warning Hi, we've moved to USCANNENBERGMEDIA.COM. Visit us there!

Neon Tommy - Annenberg digital news

RSA SecurID Cyber Attacks: How Big Is It And Who Does It Affect?

Ankit Tyagi |
June 10, 2011 | 10:25 a.m. PDT

Staff Reporter

 

After experiencing data breaches in March, the security division of an information technology consultant, EMC Corp.--also known as RSA--has decided to offer customers replacement security identification on their SecurID systems. Fiscally, this move could cost RSA's customers up to $100 million.

An RSA SecurID Token. Photo courtesy of Creative Commons.
An RSA SecurID Token. Photo courtesy of Creative Commons.
A SecurID token is a credit card sized device that displays a new password every minute, which is required for logging in to a particular company's servers. This password is sent from RSA using an authentication system maintained by RSA. 

The March attack is most notably linked to a May attack on Lockheed Martin's system, when hackers stole data related to the SecurID authentication process.

Security experts believe that this attack, along with attacks at L-3 Communications and Northrop Grumman, could be associated with cyberespionage campaigns from China. 

These attacks were said to be carried out using a method known as Advanced Persistent Threat, or APT, a technique that China is known to use in cyber attacks. Furthermore, the Chinese government believes that cyberspace is a "competitive battleground" that allows for competition with the US. 

Also affected by this security breach are national banks like Citigroup, Wells Fargo and Bank of America as well as military contractors like Raytheon Co., one of the largest missile makers in the nation.  

The Pentagon is starting to set strategy to handle and deter cyberattacks. They have decided that any cyberattack is equivalent to an act of war, which can result in a military response. White House officials discussed a new international cyberstrategy that calls for international cooperation on stopping attacks, improving computer security, and preventing any cyberattacks. 

On its part, RSA explained in an open letter to it's customers, that the most likely motive of the March hacking was to obtain defense secrets and intellectual property. To expand their security experts, RSA plans to replace SecureID tokens for customers as well as set up specific "risk-based authentication strategies" for customers, particularly for those that conduct online financial transactions. 

 

Reach Ankit Tyagi here.

Follow him on Twitter @ankittya.



 

Buzz

Craig Gillespie directed this true story about "the most daring rescue mission in the history of the U.S. Coast Guard.”

Watch USC Annenberg Media's live State of the Union recap and analysis here.

 
ntrandomness