Security News > 2007 > May > Estonia urges firm EU, NATO response to new form of warfare: cyber-attacks
http://www.smh.com.au/news/Technology/Estonia-urges-firm-EU-NATO-response-to-new-form-of-warfarecyberattacks/2007/05/16/1178995207414.html The Sydney Morning Herald May 16, 2007 Estonia has urged its allies in the European Union and NATO to take firm action against a new mode of warfare that has been unleashed on the Baltic state in a bitter row with Russia over a Soviet war memorial: cyber-attacks. "Taking into account what has been going on in Estonian cyber-space, both the EU and NATO clearly need to take a much stronger approach and cooperate closely to develop practical ways of combatting cyber-attacks," Estonian Defence Minister Jaak Aaviksoo told AFP Tuesday. "Considering the scale of damage and the way these cyber-attacks have been organised, we can compare them to terrorist activities," Aaviksoo said a day after raising the new mode of warfare at talks with his fellow EU defence ministers in Brussels. Estonian institutional websites have been under regular cyber-attack since the end of last month, when a row blew up with Russia over the removal from central Tallinn of a memorial to Soviet Red Army soldiers. Officials in Estonia, including Prime Minister Andrus Ansip, have claimed that some of the cyber-attacks, which forced the authorities in the Baltic state to temporarily shut down websites, came from Russian government computers, including in the office of President Vladimir Putin. "The cyber-attacks against government websites have come in waves: they start and end, and then start again after a few days' break," said Hillar Aarelaid, head of the Computer Emergency Response Team (CERT), which was set up last year to tackle "security incidents" in Estonia's .ee Internet domain. "Last Friday, we hoped it was all over but the new massive attack against one of the biggest banks on Tuesday showed we were too optimistic. "Cyber-attacks also have been launched against banks, newspapers, schools and many other institutions," Aarelaid told AFP. Estonia's second-biggest bank, Swedish-owned SEB Eesti Uhispank, was forced Tuesday to block access from abroad to its online banking service after it came under "massive cyber-attack", a spokesman for the bank, Silver Vohu, said. Hansapank, the biggest bank in Estonia, came under attack last week. The first wave of cyber-attacks against official websites fizzled out after Estonian Foreign Minister Urmas Paet publicly declared that many of the attacks had originated from Russian government computers. The new wave of attacks was coming from "around the world," Aarelaid said. "Even computers as far away as Vietnam have been involved in cyber-attacks against Estonia. The attackers try to restrict access to Estonian websites and in some cases have tried to change the information on the website they have attacked," Aarelaid said. The attacks might originate in computers around the world, but they still have Russian roots, he said. "The net has been full of Russian language instructions on how to inflict damage on Estonian cyber-space," Aarelaid said. Cyber-attacks are such a new phenomenon that there are no universal rules available on how to strike back at them. "We haven't yet defined what can be considered to be a cyber-attack, or what are the rights of member states and the obligations of EU and NATO in the event such attacks are launched," Aaviksoo said. "The EU and NATO need to work out a common legal basis to deal with cyber attacks. For example, we have to agree on how to tackle different levels of criminal cyber-activities, depending on whether what we are dealing with is vandalism, cyber-terror or cyber-war," he said. Aarelaid agreed: "The unprecedented cyber-attacks against Estonia have clearly indicated we need much stronger regulations in this area. "You could compare this with what our great-grandparents faced when cars first started to appear on the streets. Eventually, there were so many of them that new, strict rules needed to be implemented." The cyber-attacks against Estonia were launched after the authorities here moved a monument to Soviet soldiers who fought fascism in World War II, from the city block where it stood in central Tallinn to a military cemetery in a quiet neighbourhood of the capital. Russians see the monument as a sacred memorial to the millions of Soviet soldiers who died in the war, while to Estonians it is a reminder of 50 years of Soviet occupation. The removal of the monument drew the ire of Moscow and triggered riots in Tallinn by members of Estonia's ethnic Russian minority that makes up around one-quarter of the Baltic republic's population of 1.34 million. It also set off the cyber-attacks, which have drawn condemnation from the European Union, individual EU member states, the United States and NATO. NATO defence ministers will discuss cyber defence at a meeting in Brussels in June. (c) 2006 AFP _____________________________________________________ Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier technical event for ICT security experts. Featuring 30 hands-on training courses and 90 Briefings presentations with lots of new content and new tools. Network with 4,000 delegates from 70 nations. Visit product displays by 30 top sponsors in a relaxed setting. Rates increase on June 1 so register today. http://www.blackhat.com