Subscribe via RSS

Archives by Date
June 2009
May 2009
April 2009

See all Archives
Archives by Category
'Canes
Afghan Update
Ammo and Munitions
Armor
Around the Globe
Av Week Extra
Axe in Iraq (and Elsewhere)
Bizarro
Blimps
Blog Bidness
Body Armor Blues
Bomb Squad
Brownshoes in Action
Bubbleheads, etc.
Cammo Green
Catch the "Buzz"
Chem-Bio
Civilian Apps
Cloak and Dagger
Commandos
Comms
Contingency Ops
Cops and Robbers
Cyber-warfare
Data Diving
Defense Tech Poll
Defense Tech Radio
Dissent Tech
Door Kickers
Drones
DT Administrivia
Eat DT's Dust
Extra! Extra!
Eye on China
Fast Movers
FCS Watch
Fire for Effect
FOS Files
Friday Funnies
Gadgets and Gear
Going Green
Grand Ole Osprey
Ground Vehicles
Guns
Homeland Security
In the Weeds with Eric
Info War
Iraq Diary
Jarhead Jazz
JSF Watch
Just War Theories
Lasers and Ray Guns
Less-lethal
Logistics
Los Alamos and Labs
M4 Monopoly
Medic!
Mercs
Missiles
Money Money Money
Most Wanted
MRAP Edge
Net-Centric
Nukes
Old Skool
Our Shrinking Planet
Planes, Copters, Blimps
Podcast
Politricks
Polmar's Perspective
Popular Mechanics
Rapid Fire
Raptor Watch
Red Team
Retro-Futuro
Robots
Roll Your Own
Sabra Tech
Ships and Subs
Snipertech
Soldier Systems
Space
Special Ops
Star Wars
Strategery
Stray Trons
Tactical Development
Terror Tech
The Deadlies
The Defense Biz
The Peoples' Site
The Sunday Paper
The Tanker Tango
The View from Av Week
Those Nutty Norks
Training and Sims
Trimble on the Case
Video Lounge
War Update
Ward'z Wonderz
You can run...

See all Archives
Newsletters

Edited by Christian Lowe | Contact

Russia's Cyber Forces

russian-flag.jpg

Russia is well known for its military mentality. Remember the cold war? It has taken nearly a decade for the world to realize the true threat of cyber war. Today, the world is dependent on computers and networks much more than we were eight years ago when we experienced the NATO-Serbia cyber war. Russia opened the eyes of the world to the looming threat of cyber warfare after the Estonia incident. Just last week Russia's State Sponsored cyber forces opened up a new front in cyber war.

Reports indicate that Russian Cyber Forces unleashed a large scale cyber attack on Radio Free Europe. In addition, there is some evidence of the use of BotNets in politically motivated distributed denial-of-service (DDoS) attacks. With all this demonstrated ability, should we be concerned? What are Russia's true cyber warfare ambitions? Russia's Cyber Warfare Doctrine is designed to be a force multiplier along with more traditionary military actions including WMD attacks. A “force multiplier” is a military term that describes a weapon or tactic that, when added to and employed along with other combat forces, significantly increases the combat potential of that force.

Like all offensive cyber strategies it includes the capability to disruption the information infrastructure of their enemies. This doctrine includes strategies that would disrupt financial markets, military and civilian communications capabilities as well as other parts of the enemy's critical infrastructure prior to the initiation of traditional military operations. They also address weaken the economy of their adversary to further decrease their ability to respond to the combined threat. Offensive cyber weapons receive great attention in the Russian Cyber Warfare Doctrine. This coupled with advanced R&D puts them on the leader board in cyber warfare.

Cyber attacks and cyber weapons are strategic arms and in effect are real offensive weapons. Cyber-attacks can harm or even paralyze a country and therefore have equivalent implications as that of physical military attacks. Most cyber attacks leave behind forensic evidence that can be used to assess the capabilities of the attacker. With all the attacks attributed to Russia, there has to be significant intelligence out there about techniques, cyber weapons, and strategies that have been used in these cyber assaults. An interesting point is that NATO's Defensive Treaty drawn up in 1949 does not deal with cyber weapons as the Internet did not yet exist and there were very few computers at the time.

Once again, warfare capabilities have outpaced our legal and political systems. Former Russian President Vladimir Putin has blasted the US for its militaristic approach to foreign policy, saying its actions were "nourishing an arms race." Need some more evidence? In 1998, Russia's defense budget was less than $3 billion. Since that time, the Russian defense budget has been soaring, funded by substantial increases in their petroleum income, the budget jumped 23 percent in 2007 to $32.4 billion.

An interesting point to keep in mind is that Moscow does the arms business with over 70 countries, including China, Iran, and Venezuela, and in 2006 exported $6 billion worth of arms. Russian intelligence services have a history of employing hackers against the United States. In 1985 the KGB hired Markus Hess, an East German hacker, to attack U.S. defense agencies in the infamous case of the “Cuckoo's Egg”.

