[iwar] [fc:Companies.fear.cyberterrorism.Could.the.next.wave.of.attacks.come.online?]

From: Fred Cohen (fc@all.net)
Date: 2001-09-17 16:25:25


Return-Path: <sentto-279987-1998-1000786899-fc=all.net@returns.onelist.com>
Delivered-To: fc@all.net
Received: from 204.181.12.215 by localhost with POP3 (fetchmail-5.1.0) for fc@localhost (single-drop); Mon, 17 Sep 2001 21:24:14 -0700 (PDT)
Received: (qmail 25431 invoked by uid 510); 18 Sep 2001 04:21:54 -0000
Received: from n17.groups.yahoo.com (216.115.96.67) by 204.181.12.215 with SMTP; 18 Sep 2001 04:21:54 -0000
X-eGroups-Return: sentto-279987-1998-1000786899-fc=all.net@returns.onelist.com
Received: from [10.1.4.53] by mq.egroups.com with NNFMP; 18 Sep 2001 04:21:39 -0000
X-Sender: fc@big.all.net
X-Apparently-To: iwar@onelist.com
Received: (EGP: mail-7_3_2_2); 18 Sep 2001 04:21:39 -0000
Received: (qmail 32116 invoked from network); 17 Sep 2001 23:25:25 -0000
Received: from unknown (10.1.10.142) by l7.egroups.com with QMQP; 17 Sep 2001 23:25:25 -0000
Received: from unknown (HELO big.all.net) (65.0.156.78) by mta3 with SMTP; 17 Sep 2001 23:25:25 -0000
Received: (from fc@localhost) by big.all.net (8.9.3/8.7.3) id QAA19497 for iwar@onelist.com; Mon, 17 Sep 2001 16:25:25 -0700
Message-Id: <200109172325.QAA19497@big.all.net>
To: iwar@onelist.com (Information Warfare Mailing List)
Organization: I'm not allowed to say
X-Mailer: don't even ask
X-Mailer: ELM [version 2.5 PL1]
From: Fred Cohen <fc@all.net>
Mailing-List: list iwar@yahoogroups.com; contact iwar-owner@yahoogroups.com
Delivered-To: mailing list iwar@yahoogroups.com
Precedence: bulk
List-Unsubscribe: <mailto:iwar-unsubscribe@yahoogroups.com>
Date: Mon, 17 Sep 2001 16:25:25 -0700 (PDT)
Reply-To: iwar@yahoogroups.com
Subject: [iwar] [fc:Companies.fear.cyberterrorism.Could.the.next.wave.of.attacks.come.online?]
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 8bit

Companies fear cyberterrorism Could the next wave of attacks come online?

MSNBC, 9/17/2001
<a href="http://www.msnbc.com/news/629137.asp">http://www.msnbc.com/news/629137.asp>

SAN FRANCISCO, Sept 14 - Corporations are taking steps to protect
computer networks after this week's strikes on the Pentagon and World
Trade Center, fearing that the next attacks might be launched online,
experts said. 

ALTHOUGH MANY COMPANIES were in shock this week, some executives did not
waste any time in preparing for possible cyber attacks, which often
follow closely on the heels of international conflicts, experts said. 
In a recent example, there were numerous defacements of U.S.  Web sites
after the April 1 collision between a Chinese jet fighter and a U.S. 
surveillance plane.  "A lot of people are concerned about cyberterrorism
since the attacks," said Joel Pogar, director of information security at
Calence Inc., a computer network consulting firm in Phoenix. 
"Electronic attacks are even easier to do because you don't have to do
them on U.S.  soil," Pogar said.  "The Internet and electronic
communications are a lot more vulnerable.  You don't need a plane to
attack an Internet connection." Pogar said he's seen at least a 50
percent increase in business since Tuesday, with smaller firms seeking
to upgrade firewalls and intrusion detection systems that keep malicious
hackers out.  A major financial institution has asked Calence to help
separate its national computer network into five regional networks so
the whole system won't be compromised if security is breached at one
office, Pogar said. 

BACK TO PAPER In another case, a chip manufacturing company has decided
to temporarily take down its external Internet links with suppliers
until it is sure its partners have their networks secured, Pogar said. 
"They're going low-tech, back to paper and faxes and what we used to do
in the 1980s before we had virtual private networks and widespread
Internet connections," Pogar said.  Some customers who have their
networks watched by Counterpane Internet Security also have requested
additional monitoring services, according to Bruce Schneier, chief
technology officer of the Cupertino, California-based company. 
"Existing customers very quickly wanted help and assurances," Schneier
said.  Foundstone Inc., a security consulting and managed services firm
based in Irvine, California, also starting taking in more business since
Tuesday, despite losing its office in the World Trade Center.  "That day
we got called and had a few people who wanted immediate attention," said
Foundstone President George Kurtz.  "They wanted for us to take a look
at their perimeter and make sure their network is locked down." Some
companies were at least taking the minimal step of blocking out
encrypted e-mails to their networks, said Russ Cooper, surgeon general
of TruSecure Corp., a security services provider based in Herndon,
Virginia. 

What do you think? Post your thoughts on our discussion board. 

MANY STILL SHOCKED For many companies it has been too early to be taking
preventive measures, Cooper and others said.  "At least here in New York
people are still so overwhelmed and shocked they have not given much of
a thought to whether they're going to start tightening down their
networks," said Fred Rica, a partner at PricewaterhouseCoopers and the
leader of its threat and vulnerability assessment practice.  Even if
they're not taking action now, companies are more likely to take
computer security more seriously as a result of the attacks, said Alan
Paller, director of research at the System Administration, Networking
and Security Institute in Bethesda, Maryland.  There has been a change
in the thinking of high-level executives toward the importance of
computer security, he said.  "They are beginning to ask not do we have a
(security) plan or policy, but are our systems protected, and that's a
major shift," said Paller. 

© 2001 Reuters Limited.  All rights reserved. 


------------------------ Yahoo! Groups Sponsor ---------------------~-->
Secure all your Web servers now: Get your FREE Guide and learn to: DEPLOY THE LATEST ENCRYPTION,
DELIVER TRANSPARENT PROTECTION, and More!
http://us.click.yahoo.com/k0k.gC/nT7CAA/yigFAA/kgFolB/TM
---------------------------------------------------------------------~->

------------------
http://all.net/ 

Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/ 



This archive was generated by hypermail 2.1.2 : 2001-09-29 21:08:44 PDT