Cyber war taking toll on US businesses

WASHINGTON, USA: Computer-based network attacks are slowly bleeding US businesses of revenue and its market advantage. Even the government faces the prospect of losing in an all-out cyber war, experts told US senators in a hearing.

"If the nation went to war today in a cyber war, we would lose," said Michael McConnell, executive vice president of Booz Allen Hamilton's national security business and a former director of national security and national intelligence. "We're the most vulnerable. We're the most connected. We have the most to lose".

The US will not be able to mitigate the risk from cyber attack until the government gets more actively involved in protecting the nation's network, which may not occur until after a "catastrophic event" happens, McConnell said in testimony during a hearing of the Senate Committee on Commerce, Science and Transportation Tuesday.

"The government's role will change to become more active," he said. "We're going to morph the Internet from '.com' to '.secure'."

The subject of the hearing was the Cyber Security Act of 2009, which would regulate organizations and companies that provide critical infrastructure for the US, require licensing and certification for cyber security professionals, and provide funding for grant and scholarship program, said a Xinhua report quoting CNET News.com.

The US House of Representatives passed its version of the Cyber Security Act earlier this month.

The bill is necessary and overdue, said James Lewis, a senior fellow at the non-profit Center for Strategic and International Studies (CSIS). The US is "under attack every day, losing every day vital secrets. We can not wait," he said. "We need a new framework for cyber security and this bill helps provide that."

"A cyber attack would be like being bled to death and not noticing it and that's kind of what's happening now," Lewis said when asked to define what a cyber attack is. "The cyber attack is mainly espionage, some crime," he added, noting as an example an attack in which $9.8 million was extracted from ATMs over a three-day weekend.

"I don't worry about terrorists (because)... terrorists are nuts. If they had the ability to attack us they would have used it," he said. "There are people who could attack us now: Russia, China, some others, our potential military opponents. And we know they've done reconnaissance on the electrical grid.

"Could they turn off the electrical grid in a conflict over Taiwan or Georgia? Sure. That's what it would look like," Lewis said.

Cyber attackers are stealing "massive" amounts of business information that is compromising US companies and markets, according to Scott Borg, chief economist at the non profit US Cyber Consequences Unit.

"Cyber attacks are already damaging the American economy much more than is generally recognized," he said. "The loss is greater than losses due to identity theft and credit card fraud."

Mary Ann Davidson, chief security officer at Oracle, warned of the dangers of linking SCADA (Supervisory Control and Data Acquisition) systems for monitoring and controlling critical infrastructure with the Internet.

"We know some smart grid devices are hackable," she said. "We know there are PDAs, digital assistants, that talk SCADA because it's just so expensive to send a technician to the plant. Dare I say move the control rods in and out of the reactor?"

This article was first published as a blog post on CNET News.

©IANS