Find White Papers
Home
About Us
List Your Papers
    
> HP - Enterprise Security > The Silent Battlefield: America's Alarming Vulnerability to Cyber Attack

The Silent Battlefield: America's Alarming Vulnerability to Cyber Attack

White Paper Published By: HP - Enterprise Security

As the military and US government rely more heavily on custom-built applications for communications and management, they also become more vulnerable to cyber attacks. Worse, according to the Dept. of Homeland Security, the number of attacks on custom-built applications is doubling every year. Learn about critical threats, methods that military and civilian agencies can use to deal with cyber attacks and technologies that improve security for custom-built applications.



Tags : 
security, application security, audit, risk, vulnerabilities, fortify, fortify software, hackers

HP - Enterprise Security
Published:  Oct 16, 2008
Type:  White Paper
Length:  11 pages

M 25Y 85M 55Y 100WWHHIITTEE PPAAPPEERRC 23K 63
M 25Y 85M 55Y 100C 23K 63The Silent Battlefield:America's Alarming Vulnerability to Cyber Attack
Rob RachwaldDirector of Product Marketingrrachwald@fortify.com THE silent battlefield WWW.FORTIFY.COM 1M 25Y 85M 55Y 100WHITE PAPERC 23K 63
M 25Y 85M 55Y 10T0 he Silent Battlefield:C 23K 63America's Alarming Vulnerability to Cyber Attack
Table of Contents
3 The Threat6 The Challenge8 Technological Responses to Attacks10 An Effective Technological Countermeasure11 Technology Is Not Enough: Awareness Is Paramount11 About Fortify
THE silent battlefield WWW.FORTIFY.COM 2M 25Y 85M 55Y 100WHITE PAPERC 23K 63
M 25Y 85M 55Y 10T0 he ThreatC 23K 63Browse a news Web site or open a newspaper and every day headlines proclaim the threat of cyber attack on the United States:. A single attack in the summer of 2007 disabled a reported 1,500 Pentagon computers.. According to the Pentagon, the Defense Department detects 3 million unauthorized "scans"-or attempts by would-be intruders to access official networks-on its computers There's also the real 1every day . possibility that a . Experts claim China, North Korea and others are escalating their use of cyber warfare cyber attack could techniques and are actively training new hackers.disable defense . A recent coordinated attack on Estonia's cyber infrastructure was thought by some to command systems, be the result of a disagreement with Russia and was termed "Web War I" by Estonia's bring down power Deputy Minister of Defense.grids, open dam . A 2007 Defense Department report to Congress states that the Chinese Army sees floodgates, paralyze computer network operations "as critical to achieving 'electromagnetic dominance'."communications . Cleaning up cyber attacks on the National Defense University, Naval War College and and transportation, Fort Hood each cost $20 to $30 million.create mass . In 2007, reports confirmed that attacks emanating from the Chinese military had confusion and penetrated the Pentagon, the German Chancellery and England's Whitehall.hysteria: Any or all The problem is only growing.of which could be An increased reliance on computers for communication and management makes the U.S. the precursor to government ever more vulnerable to cyber attacks.land, sea and air What is the goal of these attacks? Any attack can have serious and expensive results, whether conventional and it be targeted toward individuals, small businesses or corporations. Intellectual property can be nuclear military compromised, personal and business information can be stolen, normal business operations attacks. can be disrupted and major financial losses can occur.More seriously, attacks on the U.S. Government carry the increased threat of the theft of government and military secrets. There's also the real possibility that a cyber attack could disable defense command systems, bring down power grids, open dam floodgates, paralyze communications and transportation, create mass confusion and hysteria: Any or all of which could be the precursor to land, sea and air conventional and nuclear military attacks.Whatever the origin or method of attack, the rate of attack is growing fast. The Department of Defense has seen a 46 percent increase in attacks on its Web site since 2005, and the Department of Homeland Security received 37,000 reports of attempted breaches on government and private systems in fiscal year 2007, up 54 percent from 24,000 in 2006.
THE silent battlefield WWW.FORTIFY.COM 3M 25Y 85M 55Y 100WHITE PAPERC 23K 63
M 25Y 85The Danger of Unpreparedness and ComplacencyM 55Y 100Unfortunately, in both the private and public sectors, unpreparedness and naiveté have enabled C 23K 63cyber attackers to score major wins. Hundreds of millions of dollars to cleanup cyber attacks on American military bases and institutions already have cost the American taxpayer.In other cases, the ultimate costs of the attacks are still to be discovered. In May 2005, the Air Force Assignment Management System (AMS) was hacked. AMS, an online program used for assignment preferences and career management, contains career information on officers and enlisted Airmen, as well as personal information, such as birth dates and Social Security The only answer is numbers. In all, 33,000 personnel records were downloaded. This breach w... [download for more]

