Cyber-Vulnerable Insecurity

"Even though the current priority in Canada is international terrorism, there are growing concerns about the cyber-instrumented attacks attributed to government-backed hackers from China and Russia.
"Various state players have developed cyber resources that pose a significant threat to systems and programs deemed important to national security and economic stability. Once largely confined to government and military targets, malicious malware programs now threaten all forms of critical infrastructure including electric grid and telecommunications networks.
"Given the ever-growing relevance of ICT (information and communications technologies) for the economy and society as a whole, and the growing incidence and diversity of threats to which Canada is being subjected, a more aggressive approach and dynamic leadership are warranted if loss of public confidence in ICT and the government itself is to be avoided."
Angela Gendron, Carleton University, Canadian Centre of Intelligence and Security Studies

Professor Gendron's assessment of risks and dangers facing Canada through digital technologies, published in the Canadian Foreign Policy Journal, brings home in a very obvious way the country's vulnerabilities to foreign meddling, and much worse; malicious corruption of the many areas of infrastructure upon which we rely. From government itself, to public utilities, communication grids, transportation networks, energy transmission and finance.

Where once for those civil sectors and systems to work, human ingenuity, physical manoeuvring and hands-on dedication were relied upon, computer/Internet technology has intervened. Physical defences and geography itself could be relied upon for defence, once. Now that countries, including Canada are so committed and heavily interconnected, cyber-dependent, networked, we are increasingly vulnerable in an entirely different and far more dangerously involved manner. The consequences are greater, and difficult to predict, let alone protect against.

Just-in-time supply chains that have become so wide-spread, instead of stocking and warehousing for maximum profit and reliance even effect all of our distribution capabilities, inclusive of our water supplies, energy and finances. All vulnerable to malicious cyber-attacks. Such 'enemies' could be represented by other, foreign nations with whom relations are less than compatible, to criminal hackers and even cyber-jihadists.

We do have a fairly good idea of what it is like to be without electricity for a prolonged period. When nothing works without power. When, for example, a decade ago, a random event occurred when a power line touched foliage causing a generating station in Ohio to trip and shut down. A mechanical alarm meant to alert operators to the need to shut down power malfunctioned, and electricity surged through interconnected transmission lines among states and provinces between the U.S. and Canada.

It took sixty seconds for power to fail, cascading across 24,000 square kilometres, leaving over 50-million people without electricity as over one hundred power plants, including 22 nuclear plants and 300 transmission lines to shut down in a massive outage. It was the largest, most prolonged blackout experienced to date, and not a very welcome occurrence, disrupting countless lives, sending people into panic mode, and discommoding communities and governments alike.

The issue of cyber-security is complex and vexing: 90% of Canada's critical infrastructure is privately owned. No common, never mind mandatory security standards are in place. Global interconnectedness and interdependence relating to a myriad of sectors place just about everyone at potential risk. A global solution is called for; at the very minimum, vast international co-operation, to face the growing problem.

In Canada no department or agency in the intelligence and security community has been assigned - or acknowledges such an assignment - for a cyber-warfare research program, according to Professor Gendron. In the United states a new U.S. Cyber Command responsible for defence of cyberspace has been launched as an operational domain, capable of military retaliation in cyberspace.

The dimensions and consequences of the issue are overpoweringly difficult to comprehend.