How Much Risk Does Stuxnet Pose To U.S.?

The debate persists: Should the feds supply security oversight for utilities to stop the next Stuxnet? Or can they really go it alone?

In data security circles, Stuxnet is the stuff of urban legend. Its a legend, however, that shows no signs of wearing out its welcome or relevance.
In fact, Steve Krofts recent broadcast report
on the venerable
60 Minutes
news magazine about that highly sophisticated, centrifuge-specific stealth virus that briefly upset the country of Irans nuclear apple cart (so to speak) raises important questions for both the security and power-generation industries in North America. For example, could future malware modeled on Stuxnet target other critical infrastructure, such as nuclear power plants or water systems? Also, who should be responsible for detecting it--private industry or intelligence-gathering agencies within the federal government?
I guess that all depends on where your security bias lies and how your political dispositions shake out.
Taking the latter of those questions first (and presumably ripe fodder for the politicos among us), the Network World article
in CSO
, Should U.S. Intelligence Agency Have A Role In Protecting Electric Grid? related the ongoing cybersecurity legislation debate in Congress and why its suddenly reaching fever pitch. Turning up the heat is whether our power companies (if forced) would be able to implement new federally mandated network protections, or whether the U.S. government and National Security Agency (NSA) should step in, deploy, and enforce the requirements and monitor the results.
According to this article, a catalyzing event for this debate was how NSA director General Keith Alexander was recently taken to the Obama administrations virtual woodshed over comments that argued for more legal authority to defend the nation against cyberattack. In effect, power companies would be required to perform continuous scanning with threat data provided by NSA and turn over any evidence of cyberattacks to the government. As youd imagine, post-Orwellian era outrage about threats to privacy deservedly abound.
In a similar vein, sentiments from panelists assembled for the recent RSA Conference in San Francisco to discuss the topic of protecting the U.S. power grid ranged from the decidedly hands-off to those that favored more of a proactive approach.
Read the rest of this article on
Dark Reading
.
The right forensic tools in the right hands are just a start. The new
Digital Detectives
issue of Dark Reading shows you how to better apply the lessons they teach. (Free registration required.)

Last News
▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security	▸ Criminal Possession of Government-Grade Stealth Malware ◂ Discovered: 23/12/2024 Category: security	▸ Senate wants changes to cybercrime law. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps