NATO cyber defense center fights tide of hacking attempts


Crouched behind banks of computer screens flashing data, NATO analysts try to stay ahead of millions of suspected attempts to hack the Western alliance’s computer networks, as cyber defense moves to the center of NATO operations.





Some attacks against NATO’s computer networks have been successful, he said, although he declined to say whether hackers had succeeded in stealing confidential data.

The threats come from hacking activists, criminals and “hostile nation states”, although West declined to say which countries are suspected.




Analysts among the cyber defense centre’s 130-strong staff from 15 nations say the attacks on NATO defense systems are growing in number and sophistication.
“The majority of the attacks are conducted by ‘spear phishing’ emails,” said Andrzej Dereszowski, a Polish engineer at the center, referring to attempts by hackers to get hold of passwords or other confidential information by posing as a legitimate organization.

In the case of a serious hacking attempt, the centre’s analysts will analyze malicious code used and try to find who is behind the attempt, West said.

If it needs help from police, NATO may tip off the country concerned, but it will not go after the hacker itself, he says. NATO’s remit in the cyber area is purely defensive, not offensive.

NATO was alerted to the threat of cyber attacks in 2007, when Estonia’s Internet network was paralyzed by an electronic attack that Estonia blamed on Russia.

Since then, NATO has given a much higher priority to cyber defense. NATO ministers agreed at a Brussels meeting last month to strengthen the organization’s cyber defenses.

The alliance is beefing up the capabilities of the Mons cyber defense center, including creating rapid reaction teams to help protect NATO’s own computer systems and an around-the-clock response to incidents.