IEEE Security & Privacy · 2011 · 1.9K citations · 0 references
ComputingComputer ScienceCybersecurityComputer SecurityNetwork SecuritySecurity ArchitectureCyber EspionageCyber WarfareCyber-physical SecurityCybersecurity ManagementCybersecurity PolicyCybersecurity StrategyConfidentialityCyber Warfare TacticsDigital EspionageIndustrial EspionageWeaponization
Stuxnet, the first cyber‑warfare weapon, introduced a complex, non‑traditional malware that aimed to physically destroy a military target rather than conduct espionage. The paper investigates how Stuxnet achieved this destructive goal.
Last year marked a turning point in the history of cybersecurity-the arrival of the first cyber warfare weapon ever, known as Stuxnet. Not only was Stuxnet much more complex than any other piece of malware seen before, it also followed a completely new approach that's no longer aligned with conven tional confidentiality, integrity, and availability thinking. Con trary to initial belief, Stuxnet wasn't about industrial espionage: it didn't steal, manipulate, or erase information. Rather, Stuxnet's goal was to physically destroy a military target-not just meta phorically, but literally. Let's see how this was done.