Cyber ShockWave
Cyber ShockWave, similar to the Cyber Storm Exercise, was a 4-hour wargame conducted in February 2010 by the Bipartisan Policy Center, an American think tank based in Washington, D.C.[1] Former high-ranking Cabinet and National Security Officials role played a cabinet level response to a cyberwarfare scenario.[2][3][4] Portions of the exercise were later broadcast on CNN.[5]
Background
Cyberwarfare has become a major threat to the United States.[6] There is current debate over whether cyberwarfare constitutes actual war or a rhetorical and less threatening concept instead. Control of the Internet has long been an issue of Internet security and electronic privacy.[6][7]
The Cyber Shockwave simulation game was developed in partnership with General Dynamics Advanced Information Systems, SMobile Systems, Southern Company and Georgetown University.[8] It was created by former CIA Director General Michael Hayden and conducted by the Bipartisan Policy Center to give a glimpse of what would happen during a cyber attack and gauged whether or not the United States was prepared for it. Security agents and lawmakers played roles in the fabricated attacks. The participants did not know the scenario in advance which helped to maintain the reality of a surprise attack. If a real attack were to happen it would come without notice and lawmakers and government agencies would have to re-act immediately in a timely manner.[9]
To prepare for a possible attack, members of The White House, Cabinet Members and National Security Agencies plan to advise President Barack Obama on possible plans of actions.[10]
Participants and roles
The list of attendees included:[8][11]
- Michael Chertoff, former Secretary of Homeland Security, as National Security Advisor
- Fran Townsend, former White House Homeland Security Advisor, as Secretary of Homeland Security
- J. Bennett Johnston, former Senator (D-LA), as Secretary of Energy
- John Negroponte, former United States Deputy Secretary of State, as Secretary of State
- Jamie Gorelick, former Deputy Attorney General, as Attorney General
- Joe Lockhart, former White House Press Secretary, as Counselor to the President,
- John E. McLaughlin, former Acting Director of Central Intelligence, as Director of National Intelligence
- Stephen Friedman, former Director of the National Economic Council, as Secretary of Treasury
- Stewart Baker, National Security Agency General Counsel, as Cyber Coordinator
- Charles Wald, former Deputy Commander of U.S. European Command, as Secretary of Defense
Simulation attack
One of the simulation attacks that was presented was a malware program planted into phones during a popular basketball game. This attack caused a disruption spanning over many mobile phones across the United States. The spyware planted on the smartphones were used through a key logger and data intercepts to funnel funds to banks overseas. Several bots appear downloading videos that shows 'The Red Army'.[12] When someone receives the spyware, it is sent to the person's contact and the contacts will open it, spreading the malicious virus everywhere.[4]
In addition, the cyber attack reportedly sparked a series of crises and provisions including:[4]
- 40 million people without power in the Eastern United States
- More than 60 million cellphones out of service
- Wall Street closed for a week
- Capitol Hill leaders en route to the White House
Results
The results of the Cyber ShockWave war game showed that the United States is unprepared for a cyber attack. The results highlighted the immediate dangers that are threatening the country. Finally, the game demonstrates there would be huge financial repercussions to a cyber attack.[4][9]
The simulation revealed that the response speed is crucial during a cyber attack and that the planning deficiency in which the United States exhibited during the game can be extremely costly.[13] The simulation also showed that the fast speed of an attack leaves little time to better understand certain things such as the essence of the attack, provided it were to happen, or proper recovery methods.[13] Former Clinton press secretary Joe Lockhart added that the simulation Shockwave may cause a panic among people, but that was in fact a good thing.[4]
According to former Secretary of Homeland Security Michael Chertoff, the United States lacks in several key aspects of Cyber security:[14]
- Well-defined responsibilities for maintaining common situational awareness of emerging critical operational developments in cyberspace
- An effective decision-making framework below the Cabinet level for coordinating the government's response and recovery from a devastating cyber event.
- A user-friendly process to allow government cyber defenders to effectively collaborate with the private sector to take advantage of their expertise and knowledge during the response to a cyberattack
References
- "Cyber ShockWave". Bipartisan Policy Center. Retrieved 2010-02-24.
- Ali, Sarmad (February 16, 2010), "Washington Group Tests Security in 'Cyber ShockWave'", Digits (The Washington Post), retrieved 2010-02-24
- Ragan, Steve (February 16, 2010), "Report: The Cyber ShockWave event and its aftermath", The Tech Herald, archived from the original on July 22, 2011, retrieved 2010-02-24
- Nakashima, Ellen (2010-02-17). "War game reveals U.S. lacks cyber-crisis skills". The Washington Post. Retrieved 2010-10-28.
- Christiaan008, CNN Cyber Shockwave: We were warned 1/9, retrieved 2019-01-11
- NPR staff, (June-16, 2010), "Has The Cyberwar Threat Been Exaggerated?". NPR. Retrieved 2010-10-03.
- "Who Will Control the Internet?". Foreign Affairs. Retrieved 2010-10-30.
- "Cyber ShockWave Hits Washington". PR Newswire. Retrieved 2010-10-28.
- "Cyber ShockWave Shows U.S. Unprepared For Cyber Threats". Bipartisan Policy Center. Retrieved 2010-10-03.
- "Coming to a Networked Device Near You: Cyberwar!". Kings of War. Archived from the original on 2010-02-22. Retrieved 2010-10-16.
- "Cyber ShockWave Participants". Bipartisan Policy Center. Retrieved 2010-02-24.
- "Report: The Cyber ShockWave event and its aftermath". The Tech Herald. Archived from the original on 2011-07-22. Retrieved 2010-10-28.
- "Reaction to Cyber Shockwave". Tao Security. Retrieved 2010-10-16.
- "War game reveals U.S. lacks cyber-crisis skills". Government Computer News. Retrieved 2010-10-28.