In March 2022, the Biden administration announced that cyberattacks from Russia were imminent.\u00a0 \u00a0Although this is untrue, it shines a light on how unprepared the federal government and the rest of the country are for a nation-state attack.<\/p>\n\n\n\n
A nation-state attack is exponentially more serious than ransomware.\u00a0 Unlike ransomware, a nation attack does not attempt to extort a fee to restore operations.\u00a0 It simply destroys without regard to consequence.<\/p>\n\n\n\n
More importantly, a nation attack accelerates the frequency and sophistication of the attacks.\u00a0 For over a decade, the United States, Russia, China, North Korea, and Iran have been stockpiling vulnerabilities in the event of a cyberwar.\u00a0This is the reason why a cyber attack is NOT imminent, because Russia knows that America likely has a larger stockpile with more severe consequences.<\/p>\n\n\n\n
When the Americans shut down 3 Iranian nuclear reactors and Russia shut down the Ukrainian electric grid, each of these attacks was accomplished through one vulnerability.\u00a0 The WannaCry virus infected 250K computers in one day through one vulnerability.<\/p>\n\n\n\n
Any nation-state, and most certainly Russia, has dozens if not hundreds of these vulnerabilities.\u00a0 Rather than one vulnerability, a nation-state attack would deploy numerous vulnerabilities simultaneously entering unobstructed into every server and endpoint and any other device that contained critical information in the nation.<\/p>\n\n\n\n
The first line of defense is patch management but this is wholly ineffective because patch management works with known vulnerabilities and these vulnerabilities are unknown by design.<\/p>\n\n\n\n
The next line of defense is the antivirus which has not functioned against modern threats for almost a decade yet consumers and businesses and even the federal government blindly throw money at this obsolete vestige from a prior era of computing.\u00a0So the attack continues.<\/p>\n\n\n\n
The last line of defense is EDR \/ XDR \/ Zero Trust, which attempts to detect and respond to the full-frontal onslaught nation-state attack.\u00a0 Unlike ransomware, a nation attack would overwhelm the SOC (Security Operations Center) and it would quickly fall down.<\/p>\n\n\n\n
This exposes the largest flaw in the nation’s defense.\u00a0 EDR \/ XDR \/ Zero Trust \/ SOC cannot scale to meet a spike in attacks.\u00a0 For a SOC to double in size, would take months, and a nation-state can increase its attack level in seconds.<\/p>\n\n\n\n
As stated earlier, this is not going to happen due to respect for America’s vulnerability stockpile, however, our defense frameworks should consider the possibility of a nation-state attack. Unfortunately, none of the popular frameworks including NIST, MITRE, and even Jack Voltaic comprehend the possibility of a nation-state attack.<\/p>\n\n\n\n
The first nation to contemplate in its national defensive cyber strategy the impact of a national attack will win the cyberwar.\u00a0The first nation to effectively create cyber defenses that negate a flood of vulnerabilities attacks from a nation-state will rise to the top of the world order because it is no longer exposed to a cyber counterstrike.<\/p>\n\n\n\n
There is a solution and that is application whitelisting, AKA allow listing or software asset management.\u00a0 As NIST has been recommending for the last 7 years, application whitelisting should reside between the patch management and the antivirus layers.\u00a0\u00a0In this way, during a nation-state cyberattack, the application whitelisting will strictly allow authorized applications to run.\u00a0During this scenario, the volume on the network is substantial and network performance may deteriorate but it will not fall down. Some new good programs may not run properly until the attacks abate, but the goal is resilience, to withstand the attack.\u00a0\u00a0<\/p>\n\n\n\n
This resilience gives patch management time to identify the vulnerability and remediate the vulnerability so the attacks abate.\u00a0 The nation-state will likely deploy more of its stock of vulnerabilities which should also prove futile.\u00a0At this point, the nation is deploying vulnerabilities faster than it can replenish, until the stockpile falls to zero.\u00a0 Then America wins.\u00a0\u00a0<\/p>\n\n\n\n
Secure the Homeland.<\/p>\n","protected":false},"excerpt":{"rendered":"
In March 2022, the Biden administration announced that cyberattacks from Russia were imminent.\u00a0 \u00a0Although this is untrue, it shines a light on how unprepared the federal government and the rest of the country are for a nation-state attack. A nation-state attack is exponentially more serious than ransomware.\u00a0 Unlike ransomware, a nation attack does not attempt […]<\/p>\n","protected":false},"author":2,"featured_media":65100,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"default","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[6217],"tags":[6196,4901,6195,108,4363,5175,5541,5249],"class_list":["post-65092","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business-security","tag-biden","tag-cyberattacks","tag-nation-state","tag-pc-matic","tag-ransomware","tag-russia","tag-vulnerabilities","tag-vulnerability"],"yoast_head":"\n