The following is an estimate of Russia's cyber capabilities.
Russia's 5th-Dimension Cyber Army:
Military Budget: $40 Billion USD
Global Rating in Cyber Capabilities: Tied at Number 4
Cyber Warfare Budget: $127 Million USD Offensive Cyber Capabilities: 4.1 (1 = Low, 3 = Moderate and 5 = Significant)
Cyber Weapons Arsenal in Order of Threat:

  • Large, advanced BotNet for DDoS and espionage

  • Electromagnetic pulse weapons (non-nuclear)

  • Compromised counterfeit computer software

  • Advanced dynamic exploitation capabilities

  • Wireless data communications jammers

  • Cyber Logic Bombs Computer viruses and worms

  • Cyber data collection exploits Computer and networks reconnaissance tools

  • Embedded Trojan time bombs (suspected)

Cyber Weapons Capabilities Rating: Advanced
Cyber force Size: 7,300 +
Reserves and Militia: None
Broadband Connections: 23.8 Million +

Close ties with Russian Business Network (RBN), who is thought to own and operate the second largest BotNet in the world. Intelligence suggests there are organized groups of hackers tied to the Federal Security Bureau (FSB).

The FSB is the internal counter intelligence agency of the Russian Federation and successor to the Soviet KGB. Russia is often overlooked as a significant player in the global software industry. Russia produces 200,000 scientific and technology graduates each year. This is as many as India, which has five times the population. This is hard to believe since their software industry can be traced back to the 1950s.

A study by the World Bank stated that more than one million people are involved in software research and development. Russia has the potential to become one of the largest IT markets in Europe. The Russian hacker attack on Estonia in 2007 rang the alarm bell. Nations around the world can no longer ignore the advanced threat that Russia's cyber warfare capabilities have today and the ones they aspire to have in the near future.

From this information, one can only conclude that Russia has advanced capabilities and the intent and technological capabilities necessary to carry out a cyber attack anywhere in the world at any time.

-- Kevin Coleman

Comments

Russia should not be over looked,and if you seriously think that China is becoming a serious threat,you have no idea who we are!!!! USA

Posted by: Charlie at May 6, 2009 09:15 PM


It was my pleasure to visit your blog. It is really a mirecle to visit your blog in this wide world. And I also have the feeling that it was really a pity that we didn't meet each other earlier. Because the kindness and warmth in your blog can make me completely relaxed and happy. I hope that you will visit my blog too to see if you can have the same feeling.

afake rolex watch replica shoes

http://www.lowestmall.com
http://www.easyforbuy.com
http://www.ecforshop.com
http://www.gomykick.com
http://www.onestoptown.com
http://www.rolex8u.com
http://www.watchinstyle.com
http://www.yourshop.cc
http://www.instylewatch.com
http://www.sellbestshoes.com
http://www.buynikeshoes.com
http://www.PICKHANDBAG.COM
http://www.PICKMYWATCH.COM
http://www.PICKTHEBAG.COM
http://www.ROLEXWATCHFORU.COM
http://www.REPLICAWATCHFORU.COM
http://www.wearmyrolexnow.com

Posted by: replicashoes at October 23, 2008 10:07 PM


It's all about IRC/disruption and acute knowledge
of political pull-sources etc...They won't stop unless a certain figure speaks out....But that figure is usually the one in command and control
status etc...Key word:'Acute.'

Posted by: paul at May 30, 2008 04:16 PM


Yes..the Russians are a cyber threat but we'd be a lot smarter if we'd pay more attention to the Chinese and their cyber threat. They are worse than the Russians ever were. WAKE UP, AMERICA! The Chinese are the REAL threat!

Posted by: RescueOps at May 29, 2008 07:37 AM


Ok --- you had to bring up the old "Brain" virus. Now you have gone and done it - you made me feel old. I had totally forgotten about that one.

Posted by: Kevin at May 28, 2008 01:41 PM


The evidence of cyber attack on American Soil has already happened and it is not only Russia but also Iran, China and every countries that hate American Democracy or -- in this case -- American Government.

Last summer, I've seen few American Banks ran out of money and lot of people have no money, even if they're rich. Home foreclosure scam? im pretty sure they took some critical information our of realty estate database and use them to hunt down many homeowners and conned them out of their own house which led to nationwide home foreclosure and nobody is doing anything about that.

whats worse, almost every transaction that u made is not secured anymore. i can't trust bank to hold my money anymore due to foreign cyber attacks and weakened defense to guarantee my financial security, therefore, i've decided to cash my check every time instead of have it direct deposited into my bank account.

DDoS is what exactly happened to the American People who don't see the big picture or doesn't watch news.

Ah, who's control our American Media, anyway...

Posted by: Damon at May 28, 2008 11:37 AM


I spent the last six years of my military carrer in Information Operations. Been to DISA, 1st IO Command, and overseas. Seen the firewall logs of Federal and State organizations, military and government, where it is amazing from where we are being probed and attacked. H*ll, I have been around long enough to remember the first BRAIN virus (picked it up from one of my trips to Korea in the 80's). The threat to EVERYONE'S networks is real. We are not spending enough to protect ourselves. By the way, the Army's version of Information Operations makes more sense then the other services, including the new Air Force command. There is more to information warfare than digits and electrons....

