TALINN: As cyber-attacks sow ever greater chaos worldwide, IT titan Microsoft and independent experts are pushing for a new global NGO tasked with the tricky job of unmasking the hackers behind them.
Dubbed the “Global Cyber Attribution Consortium”, according to a recent report by the Rand Corporation think-tank, the NGO would probe major cyber-attacks and publish, when possible, the identities of their perpetrators, whether they be criminals, global hacker networks or states.
“This is something that we don’t have today: a trusted international organisation for cyber-attribution,” Paul Nicholas, director of Microsoft’s Global Security Strategy, told Nato’s Cycon cyber-security conference in Tallinn last week.
With state and private companies having “skills and technologies scattered around the globe” Nicholas admits it becomes “really difficult when you have certain types of complex international offensives occurring.”
“The main actors look at each other and they sort of know who they think it was, but nobody wants to make an affirmation.”
Microsoft already floated the idea of an anti-hacking NGO in a June 2016 report that urged the adoption of international standards on cyber-security.
The report by Rand commissioned by Microsoft called “Stateless Attribution — Toward international accountability in Cyberspace” analyses a string of major cyber-attacks.
They include offensives on Ukraine’s electricity grid, the Stuxnet virus that ravaged an Iranian nuclear facility, the theft of tens of millions of confidential files from the US Office of Personnel Management (OPM) or the notorious WannaCry ransomware virus.
“In the absence of credible institutional mechanisms to contain hazards in cyberspace, there are risks that an incident could threaten international peace and the global economy,” the report’s authors conclude.
They recommend the creation of an NGO bringing together independent experts and computer scientists that specifically excludes state actors, who could be bound by policy or politics to conceal their methods and sources.
Rand experts suggest funding for the consortium could come from international philanthropic organisations, institutions like the United Nations, or major computer or telecommunications firms.
Pinning down the identity of hackers in cyberspace can be next to impossible, according to experts who attended Cycon. — AFP
Oman Observer is now on the WhatsApp channel. Click here
