Stuxnet ≠ cyberwar, says US Army Cyber Command officer

[InfoSec News <alerts () infosecnews org>]

http://www.theregister.co.uk/2012/05/16/stuxnet_was_not_cyberwar/

By Team Register
16th May 2012

While “cyber* operations” are becoming an increasing focus of both 
government and private research, legal frameworks are failing to keep 
pace, the US Army Cyber Command operational attorney Robert Clark has 
told the AusCERT security conference in Queensland.

As noted earlier by F-Secure’s Mikko Hypponen in his keynote address to 
the conference, the hundreds of jobs available for exploit research and 
creation in private defence contractors represent a huge shift in the 
source of attacks. Today's exploits, Hypponen said, are more likely to 
emerge from a cubicle farm instead of a “black hat” hacker's grubby 
keyboard.

However, the world is only at the very beginning of developing a legal 
response to such activities, said Clark.

Documents like the International Strategy for Cyberspace begin to change 
the landscape, since for the first time they attempt to wrap a formal 
framework around cyber-security – including deciding that “our 
cyber-security must be based on law or the [US] Constitution,” Clark 
said.

[...]

_______________________________________________
LayerOne Security Conference
May 26-27, Clarion Hotel, Anaheim, CA
http://www.layerone.org