2 ms·
>Attribution of cyberattacks is hard, borderline impossible, without non-technical corroborating evidence. Intelligence agency budget increases and sky-high co
by crdoconnor 9y ago
>Attribution of cyberattacks is hard, borderline impossible, without non-technical corroborating evidence.
Intelligence agency budget increases and sky-high consultancy fees are going to be more forthcoming when it's "a scary nation-state" behind an attack rather than a couple of teenagers or a band of cyber-criminals.
Also, Russia, after North Korea, does seem to be everybody's favorite bogeyman these days.
Intelligence agencies and security consultants will have to balance potential reputation risk as well, of course (if it comes out that they were wrong it's quite embarrassing), but if attributional evidence is weak then it pays to pick the bogeyman.
- chatmasta 9y agoYour point about consultants is an important one, and demonstrates a moral hazard of outsourcing intelligence work. CrowdStrike is especially guilty of this. It seems whenever there's a cyber attack, CrowdStrike is there to attribute it to whichever bogeyman is most convenient today.