Cyber warfare is becoming an increasingly common method for nations to engage in conflict without direct military confrontation. As technology advances faster than international laws and regulations, cyber attacks present a new threat landscape. Nations are investing heavily in growing their cyber warfare capabilities due to concerns about vulnerabilities and a desire to gain strategic advantages over rivals. However, this cyber arms race risks escalating conflicts and reducing overall digital security.

1. CYBER
WARFARE
Hafsa Farooqi
Maira Asif
Shizza Masood
Ayesha Rasheed

2. • Over the last decade high profile cyber attacks have steadily increased
among national governments such as United states, China, Russia, Israel
and even north Korea.
• As cyber ware fare becomes the battle field of choice for developed
nations, governments are able to launch direct attacks on each other in
secrecy and without the risk of causing physical harm.
• But computing technology is advancing faster than international
regulations and policies are prepared to deal with such as cyber weapons
offer a new method of nation to wage war without entering into an actual
military confrontation this trend have resulted in new global threats.

3. • The benefits of technological advances are countless the increasing
reliance on computers opens the malicious agents to disrupt or destroy
vital data network and services and as a result national organizations are
going beyond the traditional land air and naval defenses.
• In early 2017 a file of CIA was released by the websitesWikiLeaks
contained over 7000 pages of texts and 900 files of confidential and highly
sensitive information that belongs to United states.

4. • In many cases the computer systems are not the final target -- they are being
targeted because of their role in managing real-world infrastructure like airports or
power grids. Knock out the computers and you can shut down the airport or the
power station as a result.
• There are plenty of grim cyber warfare scenarios available. Perhaps attackers start
with the banks: one day your bank balance drops to zero and then suddenly leaps up,
showing you've got millions in your account.Then stock prices start going crazy as
hackers alter data flowing into the stock exchange.The next day the trains aren't
running because the signaling stops working, and you can't drive anywhere because
the traffic lights are all stuck on red, and the shops in big cities start running out of
food. Pretty soon a country could be reduced to gridlock and chaos, even without the
doomsday scenarios of hackers disabling power stations or opening dams.

5. Types of Cyber security Attacks
• CommonTypes of Cyber securityAttacks.
• Phishing Attacks.
• SQL Injection Attacks (SQLi)
• Cross-Site Scripting (XSS)
• Man-in-the-Middle (MITM) Attacks.
• Malware Attacks.
• Denial-of-Service Attacks.
• Spear Phishing Attacks.

6. Beginning of cyber warfare
Stuxnet is a computer worm that targets industrial control systems, but is most
famous for most likely being the first genuine cyber weapon, in that it was
designed to inflict physical damage.
It was developed by the US and Israel (although they have never confirmed this) to
target the Iranian nuclear programme.The worm, first spotted in 2010, targeted
specific Siemens industrial control systems, and seemed to be targeting the
systems controlling the centrifuges in the Iranian uranium enrichment project --
apparently damaging 1,000 of these centrifuges and delaying the project, although
the overall impact on the programme is not clear.
Stuxnet was a complicated worm, using four different zero-day exploits and likely
took millions of dollars of research and months or years of work to create.

7. • operation Olympic games or stuxnet.
• Iranian struck back at united states by taking down online banking services
for dozens of the largest US financial institutes, costing them tones of
millions of dollars in addition to infiltrating the control system of a small
dam in newYork.

8. Ukraine case
• Ukraine power grid cyber attack took place on 23 December 2015 and is
considered to be the first known successful cyber attack on a power grid.
Hackers were able to successfully compromise information systems of
three energy distribution companies in Ukraine and temporarily disrupt
electricity supply to the end consumers.
• 30 substations were switched off, and about 230 thousand people were
left without electricity for a period from 1 to 6 hours.
• According to representatives of one of the companies, attacks were
conducted from computers with IP addresses allocated to the Russian
Federation.

