November 17, 2010 9:38 AM

Cyber Attacks Jeopardize Superpower Status

By
Terry McCarthy
(CBS)  In our "Where America Stands" series, CBS News is looking at a broad spectrum of issues facing this country in the new decade.



Cyberspace enable e-mail, electricity grids, international banking and military superiority.

We can't live without cyberspace - but increasingly, experts say its openness is putting the United States in jeopardy.

"We can say that sovereignty's at risk," said Sami Saydjari. He heads the Cyber Defense Agency,an information security company.

"Basically our whole superpower status as the United States depends on computers," he said. "We lose them, we lose our status as a superpower. We become a Third World country overnight."

Tell Us What You Think Send us an e-mail.

The Problem:

The U.S. is vulnerable because there's no accountability, limited security and no international rule of law in cyberspace.

Regularly, state-sponsored hackers in Russia and China are attacking government networks. The Pentagon gets 360 million unauthorized probes a day.

60 Minutes: Sabotaging The System

In 2007, the cyber systems of Central Command, the State Department, Department of Commerce and NASA were successfully hacked - losing millions of pages of classified information.

For Cyber Gangs, Fooling Google Isn't That Hard

They're not alone. Under constant attack, corporate America is losing critical data to overseas competitors, robbing the U.S. economy of up to $20 billion a year.

Two years ago hackers stole top-secret exploration data from oil and gas industry giants Exxonmobil, Conocophillips and Marathon Oil using custom-made spy-ware to bypass anti-virus programs.

"It's so widespread now that we face the prospect of entire industries being stolen," said Scott Borg of the U.S. Cyber Consequences Unit.

While the details of their locations cannot be revealed for security reasons, CBS News has learned that there are factories in China and Southeast Asia that are exact replicas of plants in the United States - built with everything from hacked blueprints and supplier lists down to the settings used to regulate valve pressure for individual machines.

"They're stealing all of the information on how to create and run and lay out a factory not just at a basic level but at maximum efficiency," Borg said.

CBS Reports: Where America Stands

Most worrisome is the risk to the U.S. power grid - a 6-million-mile web of electrical distribution lines powering up nearly 145 million homes and businesses across the country. They're all controlled by computer commands and open to cyber-attack.

An American hacker, known as "Mudge," knows first-hand how vulnerable these systems are. Ten years ago he bored into regional telecom and utility networks. Within a week he had worked out how to take most of them down.

"It was terrifying - it was absolutely terrifying," Mudge said. "That was my epiphany. If I figured it out then other people had figured it out also."

Known as a "grey hacker" - someone who hacks without inflicting cyber harm - Mudge gave that information to those companies to fortify their systems. The result?

Mudge said they've become "more complex." But when asked if they are more secure, Mudge said, "No. they're really not."

Solutions:

Trying to solve this problem are companies like Verizon, who've set up five cyber-crisis centers around the world. They guard against potential hacks on 700,000 miles of fiberoptics which link systems in 159 countries.

"We mainly use our operations centers to figure out what's going on months or weeks ahead of time to figure out the trends that are going on," said Verizon's Dr. Peter Tippet.

The most serious attacks show up as red dots alerting response teams while a hack is going on.

About 70 percent of all global Internet traffic passes through a Verizon router at some stage. In their security center in Virginia, they monitor about 1 billion security events every day. However, about three-quarters of those attacks come from outside the United States, where the U.S. government has no jurisdiction.

The White House is trying to change that. Howard Schmidtis the newly-appointed White House cyber czar.

"We're looking across the spectrum, what are the legal frameworks not only domestically, but internationally," Schmidt said.

Schmidt's job is to make America's networks safe against attacks from wherever they come from.

"The key issue that we understand and that we're working towards is reducing the vulnerabilities," he said.

The government is also quietly hiring hackers to learn their secrets. Last month Mudge began working for DARPA -the secretive research arm of the Department of Defense.

However the U.S. is playing catch-up. Countries like China and Russia have dedicated considerable resources to the cyber battlefront, while the U.S.has been slow to react.

"Establish it's a problem, declare it a national priority, develop a plan and then invest properly in this," Saydjari said.

The U.S. invented the Internet. Now it needs to find ways to make it safe.

