<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title><![CDATA[[SecurityRatty] tag: censor]]></title>
    <link>http://securityratty.com/tag/censor</link>
    <description></description>
    <pubDate>Wed, 09 Jan 2008 19:02:38 +0000</pubDate>
    <generator>iRatty Engine</generator>
    <docs>http://blogs.law.harvard.edu/tech/rss</docs>
    <item>
      <title><![CDATA[The Cyber Storm II Cyber Exercise]]></title>
      <link>http://securityratty.com/article/52403bcfe6f0d38ca6772c9f940745a7</link>
      <guid>http://securityratty.com/article/52403bcfe6f0d38ca6772c9f940745a7</guid>
      <description><![CDATA[I first blogged about the &quot;Cyber Storm&quot; Cyber Exercise aiming to evaluate the preparedness for cyber attacks of several governments two years ago, and pointed out that





Frontal attacks could...]]></description>
      <content:encoded><![CDATA[<a href="http://bp2.blogger.com/_wICHhTiQmrA/R_T5xF281NI/AAAAAAAABh4/ZSi6L-rCdVA/s1600-h/cyberstorm_2008.png"><img id="BLOGGER_PHOTO_ID_5185043692791846098" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/_wICHhTiQmrA/R_T5xF281NI/AAAAAAAABh4/ZSi6L-rCdVA/s200/cyberstorm_2008.png" border="0" /></a>I first blogged about the <a href="http://ddanchev.blogspot.com/2006/09/results-of-cyber-storm-exercise.html">"Cyber Storm" Cyber Exercise</a> aiming to evaluate the preparedness for cyber attacks of several governments two years ago, and pointed out that :<br /><br /><div><div><div><div>"<em>Frontal attacks could rarely occur, as cyberterrorism by itself wouldn't need to interact with the critical infrastructure, it would abuse it, use it as platform. However, building confidence within the departments involved is as important as making them actually communicate with each other.</em>"</div><br /><div>And while I'm still sticking to this statement, <a href="http://ddanchev.blogspot.com/2007/09/chinas-cyber-espionage-ambitions.html">a year later</a> I also pointed out that :</div><br /><div></div><div>"<em>In a nation2nation cyber warfare scenario, the country that's relying on and empowering its citizens with cyber warfare or CYBERINT capabilities, will win over the country that's dedicating special units for both defensive and offensive activities, something China's that's been copying attitude from the U.S military thinkers, is already envisioning.</em>"</div><br /><p><a href="http://bp0.blogger.com/_wICHhTiQmrA/R_UK6V281OI/AAAAAAAABiA/pPkSIHRnxxo/s1600-h/Hankuang_22.jpg"><img id="BLOGGER_PHOTO_ID_5185062543403308258" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R_UK6V281OI/AAAAAAAABiA/pPkSIHRnxxo/s200/Hankuang_22.jpg" border="0" /></a>Morever, Taiwan, too, copycating the U.S, performed a cyber warfare exercise codenamed "Hankuang No. 22" (Han Glory) in 2006 as well, fearing cyber warfare attacks from China.</p><p>The new "Cyber Storm" Cyber Exercise, is particularly interesting, especially the initiative to measure the response time to an OPSEC violation in the form of <a href="http://www.engadget.com/2008/01/31/pentagons-cyber-storm-war-game-simulates-blogger-leaks-train/">sensitive information leaking on blogs</a>. A very ambitious initiative, given the many other distribution channels, which when combined in a timely manner make it virtually impossible to shut down and censor, the leaked material. What if it gets spammed? Moreover, what's a leak to some, is transparency into the process for others. <a href="http://www.washingtonpost.com/wp-dyn/content/article/2008/03/07/AR2008030701157.html">Cyber Storm II</a> is <a href="http://www.us-cert.gov/reading_room/infosheet_CyberStormII.pdf">already a fact</a> whatsoever :<br /></p><p>"<em>At a cost of roughly $6.2 million, Cyber Storm II has been nearly 18 months in the planning, with representatives from across the government and technology industry devising attack scenarios aimed at testing specific areas of weakness in their respective disaster recovery and response plans. 'The exercises really are designed to push the envelope and take your failover and backup plans and shred them to pieces,' said Carl Banzhof, chief technology evangelist at McAfee and a cyber warrior in the 2006 exercise. Cyber Storm planners say they intend to throw a simulated Internet outage into this year's exercise, but beyond that they are holding their war game playbooks close to the vest.