Metro

  • Written by Jeremy Straub, Assistant Professor of Computer Science, North Dakota State University

People around the world may be worried about nuclear tensions rising, but I think they’re missing the fact that a major cyberattack could be just as damaging – and hackers are already laying the groundwork.

With the U.S. and Russia[1] pulling out of a key nuclear weapons pact[2] – and beginning to develop new nuclear weapons[3] – plus Iran tensions[4] and North Korea again test-launching missiles[5], the global threat to civilization[6] is high. Some fear a new nuclear arms race[7].

That threat is serious – but another could be as serious, and is less visible to the public. So far, most of the well-known hacking incidents[8], even those with foreign government backing[9], have done little more than steal data[10]. Unfortunately, there are signs that hackers have placed malicious software[11] inside U.S. power and water systems, where it’s lying in wait[12], ready to be triggered. The U.S. military has also reportedly penetrated the computers that control Russian electrical systems[13].

A cyberattack could wreak destruction comparable to a nuclear weapon Students and their teacher practice ‘duck and cover’ during the Cold War. AP Photo/Dan Grossi[14]

Many intrusions already

As someone who studies cybersecurity[15] and information warfare[16], I’m concerned that a cyberattack with widespread impact, an intrusion in one area that spreads to others[17] or a combination[18] of lots of smaller attacks, could cause significant damage, including mass injury and death rivaling the death toll of a nuclear weapon.

Unlike a nuclear weapon, which would vaporize people within 100 feet and kill almost everyone within a half-mile[19], the death toll from most cyberattacks would be slower. People might die from a lack of food, power or gas for heat[20] or from car crashes resulting from a corrupted traffic light system[21]. This could happen over a wide area, resulting in mass injury and even deaths.

This might sound alarmist, but look at what has been happening in recent years, in the U.S. and around the world.

In early 2016, hackers took control of a U.S. treatment plant[22] for drinking water, and changed the chemical mixture[23] used to purify the water. If changes had been made – and gone unnoticed – this could have led to poisonings, an unusable water supply and a lack of water.

In 2016 and 2017, hackers shut down major sections[24] of the power grid in Ukraine[25]. This attack was milder than it could have been, as no equipment was destroyed during it[26], despite the ability to do so. Officials think it was designed to send a message[27]. In 2018, unknown cybercriminals gained access throughout the United Kingdom’s electricity system[28]; in 2019 a similar incursion may have penetrated the U.S. grid[29].

In August 2017, a Saudi Arabian petrochemical plant was hit by hackers who tried to blow up equipment[30] by taking control of the same types of electronics used in industrial facilities of all kinds throughout the world. Just a few months later, hackers shut down monitoring systems for oil and gas pipelines[31] across the U.S. This primarily caused logistical problems – but it showed how an insecure contractor’s systems could potentially cause problems for primary ones.

The FBI has even warned that hackers are targeting nuclear facilities[32]. A compromised nuclear facility could result in the discharge of radioactive material[33], chemicals or even possibly a reactor meltdown. A cyberattack could cause an event similar to the incident in Chernobyl[34]. That explosion, caused by inadvertent error, resulted in[35] 50 deaths and evacuation of 120,000 and has left parts of the region uninhabitable for thousands of years into the future.

A cyberattack could wreak destruction comparable to a nuclear weapon A test of a North Korean missile. KRT via AP Video[36]

Mutual assured destruction

My concern is not intended to downplay the devastating and immediate effects of a nuclear attack. Rather, it’s to point out that some of the international protections against nuclear conflicts don’t exist for cyberattacks. For instance, the idea of “mutual assured destruction[37]” suggests that no country should launch a nuclear weapon at another nuclear-armed nation: The launch would likely be detected, and the target nation would launch its own weapons in response, destroying both nations.

Cyberattackers have fewer inhibitions[38]. For one thing, it’s much easier to disguise the source of a digital incursion than it is to hide where a missile blasted off from. Further, cyberwarfare can start small, targeting even a single phone or laptop[39]. Larger attacks might target businesses[40], such as banks[41] or hotels[42], or a government agency[43]. But those aren’t enough to escalate a conflict to the nuclear scale.

Nuclear grade cyberattacks

There are three basic scenarios for how a nuclear grade cyberattack might develop. It could start modestly, with one country’s intelligence service stealing, deleting or compromising another nation’s military data. Successive rounds of retaliation could expand the scope of the attacks and the severity of the damage to civilian life.

In another situation, a nation or a terrorist organization could unleash a massively destructive cyberattack – targeting several electricity utilities, water treatment facilities or industrial plants at once, or in combination with each other to compound the damage.

Perhaps the most concerning possibility, though, is that it might happen by mistake. On several occasions, human and mechanical errors very nearly destroyed the world[44] during the Cold War; something analogous could happen in the software and hardware of the digital realm.

