The Central Asian Republic of Kyrgyzstan experienced a cyber attack last month that took down its two largest Web sites. But that's small beer compared to what happened to the Pentagon and several other U.S. agencies in 2007, when cyber attackers successfully hacked into their computer systems, including Defense Secretary Robert Gates's email.
Welcome to the brave new world of cyber war, an area where the U.S. lacks the dominance it enjoys in traditional military arenas. President Obama's recent appointment of Melissa Hathaway to head a 60-day cyber security review is a sign that he is serious about stepping up the battle in cyber space.
Like other forms of terrorism, cyber war offers an attacker asymmetrical advantages and can be used by individuals as well as governments to debilitate and confuse civilian and military targets. The more governments and economies rely on the Internet, the more vulnerable they become. Michael McConnell, the recently departed National Intelligence Director, called cyber security "the soft underbelly of this country."
The Bush Administration made some progress, such as last year's executive order creating the Comprehensive National Cyber Security Initiative. This highly classified $6 billion program aims to secure the dot-gov and dot-mil domains by instituting basic security measures for federal agencies. These include installing improved monitor programs -- known as "Einstein" -- to detect intrusions on federal computers, for example, and sharing attack information across federal departments.
The U.S. government deflects low-level cyber attacks every day. Many are seeking sensitive information, such as weapon designs or classified communications. Security experts say most hackers who target Washington appear to operate from China, although the nature of the Internet makes it impossible to know for certain. In 2007, the government reported nearly 13,000 information security attacks, more than twice the number in 2006. Brigadier General John Davis, deputy commander of the cyber security unit at U.S. Strategic Command, told us his mission deals with millions of cyber "events" every day, although not all of these turn out to be attacks.
Cyber attacks can also be coupled with conventional warfare, which is what happened in Georgia in August. Even before Russian tanks rolled over the border, hackers -- probably Russian -- probed Georgian government Web sites and took several down. Russian hackers are also believed to have attacked Estonia in 2007, freezing government and private information systems, including banks, for days, apparently in retaliation for Estonia's decision to remove a historic Russian statue.