</em>"<br /></p><div><a href="http://bp1.blogger.com/_wICHhTiQmrA/R_UNjl281QI/AAAAAAAABiQ/f26QIMcJc_4/s1600-h/cyberstorm_cyberexercise.jpg"><img id="BLOGGER_PHOTO_ID_5185065451096167682" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp1.blogger.com/_wICHhTiQmrA/R_UNjl281QI/AAAAAAAABiQ/f26QIMcJc_4/s200/cyberstorm_cyberexercise.jpg" border="0" /></a>The main issue with this type of cyber exercises is that starting with wrong assumptions undermines a great deal of the developments that would follow. Cyber warfare is just an extension of the much broader information warfare as a concept, namely, Lawfare, Econonomic Warfare, PSYOPS, to ultimately end up in <a href="http://ddanchev.blogspot.com/2007/12/combating-unrestricted-warfare.html">an unrestricted warfare stage</a>. Subverting the enemy without fighting with him, that's what offensive cyber warfare is all about, even if you take <a href="http://ddanchev.blogspot.com/2007/10/peoples-information-warfare-concept.html">people's information warfare concept</a> as an example. It's a government tolerated/sponsored activity, whereas the government itself is suverting the enemy without fighting him, but forwarding the process to their collectivism minded citizens. The strong lose, since the adversary is abusing the most unprotected engagement point, thereby underminig the investments made into securing the most visible touch points. A couple of key points to consider in respect to the cyber exercise modelling weakness :</div><br /><div></div><div>- White hats pretending to be black hats simply doesn't work</div><div>- Frontal attack against critical infrastructure is pointless, insiders are always there to "take care"</div><div>- Passive cyber warfare such as <a href="http://ddanchev.blogspot.com/2007/04/osint-through-botnets.html">gathering OSINT</a> and conducting espionage through botnets</div><div>- <a href="http://ddanchev.blogspot.com/2008/02/malware-infected-hosts-as-stepping.html">Cyber warfare tensions engineering</a> through the use of stepping stones</div><div>- Stolen and manipulated data is more valuable than destroyed data</div><div>- Lack of pragmatic blackhat mentality scenario building intelligence capabilities</div><div>- Unrestricted Warfare must be first understood as a concept, than anticipated as the real threat</div><br /><div><a href="http://bp2.blogger.com/_wICHhTiQmrA/R_USP1281RI/AAAAAAAABiY/CFeVojnuRTc/s1600-h/cyberterrorism_deception.jpg"><img id="BLOGGER_PHOTO_ID_5185070609351890194" style="FLOAT: left; MARGIN: 0px 10px 10px 0px; CURSOR: hand" alt="" src="http://bp2.blogger.com/_wICHhTiQmrA/R_USP1281RI/AAAAAAAABiY/CFeVojnuRTc/s200/cyberterrorism_deception.jpg" border="0" /></a>From a strategic perspective, securing and fortifying what you have control of is exactly what the bad guys would simply bypass in their attack process, among the first rules of unrestricted warfare is that there're no rules with the idea to emphasize on the adaptation and going a step beyond the adversary's defense systems in place.</div></div></div></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=yxAKG2G"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=yxAKG2G" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=NwSGdjG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=NwSGdjG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=V6zPL8g"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=V6zPL8g" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=jhlbEEg"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=jhlbEEg" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=2NjIXFG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=2NjIXFG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=cUqiuoG"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=cUqiuoG" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=SqNNR2g"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=SqNNR2g" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/263460313" height="1" width="1"/>]]></content:encoded>
      <pubDate>Thu, 03 Apr 2008 08:29:03 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cyber warfare">cyber warfare</category>
      <category domain="http://securityratty.com/tag/passive cyber warfare">passive cyber warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare tensions">cyber warfare tensions</category>
