海角大神

Modern field guide to security and privacy

What Crimea telecom link could mean for Russia-Ukraine cyber-conflict

Plans for a fiber-optic cable between Russia and Crimea are 'at an advanced stage,' and could change the balance of cyber-power by providing Russia with more offensive options, experts say.

|
Maxim Shemetov/Reuters
A Russian flag flies on a building at the airport in the Crimean city of Simferopol, April 6, 2014. Plans to deploy a fiber-optic submarine telecom link between Russia's mainland and Crimea could change the balance of cyber-power between Russia and Ukraine.

Russia鈥檚 promise to start providing Internet and telecom infrastructure to Crimea via Rostelecom, the semi-privatized state telecom of Russia, hasn鈥檛 been fulfilled 鈥 yet. But if and when such a linkup happens, the ongoing tit-for-tat cyber-conflict between Russia and Ukraine could quickly change in unpredictable ways, mostly to Russia's benefit, cyber-security experts monitoring the fluid situation say.

Plans to deploy a fiber-optic submarine telecom link between Russia鈥檚 mainland and Crimea are 鈥渁t an advanced stage, and the cable could be in operation as early as this month,鈥 TeleGeography, a telecommunications market research firm reported Friday, citing Russian news agency RIA Novosti.

That announcement closely followed Russian Prime Minister Dmitry Medvedev鈥檚 call late last month for Rostelecom to start offering telecom and Internet services in the newly annexed Crimean Peninsula as a way of safeguarding communications channels.

鈥淲e must have Rostelecom and its subsidiaries come to Crimea as soon as possible,鈥 Mr. Medvedev said at a Moscow meeting on Crimea鈥檚 future, according to a March 25 government news release. 鈥淲e cannot tolerate a situation in which sensitive information and documents related to the administration of the two constituent entities of the Russian Federation are relayed by foreign telecommunications companies. This must be terminated.鈥

A submarine telecom cable could fit in sync with Russian efforts to link Crimea into its energy network as well. Russia is developing plans to build an undersea gas pipeline to Crimea and could build three power stations on the Black Sea peninsula following annexation from Ukraine, Reuters reported April 1.

Russia鈥檚 military forces are still reported to be conducting exercises along its long border with Ukraine, adding to diplomatic and regional tensions. But up to this point, little has changed in the cyber-connection realm between Ukraine and Crimea.

Crimea鈥檚 Internet providers are still getting their outside Internet services supplied via providers in mainland Ukraine, which in turn gets most of their bandwidth from fiber optic lines running to Western countries, reports Renesys, a cyber-security firm in Manchester, N.H., that monitors Internet pathways.

Russian Internet service providers (ISPs), by contrast, have so far played a very minor role in providing outside access for ISPs in Ukraine (or Crimea for that matter), the company says. But that could all change in a flash.

An undersea link would allow the Russians to provide Internet directly to Crimea without traversing mainland Ukraine. While laying a new submarine cable is typically a long process, Russian ISPs could in the meantime provide bandwidth temporarily through existing landlines to Crimea 鈥 and that could happen fast, according to a Renesys analysis.

Whatever link is established could change the balance of cyber-power, which so far has seemed to be a stalemate, some experts say. If Crimean Internet service providers then switch over to Russian providers, it would give Russia added security for its communications with Crimea and additional offensive cyber-options, according to Doug Madory, a senior analyst with Renesys.

鈥淟ets say Russia brings Crimea into their fold, into their network, well they wouldn鈥檛 be nearly as worried about collateral damage to Crimea if they wanted to conduct a cyber or other attack on Ukraine鈥檚 Internet infrastructure,鈥 Mr. Madory says. 鈥淐onversely, if Crimea was the target of DDoS attacks from Ukraine, if that Internet traffic had to go through Russia to get to Crimea, the Russian provider could take it upon itself to protect Crimea.鈥

So far, the Russia-Ukraine cyber-conflict over Crimea has seen each nation鈥檚 powerful criminal hacker communities apparently parrying and thrusting at each other with distributed denial of service (DDoS) and other types of attacks, although other entities, including hacktivists, are also reported to be active.

Prior to the Russian-Ukrainian confrontation that emerged late last year, criminal hacker communities in the two countries were often in collaboration with each other via organized cyber-gangs. Up to that point, they had appeared to refrain from attacking each other鈥檚 countries, according to Jason Healey, director of the Cyber Statecraft Initiative at the Atlantic Council, a national security think tank.

The Ukraine cyber fight has been different than Russia's past cyber conflicts. Kremlin in 2007 sparked a weeks-long cyber-assault on Estonia by 鈥渋gnoring or encouraging鈥 attacks by nationalist groups, Mr. Healey notes. A year later, in attacks on Georgia, Putin allowed his security services to coordinate and possibly even direct attacks on Georgian government and banking websites.

鈥淚n Ukraine, the Russians have used a more traditional path of propaganda, misinformation, physical destruction, and modification of telecommunications equipment, and cyber-attacks, all integrated into a single campaign,鈥 Mr. Healey wrote in a recent online analysis.

Results so far in the Russia-Ukraine conflict have seen hundreds of DDoS attacks and presumably included clandestine cyber-attacks that disrupted e-mail systems and websites at Russia鈥檚 central bank and foreign ministry, Ukraine鈥檚 Parliament, and other government sites on both sides.

On the day of the disputed vote over Crimean secession, Ukranian government websites were hit by a wave of 42 cyberattacks during Crimea鈥檚 vote to secede from Ukraine and join Russia. All of those were DDoS attacks, which clog websites with bogus data, echoing DDoS attacks by Russia when it invaded the former Soviet state of Georgia in 2008.

The day after the Crimean vote, however, saw a huge, apparently retaliatory, counter wave of attacks against Russia, including 132 separate DDoS blasts slamming Russian websites. One 18-minute DDoS attack that hit Russia March 17 was 148 times more powerful than anything Russia did in Georgia in 2008, and four times larger than a large attack emanating from Russia just days earlier, according to Arbor Networks of Burlington, Mass., which tracks such attacks.

鈥淥f course a submarine Internet link would help the Russians more firmly monitor and secure communications in an out of Crimea 鈥 and it means the Crimeans will be less dependent upon old Ukrainian infrastructure,鈥 Healey says in an interview. 鈥淲hen the Russian pathways come in, I wouldn鈥檛 be surprised to see the links with Ukraine cut or rarely used. Crimea would then be dependent solely on Moscow鈥檚 whims.鈥

You've read  of  free articles. Subscribe to continue.
Real news can be honest, hopeful, credible, constructive.
海角大神 was founded in 1908 to lift the standard of journalism and uplift humanity. We aim to 鈥渟peak the truth in love.鈥 Our goal is not to tell you what to think, but to give you the essential knowledge and understanding to come to your own intelligent conclusions. Join us in this mission by subscribing.
QR Code to What Crimea telecom link could mean for Russia-Ukraine cyber-conflict
Read this article in
/World/Passcode/2014/0407/What-Crimea-telecom-link-could-mean-for-Russia-Ukraine-cyber-conflict
QR Code to Subscription page
Start your subscription today
/subscribe