Cyber Storm Exercise
{{Use mdy dates|date=June 2013}}
The Cyber Storm exercise is a biennial simulated exercise overseen by the United States Department of Homeland Security that took place February 6 through February 10, 2006 with the purpose of testing the nation's defenses against digital espionage.[https://www.dhs.gov/xnews/releases/pr_1158340980371.shtm Fact Sheet: Cyber Storm Exercise] {{Webarchive|url=https://web.archive.org/web/20120207125336/http://www.dhs.gov/xnews/releases/pr_1158340980371.shtm |date=February 7, 2012 }} (Department of Homeland Security). Accessed February 1, 2008.[https://www.dhs.gov/xlibrary/assets/prep_cyberstormreport_sep06.pdf Cyber Storm Exercise Report] {{Webarchive|url=https://web.archive.org/web/20120212182515/http://www.dhs.gov/xlibrary/assets/prep_cyberstormreport_sep06.pdf |date=February 12, 2012 }} (Department of Homeland Security) The simulation was targeted primarily at American security organizations but officials from the United Kingdom, Canada, Australia and New Zealand participated as well.Kapica, Jack. [https://www.theglobeandmail.com/servlet/story/RTGAM.20080131.WBcyberia20080131112514/WBStory/WBcyberia A blogger’s paranoia] {{Webarchive|url=https://web.archive.org/web/20080406071213/http://www.theglobeandmail.com/servlet/story/RTGAM.20080131.WBcyberia20080131112514/WBStory/WBcyberia |date=April 6, 2008 }}, The Globe and Mail, Accessed February 1, 2008.
Cyber Storm I
The first Cyber Storm exercise took place February 6 through February 10, 2006 with the purpose of testing the nation's defenses against digital espionage.
= Simulation =
The exercise simulated a large scale attack on critical digital infrastructure such as communications, transportation, and energy production. The simulation took place a series of incidents which included:
- Washington, D.C. Metro trains mysteriously shutting down.
- Bloggers revealing locations of railcars containing hazardous materials.
- The airport control towers of Philadelphia and Chicago mysteriously shutting down.
- A mysterious liquid appearing on a London subway.
- Significant numbers of people on "no fly" lists suddenly appearing at airports all over the nation.
- Planes flying too close to the White House.
- Water utilities in Los Angeles getting compromised.
= Internal difficulties =
During the exercise the computers running the simulation came under attack by the players themselves. Heavily censored files released to the Associated Press reveal that at some time during the exercise the organizers sent every one involved an e-mail marked "IMPORTANT!" telling the participants in the simulation not to attack the game's control computers.{{Cite web|url=http://www.cybertalkblog.co.uk/cyber-news-blog/cyber-war-games-highlight-vital-security-flaws/|title=Cyber 'War' Games Highlight Vital Security Flaws|website=www.cybertalkblog.co.uk|language=en-US|access-date=2017-03-13|archive-date=April 16, 2021|archive-url=https://web.archive.org/web/20210416110118/https://www.cybertalkblog.co.uk/cyber-news-blog/cyber-war-games-highlight-vital-security-flaws/|url-status=dead}}
= Performance of participants =
The Cyber Storm exercise highlighted the gaps and shortcomings of the nation's cyber defenses. The cyber storm exercise report found that institutions under attack had a hard time getting the bigger picture and instead focused on single incidents treating them as "individual and discrete".Wait, Patience. [http://www.gcn.com/online/vol1_no1/42017-1.html Cyber Storm exercise challenged coordination, communications] {{Webarchive|url=https://web.archive.org/web/20080211124708/http://www.gcn.com/online/vol1_no1/42017-1.html |date=February 11, 2008 }} (Government computer news). Accessed February 1, 2008. In light of the test the Department of Homeland Security raised concern that the relatively modest resources assigned to cyber-defense would be "overwhelmed in a real attack".[http://www.securityfocus.com/brief/303 DHS releases report on Cyber Storm exercise]. Accessed February 18, 2008.
Cyber Storm II
Cyber Storm II was an international cyber security exercise sponsored by the United States Department of Homeland Security in 2008. The week-long exercise was centered in Washington, DC and concluded on March 15.Ian Grant. [http://www.computerweekly.com/Articles/2008/03/18/229909/cyber-storm-2-exercise-reveals-security-preparedness.htm "Cyber Storm 2 exercise reveals security preparedness"] Computerweekly.com. Accessed March 21, 2008.
Cyber Storm III
Cyber Storm III was an international cyber security exercise sponsored by the United States Department of Homeland Security in 2010. The week-long exercise was centered in Washington, DC and concluded on October 1.Ian Grant. [https://www.dhs.gov/cyber-storm-iii "Cyber Storm III"]