      <category domain="http://securityratty.com/tag/offensive cyber warfare">offensive cyber warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare exercise">cyber warfare exercise</category>
      <category domain="http://securityratty.com/tag/warfare">warfare</category>
      <category domain="http://securityratty.com/tag/econonomic warfare">econonomic warfare</category>
      <category domain="http://securityratty.com/tag/cyber warfare attacks">cyber warfare attacks</category>
      <category domain="http://securityratty.com/tag/broader information warfare">broader information warfare</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/263460313/cyber-storm-ii-cyber-exercise.html">The Cyber Storm II Cyber Exercise</source>
    </item>
    <item>
      <title><![CDATA[Blogging for the sake of blogging]]></title>
      <link>http://securityratty.com/article/3fff559cd5bbe563a8a0f1ae64cea35b</link>
      <guid>http://securityratty.com/article/3fff559cd5bbe563a8a0f1ae64cea35b</guid>
      <description><![CDATA[So I guess all of this back and forth on the NAC market and Lockdown has some people getting a little emotional. First, founder #4 (I wasn't even aware there was a founder #4) of Lockdown, Daevid...]]></description>
      <content:encoded><![CDATA[<p>So I guess all of this back and forth on the NAC market and Lockdown has some people getting a little emotional. First, founder #4 (I wasn't even aware there was a founder #4) of Lockdown, Daevid <a href="http://www.stillsecureafteralltheseyears.com/ashimmy/2008/03/babies-and-bath.html#comments">comments</a> on my last post taking me to task for having the audacity to moderate my comments, even after I require people to put in their name and email address in order to comment. I think Daevid is under the impression that I wouldn't publish comments critical of me and that this is cowardly of me. He thinks that this somehow gives me the courage to speak my mind. <br><br>Wow. First of all I guess Daevid has never had a blog before, so is not aware of the blog spam problem that forced many of us bloggers to install moderated comments. As I am sure most of you are aware, but for Daevid's benefit, I don't censor any comments to my blog, in fact I encourage them. I just won't allow spammers to use my blog. It has nothing to do with my courage or cowardice, it is more to do that I think blogs should be two way conversations. It makes blogging fun. It goes to blogging for the sake of blogging, something I am not sure Daevid quite understands. I do understand that this is a difficult time for Daevid. No one likes to see something they helped start not be successful. I am sure he thinks that I was not sensitive enough to the situation there. But anyone who has read my blog for a period of time knows that my views on Lockdown Networks have been pretty consistent for a long time. I am sorry if that ruffles his feathers, but I do blog for the sake of blogging and say what I think. One thing though, if I say something, I always have the courage to say I said it and put my name to it. Whether to your face or on this blog, I am pretty straight forward and don't hide behind anything.<br><br>Now, that leads me to a <a href="http://www.napera.com/blog/?p=17">comment I read on another blog</a> involved here. A really brave guy who signs himself in as James Kirk, leaves a comment and urges another vendor/blogger on NAC to "try and be as neutral to the industry as possible" and not be a new blogger "that blogs for the sake of blogging". He goes on to say some other things that my own paranoia makes me pretty sure he is talking about me. The neutral thing though is a bit naive, don't you think. If someone is blogging on a company blog, don't you think they are going to try and put their company in the best light and not be just neutral? Come on Kirk, you should have learned that in your first day at Starfleet Academy. You as the reader should be the arbiter of what is true, partially true or false. But the naievite of that comment pales in comparison to the second quote. Don't blog for the sake of blogging. James Kirk, to quote one of your friends, that is not logical. Why else should you blog, but for the sake of blogging? Bloggers blog because they want to hear themselves and they want the world to hear them as well. Blogging is singularly an ego-driven sport. Your total lack of understanding of this fact makes it clear why you did not have the courage to use your real name. You just don't get it. James Kirk maybe you should stick to fighting Romulans and leave the blogging to us.</p>
