Suppose we are thrust into a war with a superpower such as Russia. List what sorts of computer and internet related attacks might we suffer?
Types of attacks that could be committed:
Denial of Service attacks
phishing and spear attacks
Malware embedded into their system
You are the Australian Signals Directorate. You have been asked to consider the main threats we face in the cyber domain of war, and to produce 10 recommendations for actions to be taken.
1. Allocate backup solutions for core infrastructures
A common target of attack is the power grid of a country. It’s important that Australia diversifies it’s electrical power sources. We recommend the use of renewables, Lithium ion batteries and coal. In the case of an attack we will have alternatives.
2. Compartmentalize intelligence
We can’t risk having a single point of failure. If a foreign power manages to take over an organisation it is important that they don’t have access to all data. This can include creating separate departments in charge of different responsibilities.
3. Counterintelligence and compete
Install malware into foreign agencies systems. The USA has inserted malware into both Iran (Stuxnet) and Russian infrastructures as a response to foreign aggression. For Iran it was to slow their nuclear capabilities and Russia as a response to election meddling.
The goal is to establish a deterrence and if other nations do commit acts of aggression they can be punished.
4. Share intelligence with Allies
Working with other nations to target common enemies could be useful. This can include Intel sharing and coordinated attacks. The issue is we must make sure we do not place our safety in the hands of another nation.
Good talent is difficult to come by. The government should encourage study in areas of demand and under supply. This can include joint ventures with university to train more graduates in security.
6. Work with companies to promote technological innovation
Government may provide incentives, such as tax credits, for research into security by companies. Using the bright minds of these organisations. The government can indirectly promote better security practices and solutions.
7. Establish national standards
Set standards that have to met for the use of equipment in government infrastructures. Diversify the governments suppliers of network equipment. It may mitigate the risk if a supplier has a backdoor or issue.
8. Identify insider threats
Besides initial background checks. Employees should be reviewed for mental well-being and contentment. Disgruntled employees should be addressed.
9. Promote good procedures through information events
How employees and everyday Australians can help maintain cyber hygiene. Setting strong passwords, not connecting to unknown network and so on.
10. Force all companies to have a backdoor haha...
Who better to entrust with our data than the government? They can analysis the data, group suspicious individuals and act on information.... I believe Cisco routers and Apple both had to have back doors for the US Government.
https://www.tomshardware.com/news/cisco-backdoor-hardcoded-accounts-software,37480.html
https://en.wikipedia.org/wiki/FBI%E2%80%93Apple_encryption_dispute
