Welcome to InfoWar Monitor Infowar Tabs - Home Search!! Panopticon Projects
University of TorontoUniversity of CambridgeA Project of the Advanced Network Research Group
  Create an account    
Infowar Navigator
· Home
· About Infowar Monitor

Subscriber Services
· Search
· AvantGo

Infostreams
· Daily NewsFeed
· Infowar Monitor LinX
· SoundBytes

CCDCOE

Shifting Fire

A report by the Cambridge Security Programme, The SecDev Group and the Information in Warfare Group, Centre for Strategic Leadership, US Army War College. Download from
The US Army War College

Twitter Feed

Twitter Updates

    follow me on Twitter

    Email List
    Sign-up here for the weekly Infowar Monitor Mailing List (IMML) service:

    Your email address:

    Your name (optional):


    Member Login
     Username
     Password
     Remember me


    Don't have an account yet? You can create one. As a registered user you have some advantages like a theme manager, comments configuration and posting comments with your name.

    CitizenLab NewsFeed
    · Ottawa needs a strategy for cyberwar
    · Psiphon Twitter-Iran and ONI reports on Asia, Iran, China
    · Iran's emerging 'netwar' :Canadian group helps keep Iranians connected as government blocks websites
    · ONI Asia Press Conference
    · Twitter's Activist Initiation

    OpenNet NewsFeed

    Heads Up to our regular readers. Next week's issue of Infowar Monitor will focus on the theme of "#Netwar". We will pull together the brightest minds in the noosphere [what we're calling the noocracy] to answer questions about the concept of netwar with an eye on the unfolding events in #Iran and other regions.

    Drop your questions or comments into Twitter's #Netwar channel - or, if you feel you need more than 140 characters, email g.walton at secdev.ca [@infowarmonitor] - we welcome guest editorials on these questions or others related to the conflict. If you are a journalist, please direct questions and interview requests to Prof Ron Deibert at the Citizen Lab [@CitizenLab]. For questions related to Psiphon operations in this arena or SecDev [@SecDev] analysis please refer to Rafal Rohozinski.

    For background from the blogosphere we suggest you check out BBC Monitoring's report Iran: "Netwar" posted by Richard Sambrook, Director of BBC Global News and this excellent analysis by /. JournalSquared ["where bleeding edge meets dumpster tech"].

    See also:
    Canada's Psiphon Inc on Frontlines of Iranian Netwar [PDF].

    Note to Editors: It's Nart Villeneuve's birthday today, so he will be offline recuperating from the European leg of our GhostNet briefing tour [@nartv].


    Tibetan separatists apply for US funds
    IWM continues to monitor the Tibetan NGO Drelwa - an interesting case study in internet-enabled track II/track III diplomacy. The project was originally conceived of by Greg Walton in a restaurant in Montreal in 2005 and pitched to a senior official at IBB. Thubten Samdup was subsequently identified as the ideal director for the project.

    In 2008, while coordinating field research in Dharamsala, Walton discovered that Drelwa's network had been compromised by what became known as GhostNet. It's not only IWM that has been taking a keen interest in Drelwa, read Anti-CNN's post [Net force of Dharamsala?], and this recent article in China's Global Times:

    Source: Global Times | Cheng Gang and Wang Wenqing: The board of the US National Endowment for Democracy (NED) will decide tomorrow whether to finance a Tibetan separatist website, sources told the Global Times.




    Posted by: gregw on Friday, July 03, 2009 - 11:42 PM
    Read more... (1778 bytes more) comments? Send this story to a friend Printer friendly page

    Charlie Rose: A conversation about Cyberwarfare
    Charlie Rose: A conversation about Cyberwarfare with Michael McConnell, former Director of National Intelligence, James Lewis, Director, Technology and Public Policy Program, CSIS and David Sanger, Chief Washington Correspondent for The New York Times



    Posted by: gregw on Friday, July 03, 2009 - 11:27 PM
    comments? Send this story to a friend Printer friendly page

    Ottawa needs a strategy for cyberwar
    Ronald Deibert and Rafal Rohozinski: Recently, the Canadian envoy to Iran was called in and admonished by Iranian officials for contributing to the destabilitization of the regime because of support for social networking tools, like Twitter and Facebook. The envoy must have scratched his head in puzzlement.


