Q&A: Security expert says cyberterrorism is exaggerated

By Chris Conrath, ComputerWorld Canada

October 2, 2002 12:00 PM ET

Computerworld - Bruce Schneier, designer of the popular Blowfish encryption algorithm, CTO of Counterpane Internet Security Inc. and renowned security expert, spoke with Computerworld Canada during his recent visit to Toronto.
What follows are some excerpts from those discussions:

Q: Do companies care more about computer security since 9/11?
A: We have not learned from the attacks, but do not be too surprised. It is true for all of society. Why should IT be different? Companies should not care any more now than they did before. They should have cared before and they should care now. But are they caring enough? No, of course not.

Q: Other experts I have spoken to disagree completely, saying they have seen a dramatic change in attitude.
A:Those who say there has been big change, look at their agenda. That is my only advice. In this industry there is a lot of impetus to pretend that there is a security watershed and everybody is doing something. If you are not doing something, then you are left out. I think we are seeing a lot of that in the industry. We see a steady increase of people caring and a huge spike in interest after 9/11, but I didn't see as much of a spike of people buying. Security was the flavor of the moment for a few months, but not any more.

Q: Why is it so hard to get companies to change their security mentality?
A:One of the problems is that there is no list a company can give a client and say "do these seven things and you will be safe." Regardless, we are putting too much faith in technology. The problems are not technology, the problems are people. We love the idea that technology will save us, but the fact is that it almost never does.

Q: A recent FBI report warned of an increased risk in cyberterrorism. What is your read on this?
A: I don't think we have seen cyberterrorism and I don't think we are going to see it for a couple of decades. It is still more complicated to use technology for (terrorist gain). The closest thing that we have had is in Australia where someone hacked into a system and dumped sewage out into a bay. If you look at what he did, it took him dozens of attempts, he barely made it work, and it didn't do that much damage. That is not terrorism.

Q: You have said that what we are seeing is not true cyberterrorism but rather cyberhooliganism. Care to elaborate?
A:

Recommend Digg Twitter ShareThis

Email Print Send Feedback Reprints

Additional Resources

Xerox

Win a color printer!

By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!

Microsoft

Upgrade to Internet Explorer 8 today.

Save time and mitigate security risk. Deploy it now.

Sybase

NEXT-GENERATION MOBILITY PLATFORMS

In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

White Papers & Webcasts

Centralized Data Backup and Your WAN
Is your organization prepared to tackle the massive challenge of protecting your data in a cost effective and timely manner? With a growing...

Why Compliance Pays
This OnDemand webcast explores the relationship that firms with best compliance records have higher revenue, greater customer retention, lower financial losses from data...

An All-in-One Approach to Web Security
Granting web access to employees poses challenges to IT administrators and introduces unique security risks. Even as companies have perfected their security techniques...

Best Practices for Managing Business Risks from the Use of IT
(Source: Symantec) Based on exhaustive benchmarks conducted by the IT Policy Compliance, this session highlights the relationship between business risks and use of...

The Hidden Dangers of Spam
Beyond the well-understood productivity drain that spam inflicts on businesses, threats posed by illicit email circulating through a network are causing many security...

Managing And Protecting Your Ever Increasing Mobile Assets
(Source: Absolute Software) Your users are becoming more mobile each day. This is great for productivity - yet challenging for IT control. Natalie...

Open Source Security Myths Dispelled
(Source: Astaro) Open Source Software is computer software whose source code is available to the general public. This openly viewable nature...

Sun OpenSSO Enterprise Webinar
(Source: Sun) This webinar replay discusses Sun OpenSSO Enterprise innovation--the single, open-source solution that helps your business solve the challenges around internal access...

Best Practices for Backing Up VMware® with Veritas NetBackup™
VMware® is used by enterprises large and small to increase the efficiency and cost-effectiveness of their IT operations. With this in mind, Symantec...

Agile Enterprise Content Management (ECM) for Rapid ROI
(Source: IBM) Content rich business processes are a core feature of daily operations at just about any organization today. Very often these essential...

All White Papers | All Webcasts