Email this article   Print article 


Is Stuxnet The First Shot In A Cyberwar?

By Ken Presti
June 01, 2012    6:42 PM ET

Page 1 of 3

The New York Times is reporting alleged ties between the Stuxnet worm and the presidential administrations of both George W. Bush and Barack Obama. Such a connection raises discussion in the IT industry about whether a cyberwar is being waged in an effort to prevent Iran from developing nuclear weapons.

According to the article in the June 1 edition of the New York Times, the U.S. government began the initiative in 2006 when sanctions against Iran bore limited results and Israel pondered the possibility of conventional military strikes against Iranian facilities that were allegedly developing nuclear capabilities. Code-named “Olympic Games,” the cyber campaign was discovered in 2010 when a programming error enabled the code to escape onto the Internet. The worm was subsequently dubbed, “Stuxnet” by the security community. With a potentially limited window or ongoing success, the attacks continued and, eventually, roughly 1,000 centrifuges, necessary for the Iranian nuclear effort, were temporarily disabled by Stuxnet, according to the paper.

This is presumably the first time that the United States has used this type of initiative against a foreign government. And while Iran has consistently denied that its nuclear program goes beyond peaceful energy production, the potential of a nuclear-weaponized Iran has struck fear in much of the western world.

[Related: New Worm Challenges Information Security Industry]

Still, it remains debatable as to whether these alleged incidents would qualify as cyberwar.

“Calling it a cyberwar is a misnomer,” Pete Lindstrom, vice president, research, Spire Security told CRN. “This type of thing is more like cyber-espionage. Even though they took out 1,000 centrifuges, that's not what the battle is really all about. But it's pretty clear that we have to start caring more about that sort of thing, particularly when it comes to protecting the infrastructure. This is a shot across the bow, and security folks need to pay attention.”

Other security professionals, however, see this development as a much larger event.

“It had seemed fairly obvious that the U.S. was behind Stuxnet because there were just enough circumstances pointed in that direction,” said Andrew Storms, director of security operations at nCircle. “But it's totally different to have it confirmed. This changes war completely, and carries with it a lot of ramifications that we are only beginning to understand.”

Storms says that in the past, the U.S. has always relied on developing superior conventional weapons that could not be matched by potential adversaries. But in the area of cyberwar, that advantage is no longer valid once the first “shot” is fired.

“In conventional warfare, the technology was at least somewhat preserved,” he said. “When the bullets hit you, you couldn't exactly turn those bullets around and shoot them back. But in order for it to be effective, malware needs to land on the systems of the target. And when that happens, it can be disassembled and reprogrammed and launched back at the attacker.”

NEXT: The U.S. Government's Role Moving Forward, The Impact On The World

1 | 2 | 3 | Next >>

To continue reading this article, please download the free CRN Tech News app for your iPad or Windows 8 device.
Related: Videos | Slide Shows | Comments

SHARE THIS ARTICLE

More Security

Recent Articles

Head-To-Head: Symantec Vs. McAfee In Endpoint Protection

McAfee and Symantec are archrivals with a firm grip on the North American security market. CRN pits both vendors' endpoint security products against each other and names a winner.

The 8 Steps Behind The Massive $45M Cyber Bank Heist

More than $45 million was stolen from banks in the U.S. and 19 other countries in a scheme that law enforcement is calling an international conspiracy to drain millions from bank accounts using stolen debit cards and PIN numbers. Here's how they did it.

Name Of The Game: Top 10 States For Identity Theft

A Federal Trade Commission report provides statistics on identity theft and fraud complaints in 2012. Learn which state has the dubious distinction of having the most victims.

  More Slide Shows




Related Videos
Loading...