    Posted by: gregw on Tuesday, June 30, 2009 - 03:07 PM
    Read more... (6677 bytes more) comments? Send this story to a friend Printer friendly page

    WSJ: Obama and Cyber Defense
    WSJ Opinion: In a Monty Python skit from 1970, the Vercotti brothers, wearing Mafia suits and dark glasses, approach a colonel in a British military barracks. "You've got a nice army base here, Colonel," says Luigi Vercotti. "We wouldn't want anything to happen to it." Dino explains, "My brother and I have got a little proposition for you, Colonel," and Luigi elaborates, "We can guarantee you that not a single armored division will get done over for 15 bob a week."


    Posted by: gregw on Monday, June 29, 2009 - 05:32 AM
    Read more... (4725 bytes more) comments? Send this story to a friend Printer friendly page

    John Naughton: The war of the cyberworlds is coming, and we'd better be ready
    o John Naughton: Last Wednesday, the American secretary of defence, Robert Gates, announced the US was finally getting its act together on cyberwarfare. After a couple of false starts and a good deal of bureaucratic infighting, the Pentagon is setting up a unified US Cyber Command to oversee protection of military networks against cyber threats. It will be called USCybercom and will be led by the director of the National Security Agency, Lt Gen Keith Alexander.




    Posted by: gregw on Sunday, June 28, 2009 - 08:16 AM
    Read more... (3943 bytes more) comments? Send this story to a friend Printer friendly page

    NedaNet: 'Hacktivists' take up Iran fight (AP)
    By SHAYA TAYEFE MOHAJER The Associated Press: A sharp clampdown by Iranian authorities may have quelled street protests, but the fight goes on in cyberspace.

    Groups of "hacktivists" — Web hackers demanding Internet freedom — say they are targeting Web pages of Iran's leadership in response to the regime's muzzling of blogs, news outlets and other sites.


    Posted by: gregw on Sunday, June 28, 2009 - 08:06 AM
    Read more... (4088 bytes more) comments? Send this story to a friend Printer friendly page

    Rule Number One: Always Blame China, then Russia
    Posted by George Smith on Global Security: Today, a collection of items having to do with the tradition of blaming China and its mighty but hard-to-see cyberwarriors. As stories on our nation's cybersecurity strategy and the military's plans for a cyberforce unfold, you'll continue to see a lot of this.

    George Smith also blogs here.


    Posted by: gregw on Sunday, June 28, 2009 - 07:59 AM
    Read more... (11070 bytes more) comments? Send this story to a friend Printer friendly page

    NYT: U.S. And Russia Differ on Treaty for Cyberspace
    By JOHN MARKOFF and ANDREW E. KRAMER, NYT: The United States and Russia are locked in a fundamental dispute over how to counter the growing threat of cyberwar attacks that could wreak havoc on computer systems and the Internet.

    Both nations agree that cyberspace is an emerging battleground. The two sides are expected to address the subject when President Obama visits Russia next week and at the General Assembly of the United Nations in November, according to a senior State Department official.

    But there the agreement ends.


    Posted by: gregw on Saturday, June 27, 2009 - 02:40 PM
    Read more... (7926 bytes more) comments? Send this story to a friend Printer friendly page

    Canadian software helps Iranian dissidents connect
    By Michel Comte – OTTAWA (AFP) — Software developed by a Canadian lab to circumvent online censorship has been downloaded by more than 18,000 Iranians in the last 10 days, says its developer Rafal Rohozinski.


    Posted by: gregw on Saturday, June 27, 2009 - 04:17 AM
    Read more... (3597 bytes more) comments? Send this story to a friend Printer friendly page

    Psiphon's NokiaSiemens' file: The central nervous system of a police state. It connects the brain to the steel toe-capped boot.
    The Infowar Monitor first briefed ONI Asia partners on the NokiaSiemens' system in June 2008. The file has been open since that time. We began providing analysts and selected journalists with off-the-record, background briefings the day after the Iran elections. We fed the limited information we have into Psiphon Red Team gaming as soon as we began to propogate our Right2Know nodes in public channels - such as Twitter and Facebook. As the story unfolds, we felt it might be helpful to analysts for us to share what background information we have that's already in the public domain.