<p><a href="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?a=ReMdZb"><img src="http://feeds.feedburner.com/~a/StillsecureAfterAllTheseYears?i=ReMdZb" border="0"></img></a></p><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=CGi4f2F"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=CGi4f2F" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=Vvj7l7F"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=Vvj7l7F" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=fEAWurF"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=fEAWurF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=E2nJXHF"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=E2nJXHF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=ZECrxtf"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=ZECrxtf" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?a=w5QdmUf"><img src="http://feeds.feedburner.com/~f/StillsecureAfterAllTheseYears?i=w5QdmUf" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~4/256381786" height="1" width="1"/>]]></content:encoded>
      <pubDate>Sat, 22 Mar 2008 22:09:33 +0000</pubDate>
      <category domain="http://securityratty.com/tag/company blog">company blog</category>
      <category domain="http://securityratty.com/tag/blog">blog</category>
      <category domain="http://securityratty.com/tag/bloggers blog">bloggers blog</category>
      <category domain="http://securityratty.com/tag/blog spam">blog spam</category>
      <category domain="http://securityratty.com/tag/daevid comments">daevid comments</category>
      <category domain="http://securityratty.com/tag/sake">sake</category>
      <category domain="http://securityratty.com/tag/daevid">daevid</category>
      <category domain="http://securityratty.com/tag/publish comments critical">publish comments critical</category>
      <category domain="http://securityratty.com/tag/comments">comments</category>
      <source url="http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/256381786/blogging-for-th.html">Blogging for the sake of blogging</source>
    </item>
    <item>
      <title><![CDATA[Terror on the Internet - Conflict of Interest]]></title>
      <link>http://securityratty.com/article/4d84e41b4c977b7092f8d353c8e6895e</link>
      <guid>http://securityratty.com/article/4d84e41b4c977b7092f8d353c8e6895e</guid>
      <description><![CDATA[Insightful article by Greg Goth, discussing various aspects of the pros and cons of monitoring cyber jihadist sites next to shutting them down, as well as mentioning my analysis of the Mujahideen...]]></description>
      <content:encoded><![CDATA[<div><a href="http://bp0.blogger.com/_wICHhTiQmrA/R9G7dU-0F6I/AAAAAAAABcQ/1bS4lvI4w-M/s1600-h/terrorist_database_hoax.jpg"><img id="BLOGGER_PHOTO_ID_5175123559348180898" style="margin: 0px 10px 10px 0px; float: left;" alt="" src="http://bp0.blogger.com/_wICHhTiQmrA/R9G7dU-0F6I/AAAAAAAABcQ/1bS4lvI4w-M/s200/terrorist_database_hoax.jpg" border="0" /></a>Insightful article by Greg Goth, discussing various aspects of the pros and cons of monitoring cyber jihadist sites next to shutting them down, as well as mentioning <a href="http://ddanchev.blogspot.com/2008/01/mujahideen-secrets-2-encryption-tool.html">my analysis</a> of the <a href="http://ddanchev.blogspot.com/2007/04/mujahideen-secrets-encryption-tool.html">Mujahideen Secrets encryption tool v1.0</a> and v2.0. <a href="http://dsonline.computer.org/portal/pages/dsonline/2008/03/o3003news.html">Terror on the Internet: A Complex Issue, and Getting Harder</a> :</div><br />"<em>Indeed, politicians around the world call at regular intervals for terrorist websites to be removed from their host sites’ servers or for search engines to block access to them. They also call for laws that would make posting instructions on how to kill or maim people or destroy property punishable by law. Franco Frattini, the European Commission’s Vice President for Freedom, Justice, and Security, </em><a href="http://europa.eu/rapid/pressReleasesAction.do?reference=SPEECH/07/505&amp;format=HTML&amp;aged=0&amp;language=EN&amp;guiLanguage=en"><em>called for a prohibition on websites that post bomb-making instructions in September 2007</em></a><em>. And just as quickly, he rushed to announce that in doing so he was not trying to impinge on freedom of speech or information access or to inhibit law enforcement agencies from monitoring sites.