![](\"https:\/\/i.pinimg.com\/736x\/5e\/4f\/89\/5e4f891775d1e973a287eee7f4bf2b7a--cajun-chef-chef-quotes.jpg\")
In this business, every once in a while you hear somebody bring up the “digital pearl harbor” – sometimes you hear it as “cyber pearl harbor” or (also occasionally, to convey a slightly different connotation) the “digital (or cyber) 911”.<\/p>\nIn this business, every once in a while you hear somebody bring up the “digital pearl harbor” – sometimes you hear it as “cyber pearl harbor” or (also occasionally, to convey a slightly different connotation) the “digital (or cyber) 911”.<\/p>\n
This is “a thing” that comes up from time to time and has for years. \u00a0And, in fact, today we have an article over on Naked Security<\/a> posing the question “how likely is it?” to occur. \u00a0The gist of the article is that it’s been 20 years since someone coined the phrase (which, by the way, seems spurious to me – I contend it’s been maybe longer since the original inception, but whatevs). \u00a0They spend the article discussing the relative probability of this hypothetical event occurring, and reach what seems to be the general conclusion that it’s improbable but maybe could happen someday. \u00a0Not sure how much new information that is, but I get it that it’s productive to discuss.<\/p>\n This could very well be true — i.e. that the “cyber-zombie-apocalypse” is unlikely in the next few years (maybe, could be, who knows). \u00a0But here’s the deal: the question as discussed doesn’t specify a time horizon. \u00a0The problem with that is that it leaves something really important out of the discussion. \u00a0Here’s what I mean. \u00a0If I were to ask you, “what is the probability that pigs will grow wings and fly?”, you’d say that’s pretty unlikely, right? \u00a0Or “how likely is it that a team of rabid lemurs will win the super bowl?” \u00a0Also, unlikely. \u00a0But now assume an infinite time horizon and a non-static, cyclical universe. \u00a0In that case, the answer (to both questions) is absolutely, provably, “100%.” \u00a0The same answer as the typewriter monkeys coming up with Hamlet<\/a>. \u00a0So really, there’s something off about the question that we’re asking if we leave out when. \u00a0Meaning, It’s not “will there be a cyber-pearl-harbor?” but instead, “when will it occur?” \u00a0Because it eventually will – (channeling my best Justin Wilson) “I Gerr-on-tee.”<\/p>\n So let’s assume for the minute that we accept that logic and we assume that this will eventually occur. \u00a0Is it a short term or a long term thing? \u00a0Can we point to factors that are likely to make it more or less likely? \u00a0I think we can. \u00a0Factors that make it more likely are: 1) belligerent\/bellicose digital “powers” such as nation states (e.g. Russia, China, North Korea), 2) an atmosphere rife with vulnerabilities and other “low hanging fruit” critical infrastructure issues, 3) issues with security posture at points that support critical infrastructure, 4) lack of guidance for those points about how to improve and lack of regulatory oversight for same, and 5) vulnerability to single points of critical infrastructure failure. \u00a0Sound familiar?<\/p>\n Look, I hate FUD. \u00a0Anybody who knows me knows this to be true. \u00a0However, it seems to me that anything that we can do to make the “digital pearl harbor” more likely we have already invested heavily in. \u00a0So I don’t know how one can support the conclusion that it’s unlikely. \u00a0In fact, I’m at the point of speculating why it is that it hasn’t happened already. \u00a0In fact, I think the main motivator (at least for a nation state actor) about why it hasn’t happened yet is because we’re all in the same boat. \u00a0Retaliation is likely to be swift and in kind – kind of like “mutually-assured cyber hijinx” or whatever.<\/p>\n Anyway, tl;dr is that this thing is absolutely coming. That’s not FUD, it’s math. \u00a0Ergo, it seems to me that we should prepare for the eventuality just the same way that we prepare for other attacks. \u00a0If we can’t scrape together the national will to at least address a few of the points that make it more likely (see above), maybe we could do just a little bit of prep? \u00a0A touch of oversight? \u00a0A soupcon of getting it done? \u00a0Or is that asking too much?<\/p>\n","protected":false},"excerpt":{"rendered":" In this business, every once in a while you hear somebody bring up the “digital pearl harbor” – sometimes you hear it as “cyber pearl harbor” or (also occasionally, to convey a slightly different connotation) the “digital (or cyber) 911”. This is “a thing” that comes up from time to time and has for years. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[4],"tags":[39],"class_list":["post-558","post","type-post","status-publish","format-standard","hentry","category-security","tag-digital-pearl-harbor"],"_links":{"self":[{"href":"https:\/\/securitycurve.com\/index.php?rest_route=\/wp\/v2\/posts\/558","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/securitycurve.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/securitycurve.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/securitycurve.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/securitycurve.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=558"}],"version-history":[{"count":0,"href":"https:\/\/securitycurve.com\/index.php?rest_route=\/wp\/v2\/posts\/558\/revisions"}],"wp:attachment":[{"href":"https:\/\/securitycurve.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=558"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/securitycurve.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=558"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/securitycurve.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=558"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}