Skip to main content

The cyber threat from Syria

By James Lewis, Special to CNN
updated 12:33 PM EDT, Fri August 30, 2013
Users who tried to access NYTimes.com Tuesday encountered error messages or web pages from the Syrian Electronic Army.
Users who tried to access NYTimes.com Tuesday encountered error messages or web pages from the Syrian Electronic Army.
STORY HIGHLIGHTS
  • On Tuesday afternoon, the New York Times website went down for several hours
  • James Lewis: Syrian Electronic Army launched the attack to protest the West
  • He says the group of "patriotic hackers" dislike U.S. media portrayal of al-Assad regime
  • Lewis: Some audiences in the Mideast enjoy seeing Western institutions humbled

Editor's note: James Lewis is director and senior fellow of Technology and Public Policy Program at the Center for Strategic and International Studies.

(CNN) -- On Tuesday afternoon, the New York Times website experienced wide outage for several hours. Who has the nerve and ability to take down one of the most iconic newspapers in the world?

The Syrian Electronic Army, which is loyal to Syrian President Bashar al-Assad, takes responsibility for the hack. This is not the first time the Syrian Electronic Army has attacked news organizations. The Washington Post, AP and others have been targeted in recent months as well.

If the New York Times saw Syrian activists spray-painting slogans on its building, it could summon the minions of the law to detain them. But if you live far away in a place where American law does not apply, you are safe. It does not take much skill to intrude in cyberspace, and you can find free tools on the Internet that will let you stage a protest or an attack.

When you log on to the Internet, you can send packets of digital data around the world in seconds. The speed of global connectivity gives the illusion that there are no borders. But this is not true. There are borders in cyberspace, they are just badly defended.

The combination of high speeds, global reach and weak defenses means that someone sitting in Damascus or Tehran can take action in New York or Australia as easily as they could against the building across the street -- perhaps even easier as they won't have to leave their chair.

The Syrian Electronic Army's attacks are a form of protest against Western media's portrayal of the Assad regime. Most experts think the Syrian Electronic Army is not the Syrian government, but "patriotic hackers" who support it. This makes them harder to control and harder to find. The Syrian Electronic Army takes public diplomacy to a new level, letting individuals make their voices known on issues as easily as a government.

What we have seen from the Syrian Electronic Army is political action and sometimes political theater. Hacker groups like Anonymous, WikiLeaks or the Syrian Electronic Army have a symbiotic relationship with media that helps turn minor exploits into front-page news. The Syrian Electronic Army likes to go after the media because this is one way to make sure your message is heard. The Syrian Electronic Army's message to the Western media is one of scorn, ridicule and belittlement.

This week's attack showed more skill than earlier episodes. It resembled a cyber attack made by Iran against dissidents in 2011. Perhaps the Iranians are helping the SEA in cyberspace, but it's more likely that they provided inspiration.

The Syrian Electronic Army broke into the Australian company that hosts The Times' website (called a registrar) and changed its Internet addresses. This redirection was invisible to users who tried to visit NYTimes.com -- they either couldn't connect or were sent to another website controlled by the Syrians. The hackers got inside the target network and made some fundamental changes to how it worked. Some security experts have pointed out that The Times made its own networks vulnerable because of a "misstep" and as a result its website was easier to hack.

So far, the Syrian Electronic Army's actions have been embarrassing rather than damaging. The attackers probably don't know how to carry out a more destructive attack. But with time they could easily learn.

The Syrian Electronic Army's hacking won't change the outcome of the conflict in Syria (whatever that will be), but we don't want to discount the political effect of their actions. Some audiences in the Middle East likely enjoy seeing Western institutions humbled, and the Syrian Electronic Army is helping to dispel a sense of powerlessness against the Western behemoth. It boosts morale.

We also don't want to discount the risks. If the Syrian Electronic Army can slip by feeble defenses to make fun of the media, someone else might be able to get in and cause more serious disruption. There are a lot of reasons why the Syrian Electronic Army might choose not to launch this kind of crippling cyber attack, but the strength of our defense isn't one of them.

There are things that companies can do to protect themselves. Australia's Signals Directorate, the equivalent of NSA, has a list of mitigation strategies that would have block most of the Syrian Electronic Army does, but they aren't well known in the U.S.

The global Internet brings tremendous, benefit but the threats are growing faster than our defenses. It's a vulnerable place with few rules. Until this is changed, hacks on The New York Times and others will be the norm, not the exception.

Follow us on Twitter @CNNOpinion.

Join us on Facebook/CNNOpinion.

The opinions expressed in this commentary are solely those of James Lewis.

