Top 10 Rock and Roll Cybersecurity Predictions for 2017

It's that time of year again. Time for information security predictions for 2017. This year, we have an interesting twist on predictions by tying them to classic rock lyrics. It's interesting how prescient the lyrics are.

Russia's Undeclared Cyber Wars

Post-Soviet Russia continues to exercise a get-tough attitude toward its former possessions. With each successful foray, its treatment toward the newly independent states that were once part of the Russian Empire becomes more and more assertive if not more aggressive. This excerpt from Vladimir Putin and Russia's Imperial Revival discusses Russia's cyberwar tactics and analyzes its 2007 Cyber War with Estonia.

Report Connects Iran to Global Critical National Infrastructure Hacks

Reports are starting to come in today that security firm Cylance has published an 86-page report on Operation Cleaver, which discusses Iran's hacking capabilities and motivations to attack global interests beyond the U.S. and Israel, long thought to be behind Stuxnet, and espionage campaigns using Flame and Duqu malware.

"Ask yourself how connected your life has gotten over the last 5 years; how connected businesses and governments have gotten over the last 5 years," said TK Keanini,  Lancope CTO. "In turn, crime and nation-state threats have also become more connected and their capabilities are expanding.

"Regardless of revenge or any other motivation, all nations need to be at a state of readiness and the investment in defense must at the very least match the investment being made in attacks by the adversaries.

"This statement is only bone chilling if you are not paying attention. The threat is real and defenses are in a constant co-evolutionary spiral."

Conflict and Cooperation in Cyberspace: The Challenge to National Security,  edited by Panayotis Yannakogeorgos and Adam Lowther, brings together some of the world’s most distinguished military leaders, scholars, cyber operators, and policymakers in a discussion of current and future challenges that cyberspace poses to the United States and the world. Maintaining a focus on policy-relevant solutions, it offers a well-reasoned study of how to prepare for war, while attempting to keep the peace in the cyberspace domain.

The discussion begins with thoughtful contributions concerning the attributes and importance of cyberspace to the American way of life and global prosperity. Examining the truths and myths behind recent headline-grabbing malicious cyber activity, the book spells out the challenges involved with establishing a robust system of monitoring, controls, and sanctions to ensure cooperation amongst all stakeholders. The desire is to create a domain that functions as a trusted and resilient environment that fosters cooperation, collaboration, and commerce.

Hong Kong university warns students and staff about US hackers

The India Times reports that following the Snowden leaks, the Chinese University in Hong Kong warned students and staff about basic computer security to ward off an onslaught of US hackers. Is this calling the pot calling the kettle black, or another skirmish in the  new Cold War?

Pentagon to Expand Cyber Force

And it's on!

Pentagon to Drastically Expand Cyber Force

As Adam B. Lowther, a Research Professor at the Air Force Research Institute and co-author with Panayotis A Yannakogeorgos of "Conflict and Cooperation in Cyberspace: The Challenge to National Security," to be published by Auerbach in August 2013, said, "With governments and societies believing that cyber attack is something less than an act of war, it should come as no surprise that President Obama is preparing for what may be the opening salvo in America's next confrontation. In fact, it may be the United States that attacks first. Given the cyber vulnerabilities of American society, preemption may be the only option."

Iran as Latest Cyberthreat. Payback's a Bitch.

This article quotes  the head of the Air Force cyber command on Iran's growing cyberthreat.

Well, the Air Force has its cyberwarriors, and wants more, so it stands to reason all our enemies and frenemies want the same. Iran's already hit the financial sector.  Only 17 critical infrastructure sectors  left to go.

Huawei too dangerous to do business with?

Here's more on the supply chain security thing from John Dix, editor of Network World.

Last week, three US service providers came out in support of the Chinese companies. (Sorry, I can't find or recall the reference for this.)

In March, the GAO found that defense agencies claimed to have no supply chain security issues, and discovered that DOD had suspect components.

Is this just New Cold War posturing?

Chinese firms draw fire in House Intelligence report; Cisco cuts ties to China's ZTE after Iran probe

Well, of course the Chinese firms would call the charges "baseless."

Seems like the House Intelligence Committee did something right. Reuters reports  that the committee is recommending that Huawai and ZTE be barred from buying US companies because of fears that they could be used for cyber-espionage. Of course, depending on who wins the Presidential election next month, the committee's recommendation has a good chance of being ignored. I'm suprised we allow them to sell kit into the US, or at least the defense establishment. As I said before, cyber-espionage is still esponiage. Is it any easier done over networks than by coopting employees of target companies or government agencies? I'd be more concerned about cyberwarfare. And didn't India ban Chinese telecom firms from selling into the country because of security concerns? Frankly, I'd be as worried about French and Israeli providers.

10/9/12 -- According to Reuters, Cisco cuts ties to China's ZTE after Iran probe. Shall I rest my case now?

Cyberwar? What cyberwar?

The White House recently released its International Strategy for Cyberspace, which addresses actions the US can take in response to cyber threats. The Department of Defense then released a cyber strategy that the Joint Chiefs say does't go far enough in outlining an offensive response. Meanwhile, the U.S. Cyber-Security Coordinator, Howard Schmidt, said there is no cyberwar. Jim Tiller has some interesting things to say about this. There seems to be plenty of evidence for cyberwar--Georgia, Stuxnet, reputed Chinese attacks on 72 organziations--if it exists.