</em>"<br /><br /><div>There're three perspectives related to cyber jihad, should the virtual communities be shut down, monitored, or censored so that they cannot be accessed by people who would potentially get radicalized and brainwashed by the amazingly well created propaganda in the form of interactive multimedia? Given the different mandates given to different intelligence services and independent researchers, is where the conflict of interest begins. Moreover, don't forget that independent researchers sometimes come up with the final piece of the puzzle to have an intelligence agency come up with the big picture in a cost-effective and timely manner, given they actually believe in OSINT and trust the source of the intell data of course. Now, picture the situation where an intelligence agency is shutting down cyber jihadist sites on a large scale not believing in the value that the intelligence data they they could provide, another one given a mandate to censor cyber jihadist communities compiling reports stating that someone's shutting them down before they could even censor them, and a third one who would have to again play cat and mouse game the locate them once they've shut down by the first intel agency already. Ironic or not, different mandates and empowerment is where the contradiction begins. Let's discuss the three mandates and go in-depth into the pros and cons of each of them to come up with a philosophic solution to the problem, as I belive it's perhaps the only way to provoke some thought on the best variant.</div><br /><div></div><strong>Shutting the communities down</strong> -<br /><div>Before shuting them down you need to know where they are, their neighbourhood of supporters who will indirectly tip you on the their latest location once they have their previous domain shut down. Personal experience and third party research indicates that over 90% of the cyber jihadist communities/blogs are hosted by U.S based not owned companies. And with the lack of real-time intell sharing between the agencies themselves, the first who picks up the community will be responsible for its faith, literally. But in reality, preserving the integrity of a cyber jihadist community, and convincing the right people that balanced monitoring next to shutting it down is more beneficial, remains an idea yet to be considered. Back in 2007, I did an experiment, namely I <a href="http://ddanchev.blogspot.com/2007/08/analyses-of-cyber-jihadist-forums-and.html">crawled ten cyber jihadist forums and blogs and extracted all the outgoing links from these communities</a> to see their preferred choice for online video and files hosting. A couple of months later, the communities got shut down, so when the same thing happened while I was crawling the Global Islamic Media Front's, and Inshallahshaheed's web presence, it became clear that while some are crawling, and others censoring, third parties are shutting them down.</div><br /><div> </div>The bottom line - shutting them down doesn't mean that they'll dissapear and will never come back, exactly the opposite. Personal experience while handling the Global Islamic Media Front is perhaps the perfect and best hands-on experience on the benefits of shutting them down, given you've built enough convidence in your abilities to locate their new location. If you think that the cyber jihadist site or community you're currently monitoring is a star, look above, it's full of starts everywhere, once you start drawing the lines between them, a figure of something known emerges, in this case once a cyber jihadist community is shut down, its most loyal and closely connected cyber jihadist communities will expose their intimate connection not by just starting to promote their new location online, but even better, you'll have them use the second cyber jihadist community to directly reach their audience by the time they set up the new location and resume the propaganda and radicalization.