ADVERTISEMENT
Part of complete coverage on
updated 11:16 AM EDT, Thu August 28, 2014
Whitney Barkley says many for-profit colleges deceive students, charge exorbitant tuitions and make false promises
updated 4:48 PM EDT, Thu August 28, 2014
Mark O'Mara says the time has come to decide whether we really want police empowered to shoot those they believe are 'fleeing felons'
updated 10:32 AM EDT, Thu August 28, 2014
Bill Frelick says a tool of rights workers is 'naming and shaming,' ensuring accountability for human rights crimes in conflicts. But what if wrongdoers know no shame?
updated 10:43 PM EDT, Thu August 28, 2014
Jay Parini says, no, a little girl shouldn't fire an Uzi, but none of should have easy access to guns: The Second Amendment was not written to give us such a 'right,' no matter what the NRA says
updated 9:40 AM EDT, Thu August 28, 2014
Terra Ziporyn Snider says many adolescents suffer chronic sleep deprivation, which can indeed lead to safety problems. Would starting school an hour later be so wrong?
updated 5:53 PM EDT, Thu August 28, 2014
Peggy Drexler says after all the celebrity divorces, it's tempting to ask the question. But there are still considerable benefits to getting hitched
updated 7:05 PM EDT, Thu August 28, 2014
The death of Douglas McAuthur McCain, the first American killed fighting for ISIS, highlights the pull of Syria's war for Western jihadists, writes Peter Bergen.
updated 6:42 PM EDT, Tue August 26, 2014
Former ambassador to Syria Robert Ford says the West should be helping moderates in the Syrian armed opposition end the al-Assad regime and form a government to focus on driving ISIS out
updated 9:21 AM EDT, Wed August 27, 2014
Ruben Navarrette says a great country does not deport thousands of vulnerable, unaccompanied minors who fled in fear for their lives
updated 9:19 AM EDT, Wed August 27, 2014
Robert McIntyre says Congress is the culprit for letting Burger King pay lower taxes after merging with Tim Hortons.
updated 7:35 PM EDT, Tue August 26, 2014
Wesley Clark says the U.S. can offer support to its Islamic friends in the region most threatened by ISIS, but it can't fight their war
updated 7:26 AM EDT, Wed August 27, 2014
Jeff Yang says the tech sector's diversity numbers are embarrassing and the big players need to do more.
updated 4:53 PM EDT, Tue August 26, 2014
America's painful struggle with racism has often brought great satisfaction to the country's rivals, critics, and foes. The killing of Michael Brown and its tumultuous aftermath has been a bonanza.
updated 4:19 PM EDT, Tue August 26, 2014
Ed Bark says in this Emmy year, broadcasters CBS, ABC and PBS can all say they matched or exceeded HBO. These days that's no small feat
updated 3:19 PM EDT, Tue August 26, 2014
Rick Martin says the death of Robin Williams brought back memories of his own battle facing down depression as a young man
updated 11:58 AM EDT, Tue August 26, 2014
David Perry asks: What's the best way for police officers to handle people with psychiatric disabilities?
updated 3:50 PM EDT, Mon August 25, 2014
Julian Zelizer says it's not crazy to think Mitt Romney would be able to end up at the top of the GOP ticket in 2016
updated 4:52 PM EDT, Mon August 25, 2014
Roxanne Jones and her girlfriends would cheer from the sidelines for the boys playing Little League. But they really wanted to play. Now Mo'ne Davis shows the world that girls really can throw.
updated 12:29 PM EDT, Mon August 25, 2014
Peter Bergen and Emily Schneider say a YouTube video apparently posted by ISIS seems to show that the group has a surveillance drone, highlighting a new reality: Terrorist groups have technology once only used by states
updated 5:04 PM EDT, Mon August 25, 2014
Kimberly Norwood is a black mom who lives in an affluent neighborhood not far from Ferguson, but she has the same fears for her children as people in that troubled town do
updated 5:45 PM EDT, Fri August 22, 2014
It apparently has worked for France, say Peter Bergen and Emily Schneider, but carries uncomfortable risks. When it comes to kidnappings, nations face grim options.
updated 1:27 PM EDT, Tue August 26, 2014
John Bare says the Ice Bucket Challenge signals a new kind of activism and peer-to-peer fund-raising.
updated 8:31 AM EDT, Fri August 22, 2014
James Dawes says calling ISIS evil over and over again could very well make it harder to stop them.
updated 9:05 PM EDT, Sat August 23, 2014
As the inquiry into the shooting of Michael Brown continues, critics question the prosecutor's impartiality.
updated 6:47 PM EDT, Fri August 22, 2014
Newt Gingrich says it's troubling that a vicious group like ISIS can recruit so many young men from Britain.
updated 10:50 AM EDT, Thu August 21, 2014
David Weinberger says Twitter and other social networks have been vested with a responsibility, and a trust, they did not ask for.
updated 7:03 AM EDT, Fri August 22, 2014
John Inazu says the slogan "We are Ferguson" is meant to express empathy and solidarity. It's not true: Not all of us live in those circumstances. But we all made them.
updated 8:23 AM EDT, Fri August 22, 2014
Retired Lt. Gen. Mark Hertling says he learned that the territory ISIS wants to control is amazingly complex.
updated 3:51 PM EDT, Wed August 20, 2014
Cerue Garlo says Liberia is desperate for help amid a Ebola outbreak that has touched every aspect of life.
updated 1:42 PM EDT, Thu August 21, 2014
Eric Liu says Republicans who want to restrict voting may win now, but the party will suffer in the long term.
updated 11:38 AM EDT, Thu August 21, 2014
Jay Parini: Jesus, Pope and now researchers agree: Wealth decreases our ability to sympathize with the poor.
updated 8:00 AM EDT, Thu August 21, 2014
Judy Melinek offers a medical examiner's perspective on what happens when police kill people like Michael Brown.
updated 6:03 PM EDT, Tue August 19, 2014
It used to be billy clubs, fire hoses and snarling German shepherds. Now it's armored personnel carriers and flash-bang grenades, writes Kara Dansky.
updated 1:27 PM EDT, Wed August 20, 2014
Maria Haberfeld: People who are unfamiliar with police work can reasonably ask, why was an unarmed man shot so many times, and why was deadly force used at all?
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT
ADVERTISEMENT