UNH calculates cyber attack threat

February 12, 2007

Hackers, terrorists and nations all use computers, but who really is capable of damaging the critical infrastructure of the U.S.? The University of New Hampshire has unveiled the UNH Cyber Threat Calculator, which assesses the level of threat any attacker poses to sectors in the country that rely on information technology.

The UNH Cyber Threat Calculator was developed by researchers at UNH Justiceworks and students, and promises a new method to identify the threats posed to the cyber infrastructure.

“Nation states potentially pose the greatest threat with regard to cyber security to the United States. Clearly Russia and China are two of the top countries because they have more developed capabilities, but it may not be in their interest to use cyber attacks for strategic attacks ends. Both countries have worked on doctrine and there is some evidence that they are incorporating it into their military training as well. However, individuals, political groups, religious groups and organized crime groups also pose ongoing risks and should be considered cyber threats, as well,” says professor Andrew Macpherson, director of Justiceworks.

A cyber attack could have a significant effect on the energy sector; emergency response and preparedness systems; financial services; telecommunications; even agriculture.

Analysts enter data for an organization or country into the calculator, which assigns a value to variables that measure the actor’s intent and technological capabilities.

“What is known is that the threat of a cyber attack is a real and growing concern for industry and the government alike. With approximately 85 percent of the cyber infrastructure owned by the private sector, it’s not just a government problem,” Macpherson says.

UNH expects to make the calculator available to private industry. “These are the people who really need this information and tool to limit their risk,” Macpherson says.