<br /><div> </div><br /><div>There's no shortage of cyber jihadist blogs, forums and sites, and personal experience shows that upon having a cyber jihadist community shut down, they re-appear at another location. It's shut down again, it re-appears for a second time. I've seen this situation with Instahaleed and GIMF, and each and every time they had their blogs and sites removed from their hosting providers, mainly because it's rather disturbing that the majority of such communities are hosted on U.S servers, it's this short time frame which will either lead you to their new location, you risk loosing their tracks. However, the vivid supporters of PSYOPs are logically visionary enough to understand what does undermining their audiences' confidence in the community's capability to remain online means.</div><br /><div> </div><strong>Monitoring the communities</strong> -<br /><div>In order to reach the "shut it down or monitor it" stage in your analysis process, you really need to know where the cyber jihadists forums and sites are, else, you will be wasting your time, money and energy to create <a href="http://ddanchev.blogspot.com/2007/03/cyber-traps-for-wannabe-jihadists.html">fake cyber jihadist communities in the form of web honeypots for jihadist communication</a>. Monitoring is tricky, especially when you don't know what you're looking for, don't prioritize, don't have a contingency plan or an offline copy of the communitiy and wrongly building confidence in its ability to remain online. Moreover, <a href="http://cryptome.org/able-danger-ig-02.jpg">monitoring for too long</a> results in terrabytes of noise, and from a psychological perspective sometimes <a href="http://en.wikipedia.org/wiki/Able_Danger">the rush for yet another fancy social networking graph</a> to better communicate <a href="http://cryptome.org/able-danger-ig-01.jpg">the collected data</a>, ends up in the worst possible way - you miss the tipping point moment.</div><br /><div> </div><strong>Censoring the communities -</strong><br /><div>I often come across wishful comments in the lines of "blocking access to bomb and poison making tutorials", missing a very important point, namely, that these very same manuals, and jihadist magazines are not residing in a cyber-jihad.com/bomb-making-guide.zip domain and file extension form, making the process a bit more complex to realize. Unless of course the censorship systems figures out ways to detect the content in password encrypted archive files served with random file names and hosted on one of the hundreds free web space providers. Then again, given the factual evidence that cyber jihadists are encouraging the use of Internet anonymization services and software, your censorship efforts will remain futile.</div><br /><div> </div>As I'm posting this overview of various ways of handling cyber jihadist communities, yet another community is starting to attract cyber jihadists, thanks to their understanding of noise generation by teaching the novice cyber jihadists on the basics of running and maintaing such a community. What's perhaps most important to keep in mind is that, what you're currently analyzing, trying to shut down or censor whatsoever, is the public web, the Dark Web, the one closed behind authentication and invite-only access yet remains to be located and properly analyzed. If cyber jihad is really a priority, then there's nothing more effective than the combination of independent researchers and intelligence analysts.<br /><div> </div><br /><div><strong>Related posts:<br /><a href="http://ddanchev.blogspot.com/2007/12/inshallahshaheed-come-out-come-out.html"><span style="font-weight: normal;">Inshallahshaheed - Come Out, Come Out Wherever You Are</span></a><br /></strong><a href="http://ddanchev.blogspot.com/2007/07/gimf-switching-blogs.html">GIMF Switching Blogs</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-now-permanently-shut-down.html">GIMF Now Permanently Shut Down</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-we-will-remain.html">GIMF - "We Will Remain"</a><br /><strong><a href="http://ddanchev.blogspot.com/2007/10/wisdom-of-anti-cyber-jihadist-crowd.html"><span