Japan Will Stage Mock Cyberattacks

freaktheclown writes "Japan is set to start staging mock cyberattacks on various companies as precautionary exercises. According to the article: 'Japan will conduct nationwide exercises next year to prepare effectively for cyberattacks on computer networks. Mock cyberterrorists will simulate attacks on computer networks of businesses and government organizations to discover vulnerable areas, the Yomiuri Shimbun reported Wednesday. Participants in the exercises will include financial institutions, communications companies and Internet service providers, as well as the central government and local governments.'"

Let the war games begin...

[It doesn't come easy]

If you are developing your own cyberattack techniques, here's your chance to test them while "hiding in plain sight".

Hello, I'm about to attack you.

[N8F8]

I wonder if this is your typical test where only the strongest points are tested. Will hackers cold-call targeted businesses pretending to be admins verifying passwords?

MocK?

[redelm]

What is a mock attack? One without deadly payload? How can that be done with cyberattackes when the attack is frequently without payload other than reproduction? Or rather, the volume of the attack is the payload.

These are either full attacks (perhaps cancellable) or they will lead to false confidence (IMHO more an American than a Japanese trait).

Are you sure it works? Of course! How do you know?

[ngr8]

In my days in big financial services tech hell, I was on the Disaster/Recovery planning committee. If the plan could not be really tested, it was fantasy hoping for good luck.

The test cases weren't only terrorism - just what would happen if we had a steam explosion, the building was sprayed with asbestos, and the NYPD and FD put yellow tape around it.

In Peopleware, Tom DeMarco tells of the job interview... "We need a juggler. Can you juggle?" "I'm great!" "Burning Logs?" "No problem!" "Animals?" "No problem-o!" "You've got the job!" "Don't you want to see me juggle?"

So the idea of something that resembles live-fire testing is a very good idea. Intrusion testing, auditability (even open book audits as in "we're gonna ask you this, uber-geek!")is not perfect; however, I remember speaking with smug black frocked dotcommers who built systems that couldn't scale etc. etc.

Ok. I think I'm gonna get some of that spray-on hair now and sort punch cards. But a test (if not completely lame)is a critical part. If the thing fails, do it again. If it passes the test, make the test harder. Fight dirty when you test - it will make for better results when the stuff hits the fan for real.

How to jam cell phone comm

[Rac3r5]

Simple, just send 165+ text messages in less than a minute..