Posted by: Seen the elephant at May 28, 2008 08:28 AM


what better test bed is there than your client target base ? barrageing radio free europe with software is a test. once there was a story about our x bunkie bin laden wanting to bomb radio free europe instead or before 9/11. a cyber stealth attack might be more survivorable than a gassed up jet smashed into Duetsche Bank H.Q. A West Point motto is " Do not take counsel in your own fears. " Momma said " brains are better than brawn. " " Be prepared. " DeVry Institute ? " Gawd bless Milky Way ! "

Posted by: helovesgold at May 28, 2008 07:31 AM


I was familiar about the ugly spam bussiness in Russia, and on the otherhand has great software such as the Kaspersky Anti Virus, but never had a clear vision about the Russian cyber warfare team. Interesting report.

Posted by: pedestrian at May 28, 2008 12:11 AM


I have a question for b - Kevin's work was referenced by STRATCOM in a Congressional hearing last week. What have you done and who in that elite group have referenced you?

See Washington Post Article

http://www.washingtonpost.com/wp-dyn/content/article/2008/05/20/AR2008052001372_2.html

Posted by: Michelle at May 27, 2008 07:00 PM


b

No one ever said ALL botnets are either State sponsored or developed by criminal organizations. The fact is it is a combination of both.

Your question about the budget I will answer. The US budget for Cyber is in flux. President Bush signed 2 presidential directives in January that are classified.

In January 2008 President George W. Bush signed two presidential directives calling for the creation of a comprehensive national cyber security initiative. (One National Security Presidential Directives (NSPD) and one Homeland Security Presidential Directive (HSPD).) However, one new report stated those directives requested $6 billion for Cyber Defense. That being said the number grew and in early may was reported at being $17 billion in defense. Offensive cyber weapons budgets for the U.S. are sensitive/classified and I will not even commont on those.

Further more, Jim Christy, a US special agent and 20 year veteran specialized in cyber crime investigation publically stated of how companies do their best to cover up corporate espionage and insider theft. He went on to say how he has seen entire corporate networks of over 100,000 systems completely compromised and hundreds of thousands of files exfiltrated.

It appears you think you know everything. I wake up every day and wonder, what happened that I don't know about - What do I need to know that I don't - and how can I find out?

Posted by: Kevin at May 27, 2008 03:07 PM


B your cooment are out of place. Keep in on and intellectual level or don't bother! Kevin don't waist yrou time with "b" his comments are ot constructiveat ALL.

Forget about "b" remember never argue with a fool - bystanders can't tell who is who.

Posted by: SpyGuy at May 27, 2008 02:43 PM


Do we really want to wait till we experience a cyber attack that disrupts the U.S. the same way Estonia was disrupted or worse before we start to plan our defenses? I think not!

No, certainly not. Let's take care of those Martians. I heard you are an expert of fighting Martians. All power and budgets to you.
---
More seriously:

There are some Russian crime groups that do use bot nets.

There some Chinese, German, U.S. based mafia and other crime groups who use the same tools. There are ways to defend against these and any IT manager worth his paygrade knows how to do this.

There is, unlike what you state, no evidence that these bot nets are state founded.

But you build your "threat" on the Russian alleged budget, without ANY source.

Now what is the U.S. budget on cyber attacks?

As you seem to know the Russian one you will certainly know the U.S. one. How about a comparison. May Russia just defends?

Why do you want my taxdollars to be wasted against this threat? Oh, that's your job?

Fine, but not with me.

Posted by: b at May 27, 2008 02:36 PM


HEY b want to try to defend you comment now. Kevin bings up one hell of a good point!

Posted by: Spyguy at May 27, 2008 02:13 PM


"b"

There are over 1 million pieces of malware. How can you even post such a statement!

Consider this, if you wait for hard facts or "Intel" that means it has already happened. Strategic advantage is created by educated guesses, generated by a process of asking "what if." Take for example current computer virus protection. Today virus detection relies on the identification of signatures in the code of the virus itself. Therefore, you have to have experienced the virus, before you create the ability to defend against it. You comment" Reports indicate" and "there is some evidence" do not make a "demonstrated capability" are indicative of that mindset.

Do we really want to wait till we experience a cyber attack that disrupts the U.S. the same way Estonia was disrupted or worse before we start to plan our defenses? I think not!

Posted by: Kevin at May 27, 2008 01:37 PM


"Reports indicate" and "there is some evidence" do not make a "demonstrated capability"

It goes down from there ...

Numbers plugged from hot air and self serving "threat" claims from someone who makes a living by defending against such threat.

Posted by: b at May 27, 2008 12:39 PM


Are you going to review the U.S. standing as well? I would be interested in where we stand!

Posted by: Ted at May 27, 2008 11:07 AM


Post a comment




Remember Me?


Please enter the code as seen in the image below to post your comment.