THE LAND OF I KNOW NOT WHAT AND I KNOW NOT WHERE

Vision was absolutely livid that he was unable to crack this one
system. ‘Of course, I then launched a phishing attack on them and I
was inside within five minutes, but it’s just not the same.’ What he
means by that is that he sent infected emails to company email
addresses, and it was but a matter of minutes before one of its many
thousands of employees had fallen for the trap. So even if you have
an unbreachable digital fortress, you have only overcome one of several
major security challenges.

Similarly, these days it is much easier to perpetrate an inside job in
a company because of the ease with which data can be collected and
stored. We know that Bradley Manning, the man accused of having
removed the US diplomatic cables that were subsequently published
on WikiLeaks’ website, managed to download all the material onto a
CD marked as a Lady Gaga album.

We also know that Stuxnet – to date the world’s most sophisticated
virus – must have been planted on its apparent target in Iran’s nuclear
facilities by somebody (wittingly or otherwise) infecting the computer
systems with a memory stick or CD. Iran’s nuclear operating systems
are not connected to the Internet. But they are still networks, and their
infection by Stuxnet proved that they were within reach of a profes-
sional intelligence agency.

Stuxnet represented a significant escalation in the third major threat:
cyber warfare. This piece of malware was so complicated that researchers
estimated it must have taken in the region of several man-years to
develop, which means that a dedicated team of coding engineers must
have been working on it for an extended period. Organised crime does
not operate in this fashion. The only entity capable of developing
Stuxnet was a nation state with a lot of resources to devote to the design
and manufacture of both defensive and offensive cyber weapons. None-
theless, whoever designed Stuxnet borrowed huge amounts of computer
code and techniques from the many tens of thousands of blackhat or
greyhat hackers out in cyberspace. Criminal hackers are a great driver
of creativity in all areas of the Web’s darkside. Military, private-sector,
police and intelligence agencies are always quick to adopt the tools that
crackers and hackers are developing.

When Stuxnet was successfully infiltrated into the control system
of several nuclear facilities in Iran, the authorities admitted that it led
to a major breakdown in the operation of a highly sensitive station. It