the real curiosity is why people bank online and give their bank details to paypal etc.  one would think it relatively easy to NOT have on-line access to a bank account.

Reply

  • 588 Days Ago
  • 06/28/2010

Re: defenses

Even if absolute security were possible (it's not) there would still be a cost/benefit calculation worth considering. Yes, we could all be "air-gapped" from our banks, never consider giving up credit-card information to make an online purchase, etc. Would we be "safer"? Possibly. But at what cost, in efficiency, convenience, lifestyle restrictions, whatever?

Dilbert on this: http://www.dilbert.com/strips/?F=1&CharIDs=&ViewType=Full&NoDateRange=1&SingleDate=01%2F11%2F1996&Order=s.DateStrip&PerPage=5&After=04%2F16%2F1989&Before=06%2F28%2F2010&CharFilter=Any

Security is always a trade-off.

Reply

Advertisement

MAGAZINE

Can We Build Tomorrow's Breakthroughs?

Manufacturing in the United States is in trouble. That's bad news not just for the country's economy but for the future of innovation.

Videos

Windows on an iPad

More

Advertisement

Technology Review Lists

TR50

Our list of the 50 most innovative companies, including the following:

Geron

Lattice Power

Amyris

Serious Materials

More

Advertisement

Facebook

Advertisement