Scoop has an Ethical Paywall
Cyber Attack Campaign Warning - Expert Reaction
An 'ongoing campaign' of cyber attacks has prompted the GCSB to issue a warning for New Zealand businesses.
Two major news outlets have been hit with unsuccessful cyber attacks today, but the attacks have taken the NZX site down for the fifth trading day in a row.
The SMC asked experts to comment.
Dr Rizwan Asghar, School of Computer Science, University of Auckland, comments:
"We should learn a lesson from the DDoS attacks on the NZX and consider cybersecurity strategies more seriously. Cybersecurity is not an add-on or a plug-and-play thing.
"We should take a pro-active approach to mitigate cyber attacks instead of following a reactive one, including paying any ransom, which is highly discouraged. Otherwise, determined cyber criminals can target any critical infrastructure that could result in financial and reputation losses."
No conflict of interest declared.
Associate Professor Lech Janczewski, Department of Information Systems and Operations Management, University of Auckland, comments:
"Distributed Denial-of-Service (DDoS) is one of the most powerful weapons on the internet. It attacks websites and online services with more traffic than they are able to accommodate, resulting in site crash.
"The DDoS attack consists of three phases:
- The attacker picks a type of DDoS attack, finds or develops necessary software.
- They install that software on unprotected computers (called “zombie computers”) practically forming a network of computers. This network is called a “botnet”. The number of computers in a botnet may exceed 100,000.
- At a given time or signal all zombies start sending messages to the attacked site resulting in its crash.
"DDoS attack software is constantly evolving and attack vectors are becoming more and more complicated. Hence instead of developing a new DDoS attack software a hacker may buy one (using bitcoins) on the dark web. Due to the DDoS characteristics only the biggest and most vulnerable sites are targets of these attacks.
"Defence against a DDoS attack, when it is launched, is extremely difficult. Installing fire detectors when you are under fire is useless. Perhaps the only solution is to switch off the site.
"There are a number of ways to minimise the impact of a DDoS attack:
- Install a system which can detect the launch of a DDoS attack against your site.
- When a DDoS attack is detected notify your ISP to re-route attacking messages.
- You may have a backup ISP and/or you may create a “black hole” which may absorb all DDoS traffic without damage.
- You should configure firewalls and routers to identify DDoS attacking traffic.
- Also you should install and set up intrusion detection systems. DDoS attacks may not be necessary based on directly flooding the site with traffic.
- Artificial intelligence could be used to coordinate all the above activities.
"The involvement of the GCSB is a positive move, but why was it not taken before the attack was launched?"
No conflict of interest.
Science Media Centre NZ
Our aim is to promote accurate, evidence-based reporting on science and technology by helping the media work more closely with the scientific community.
The Science Media Centre is New Zealand's only trusted, independent source of information for the media on all issues related to science. Thousands of news stories providing context from and quoting New Zealand researchers have been published as a direct result of our work.
Consumer NZ: Consumer NZ’s 2024 Sunscreen Database Launches - A Powerful Tool For Safer Sun Protection
National Cyber Security Centre: Reports Of Cybercrime On The Rise - Keep Them Coming
Department Of Internal Affairs: DIA Files Civil Action Against Christchurch Casino
RBNZ: Kiwis Say Cash And Privacy Are Crucial In Record Response To Digital Cash Consultation
FSCL: Avoid A Financial Hangover This Christmas - Know Your Loan Terms Before You Sign
Electricity Authority: Feedback Welcomed On Faster, Simpler Electricity Connections
