US, Iran cyber war beginning

2012-07-13 09:20
Kaspersky Lab does analysis of malware threats at its offices in Moscow. (Duncan Alfreds, News24)

Kaspersky Lab does analysis of malware threats at its offices in Moscow. (Duncan Alfreds, News24)

Multimedia   ·   User Galleries   ·   News in Pictures Send us your pictures  ·  Send us your stories

kalahari.com

Washington - A US cyber war against Iran's nuclear programme may have only just begun and could escalate with explosions triggered by digital sabotage, experts say.

Although the Iranian regime remains vulnerable to more cyber attacks in the aftermath of the "Stuxnet" worm that disrupted its uranium enrichment work, Tehran may be receiving help from Russian proxies for its digital security, some analysts say.

The nuclear programme is "really not that well protected" from more digital assaults and Iran will be hard-pressed to safeguard its uranium enrichment efforts from tainted software, said David Albright, president of the Institute for Science and International Security.

"With Stuxnet, they lost about a year. And it caused a lot of confusion. They really didn't know what hit them," he said. "It looks like a viable way to disrupt their programme."

The US, which reportedly masterminded the Stuxnet operation along with Israel, has every incentive to press ahead with a cyber campaign to undermine Iran's atomic ambitions, according to analysts.

Sabotage

The next cyber attack, possibly in combination with more traditional spy craft, could shut off valves or issue incorrect orders that might cause an explosion at a sensitive site.

"I think that it could get more violent," Albright said. "I would expect more facilities to blow up."

A major explosion at a missile plant in Iran in November sparked speculation that the incident was the result of sabotage.

"There is of course the possibility of sending in a team to modify a system in a way that would make it vulnerable, and then use a cyber weapon at a later date as a trigger event," said David Lindahl, research engineer at the Swedish Defence Research Agency.

A new wave of cyber attacks could involve inserting hardware with infected chips into the industrial process, possibly through an agent or a duped employee, or penetrating diagnostic software used to gauge uranium enrichment or other work, Lindahl said.

But some cyber security experts suspect Russian proxies could be assisting Iran with its digital defences, and possibly helped Tehran trace the origins of Stuxnet.

"The part that we probably miscalculated on in Stuxnet was the [possible] assistance of the Russians in attribution," said James Lewis, senior fellow at the Centre for Strategic and International Studies.

"The Iranians never would have figured this out on their own," said Lewis, a former senior government official with the Departments of State and Commerce.

Retaliation

The elaborate Stuxnet malware, which was reportedly introduced using a thumb drive, contained malicious code that caused centrifuges used to enrich uranium to spin out of control. The worm, meanwhile, sent back signals to operators indicating the centrifuges were operating normally.

After the malware was discovered in 2010, at least a thousand centrifuges had to be removed and analysts estimate Tehran's programme was set back by at least a year.

By pushing the boundaries of cyber warfare, the US has left itself open to retaliation. But US officials clearly view the risks associated with digital strikes as dwarfed by the dangers of an all-out war with Iran.

Bombing raids are "more likely to explode the region and certainly could lead to a conflict with Iran, and that would be very messy", said Lewis. "Cyber is much cleaner."

Although unnamed officials told The New York Times that the US and Israel were behind the digital operations, cyber attacks - unlike air strikes - allow for "plausible deniability", he said.

The Stuxnet worm broke new ground by successfully hijacking a programme designed to supervise power plants or other large industrial systems, said Sean McGurk, a consultant who previously led cyber security efforts at the Department of Homeland Security.

Specific target

"Stuxnet demonstrated going from a disruptive capability to a destructive capability and that's what made it unique," he said.

The super virus also was unusual for the way it sought out a specific target while sidestepping systems that did not fit certain criteria.

"Almost all cyber attacks are 'to whom it may concern' but Stuxnet was a bullet with someone's name on it," Lindahl said.

"Repeating something like Stuxnet or [computer virus] Flame will be much more difficult, because they [the Iranians] will spend a lot more energy trying to stop those activities," he added.

