Inside Cyber Warfare - Jeffrey Carr [152]
Netherlands
The Dutch government released a cyber security doctrine in April 2011 that focuses on involving commercial interests and cooperating with international initiatives, as well as improving existing capabilities and creating collaborations with the private sector. The doctrine is short, and most of the proposed ideas are capable of being attained without major investment—if any at all.
One of the biggest takeaways is the establishment of two cyber agencies: the National Cyber Security Council and a National Cyber Security Center (NCSC). The NCSC will coordinate cyber security through all Dutch organizations and departments.[174] All involved parties will create a strategy, and the NCSC will execute those policies. The already-existing Cyber Security and Incident Response Team (GOVCERT)[175] will be incorporated into the NCSC. Absolutely no budget is allotted for this doctrine, which will challenge the effectiveness.
* * *
[174] Don Eijndhoven, “Dutch National Cyber Security Strategy—Blessing or Curse?” Infosec Island, April 1, 2011, accessed August 31, 2011, https://www.infosecisland.com/blogview/12746-Dutch-National-Cyber-Security-Strategy-Blessing-or-Curse.html.
[175] Govcert home page, accessed August 31, 2011, http://www.govcert.nl/english/home.
Nigeria
Nigeria currently has no cyber crime or virtual information theft laws. In 2006 this was entirely acceptable, as less than 3.1% of the population was connected to the Internet.[176] In 2009, however, this number jumped to 16.1%, and due to a heavily invested future digital infrastructure, the number is expected to reach 30–40% by 2013.[177] This explains the phishing emails that originate from Nigeria, such as the Nigerian Prince scam.
After Al Qaeda computer expert Muhammad Naeem Noor Khan was arrested in Pakistan in 2004, it was discovered that Al Qaeda networks were communicating through Nigerian email systems and websites. Soon after, work began on a Nigerian Cyber Act that would at least provide deterrence to cyber crime, not only for domestic situations, but also for foreign criminals using Nigerian hosts. As of March 2011 the Nigerian House of Representatives rejected the Cyber Act because it duplicates many of the duties found in already-standing agencies.[178]
The Nigerian population’s growing connectivity to the Internet, combined with the lack of legislature defining consequences for cyber crime activities, creates an incubator for experienced cyber criminals. Cyber criminals who may eventually gain enough expertise to be hired out to the highest bidder. This also invites foreign groups and even state-actors to operate through and out of Nigeria directly or indirectly, shielded by the sovereignty of Nigeria.
* * *
[176] “Nigeria: Internet Usage and Telecommunications Reports,” Internet World Stats, accessed August 31, 2011, http://www.internetworldstats.com/af/ng.htm.
[177] Chijioke Ohuocha, “Internet access set to triple in Nigeria,” Reuters, June 15, 2011, accessed August 31, 2011, http://af.reuters.com/article/topNews/idAFJOE75E0H920110615.
[178] Chukwu David, “Nigeria: Representatives Reject Cyber Bill,” allAfrica.com, March 2, 2011, accessed August 31, 2011, http://allafrica.com/stories/201103020802.html.
Pakistan
Pakistan is not a new player in the arena of cyber warfare; it has been engaged in a cyber war with India since 1998. For the most part, the cyber wars only consisted of defacing each other’s websites, but in 2003, the two sides went after each other’s government servers.[179] In 2010 Indian cyber hackers attacked Pakistan’s infrastructure; in retaliation, Pakistan targeted similar Indian infrastructure. Pakistan is faced with an Israeli-Indian cyber war against its nuclear program. Even in lieu of these attacks, Pakistan has no formal cyber warfare coordination center or any specifically designated department for cyber warfare.