book

Introduction to Cyber-Warfare

by Paulo Shakarian, Jana Shakarian, Andrew Ruef

May 2013

Beginner

336 pages

13h 18m

English

Syngress

Read now

Unlock full access

References
Information in this ChapterWhat Is Cyber War?Is Cyber War a Credible Threat?Attribution, Deception, and IntelligenceInformation AssuranceReferences

Information in this ChapterReliance on Information as a VulnerabilityRudimentary but Effective: Denial of ServiceLeaving Unwanted Messages: Web Site DefacementTools for Denial of ServiceThe Difficulty of Assigning Blame: Why Attribution Is Tough in a DDoS AttackEstonia Is Hit by Cyber AttacksGeneral Response to DDoSSummarySuggested Further ReadingReferences
Information in This ChapterThe 2008 Russian Cyber Campaign Against GeorgiaWhat Is Interesting About the Russian Cyber CampaignPreparing for a Cyber-Capable AdversarySummarySuggested Further ReadingReferences
Information in this ChapterHijacking Noncombatant Civilian IP Addresses to Help the War Effort: The Israel-Hezbollah “July War” of 2006Civilians in the Cyber Melee: Operation Cast LeadSummarySuggested Further ReadingReferences
Information in This ChapterDDoS as a Censorship Tool: Why Dissident Groups Are Inherently Vulnerable to Cyber AttacksSilencing Novaya Gazeta and Other Russian DissidentsIran—How the 2009 Elections Led to Aggressive Cyber OperationsSummaryReferences
Information in This Chapter“Chaotic” Beginnings: The Chaos Computer Club, CCCThe Roots of the Anon—4chan, 7chan, and Other Message BoardsHow We Are Influenced by 4chan: MemesAnonymous—On Image, Structure, and MotivationAnonymous—External Connections and Spin OffsYour Security Is a Joke: LulzSecAnonymous’ Modus OperandiTargeting Governments, Corporations, and Individuals: Notable Hacks on AnonymousSoftware for the Legion: Anonymous ProductsSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionWhy Cyber Espionage Is Important to China: A Look at Chinese Cyber DoctrineLeveraging Resources Beyond the Military: The Cyber Warriors of ChinaStealing Information from the U.S. Industrial-Military Complex: Titan RainCyber War Against the Corporate World: A Case Study of Cyber Intrusion Attributed to ChinaMonitoring Dissidents: Gh0stNetUsing Legitimate Web Sites for Data Exfiltration: The Shadow NetworkCyber War Through Intellectual Property Theft: Operation AuroraAn Example of the Current State of the Art: SykipotSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionKernel Mode RootkitsVulnerabilities in the Operating SystemStolen Keying MaterialCommonalities Between Stuxnet and DuquInformation-Stealing TrojansThe Geography of DuquTDL3 and Other MalwareObject-Oriented Malware: Stuxnet, Duqu, Flame, and GaussSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionDo You Really Know All Your LinkedIn Connections? Imposters in Social NetworksDesigning Common Knowledge: Influencing a Social NetworkSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionThe Predator UAVHacking the Predator FeedSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionIndustrial Control Systems: Critical Infrastructure for Modern NationsInformation Technology vs. Industrial Control Systems: Why Traditional Infosec Practices May Not ApplyHow Real-World Dependencies Can Magnify an Attack: Infrastructure Attacks and Network TopologyHow a Cyber Attack Led to Water Contamination: The Maroochy Water BreachSummarySuggested Further ReadingReferences
Information in This ChapterIntroductionCyber Attacks Directed Against Power GridsDestroying a Generator with a Cyber Attack: The Aurora TestTaking the Power Grid Offline with Minimal Effort: Attacks Leveraging Network TopologySummarySuggested Further ReadingReferences
Information in This ChapterIntroductionThe Alleged Target: The Natanz Fuel Enrichment FacilityHow Stuxnet Targets Industrial Control SystemsStuxnet Successfully Targets the Natanz Fuel Enrichment PlantStuxnet Is a Significant Advancement in MalwareStuxnet Invalidates Several Security AssumptionsImplications for the FutureSummarySuggested Further ReadingReferences
References
References
References