style="font-weight: normal;">Wisdom of the Anti Cyber Jihadist Crowd</span></a><br /><a href="http://ddanchev.blogspot.com/2007/11/cyber-jihadist-blogs-switching.html"><span style="font-weight: normal;">Cyber Jihadist Blogs Switching Locations</span></a><br /></strong></div><div><a href="http://ddanchev.blogspot.com/2006/09/internet-psyops-psychological.html">Internet PSYOPS - Psychological Operations</a><br /><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihad-v30-what-cyber-jihad.html">Electronic Jihad v3.0 - What Cyber Jihad Isn't</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/electronic-jihads-targets-list.html">Electronic Jihad's Targets List</a></div><div><a href="http://ddanchev.blogspot.com/2007/11/teaching-cyber-jihadists-how-to-hack.html">Teaching Cyber Jihadists How to Hack</a></div><a href="http://ddanchev.blogspot.com/2007/11/botnet-of-infected-terrorists.html">A Botnet of Infected Terrorists?</a><br /><a href="http://ddanchev.blogspot.com/2007/09/infecting-terrorist-suspects-with.html">Infecting Terrorist Suspects with Malware</a><br /><a href="http://ddanchev.blogspot.com/2007/09/dark-web-and-cyber-jihad.html">The Dark Web and Cyber Jihad</a><br /><a href="http://ddanchev.blogspot.com/2007/12/cyber-jihadist-hacking-teams.html">Cyber Jihadist Hacking Teams</a><br /><a href="http://ddanchev.blogspot.com/2005/12/cyberterrorism-dont-stereotype-and-its.html">Cyberterrorism - don't stereotype and it's there</a><br /><a href="http://ddanchev.blogspot.com/2006/06/tracking-down-internet-terrorist.html">Tracking Down Internet Terrorist Propaganda</a><br /><a href="http://ddanchev.blogspot.com/2006/05/arabic-extremist-group-forum-messages.html">Arabic Extremist Group Forum Messages' Characteristics</a><br /><a href="http://ddanchev.blogspot.com/2006/08/cyber-terrorism-communications-and_22.html">Cyber Terrorism Communications and Propaganda</a><br /><a href="http://ddanchev.blogspot.com/2006/05/techno-imperialism-and-effect-of.html">Techno Imperialism and the Effect of Cyberterrorism</a><br /><a href="http://ddanchev.blogspot.com/2006/10/cost-benefit-analysis-of-cyber.html">A Cost-Benefit Analysis of Cyber Terrorism</a><br /><a href="http://ddanchev.blogspot.com/2006/12/current-state-of-internet-jihad.html">Current State of Internet Jihad</a><br /><a href="http://ddanchev.blogspot.com/2007/02/characteristics-of-islamist-websites.html">Characteristics of Islamist Websites</a><br /><a href="http://ddanchev.blogspot.com/2006/09/hezbollahs-dns-service-providers-from.html">Hezbollah's DNS Service Providers from 1998 to 2006</a><br /><a href="http://ddanchev.blogspot.com/2006/12/full-list-of-hezbollahs-internet-sites.html">Full List of Hezbollah's Internet Sites</a><br /><a href="http://ddanchev.blogspot.com/2007/03/cyber-traps-for-wannabe-jihadists.html">Cyber Traps for Wannabe Jihadists</a><br /><a href="http://ddanchev.blogspot.com/2007/04/mujahideen-secrets-encryption-tool.html">Mujahideen Secrets Encryption Tool</a><br /><a href="http://ddanchev.blogspot.com/2006/12/analysis-of-technical-mujahid-issue-one.html">An Analysis of the Technical Mujahid Issue One</a><br /><a href="http://ddanchev.blogspot.com/2007/06/analysis-of-technical-mujahid-issue-two.html">An Analysis of the Technical Mujahid Issue Two</a><br /><a href="http://ddanchev.blogspot.com/2007/07/terrorist-groups-brand-identities.html">Terrorist Groups' Brand Identities</a><br /><a href="http://ddanchev.blogspot.com/2007/06/list-of-terrorists-blogs.html">A List of Terrorists' Blogs</a><br /><a href="http://ddanchev.blogspot.com/2007/05/jihadists-anonymous-internet-surfing.html">Jihadists' Anonymous Internet Surfing Preferences</a><br /><a href="http://ddanchev.blogspot.com/2007/05/sampling-jihadists-ips.html">Samping Jihadist IPs</a><br /><a href="http://ddanchev.blogspot.com/2007/07/cyber-jihadists-and-tor.html">Cyber Jihadists' and TOR</a><br /><a href="http://ddanchev.blogspot.com/2007/08/cyber-jihadist-dos-tool.html">A Cyber Jihadist DoS Tool</a><br /><a href="http://ddanchev.blogspot.com/2007/08/gimf-now-permanently-shut-down.html">GIMF Now Permanently Shut Down</a><br /><a href="http://ddanchev.blogspot.com/2006/08/steganography-and-cyber-terrorism.html">Steganography and Cyber Terrorism Communications</a><br /></div><div class="feedflare">
