Over the last week, a number of worms have infected many internet users.

Corporations, government computers and private users are all feeling the impact of these worms. To name a few...
Internet worm shuts down county clerk's computers (Christian Co., KY, USA)
Air Canada's check-in system back in operation
AOL, Verizon, Starbucks say they fought 'Sobig' worm
Who is sending us this virus?
Canadian Banks and Businesses infected
NASA's MSFC closes networks to fight computer worm
Worm Forces Maryland Motor Vehicle Administration Offices To Shut Down

Obviously, there is a lot of responsibility on users to make sure they do not make themselves vulnerable to such electronic malice. However, the silence of the Homeland Security Department on this issue stunning. We were force fed the idea that the American government was not structured to properly protect ourselves at home and this department was an absolute necessity. Now this department appears to be doing nothing in the way of spreading information on these worms and how we are to best protect ourselves, nor has there been an outcry from anyone in their ranks to track down these culprits.

Check out the homepage of the DHS: DHS homepage - see any alerts about this worm? Me neither.
Following the 'threats & protection' link in, I found this two month old press release: Ridge Creates New Division to Combat Cyber Threats.

That last link indicates that the DHS does consider responding to worms, viruses, etc. to be part of their duties:

And now...some questions for debate...

1) Do you think these latest worms are acts of cyber terrorism? What is cyber terrorism?

2) Does the Department of Homeland Security have an obligation to spread information and alerts regarding cyber malice/terrorism?

3) Does the Department of Homeland Security have an obligation to seek out and prosecute the culprit(s) who start cyber malice/terrorism?

1.) Well it is cyber terrorism, but I bet these hackers are not arabs.

2.) Imho the Dept of Homeland Security has its head up its own bottom, spending more time searching childrens shoes at the airport. Computer/software manufacturers, providers and users have so far always dealt with this kind of thing themselves and are much more qualified, certainely faster. It should probably stay in their hands and where you can expect the most expedient help.

3.) I think the Feds are in charge of prosecution and actively pursue hackers. It used to be a myth that the FBI/CIA would hire you if you were good enough but at the last Defcon Black Hats gig in Vegas I heard (third party) this is no longer the case, you will be charged and as part of sentence not able to touch a computer for several years.

See above regarding the Department of Homeland Security. I'm less certain here, but I would imagine that such prosecutions should originate with the Department of Justice. Of course, with the inmates currently running the asylum, what anyone should be doing about anything is anybody's guess. I wouldn't expect anything to be done at all about cyber-crime on the federal level until we have a new administration - unless, of course, it starts seriously disrupting the business of major campaign donors.

It's a matter of priorities. If the cyber attack is such that it threatens our security in a significant way then Homeland Security should vigorously investigate. The blackout would be an excellent example. Anything much less and I wouldn't want them to spend their time and resources on it. Differentiating between the two is no easy matter though.

When you realize the scope of the problems faced by security organizations such as this, you are less likely to snipe at everything they do or don't do. And much like Monday morning quarterbacks who never held a football in their puny little hands, the loudest criticisms come from those who have no experience in the area.

1) Do you think these latest worms are acts of cyber terrorism?
Yes

What is cyber terrorism?
Malice disruption and corruption of anothers computer and internet connectivity.

2) Does the Department of Homeland Security have an obligation to spread information and alerts regarding cyber malice/terrorism?
Yes, the internet and the computer world are so intergrated into society that the breakdown of networks can seriously hurt our society on several levels.

3) Does the Department of Homeland Security have an obligation to seek out and prosecute the culprit(s) who start cyber malice/terrorism?
Yes!



Was Timothy McVehy an Arab?

I am sure The Homeland Security Department is coordinating with the FBI & CIA
on this issue. Give them the benefit of the doubt



I'm looking on the CIA website for info of the hiring of hackers

I think the CIA still hires hackers who are good enough but will only throw those in jail that kill people in their hacking binges (for example: They hack in to a hospital pharmacy and change someone's med dosage and kill a patient)


Jaime:



Yes. They effect businesses and thus causes economic damage. So yes, this can be considered terrorism.