"But the defender needs to plug all holes, while the attacker need only find one."


This YouTube video claims US involvement in the cyber attacks on Iran:


Read more on:    cybercrime
NEXT ON NEWS24X

Read News24’s Comments Policy

24.com publishes all comments posted on articles provided that they adhere to our Comments Policy. Should you wish to report a comment for editorial review, please do so by clicking the 'Report Comment' button to the right of each comment.

Comment on this story
3 comments
Add your comment
Comment 0 characters remaining
 

Inside News24

 
 

Zuma: Pray for peaceful polls

President Jacob Zuma has asked members of the Universal Church of the Kingdom of God to pray for peaceful elections on 7 May.

 
 

Latest elections multimedia

Why Jack Parow wants you to vote on 7 May
The ad the SABC doesn't want to air
Elections 2014 in one cartoon
This year's election posters
 
Traffic
Lottery
 
  • Friday Grabouw - 11:32 AM
    Road name: N2 Eastbound
    DELAYS between Sir Lowrys Pass and Grabouw
  • Friday Cape Town - 10:14 AM
    Road name: M3 Inbound
    EVENT - left lane closed between Rhodes Avenue and UCT
 
More traffic reports...
 

Jobs in Cape Town [change area]

Property [change area]

Travel - Look, Book, Go!

Escape winter, head to Mauritius

Escape winter by spending 7 nights in Mauritius' tropical bliss from R13 215 per person sharing. Includes return flights, airport transfers and accommodation. Book now!

Kalahari.com - shop online today

Get many eggs in one basket!

Gaming bundles: 2 Super Hits games for R99, 3 Disney games for R99 and more + exclusive accessory bundles only available on kalahari.com. While stocks last. Shop now!

25% off bestselling books!

The Real Meal Revolution by Tim Noakes, Jeffrey Archer’s Be Careful What You Wish for, Man’s Search for Meaning by Victor E. Frank and many more titles. Shop now!

Up to 25% off electronics

Buy top electronics and save up to 25%. Such as kalahari.com’s 1# selling product the gobii eReader, Patriot X Porter flash drive, Asus Nexus 7” 3G tablet, Samsung Galaxy SIII, Lenovo G580 Notebook and many more. Shop now!

DStv HD PVR Decoder now R949

The DStv HD PVR Decoder has further revolutionised the television experience with lifelike viewing, sharper images, more vibrant colours and precision picture quality. Now R949, save R550. Offer valid while stocks last. Shop now!

Up to 30% off appliances & homeware

Save up to 30% on appliances and homeware this Easter! Offer valid while stocks last. Shop now.

OLX Free Classifieds [change area]

Samsung Galaxy s4

Mobile, Cell Phones in South Africa, Western Cape, Cape Town. Date October 24

Best bargain in big bay

Real Estate, Houses - Apartments for Sale in South Africa, Western Cape, Cape Town. Date October 25

VW Golf 6, 1.6 Trendline (Excellent condition)

Vehicles, Cars in South Africa, Western Cape, Cape Town. Date October 25

Samsung Galaxy Tab P7500 10.1" Tablet With WiFi & 3G

Samsung Galaxy Tab 10.1 gives you a better experience for...

From R4999.00

I'm shopping for:

Horoscopes
Aquarius
Aquarius

You may find yourself putting in that extra effort on looking good and making an impression. ...read more

There are new stories on the homepage. Click here to see them.
 
English
Afrikaans
isiZulu

Hello 

Create Profile

Creating your profile will enable you to submit photos and stories to get published on News24.


Please provide a username for your profile page:

This username must be unique, cannot be edited and will be used in the URL to your profile page across the entire 24.com network.

Settings

Location Settings

News24 allows you to edit the display of certain components based on a location. If you wish to personalise the page based on your preferences, please select a location for each component and click "Submit" in order for the changes to take affect.








Facebook Sign-In

Hi News addict,

Join the News24 Community to be involved in breaking the news.

Log in with Facebook to comment and personalise news, weather and listings.