<a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=9ODTvnF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=9ODTvnF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=glFBi8F"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=glFBi8F" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=D198AFf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=D198AFf" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=z0vTnMf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=z0vTnMf" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=sALMAMF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=sALMAMF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=LlGGhJF"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=LlGGhJF" border="0"></img></a> <a href="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?a=GIrrUWf"><img src="http://feeds.feedburner.com/~f/DanchoDanchevOnSecurityAndNewMedia?i=GIrrUWf" border="0"></img></a>
</div><img src="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~4/253973814" height="1" width="1"/>]]></content:encoded>
      <pubDate>Tue, 18 Mar 2008 16:58:23 +0000</pubDate>
      <category domain="http://securityratty.com/tag/cyber jihadist">cyber jihadist</category>
      <category domain="http://securityratty.com/tag/cyber jihadist communities">cyber jihadist communities</category>
      <category domain="http://securityratty.com/tag/novice cyber jihadists">novice cyber jihadists</category>
      <category domain="http://securityratty.com/tag/jihadists">jihadists</category>
      <category domain="http://securityratty.com/tag/cyber jihadist forums">cyber jihadist forums</category>
      <category domain="http://securityratty.com/tag/cyber jihadist sites">cyber jihadist sites</category>
      <category domain="http://securityratty.com/tag/attract cyber jihadists">attract cyber jihadists</category>
      <category domain="http://securityratty.com/tag/internet">internet</category>
      <category domain="http://securityratty.com/tag/cyber jihadists">cyber jihadists</category>
      <source url="http://feeds.feedburner.com/~r/DanchoDanchevOnSecurityAndNewMedia/~3/253973814/terror-on-internet-conflict-of-interest.html">Terror on the Internet - Conflict of Interest</source>
    </item>
    <item>
      <title><![CDATA[Beware of regulatory reflexes and Metcalfian moles when you launch new Web 2.0 applications]]></title>
      <link>http://securityratty.com/article/96357f187164ed621c0ce3b8d18e501a</link>
      <guid>http://securityratty.com/article/96357f187164ed621c0ce3b8d18e501a</guid>
      <description><![CDATA[Stephen J. Murdoch is a graduate student at Cambridge, and a prolific writer of papers regarding Internet security. He recently wrote article and article (click HERE) on censorship and shifting...]]></description>
      <content:encoded><![CDATA[Stephen J. Murdoch is a graduate student at Cambridge, and a prolific writer of papers regarding Internet security. He recently wrote article and article (click HERE) on censorship and shifting Internet borders. The piece reflects on how various jurisdictions have attempted to control or censor content deemed &#8220;offensive&#8221;, and how it has changed as the [...]]]></content:encoded>
      <pubDate>Wed, 09 Jan 2008 19:02:38 +0000</pubDate>
      <category domain="http://securityratty.com/tag/piece reflects">piece reflects</category>
      <category domain="http://securityratty.com/tag/internet security">internet security</category>
      <category domain="http://securityratty.com/tag/article">article</category>
      <category domain="http://securityratty.com/tag/censor content">censor content</category>
      <category domain="http://securityratty.com/tag/prolific writer">prolific writer</category>
      <category domain="http://securityratty.com/tag/internet borders">internet borders</category>
      <category domain="http://securityratty.com/tag/jurisdictions">jurisdictions</category>
      <category domain="http://securityratty.com/tag/papers">papers</category>
      <category domain="http://securityratty.com/tag/student">student</category>
      <source url="http://securityviews.com/blog/2008/01/09/regulatory-reflexes/">Beware of regulatory reflexes and Metcalfian moles when you launch new Web 2.0 applications</source>
    </item>
  </channel>
</rss>
