Cyber Primer

Cyber threats
• gain publicity by attacking public and private sector websites and
online services; and
• exploit social media to further their cause.
The attacks against Georgian and Western websites on the outbreak of the
Russian military incursion into Georgia is a good example of the damage that
can be inflicted against a state by hacktivists. 27
2.13. Insiders. Disgruntled or subverted employees may seek to
deliberately exploit cyberspace to cause harm to their employer in a number
of ways. Additionally, all personnel, regardless of their role or seniority,
are on the front line in cyberspace and can, accidentally, give an adversary
the ‘in’ they need to Defence systems by ignoring or circumventing cyber
security advice and procedures. The Bradley Manning, Edward Snowden and
Jeffrey Paul Delisle cases show the threat posed by insiders. 28
2.14. Non-targeted threats. Although this chapter concentrates on
targeted threats, there are numerous threats in cyberspace that are not
specifically aimed at any one individual that could cause Defence harm.
An example of a non-targeted threat is the Conficker virus, which caused
significant disruption to the Ministry of Defence’s (MOD’s) information and
communication technology (ICT) system. 29
Characteristics of cyber attacks
2.15. There are a number of cyber exploitation, attack tools and
techniques freely available on the Internet. Adversaries traditionally employ
four elements in an attack – vector, payload, behaviour and effect, all
underpinned by intelligence.
a. Vector. This describes the method and route an adversary uses
to form initial contact with the target in cyberspace. This could be
through an email, a link on a web page, removable media, wireless
media or getting local access to the system used by the target.
27 More details on this example can be found at Annex 2A on pages 42-43.
28 More details on these examples can be found at Annex 2A on page 44.
29 More details on this example can be found at Annex 2A on pages 46-47.
26
Cyber Primer (2nd Edition)