Browse Technology Topics

Data Center

Virtualization, Cloud Computing, Infrastructure, Design and Facilities, Power and Cooling, Green Computing  
    

Data Management

Application Integration, Analytical Applications, Business Intelligence, Configuration Management, Database Development, Data Integration, Data Mining, Data Protection, Data Quality, Data Replication, Database Security, EDI, SOAP, Service Oriented Architecture, Web Service Management, Data Warehousing  
    

Enterprise Applications

Application Integration, Application Performance Management, Best Practices, Business Activity Monitoring, Business Analytics, Business Integration, Business Intelligence, Business Management, Business Metrics, Business Process Automation, Business Process Management, Call Center Management, Call Center Software, Change Management, Corporate Governance, Customer Interaction Service, Customer Relationship Management, Customer Satisfaction, Customer Service, EBusiness, Enterprise Resource Planning, Enterprise Software, EProcurement, Extranets, Groupware Workflow, HIPAA Compliance, IP Faxing, IT Spending, Marketing Automation, Performance Testing, Product Lifecycle Management, Project Management, Return On Investment, Risk Management, Sales & Marketing Software, Sales Automation, Server Virtualization, Simulation Software, Supply Chain Management, System Management Software, Total Cost of Ownership, Video Conferencing, Voice Recognition, Voice Over IP, Workforce Management, Incentive Compensation, Spend Management, Manufacturing Execution Systems, International Computing  

Human Resource Technology

Human Resources Services, Payroll Software, Time and Attendance Software, Workforce Management Software, Financial Management, Employee Monitoring Software, Employee Training Software, Recruiting Software/Services, Employee Performance Management, ELearning, Benefits Management, Expense Management  
    

IT Career Advancement

Cisco Certification, Microsoft Certification, Linux Certification, Network Security Certification, Software Development Certification  

IT Management

Employee Performance, ITIL, Productivity, Project Management, Software Compliance, Sarbanes Oxley Compliance, Service Management, Desktop Management  
    

Knowledge Management

Collaboration, Collaborative Commerce, Contact Management, Content Delivery, Content Integration, Content Management System, Corporate Portals, Customer Experience Management, Document Management, Information Management, Intranets, Messaging, Records Management, Search And Retrieval, Search Engines, Secure Content Management, SLA  

Networking

Active Directory, Bandwidth Management, Convergence, Distributed Computing, Ethernet Networking, Fibre Channel, Gigabit Networking, Governance, Grid Computing, Infrastructure, Internetworking Hardware, Interoperability, IP Networks, IP Telephony, Local Area Networking, Load Balancing, Migration, Monitoring, Network Architecture, Network Management, Network Performance, Network Performance Management, Network Provisioning, Network Security, OLAP, Optical Networking, Quality Of Service, Remote Access, Remote Network Management, Server Hardware, Servers, Small Business Networks, TCP/IP Protocol, Test And Measurement, Traffic Management, Tunneling, Utility Computing, VPN, Wide Area Networks, Green Computing, Cloud Computing, Power and Cooling, Data Center Design and Management, Colocation and Web Hosting  
    

Platforms

AS/400, Domino, Linux, Microsoft Exchange, Oracle, PeopleSoft, SAP, Siebel, Solaris, Tivoli, Unix, Web Sphere, Windows, Windows Server  

Security

Access Control, Anti Spam, Anti Spyware, Anti Virus, Application Security, Auditing, Authentication, Biometrics, Business Continuity, Compliance, DDoS, Disaster Recovery, Email Security, Encryption, Firewalls, Hacker Detection, High Availability, Identity Management, Internet Security, Intrusion Detection, Intrusion Prevention, IPSec, Network Security Appliance, Password Management, Patch Management, Phishing, PKI, Policy Based Management, Security Management, Security Policies, Single Sign On, SSL, Secure Instant Messaging, Web Service Security, PCI Compliance, Vulnerability Management  
    

Software Development

.NET, C++, Database Development, Java, Middleware, Open Source, Software Outsourcing, Quality Assurance, Scripting, SOAP, Software Testing, Visual Basic, Web Development, Web Services, Web Service Security, XML  

Storage

Backup And Recovery, Blade Servers, Clustering, IP Storage, ISCSI, Network Attached Storage, RAID, Storage Area Networks, Storage Management, Storage Virtualization, Email Archiving, Data Deduplication  
    

Wireless

802.11, Bluetooth, CDMA, GPS, Mobile Computing, Mobile Data Systems, Mobile Workers, PDA, RFID, Smart Phones, WiFi, Wireless Application Software, Wireless Communications, Wireless Hardware, Wireless Infrastructure, Wireless Messaging, Wireless Phones, Wireless Security, Wireless Service Providers, WLAN  
Search