    Firstly, we were made aware of the case by a New Scientist journalist, Laura Margottini, who wanted us to verify and comment on the systems sold to Iran.

    If you're a NS subscriber you can read her report here: Surveillance made easy (20 August 2008)
    [...]Now German electronics company Siemens has gone a step further,
    developing a complete "surveillance in a box" system called the Intelligence Platform, designed for security services in Europe and the Middle and Far East. It has already sold the system to 60 countries.

    According to a document obtained by New Scientist, the system integrates tasks typically done by separate surveillance teams or machines, pooling data from sources such as telephone calls, email and internet activity, bank transactions and insurance records. It then
    sorts through this mountain of information using software that Siemens dubs "intelligence modules".

    This software is trained on a large number of sample documents to pick out items such as names, phone numbers and places from generic text. This means it can spot names or numbers that crop up alongside anyone
    already of interest to the authorities, and then catalogue any documents that contain such associates.

    Once a person is being monitored, pattern-recognition software first identifies their typical behaviour, such as repeated calls to certain numbers over a period of a few months. The software can then identify any deviations from the norm and flag up unusual activities, such as
    transactions with an exotic bank, or contact with someone who is also under surveillance, so that analysts can take a closer look.

    Included within the package is a phone call "monitoring center", developed by the joint venture Nokia Siemens.

    However, it is far from clear whether the technology will prove accurate. Security experts warn that data-fusion technologies tend to produce a huge number of false positives, flagging up perfectly innocent people as suspicious.

    "Combining two different sources of data has the tendency to increase your false positive rate or your false negative rate," says Ross
    Anderson
    , a computer security engineer at the University of Cambridge.
    "If you're looking for burglars in a run-down district where 50 per cent of men have a criminal conviction, you may find plenty. But if you're trying to find terrorists among airline passengers - where they
    are extremely rare then almost all your hits will be false."

    Computer security expert Bruce Schneier agrees. "Currently there are
    no good patterns available to recognise terrorists, so it's unlikely that those employed by Siemens are any good."

    Whatever the level of accuracy, human rights advocates are concerned that the system could give surveillance-hungry repressive regimes a ready-made means of monitoring their citizens. Carole Samdup of the
    organisation Rights and Democracy in Montreal, Canada, says the system bears a strong resemblance to the Chinese government's "Golden Shield"
    concept, a massive surveillance network encompassing internet and email monitoring as well as speech and facial-recognition technologies and closed-circuit TV.

    In 2001, Rights and Democracy raised concerns about the potential for governments to integrate huge information databases with real time analysis to track the activities of individuals. "Now in 2008 these
    very characteristics are presented as value-added selling points in the company advertisement of its product," Samdup says.

    In June, the EU-funded PRISE consortium of security technology and
    human-rights experts, including Ian Brown of the Oxford Internet Institute at the University of Oxford, submitted a report to the European Commission asking for a moratorium on the development of
    data-fusion technologies, referring explicitly to the Siemens Intelligence Platform. "The efficiency and reliability of such tools is as yet unknown," says the report. "More surveillance does not necessarily lead to a higher level of societal security. Hence there
    must be a thorough examination of whether the resulting massive constraints on human rights are proportionate and justified."

    The company said 90 of the systems are already being used around the world, although it did not specify which countries are using it. "In all countries where we operate we do business according to the Nokia Siemens Networks standard code of conduct, based on UN & EU
    recommendations," they say.

    Samdup argues that such systems should fall under government controls that are imposed on "dual-use" goods - systems that could be used both
    for civil and military purposes. Security technologies usually escape these controls. For example, the European regulation on the export and
    transfer of dual-use technology does not include surveillance and intelligence technologies on the list of items that must be checked and authorised before they are exported to certain countries.

    The problem is that surveillance technologies have developed so rapidly that they have outpaced developments in export controls, says
    Samdup. "In many cases politicians, policy-makers and human-rights organizations lack the technical expertise to adequately assess the impact that such technology could have when it is exported to repressive regimes."


