About | HeinOnline Law Journal Library | HeinOnline Law Journal Library | HeinOnline



11 Geo. J. Int'l Aff. 118 (2010-2011)
The Stuxnet Enigma: Implications for the Future of Cybersecurity

handle is hein.journals/geojaf11 and id is 442 raw text is: The Stuxnet Enigma
Implications for the Future of Cybersecurity
Irving Lachow

Over the past year there has been a great deal of dis-
cussion and intrigue surrounding the Stuxnet worm-an
incapacitating computer virus that wiped out nearly 6o
percent of Iran's computer network. The Stuxnet attack
has far-reaching cybersecurity and policy implications, as
it demonstrates that nation-states are susceptible to crip-
pling cyber actions from other nation-states or private enti-
ties. The international community remains unsure of the
source and exact purpose of the virus, but has become aware
of its own significant vulnerability as a result of the attack.
There are several valuable lessons that policy leaders
can glean from the development and deployment of the
Stuxnet worm. In order to begin a dialogue about what
the virus means at a national policy level and to mitigate
the risk of a similar virus attacking other infrastructures,
policymakers must recognize that current security mea-
sures may not be sufficient to guard against a sophis-
ticated cyber assault of this type. Detailed information
on the Stuxnet worm is increasingly becoming publicly
available, and it is likely that at least some countries and/
or organizations will attempt to copy Stuxnet's success.

Irving   Lachow    is
Principal Information
Security Engineer at
the MITRE Corpora-
tion. Dr. Lachow has
extensive experience in
both information tech-
nolog, and national
security. He has worked
for the U.S. Depart-
ment    of  Defense,
Booz Allen Hamilton,
and the RAND Co-
poration. Dr. Lachow
earned his PhD in
Engineering and Pub-
lic Policy from Carn-
egie Mellon University.
He earned an AB in
Political Science and
a BS in Physics from
Stanford University.

[II8] GeorgetownJournal of InternationalAffairs