Where America Stands Links
American Debt Threatens Status as World Power
Stem Cell Cures Any Closer?
How Americans can Get Rich by Going Green
Credit Card Nation: Addicted to Debt

Copyright 2010 CBS. All rights reserved.
Add a Comment See all 14 Comments
by roach9703 April 23, 2010 9:59 PM EDT
Some of this has to do with sloppy computing practices such as the over use of public variables, not being selective of about distributing object versus source code. Microsoft has been frequent offender here.
Reply to this comment
by wheresmycountry April 23, 2010 10:39 AM EDT
Sovereignty is at risk? We are not a sovereign nation, nor can we pretend to be. We have an estimated 20 million illegal immigrants living within our borders.
Reply to this comment
by ClownsOnLeft_Jokers2Right April 23, 2010 9:12 AM EDT
I just don't get it, or maybe I'm just really dumb when it comes to computers...but why would you even have super-sensitive data hooked-up and available to a computer that was connected to the internet in the first place? What about a closed network?

I don't get it.
Reply to this comment
by roach9703 April 23, 2010 9:50 PM EDT
I agree. The problem is a trade off - timeliness of data versus the time burdens of security.
by rickwar April 23, 2010 7:51 AM EDT
While this article feeds the fear and panic for sensationalism the fact is it's a serious issue.

In 1971 I worked for Addressograph-Multigraph and the discussion then was how do we protect this data, from theft, damage, copies etc: A lot of thought went into those sessions, a lot of information sent to clients. Over the years most fell on deaf ears, it still does.

Between military hacking, financial records, investment records hacking the right person or government could create havoc,pretty easily.

The government has been warned over the years time and time again, yet little has been done until something has happened.

I was recently called to an accountants office that had records stolen and altered. The IT person who had set the system up left the wireless system wide open. Incredible, every client record has SS number or Tax payer Id numbers and some had been used.

Working with the local police we found that at about 2 each morning,a couple of cars would pull up, break out the notebooks and start taking what they wanted. What the didn't figure on was that these records were phony ones made up and had evidence buried in them after we had set up trap.

ID theft was done, several 100,000 dollars were scammed.

And this is minor crime.

I alos agree with the fact others have brought up about China. While some parts of our relationsip is ok, we should never forget that we are dealing with a communist country that until just a few years ago was our enemy. In our quest for chaep and someone to buy our debt, we've been awfully loose.
Reply to this comment
by longtree-2009 April 23, 2010 5:05 AM EDT
amazing how everyone is so concerned about hispanic illegals and so very tolerant of chinese illegals as well as china. china and chinese are hacking our nation's computers, stealing military secrets, producing dangerous products for consumers and we all give the chinese and china a free pass. hispanic illegals aren't hacking systems, aren't stealing military secrets, but they are doing manual labor and other work no one else wants to do. why do chinese and china get a free pass? don't get it. china, and chinese in general, owns the usa.
Reply to this comment
by tuathadedannan April 23, 2010 9:35 AM EDT
I'll check my map, but I do not believe the US and China share a common border:)
by djconklin April 22, 2010 11:25 PM EDT
Not a hard prolem to solve. The power company should be using dedicated lines, routers and servers to connect with their utilities--completely divorced from the customer service side. Same with the gov't.
Reply to this comment
by roach9703 April 23, 2010 9:57 PM EDT
This is an excellent point!
by rwsmith29456 April 22, 2010 11:23 PM EDT
Somebody could attack us in a physical way and at the same time foul up our computer systems to inhibit response. We need LOTS of backup plans.
Reply to this comment
by Wookiee-1138 April 22, 2010 9:18 PM EDT
The only people who say "Grey Hacker" are dumb@ss g-man suits.

Everyone else calls them Whitehats or sometimes Greyhats.

At any rate, this is quite a scaremongering article. Information wants to be free.
Reply to this comment
by mgunn89512 April 22, 2010 9:33 PM EDT
i agree, while the issue is legitimate, the tone is scaremongering in an attempt for ultimately more intrusion in our lives by our own gov't...
by dddadadadadada April 22, 2010 7:01 PM EDT
dude, what is the big deal, its just crackers, they got it in everywhere in the world, and plus, are you guys retarted? hackers are not crackers, crackers cause damage, hackers don't
Reply to this comment
by DocD--2008 April 22, 2010 9:23 PM EDT
The problem is people like you, starting a sentence with "dude". Get a clue and a real name, as your name fits retarded as you say...
See all 14 Comments
.
Scroll Left
Scroll Right More »
CBS News on Facebook