Also, it is suggested by numerous experts that terrorists may be enhancing their computer skills or forming alliances with cybercriminals that possess a high-level of telecommunications expertise. In addition, continuing publicity about Internet computer security vulnerabilities may encourage terrorists' interest in attempting a possible computer network attack, or cyberattack, against U.S. critical infrastructure. This report reviews publications and government reports to explore the following: (1) examples of vulnerabilities that may raise the level of interest that terrorists might have in attempting a coordinated cyberattack; (2) effects of the War on Terror that are driving terrorists to use the Internet more; (3) inconsistent reporting about terrorists' cyber activities; and (4) ways that terrorists may be improving their cyber skills. A February 2005 report by the President's Information Technology Committee (PITAC) stated that the information technology infrastructure of the United States, which is vital for communication, commerce, and control of the physical infrastructure, is highly vulnerable to terrorist and criminal attacks. U.S. federal agencies have come under criticism in past years for the effectiveness of their computer security programs. Others suggest that although the frequency and severity of cyberattacks are on the rise, the federal government may not be sufficiently increasing its efforts to improve cybersecurity. In April 2002, the Central Intelligence Agency (CIA) stated in a letter to the U.S. Senate Select Committee on Intelligence that cyberwarfare attacks against the U.S. critical infrastructure will become a viable option for terrorists as they become more familiar with the technology required for the attacks. The terrorist attacks in Bali, and recent attacks in several other countries, may have been funded through stolen credit cards. The recent subway and bus bombings in the U.K. also indicate that groups of terrorists may be active within other countries that have large computerized infrastructures, along with a large, highly skilled information technology workforce. Internet and computer system vulnerabilities are persistent and widely publicized. Terrorists may also be developing links with cybercriminals that will give them access to high-level computer skills. Experts now believe that terrorist collaborate with organized crime networks in the Middle East for international smuggling of arms and illegal drugs. Criminal drug traffickers can provide terrorists with access to computer specialists with high-level technical skills. Should the counterterrorism efforts be linked more closely with international efforts to prevent cybercrime? Trends for cybercrime indicate that computer attacks could increase in number, speed, and sophistication.
Terrorist's use of the internet and other telecommunications devices is growing both in terms of reliance for supporting organizational activities and for gaining expertise to achieve operational goals. Tighter physical and border security may also encourage terrorists and extremists to try to use other types of weapons to attack the United States. Persistent Internet and computer security vulnerabilities, which have been widely publicized, may gradually encourage terrorists to continue to enhance their computer skills, or develop alliances with criminal organizations and consider attempting a cyberattack against the U.S. critical infrastructure.
Cybercrime has increased dramatically in past years, and several recent terrorist events appear to have been funded partially through online credit card fraud. Reports indicate that terrorists and extremists in the Middle East and South Asia may be increasingly collaborating with cybercriminals for the international movement of money, and for the smuggling of arms and illegal drugs. These links with hackers and cybercriminals may be examples of the terrorists' desire to continue to refine their computer skills, and the relationships forged through collaborative drug trafficking efforts may also provide terrorists with access to highly skilled computer programmers. The July 2005 subway and bus bombings in England also indicate that extremists and their sympathizers may already be embedded in societies with a large information technology workforce.
The United States and international community have taken steps to coordinate laws to prevent cybercrime, but if trends continue computer attacks will become more numerous, faster, and more sophisticated. In addition, a recent report by the Government Accountability Office states that, in the future, U.S. government agencies may not be able to respond effectively to such attacks.
This report examines possible terrorists' objectives and computer vulnerabilities that might lead to an attempted cyberattack against the critical infrastructure of the U.S. homeland, and also discusses the emerging computer and other technical skills of terrorists and extremists. Policy issues include exploring ways to improve technology for cybersecurity, or whether U.S. counterterrorism efforts should be linked more closely to international efforts to prevent cybercrime.
This report will be updated as events warrant.