Post by TWPPost by a***@rocketmail.comTraditional threats, we aren't seeing traditional physical terrorism
groups being interested in cyber terrorism.
What we are seeing is the development of new adversaries with no links
to physical terror.
http://n3td3v.blogspot.com/2010/07/cyber-terrorism-in-early-stage-and...
Is it a true terrorist attack if there's no actual threat to a person?
Didn't it used to be called hacking? Wouldn't that mean we had to include
burglary on peoples' homes too? Pretty scary to discover a burglar in your
home... If we include domestic robbery we would surely have to include
armed bank robbery as terrorism.
I wonder if we aren't allowing the definition of what constitutes a
terrorist attack to become too broad. The more crimes that can be called
terrorism the more power and control can be demanded by the authorities.
That's something that could work against us in the long run almost as much
as people plotting to do us harm.
I'm not saying people shouldn't be aware of the damage and losses from an
attack on a computer system, but I'm not sure it counts as "terror".
TWP
Here is the scenario, a security researcher posts a computer flaw
which affects air traffic control or a passenger airliner.
A plane falls out the sky, and hundreds of people are killed.
Currently, its the low level hacker who carries out the cyber attack
who is prosecuted, not the experienced security researcher who
deliberately post the details of the technical flaw to the internet.
Cyber security laws are currently inadequate to deal with this
scenario.
We need better laws to stop security researchers being immune in such
a cyber terrorism attack.
My blog pinpoints precisely who is to blame, the security researcher
who initially posts the details of the flaw.
Andrew