Like border security, network security is a relative term. Neither can be completely closed off to persons or governments that want to break in and commit acts of terrorism or espionage. In fact, computer networks are intrinsically more vulnerable because intrusion attempts can be automated and go undetected until it’s too late.

No practical reason exists for any network containing sensitive information or controls to be connected to the Internet where it is wide open to the world, including a nation’s adversaries. The same goes for utility grids; no rationale can be given for leaving nuclear plants open to hackers. Imagine Al-Qaeda operatives from anywhere in the world remotely breaching network firewalls around Three Mile Island, then mapping start-up and shut-down protocols looking for a means to trigger a meltdown of the core?

Any seasoned network security analyst will admit that it is impossible to prevent intrusion into a computer network that is interconnected to the public Internet. With the stakes so high, why is any U.S. government, military or utility network interconnected to the public Internet, the latter providing an onramp for the Chinese, Iranian and Russian militaries, as well as Osama bin-Laden’s fanatical worshipers-of-evil?

In the age of terrorism, it is the duty of government agencies and utilities to develop proprietary network transport systems, using armored fiber optic cables and hardened routers and switches that are impenetrable without physical interconnection by the intruder. U.S. military bases and intelligence agencies have been interconnected by such secure networks for decades using leased (closed) lines from AT&T.

During the 1990’s, countless Achilles heels were introduced into government networks in the form of gateways to provide interconnection with the public Internet. The gateways allow remote access to otherwise closed networks by offsite personal – and the enemy. Remove the gateways – remove the threat.

It is foolhardy to think that government can do a better job than the private sector at securing computer networks interconnected to the public Internet. A recent wake-up call occurred when the Chinese military hacked into a “secure” defense contractor network and stole virtually all classified data on America’s fifth-generation fighter aircraft, the F-22 Raptor. The program was subsequently cancelled.

The lesson, so far unlearned, is that the bad guys will walk through whatever door is left open to harm our families. Close them out now before it’s too late.

Reference:  The Cyber Menace, Rebecca Grant, Air Force Magazine