    So what's our source for this? Well, for now we would refer you to Quintessenz in Austria. These privacy researchers were referred to us by our friends at Privacy International. You'll find a wealth of information there, including leaked documents from Nokia Siemens describing the capabilities of their system(s) and others like it being deployed around the world:
    IT and telco surveillance equipment - data sheets and presentations
    A collection of network monitoring and datamining suites made by Nokia Siemens, Ericsson, Verint and others. All systems are compliant to ETSI and CALEA "lawful interception" standards, the vendors themselves are involved in the standardization. While the official name of the game is still "lawful interception" the newer suites also perform "high speed government surveillance". From Iran to China they are ab/used to track down the democratic opposition, dissidents, ethnic and religious minorities. The vendors are mostly European and US companies.



    Posted by: gregw on Friday, June 26, 2009 - 07:17 PM
    Read more... (3322 bytes more) comments? Send this story to a friend Printer friendly page

    Telegraph: UK Hackers recruited to fight 'new cold war'
    Britain is to build new defences against a "cyber cold war" being launched from China and Russia amid fears that hackers could gain the technology to shut down the computer systems that control Britain's power stations, water companies, air traffic, government and financial markets.


    By Duncan Gardham, Telegraph's Security Correspondent

    [...]

    In March researchers uncovered an electronic spy ring called GhostNet based in China, which searches computers for information, taps into emails and turns on web cameras and microphones.

    It is said to have infected "high value targets" in 103 countries.



    Posted by: gregw on Friday, June 26, 2009 - 04:59 PM
    Read more... (3871 bytes more) comments? Send this story to a friend Printer friendly page

    BBC World Service: The business of censorship in Iran
    BBC: In Iran, there's a monumental battle going on in cyberspace at the moment between the censors of information and citizens who want to know what's going on.

    Just like in Burma in 2007 and in China earlier this year, the authorities in Iran are blocking full access to the internet and sites like YouTube. In Iran, at the moment, the internet is functioning but limited with some sites blocked.


    Posted by: gregw on Friday, June 26, 2009 - 04:18 PM
    Read more... (1209 bytes more) comments? Send this story to a friend Printer friendly page

    UK prepares for Cyberwar, 'has cyber attack capability'
    UK prepares for Cyberwar, 'has cyber attack capability' [BBC]

    Cabinet Office: As the UK’s dependence on cyber space grows, so the security of cyber space becomes ever more critical to the health of the nation. Cyber space cuts across almost all of the threats and drivers outlined in the National Security Strategy: it affects us all, it reaches across international borders, it is largely anonymous, and the technology that underpins its continues to develop at a rapid pace.

    This is why the Government is publishing, alongside the first annual update of the National Security Strategy, the first Cyber Security Strategy of the United Kingdom.

    The Cyber Security Strategy recognises the challenges of cyber security and the need to address them. It stresses that the UK needs a coherent approach to cyber security, and one in which Government, organisations across all sectors, the public, and international partners all have a part to play. The Strategy outlines the Government’s approach - it establishes two new organisations that the UK needs in order to weave together new and existing work to make cyber space a safe, secure and resilient place where we can live and work in confidence.

    * The Cyber Security Strategy [PDF, 1.6MB]

    BBC: "The UK has the ability to launch cyber attacks but does not use it for industrial espionage like some other countries, minister Lord West has said."

    [...]

    He told BBC Radio 4's PM programme the UK faced coordinated cyber attacks "on a regular basis" from other countries including Russia and China.And he confirmed that the British government had approached the Russian and Chinese governments to ask them to stop the attacks. "We have had a dialogue with them in the past and I wouldn't want to go into what goes on in terms of debate at the moment," he told the BBC.

    [...]

    Launching the strategy earlier Lord West, who has been appointed as the UK's first cyber security minister, said the government had recruited a team of former hackers for its new Cyber Security Operations Centre, based at the government's secret listening post GCHQ, in Cheltenham, to help it fight back.


    [...]

    They had not employed any "ultra, ultra criminals" but needed the expertise of former "naughty boys", he added.

    "You need youngsters who are deep into this stuff... If they have been slightly naughty boys, very often they really enjoy stopping other naughty boys," he said.

    He also confirmed that the government had developed the capability to strike back at cyber attacks, although he declined to say whether it had ever been used.

    [...]

    "It would be silly to say that we don't have any capability to do offensive work from Cheltenham, and I don't think I should say any more than that."

    [...]

