World leaders meet to discuss cyberwar rules of engagement
Hague convention for state-backed hacking?
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Rules of engagement for the deployment of cyber-weapons need to be developed, an international security conference is due to be told later today.
The influential EastWest Institute is due to present proposals for the cyberspace equivalent of the Geneva convention at the Munich Security Conference, which has included a debate on cyber-security on its agenda for the first time this year. Delegates to the conference include UK Prime Minister David Cameron, German Chancellor Angela Merkel, US Secretary of State Hillary Clinton and Russian Foreign Minister Sergei Lavrov.
The discussion on rules for cyber-conflict follows months after the infamous Stuxnet worm was blamed for infecting industrial control systems and sabotaging centrifuges at controversial Iranian nuclear facilities. Some have described the malware as the world's first cyber-weapon though cyber-espionage in many guises has undoubtedly been practiced by intelligence agencies across the world for many years.
Computer systems underpin the delivery of essential services, including utilities and telecoms and well as banking and government services. Critical national infrastructure systems are most commonly privately held, at least in the US and Europe. Although attacks against various critical systems are commonplace they tend to be low level information-stealing or denial of service exploits. Many independent experts in cyber-security dismiss talk of cyberwar as hype – driven more by the marketing departments of US security contractor giants seeking a new market in cyberspace than by reality on the ground.
Others argue that cyberwarfare (or information warfare) risks are all too real and illustrated by the denial of services attacks that blitzed Estonia off the web and the Operation Aurora assaults against Google and other high-tech firms as well as Stuxnet, a strain of malware that might inspire other forms of malware that attack industrial control kit, perhaps indiscriminately.
The rules of cyberwarfare seek to establish protected domains – such as hospital and schools – that are off limits for attack. Proportionality in response to attacks and identifying the source of attacks is also likely to enter the debate.
British government sources told the BBC that they were not convinced of the need for a treaty governing conflict in cyberspace, while they conceded the need for a discussion on proportional response – and, more particularly, on attributing the source of attack. It is far more difficult to identify the source of a cyber-assault, which can easily be launched from networks of compromised PCs in third-party countries, than the origins of a conventional military assault, which is often proceeded by the gathering of troops and tanks.
Government sources told BBC Newsnight: "How strongly should a state respond to an attack when you do not know who did it, where they did it from or what the intention was? In conventional military terms these questions are easier to answer – not so in the cyber-world." ®
COMMENTS
Do David Cameron, Angela Merkel, Hillary Clinton & Sergei Lavrov even ...
have a clue of the technicalities involved?
The absence, seemingly, of the Chinese leaves a gaping hole in the conference.
Based on real world evidence, the likelihood of state organised control in virtual worlds is ZERO
I would like to posit that very few are intellectually equipped to be anywhere near qualified or effective in being able to thwart a smart cyber attack/assault/incursion/experience/call it what you will, and as for rules of engagement, well ....... good manners and the thought that there might be children reading El Reg prevents me from expressing an adult opinion on that admission of defeat even before any real virtual battles have begun. Indeed, such is the nature of the virtual theatre of operations, that all meaningful engagements are won before they are even suspected and then acknowledged as being of great concern and an attack vector being exploited. There will though be other lesser skirmishes by others into rogue mercenary campaigns of a selfish indulgent nature which can be easily blocked and countered, with prosecution and/or persecution of the perpetrators being a most popular attraction and distraction for news and views/media.
Hmmm...
I thought Mubarak had found the answer. Just switch off the internet.
No Internet = No Cyber War.
But I guess that'd be cheating.
IT infrastructure monitoring strategies
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
Cloud based data management
Enabling efficient data center monitoring
Agentless Backup is Not a Myth