9. Edward Snowden
XKeyscore is a tool the NSA uses to search "nearly everything a user does on the Internet"
The NSA has at its disposal an elite hacker team codenamed "Tailored AccessOperations" (TAO) that hacks into
computers worldwide, infects them with malware and does the dirty job when other surveillance tactics fail.
The NSA intercepts and stores all phone calls made in the Bahamas and Afghanistan through a program called
MYSTIC, which has its own snazzy logo.
reports described PRISM as the NSA's program to directly access the servers of U.S tech giants like Google, Facebook,
Microsoft and Apple, among others.
The British spy agency, the Government Communications Headquarters (GCHQ), taps fiber optic cables all over the
world to intercept data flowing through the global Internet, we learned.The GCHQ works closely with the NSA,
sharing data and intelligence in a program that's codenamedTempora.
The German newsweekly Der Spiegel revealed that the NSA targets at least 122 world leaders.
Other stories over the past years have named specific targets like German Chancellor Angela Merkel, Brazil's President
Dilma Roussef, and Mexico's former President FelipeCalderon, the French Foreign Ministry, as well as leaders at the
2010 G8 and G20 summits inToronto.

10. Why are governments investing in cyber warfare right now?
• Unlike traditional military attacks, a cyber attack can be launched instantaneously from any
distance, with little obvious evidence of any build-up, unlike a traditional military operation.
Such as attack would be extremely hard to trace back with any certainty to its perpetrators,
making retaliation harder.
• As a result governments and intelligence agencies worry that digital attacks against vital
infrastructure -- like banking systems or power grids -- will give attackers a way of bypassing a
country's traditional defences, and are racing to improve their computer security.
• However, they also see the opportunity that cyberwarfare capabilities bring, offering a new
way to exert influence on rival states without having to put soldiers at risk.The fear of being
vulnerable to the cyberweapons of their rivals plus a desire to harness these tools to bolster
their own standing in the world is leading many countries into a cyber arms race.

11. Social Media
as a weapon
• https://www.youtube.com/watch?v=mrnXv-g4yKU
• Cambridge Analytica Scandal
• https://www.youtube.com/watch?v=q1Hl9bRzwEs
• Russia hacking US accounts

12. What is theTallinn Manual?
• One reason that the legal status of cyberwarfare has been blurred is that there is no
international law that refers to cyberwar, because it is such a new concept. But this doesn't
mean that cyberwarfare isn't covered by law, it's just that the relevant law is piecemeal,
scattered, and often open to interpretation.
• This lack of legal framework has resulted in a grey area that some states are very willing to
exploit, using the opportunity to test out cyberwar techniques in the knowledge that other
states are uncertain about how they could react under international law.
• More recently that grey area has begun to shrink. A group of law scholars has spent years
working to explain how international law can be applied to digital warfare.This work has
formed the basis of theTallinn Manual, a textbook prepared by the group and backed by the
NATO-affiliated Cooperative Cyber Defence Centre of Excellence (CCDCoE) based in the
Estonian capital ofTallinn, from which the manual takes its name.

13. • The first version of the manual looked at the rare but most serious
cyberattacks, the ones at the level of the use of force; the second edition
released tried to build a legal framework around cyberattacks that do not
reach the threshold of the use of force.
• Aimed at legal advisers to governments, military, and intelligence
agencies, theTallinn Manual sets out when an attack is a violation of
international law in cyberspace, and when and how states can respond to
such assaults.
• The manual consists of a set of guidelines -- 154 rules -- which set out
how the lawyers think international law can be applied to cyberwarfare,
covering everything from the use of cyber mercenaries to the targeting of
medical units' computer systems.

14. Is cyberwarfare escalation a concern?
• There is a definite risk that we are at the early stages of a cyberwar arms
race: as countries realise that having a cyberwarfare strategy is necessary
they will increase spending and start to stockpile weapons, just like any
other arms race.That means there could be more nations stockpiling
zero-day attacks, which means more holes in software not being patched,
which makes us all less secure. And countries with stockpiles of cyber
weapons may mean cyber conflicts are able to escalate quicker. One of
the big problems is that these programmes tend to be developed in secret
with very little oversight and accountability and with mirky rules of
engagement.