    Lib Dem home affairs spokesman Tom Brake said: "This new cyber security strategy could lead to an extension of the government's invasive counter-terrorism powers which already pose significant threats to our civil liberties.

    "The cyber security strategy uses broad, undefined terms that risk creating panic among the public and a demand for further government powers. We must not retreat into a Cold War mentality."

    He demanded reassurances from Home Office minister John Hanson that the new unit, which will start work in September and be paid for out of existing budgets, will not be used to spy on ordinary people's internet use.

    Mr Hanson said a special ethics panel would be set up to monitor the new unit and the government would work with civil liberties groups, although he declined to say which ones.

    [...]

    Tom Watson, until earlier this month a Cabinet Office minister in charge of digital engagement, said the opposition were missing the point: "There is state-sponsored hacking of key UK information networks on an industrial scale and we have to transform GCHQ into a spy school for geeks who are more cunning than their Chinese counterparts."


    Posted by: gregw on Friday, June 26, 2009 - 02:17 PM
    comments? Send this story to a friend Printer friendly page

    Watching the Watchers: Software to Help Dissidents
    by zikipediq: China, Myannmar, Iran: surfing in these countries can be dangerous for political opponents. Psiphon software, developed by a Canadian university, can evade the censors of the Internet in non-democratic countries.

    This is a recurrent question of Internet users in China: how to circumvent the Great Firewall , the censorship on the Net erected by the Chinese authorities. They may now acquire Psiphon. This software allowing to evade the Net censors, was developed by the Citizen Lab at the University of Toronto in association with the Universities of Cambridge and Oxford, and Harvard University.

    Ron Deibert, creator of the system, decrypts how it works:


    Posted by: gregw on Friday, June 26, 2009 - 12:12 PM
    Read more... (1800 bytes more) comments? Send this story to a friend Printer friendly page

    CTV: Canadian technology helps Iranians bypass censorship
    CTV.ca News Staff: A flood of uncensored news and information is being made available to the people of Iran thanks to Canadian technology, and the authorities in Tehran are furious about it.


    [...]

    Iranian authorities have been so alarmed they called in Canadian diplomats to express their displeasure at how Canadian technology might be helping to destabilize Iran.

    At that Rohozinski chuckled "I can only imagine how confused Canadian diplomats might be in hearing that Psiphon might be fermenting insurrection. "

    Psiphon software was designated one of the "Best and Brightest Ideas of 2008" by Esquire Magazine, and was the winner of the 2008 Netxplorateur Award at the French Senate. [...]

    CTV News: "Fighting the Firewall: Canadian Company Has Role In Iranian Unrest"

    TV interview with Psiphon CEO Rafal Rohozinski


    Posted by: gregw on Friday, June 26, 2009 - 11:55 AM
    Read more... (2873 bytes more) comments? Send this story to a friend Printer friendly page

    Infowar Monitor
    Infowar Side 

Panel
    Chechnya
    Armenia
    Armenia
    Taiwan
    China
    Kosovo
    Palestine
    Israel
    Iraq
    Infowar definition

    Breaching Trust

    A joint report from IWMP and ONI Asia reveals troubling security and privacy breaches affecting TOM-Skype—the Chinese version of the popular voice and text chat software Skype.

    Bombs and Bandwidth

    Includes chapters by Rafal Rohozinski and Ronald J. Deibert, and is available from Amazon.com.

    Poll
    In the Gaza Crisis, did IDF or Hamas achieve better co-optation of social media networks?

    Israel, significantly.
    Hamas, significantly.
    Israel, slightly more effective
    Hamas, slightly more effective
    Both equally effective
    Don''t know


    [ Results | Polls ]


    Votes: 165
    Comments: 0


    Past Articles
    Thursday, June 25
    ·U.S. Senators Push Digital Code of Conduct (0)
    ·People underestimate threat of hackers: Expert (0)
    Wednesday, June 24
    · Canadian Technology Opens Up Iranian Internet (0)
    ·Hacktivist Tweets (0)
    · BBC: What rules apply in cyber-wars? (0)
     Older Articles



    | Disclaimer | Privacy Policy | Fair Use Notice |
    Copyright 2003, 2007. Cambridge Security Programme, The SecDev Group and The Citizen Lab.