Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Join us in building a kind, collaborative learning community via our updated Code of Conduct.

Cyberwarfare has been defined as "actions by a nation-state to penetrate another nation's computers or networks for the purposes of causing damage or disruption", but other definitions also include non-state actors, such as terrorist groups, companies, political or ideological extremist groups, ...

101
votes
5answers
14k views

Confirmed evidence of cyber-warfare using GPS history data

In its recent policy, the US Department of Defense has prohibited the use of GPS-featured devices for its overseas personnel. They explain it with a theory that commercial devices like smartphones or ...
-1
votes
1answer
90 views

What Are the Algorithm and techniques of IP Traceback to Find the Real Source IP Address

In most of the cyber attacks such as a DDoS attack or other kinds, it is sometimes hard/impossible to identify the real source IP addresses. This is because when you review the logs and lookup those ...
2
votes
1answer
184 views

Are there technical reasons why state actors may be more able of carrying out malware cyberattacks against critical infrastructure, than individuals?

The US and the UK have publicly accused the Russian military of orchestrating attacks using the NotPetya malware: Foreign Office minister Lord Ahmad of Wimbledon said: "The UK government judges ...
-4
votes
1answer
171 views

In light of Stuxnet, why did Iran use Windows? [closed]

I don't understand why these companies/places that should have high security standards use Windows. The only reason would be that it is a system requirement for some software or hardware. But in these ...
-3
votes
1answer
190 views

About the Petya cyberattack: How exactly did the cyber attack unfold?

As far as Wikipedia has provided information, I understood, that the Petya malware was disguised as a PDF file, which the target machines were attempting to open. Assuming this is the case, did the ...
0
votes
1answer
77 views

Do Cyber Range(s) detect Business Logic Security Failures?

I had been studying Cyber Ranges for a while & found out there applicability in defense, military control systems, enterprise & in medical. I'm interested to know if the stimulation which is ...
4
votes
4answers
837 views

Detecting Tor Browser using SIEM

I'm looking for a possible way to identify Tor Browser activity using QRadar. We have Firewall integrated & IPS (Without Application Control. Hence not a possible option). I went through the link ...
3
votes
2answers
487 views

Mutually Assured Destruction and Cyber Warfare [closed]

During the Cold War, the U.S. and the former Soviet Union pursued a policy of mutually assured destruction (MAD). I am wondering if it is safe to assume that organizations such as the National ...
5
votes
1answer
358 views

What is the difference between cybersecurity and information security? [closed]

I'm trying to differenciate between those two themes : cybersecurity vs information security. Broadly speaking I'd say cybersec is about network security (TCP/IP, router, firewall,...) and infosec is ...
1
vote
3answers
160 views

What would be the effects of a limited Russian/US cyber conflict be on cyber-security professionals? [closed]

In an interview with NPR's Steve Inskeep that is airing Friday on Morning Edition, Obama said, "I think there is no doubt that when any foreign government tries to impact the integrity of our ...
-4
votes
1answer
202 views

How information security/cyber security evolved for a Novice End user in the Last 10 Years [closed]

The main point to note is the type of laws that protect the users. Its main focus is My points of discussion include 1) Challenges faced in Cyber-security. 2) Evolution of cyber security over the ...
1
vote
1answer
108 views

Can you, with 100% certainty, guarantee the source location of a cyber attack?

There have been reports that American technology and cyber security experts have claimed that Russia is behind the recent cyber attacks on the United States, notably those aimed at influencing the ...
1
vote
0answers
59 views

Cyber security controls and Cyber insurance [closed]

Is there a minimum standard set of cyber security controls for compliance to cyber security insurance claims?
3
votes
1answer
154 views

Why are overused buzzwords like Cyber and Hacking still prevalent in our industry? [closed]

Proper terminology is important for anyone who wants to learn something. The best way to develop professionalism is to rely on a set of well defined technical terms. So it should be in any ...
2
votes
0answers
95 views

Information on the Elderwood Project/Platform [closed]

I've read Symantec's whitepaper on the Elderwood Project and the blog update on the Elderwood Platform. They both make for a very interesting read, especially in the zero-day exploit meta-analysis ...
1
vote
0answers
117 views

Example of a hacking attempt that failed because of a bug?

We hear all the time in popular press (and increasingly, in government publications + scholarly articles) about how "cyberattacks" make us insecure, because we have so many vulnerabilities (mostly ...
1
vote
0answers
186 views

Anatomy of a Cyber exercise and SOC

What exactly entails an incident response exercise (like a Red/Tiger team excercise)? How does it add value to a security operations center? Is there any good resource I can read up on how to set up a ...
0
votes
1answer
291 views

How to protect publicly placed NFC tags?

Recently, the appearance of public NFC tags are growing in major populated areas. The company I am currently working along side with wants to increase their advertisements with a NFC tag placed on the ...
1
vote
2answers
209 views

Is there a cyber equivalent to the JTLS?

Is there a cyber warfare equivalent to the JTLS? Is a "cyber range" the correct term for something like that?