A cyberattack could wreak destruction comparable to a nuclear weapon A cyberattack wouldn’t be launched from a nuclear operator’s console, like the one shown here from the decommissioned Oscar Zero site, but rather through cyberspace. A human might not even be required. Jeremy Straub

Defending against disaster

Just as there is no way to completely protect against a nuclear attack, there are only ways to make devastating cyberattacks less likely.

The first is that governments, businesses and regular people need to secure their systems to prevent outside intruders from finding their way in, and then exploiting their connections and access to dive deeper.

Critical systems, like those at public utilities, transportation companies and firms that use hazardous chemicals, need to be much more secure. One analysis found that only about one-fifth of companies that use computers to control industrial machinery[45] in the U.S. even monitor their equipment to detect potential attacks – and that in 40% of the attacks they did catch, the intruder had been accessing the system for more than a year[46]. Another survey found that nearly three-quarters of energy companies[47] had experienced some sort of network intrusion in the previous year.

A cyberattack could wreak destruction comparable to a nuclear weapon Industrial control rooms like this often contain vulnerable computer systems. nostal6ie/Shutterstock.com[48]

But all those systems can’t be protected without skilled cybersecurity staffs to handle the work. At present, nearly a quarter[49] of all cybersecurity jobs in the U.S. are vacant, with more positions opening up[50] than there are people to fill them. One recruiter has expressed concern that even some of the jobs that are filled are held by people who aren’t qualified[51] to do them. The solution is more training and education, to teach people the skills they need to do cybersecurity work, and to keep existing workers up to date on the latest threats and defense strategies.

If the world is to hold off major cyberattacks[52] – including some with the potential to be as damaging as a nuclear strike – it will be up to each person, each company, each government agency to work on its own and together to secure the vital systems on which people’s lives depend.

References

  1. ^ U.S. and Russia (www.nytimes.com)
  2. ^ key nuclear weapons pact (www.cbsnews.com)
  3. ^ beginning to develop new nuclear weapons (allthingsnuclear.org)
  4. ^ Iran tensions (www.usnews.com)
  5. ^ again test-launching missiles (theconversation.com)
  6. ^ global threat to civilization (thebulletin.org)
  7. ^ new nuclear arms race (www.pbs.org)
  8. ^ most of the well-known hacking incidents (www.nytimes.com)
  9. ^ foreign government backing (www.cnbc.com)
  10. ^ steal data (www.forbes.com)
  11. ^ hackers have placed malicious software (arstechnica.com)
  12. ^ lying in wait (www.technologyreview.com)
  13. ^ computers that control Russian electrical systems (www.nytimes.com)
  14. ^ AP Photo/Dan Grossi (www.apimages.com)
  15. ^ cybersecurity (dl.acm.org)
  16. ^ information warfare (theconversation.com)
  17. ^ that spreads to others (i-hls.com)
  18. ^ combination (tedkoppellightsout.com)
  19. ^ which would vaporize people within 100 feet and kill almost everyone within a half-mile (nymag.com)
  20. ^ lack of food, power or gas for heat (theconversation.com)
  21. ^ corrupted traffic light system (theconversation.com)
  22. ^ took control of a U.S. treatment plant (www.theregister.co.uk)
  23. ^ changed the chemical mixture (www.securityweek.com)
  24. ^ major sections (www.wired.com)
  25. ^ power grid in Ukraine (www.wired.com)
  26. ^ equipment was destroyed during it (en.wikipedia.org)
  27. ^ designed to send a message (www.wired.com)
  28. ^ throughout the United Kingdom’s electricity system (unearthed.greenpeace.org)
  29. ^ penetrated the U.S. grid (www.eenews.net)
  30. ^ hackers who tried to blow up equipment (www.nytimes.com)
  31. ^ monitoring systems for oil and gas pipelines (threatpost.com)
  32. ^ hackers are targeting nuclear facilities (www.nytimes.com)
  33. ^ discharge of radioactive material (www.nytimes.com)
  34. ^ incident in Chernobyl (www.theatlantic.com)
  35. ^ resulted in (www.theatlantic.com)
  36. ^ KRT via AP Video (www.apimages.com)
  37. ^ mutual assured destruction (ssi.armywarcollege.edu)
  38. ^ fewer inhibitions (twitter.com)
  39. ^ phone or laptop (theconversation.com)
  40. ^ businesses (www.nytimes.com)
  41. ^ banks (www.cnn.com)
  42. ^ hotels (www.forbes.com)
  43. ^ government agency (gizmodo.com)
  44. ^ nearly destroyed the world (taskandpurpose.com)
  45. ^ only about one-fifth of companies that use computers to control industrial machinery (www.darkreading.com)
  46. ^ accessing the system for more than a year (www.darkreading.com)
  47. ^ nearly three-quarters of energy companies (www.automation.com)
  48. ^ nostal6ie/Shutterstock.com (www.shutterstock.com)
  49. ^ nearly a quarter (www.cyberseek.org)
  50. ^ more positions opening up (www.csoonline.com)
  51. ^ held by people who aren’t qualified (www.csoonline.com)
  52. ^ hold off major cyberattacks (www.vice.com)

Authors: Jeremy Straub, Assistant Professor of Computer Science, North Dakota State University

Read more http://theconversation.com/a-cyberattack-could-wreak-destruction-comparable-to-a-nuclear-weapon-112173

Metropolitan republishes selected articles from The Conversation USA with permission

Visit The Conversation to see more

Entertainment News

Violin ReEnvisioned

Falling in love with music so young was more than transformative. Music became the lead sheet of my life; challenging me to navigate changes with grace, maintain a steady rhythmic groove, dynami...

