1. Headline
  1. Headline
By
updated 9/8/2011 7:18:20 PM ET 2011-09-08T23:18:20

The horrific Sept. 11, 2001, terrorist attacks involved weaponized airliners that were hijacked using brutal, low-tech tactics. But the rapid advances in technology of the last 10 years may mean that tomorrow's threats to planes and automobiles could come not from armed terrorists, but from stealthy hackers.

The connection between terrorist organizations and cybercriminals exists, say experts, not only in online underground marketplaces where hacking tools are sold, but also in areas of recruitment and training.

Some unfriendly countries are working on so-called cyber warfare programs, and there are also "al-Qaida cells that are acting as training centers for hackers," said Alan Paller, director of research at the SANS Institute, an information-security training firm based in Bethesda, Md.

  1. Related 9/11 content
    1. Iconic figures: Where are they now?
    2. Last woman rescued: ‘I can’t believe I’m here’
    3. Preserving stories, voices of 9/11 forever
    4. How 9/11 changed Pakistan
    5. Firefighter: Pride in his heart, dust in his lungs
    6. American Muslims come of age in post-9/11 era
    7. Inside the ‘bigger, better' World Trade Center 
    8. Remains of the day: Relatives honor dead with relics
    9. Twins born days after 9/11 reflect on dad's loss
    10. What the world looked like on Sept. 10, 2001
    11. How 9/11 changed msnbc.com readers' lives
    12. 9/11 aftermath: Covering the invasion of Afghanistan
    13. Muslim travelers still saddled with 9/11 baggage
    14. Photographers revist 9/11: ‘Horrific’

Those attackers will have more targets than ever, security firm McAfee noted in a report. The report cited the mobile-phone maker Ericsson's estimate that by 2020, there will be roughly 50 billion devices connected to the Internet, including airport kiosks, industrial control systems and remote network-monitoring devices.

The perceived threat to these and other systems is rising.

Mounting evidence
Last week, the United States Department of Homeland Security (DHS) issued a security bulletin from the National Cybersecurity and Communications Integration Center warning the security community about new tools and new recruitment techniques being used by various hacker groups.

The report refers to such organizations as soliciting help from disaffected employees, as well as using more nefarious methods, including forcing people to cooperate with hackers using "unwilling coercion through embarrassment or blackmail."

While the possibility of actually incapacitating an individual plane and causing it to crash via computer remains remote, say experts, hackers can disrupt flights and create potentially life-threatening situations.

In 2004, malware known as the Sasser worm disrupted flights when it infected systems that Delta Air Lines relied upon. Since then, the tools for creating such havoc have become more sophisticated — and more accessible.

The DHS warning included references to new tools being used by politically motivated "hacktivist" groups such as Anonymous. Powerful administrative tools, such as the " Low Orbit Ion Cannon," have been repurposed to bring down systems using distributed denial-of-service attacks. While such attacks are rudimentary, they could cause serious problems if directed at critical transportation systems.

Gaping vulnerabilities
Such networks remain frighteningly vulnerable, say law enforcement watchers. As one example, a congressional report on cyber terrorism cited the 2002 case in which a major weakness in the Simple Network Management Protocol (SNMP) was discovered that could have been exploited to bring down "major portions of the Internet."

  1. More from TODAY.com
    1. Busted! 81 percent of parents steal Easter candy from their kids

      This Easter, a chocolate bunny will make its way into thousands of children’s baskets. His ears will be the first thing to...

    2. Young heroes: Twin kids fight off carjacker
    3. Happy birthday! Mustang turns 50
    4. Ticks that carry Lyme disease infecting more dogs, report says
    5. Clinton papers reveal some political irony

The vulnerability was kept a secret while security firms worked to protect telecommunications equipment around the world. According to FBI reports at the time, if the systems had not been patched, they could have been used to interrupt control information exchanged between ground and aircraft flight control systems.

Similar outages in telecommunications systems and embedded systems could be used to disrupt train and track switching information.

"For example, some rail systems are based on SCADA [supervisory control and data acquisition] control systems," said Tim Armstrong, a malware researcher at Moscow-based Kaspersky Lab. "These are similar to the types of control systems that were compromised in the Stuxnet attacks in 2010."

But the newest and most unpredictable weaknesses today appear to be in the connected systems embedded in late-model cars.

Several vulnerabilities in remote start, locking, tracking and other car systems have already been demonstrated. Computer security researchers at iSec Partners, for example, have shown how they can unlock a car and turn on its engine using a laptop computer.

The researchers managed this hack with a few hours' work tapping into the car's wireless connections. Another security expert has demonstrated how to tap into a police car's camera and video recorder.

Such attacks already have a name: war texting. Mobile car apps that use a driver's smartphone are potential targets in many of these cases as well, according to McAfee's report, "Caution: Malware Ahead."

Analysts at the firm stress that while no such cases have yet occurred, critical car systems could be vulnerable. One example: remote vehicle immobilization and slow-down systems, such as those used in GM's OnStar, could be hacked. Though they were intended as theft deterrents, if control of these systems fell into the wrong hands, it could lead to disastrous results.

© 2012 SecurityNewsDaily. All rights reserved

Interactive: In the wake of 9/11

Discuss:

Discussion comments

,

Most active discussions

  1. votes comments
  2. votes comments
  3. votes comments
  4. votes comments

More on TODAY.com

  1. TODAY

    video Duchess Kate climbs into fighter jet — wearing a dress and heels!

    4/19/2014 3:42:12 PM +00:00 2014-04-19T15:42:12
  1. TODAY

    video Young heroes: Twins fight off carjacker

    4/19/2014 2:47:18 PM +00:00 2014-04-19T14:47:18
  1. Dylan Dreyer / TODAY

    The gang is back together! Prove you’re a big fan of Weekend TODAY

    4/19/2014 11:14:33 AM +00:00 2014-04-19T11:14:33
  1. Jacek Turczyk / EPA file

    Busted! 81 percent of parents steal Easter candy from their kids

    4/19/2014 3:12:08 PM +00:00 2014-04-19T15:12:08
  1. TODAY

    video Underwater search for missing jet may end in week

    4/19/2014 1:57:46 PM +00:00 2014-04-19T13:57:46