Security and Privacy in a Networked World/Cyberwars

The Online Battlefield

In the information age, waging war also changes. Formal, declared wars between nations and states are replaced by sponsored crime, terrorism and 'special operations'. Special forces and non-lethal weaponry become more important, as do psychological operations, propaganda and manipulation/control of media.

Using IT in a military context today involves various applications, for example

• cryptography
• propaganda and disinformation (including controlling the public on both sides of the 'front')
• communication interception (cyberespionage, both domestic and international)
• communication disruption and sabotage (cyberattacks on infrastructure using e.g. DDOS)

Cryptography has a history that spans far before the Internet age. So does propaganda, albeit the information warfare has gained many new measures with the advent of social media (as exemplified by "Facebook revolutions" worldwide). Cyberespionage has its predecessors in various technologies of the mid-20th century. While communication disruption and sabotage have some ancestors in the pre-IT era, its true potency has only been realized recently - the first widely published case was likely Stuxnet. However, current threat analyses point out actual attack vectors towards critical infrastructure, e.g. the power grid (the central website of the US Office of Electricity Delivery and Energy reliability, energy.gov, has an extensive section on cybersecurity).

It's been a long way

While military cryptography can be traced back to the antiquity (e.g. scytale), the connection with IT was probably first made with the Enigma machines - as many chapters of early history of computers, e.g. the work of Alan Turing as well as one of the pretenders to the title of the first modern computer, Colossus, were linked to them.

In cyberespionage and surveillance, the recent scandal of NSA has its roots in the Quadripartite Agreement (UKUSA) of 1947 and the development of ECHELON in the 1960s. Earlier, a kind of unspoken rule had dictated avoidance of spying after a country's own subjects - the UKUSA found an elegant bypass in mutual surveillance and subsequent exchange of collected information. It also strived to cover the whole world by assigning areas of responsibility to every participating country (a version of the scheme can be found at http://cryptome.org/jya/echelon-bw.htm).

ECHELON was originally meant to intercept and collect information transferred over short wave radio, but went on to keep pace with evolving technology, gradually also covering telephone, fax, mobile phones and different channels of Internet communication.

Prominent examples of technological surveillance include

• NSA spy satellites (Canyon, Vortex/Chalet and Mercury series) - used to intercept a wide range of radio communications since the 60s
• Project Shamrock - a large-scale interception of telegrams within the US in the 70s
• Project MINARET - surveillance of electronic communications involving 'suspicious' persons in the US in the 70s
• Operation Ivy Bells - a US Navy, CIA and NSA mission to wiretap Soviet sea cables in the 70s
• Stellar Wind - a large-scale data mining and interception programme targetting US citizens since about 2001 (sources disagree on whether it is still active)
• Turbulence - a network traffic interception and cyber-warfare programme of the NSA since about 2005
• DCSNet - an 'on-the-run' wiretapping system run by the FBI, reportedly capable to intercept most electronic channels in the US
• PRISM - a joint US/UK surveillance programme since 2007.

It should also be noted that the US surveillance systems are occasionally also used to help US companies against competitors (some cases are mentioned e.g. here: https://www.fas.org/irp/program/process/991101-echelon-mj.htm).

Additional reading and links

• BACARD, Andre. Remailer FAQ. http://www.andrebacard.com/remail.html
• BIDDLE, Peter, ENGLAND, Paul, PEINADO, Marcus, WILLMAN, Bryan. The Darknet and the Future of Content Distribution. http://msl1.mit.edu/ESD10/docs/darknet5.pdf
• DAVIES, Roger. What is Dark Internet, How to Access Onion Domains and Configure Hosting for the Dark Web http://www.rogerdavies.com/2011/06/dark-internet/
• CAMPBELL, Duncan. Inside Echelon. http://echelononline.free.fr/documents/dc/inside_echelon.htm
• DUNHAM, Roger C. Spy Sub: Top-Secret Mission to the Bottom of the Pacific.
• HAGER, Nicky. The Secret Power. http://www.nickyhager.info/secret-power-new-zealands-role-in-the-international-spy-network/
• HELMERS, Sabine. A Brief History of anon.penet.fi - The Legendary Anonymous Remailer http://www.december.com/cmc/mag/1997/sep/helmers.html
• RIJMENANTS, Dirk. Dirk's Weblog: Cipher Machines & Cryptology / Intelligence / Security. http://rijmenants.blogspot.com/
• SONTAG, Sherry, DREW, Christopher. Blind Man's Bluff: The Untold Story of American Submarine Espionage.
• WALTON, Greg. China's Golden Shield: Corporations and the Development of Surveillance Technology in the People's Republic of China. http://www.freerepublic.com/focus/fr/582542/posts
• The Enigma and the Bombe. http://www.ellsbury.com/enigmabombe.htm
• The Great Firewall of China. http://www.greatfirewallofchina.org/

Also in Estonian:

• MÄGI, Harri, VITSUT, Lauri. Infosõda: visioonid ja tegelikkus. Eesti Ekspressi kirjastus 2008.