Chelsey Green - avatar Chelsey Green

Kadda Sheekoff Win Best Urban Song For "All My Life"

Singer Kadda Sheekoff have emerged as the toast of the 2020 Songdew Pause&Play. Obviously, there are many composers who deserve the award more than Kadda Sheekoff, but the decision of the S...

Media Release - avatar Media Release

A Musical Journey: The Authentic Ted Cline

Ted Cline was born in 1962 as the 11th of 13 children.  His parents were hard-working tobacco share-croppers in Weston, Missouri. By the time he was eleven, he was sneaking downstairs to play his...

Ted Cline - avatar Ted Cline

Angela Predhomme - My Musical Journey

Determined to “make it” in the music industry as a songwriter, I meticulously crafted the best songs I could and pitched them to industry gatekeepers. “THIS one’s got to be IT,” I thought. But ala...

Angela Predhomme - avatar Angela Predhomme

GREYE: “So Far So Good”

“So Far So Good” After seven plus years firing up venues up and down the Atlantic Coast and throughout the Midwest to the breakneck tune of 90-110 annual shows, it’s definitely been jarring fo...

News Company - avatar News Company

The life and times of Wendy Moten

I never thought I would be in the music business, much less a recording artist. I never saw it coming. I thought I'd be a corporate attorney or something like that. Little did I know that anothe...

Wendy Moten - avatar Wendy Moten

CARY PARK “You Matter to Me”

“You Matter to Me” In any other time, Cary Park’s stunning new single “You Matter to Me” might be just another beautiful heartfelt love song, an outpouring of personal affection towards a cheri...

News Company - avatar News Company

TED CLINE ... Country Music Done Right

Country Music Done Right When Ted Cline uses the phrase “Country Music Done Right” to describe his engaging vibe, the Kansas City area-based singer/songwriter isn’t simply being crafty or clev...

News Company - avatar News Company

LAMONT DOZIER, JR. “Why Can’t We Be Lovers”/”I’m Gonna Take My Time”

When it comes to enduring musical legacies, it’s always inspiring when the melodic, grooving evergreen apples drop so close to the tree. The son and namesake of legendary singer, songwriter and re...

News Company - avatar News Company

Metropolitan Business News

MODEL/ACTOR THORN CASTILLO IS THE “NEW FACE” OF SCHICK STYLIST

In 2019, just as his multi-faceted career was taking off, Thorn Castillo heard Robert Downey Jr. offer a sage bit of advice during an interview on photographer/director Sam Jones’ acclaimed multi-...

News Company - avatar News Company

New Research Highlights Opportunities for Sports Betting

Revenue Stream for Sports’ Post-COVID-19 Recovery Strategies New Rochelle, NY, June 1, 2020— Twenty-four states have now legalized sports betting, with more states considering legalization la...

Len Stein - avatar Len Stein

How to make overseas transfers easier?

Mainstream banks can charge as much as $20 just to process a basic international money transfer. Fortunately, today people are not doomed to handling personal finances only through mainstream gl...

News Company - avatar News Company

The flourishing international market of fragrance and perfume

There is something special and unique about the art of fragrance. This is a big world and there are quite literally a lot of smells around at any given time. In fact, as one of the five human senses i...

News Company - avatar News Company

Impact of good marketing on sales

Sales and marketing are brothers as they go hand and in hand. The job of both of these departments is to generate revenue so that an organization can make money. A company that does not generate rev...

News Company - avatar News Company

7 effective tips for increasing sales in retail

It seems that retailers have drawn a difficult lot in the 21st century: competition from online retail is growing steadily. After all, Internet retailers can sell your products at significantly lowe...

News Company - avatar News Company

Holidays

5 COOL GADGETS TO CARRY FOR A SAFE TRIP

Are you planning to go on a trip? Possibly, you do not know what things are most necessary on a trip. In this article, we will guide you through some important tips. These tips help you to...

News Company - avatar News Company

New Baggage Regulations to Help Aussie Parents Travel with Infants

Travelling around the globe has never been easy, especially when infants tag along for the trip. One of the main issues that parents often have to deal with is the need to bring extra item...

News Company - avatar News Company

Maya Beach Opens to Tourists

Despite recent reports that Southern Thailand's famous Maya Beach will close for three months this year, in fact no decision to this effect has been made by Thai authorities. Phi Phi Nati...

Maevadi Rosenfeldt - avatar Maevadi Rosenfeldt