Cyber attack attribution has long been a thorny problem. It is difficult to develop norms of international cyber behavior if attackers can hide behind plausible deniability. Microsoft recently proposed an independent international committee of experts to ascribe responsibility. The Kaspersky paper, however, questions whether absolute attribution is even possible.
The paper, written by researchers Brian Bartholomew and Juan Andres Guerrero-Saade, seeks to “prove a cautionary tale”. At a time when the Obama administration warns Russia that “We will take action to protect our interests, including in cyberspace, and we will do so at a time and place of our choosing,” Kaspersky Lab warns that misattribution can have a heavy cost.
Leave a reply