
Subscribe to
Computerworld
or
Other Security Stories
May 06, 2002 (Computerworld) -- It's no secret. In addition to the U.S., at least six countries are known to be actively developing information warfare programs designed to cripple the IT, economic and military infrastructure of their potential adversaries.
However, a classified CIA warning, which detailed China's plans to launch cyberattacks against U.S. business and military networks and was made public late last month, grossly misrepresents the threat to those responsible for protecting government and private IT networks in the U.S., experts said last week.
"China is developing a cyberattack capability, but it appears it is a component of their overall military strategy, to be used in case of [conventional] war," said Vince Cannistraro, former director of counterintelligence at the CIA.
Although experts agree that other nations and even terrorist groups are researching cheap and easy ways to use IT to offset the U.S.'s conventional military might, they say most reports have exaggerated the threat. Information warfare isn't something that's launched without plans for a conventional war, and terrorists have shown little interest in the bloodless outcome of cyberattacks, said Eric Shaw, a former CIA clinical psychologist and profiler.
Shaw and Cannistraro both said that most countries with cyberarsenals are unwilling to risk a conventional U.S. military strike in retaliation for a cyberattack that cripples IT infrastructure and threatens the health and stability of the economy. In addition, most terrorist groups see little value in bloodless attacks, they said.
"Al-Qaeda views the Internet as a method of communication, not as an avenue to carry out terrorism," Cannistraro said. "It isn't bloody."
"Considering all possible threats is a nice, creative process, but there is little evidence to suggest its practical benefit, other than funding of security-related projects that may not be needed," said Shaw. "So, in many ways, it wastes resources."
|
|
Print this Story |
|
Send Us Feedback |
|
E-mail this Story |
|
Digg this Story |
|
Slashdot this Story |
|
|
|
|
|
|
|
|
|
All Zones Application Performance Zone Business Continuity Zone Data Center Management Zone Enterprise-Class Security Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone Business Intelligence and Analytics Zone |
|
|
| ||||||||
| ||||||||
| ||||||||
|


Security Management ZoneSecurity management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones
|
Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT the good, the bad, and the rest of the weird stuff you deal with every day.New baits |

"Security Directions" virtual trade show2008's Code-Red Security Issues for Protecting the EnterpriseWebcasts, white papers, demos, and more. Presented in a unique 3-d environment. Enter our show right now! Click here to enter
|

In SecuritySecurity's important, and risk must be addressed, right? Sure, but watch for four signs your policies go a bit overboard. Click here to read the latest column by Jon Espenschied |
| About Us Advertise Contacts Editorial Calendar Help Desk Jobs at IDG Privacy Policy Reprints Site Map |
|
CIO The Industry Standard |