Cyberterrorism After Stuxnet

Terrorists are known to use the Internet for communications, planning, recruitment, propaganda, and reconnaissance. They have shown interest in carrying out cyberattacks on U.S. critical infrastructures, although no such serious attacks are known pub­licly to have occurred. The discovery of the Stuxnet malware in July 2010, and its analysis over the next several months, was widely believed to have been a landmark event in cybersecurity, because it showed that cyberattacks against industrial control systems, hypothesized for a long time, are actually possible. After Stuxnet, there were public concerns that terrorists might be encouraged to acquire capabilities for similar cyberattacks.

This monograph examines cyberterrorism before and after Stuxnet by addressing questions

1. Motive—Are terrorists interested in launching cyberattacks against U.S. critical infrastructures?

2. Means—Are terrorists building capabilities and skills for cyberattacks?

3. Opportunity—How vulnerable are U.S. critical infrastructures?

It is noted that no serious cyberterrorism attacks have occurred after Stuxnet. This can be explained from a cost-benefit perspective that has not changed since Stuxnet. It can be argued that U.S. policies can really address vulnerabilities only by strengthening defenses of critical infrastructures.

Related

Prospects for the Rule of Law in Cyberspace is available  

Legality in An Adversary View is available  

Malevolent Actors, Criminal Opportunities, and Strategic Competition is available  

The Rise of Identity, Information, and the Individualization of Modern Warfare can be found  

NATO Cyberspace A Strategic and Operational Evolution can be found