The Coming Cyber War #19

Cyber Warfare:

The United States had a cyber attack today with a massive DDOS attack on a key company on the internet causing outages mainly on the East Coast.

Is cyber defense the great space race of our generation?

Destructive cyber attacks are coming.

The IoT Botnet Mirai's software has been released to the public.  DHS is warning about this malware specifically.

Hackers are attacking the US voting systems.

NATO states cyberattacks complicate defense.

Nyotron is bringing a cloud based cyber defense to militaries. 

The US has officially stated Russia is responsible for the hacks on the election system Stateside.  The Russians have responded that's part of the 'anti-Russian hysteria.' sweeping the US.  The hacks, some think, are meant to shake trust in American democracy.  The rhetoric against Russia has been stepped up.  The US government has stated it will doing a proportionate response against Russia.  But how?  Supposedly the CIA (really?  CIA?) is preparing to conduct a cyber attack against Russia.

A warning has been sent out Russian hackers might be attempting to attack the US Presidential election.

The US military needs to get cool to attract cyber experts?  Use a cyber ROTC?  Perhaps.  Or perhaps it needs to pay industry rates...

The British have stated they are actively conducting cyberwarfare operations against Daesh.

Russia, cyber coercion and the classic whodunit.

Cyber Security:

3d printing systems have cyber security issues.

Buzzfeed hacked and had false stories released.

Is cyber security best incentivized by a carrot or a stick?

One election system vendor uses developers in Serbia. 

IAEA has stated at least one nuclear power plant was successfully hacked and had its operations disrupted.

IoT might be really, really bad for the internet.

Johnson & Johnson's insulin pumps are hackable.

MITRE is offering a bounty on rogue IOT devices.

Most businesses do not inspect their cloud services for malware.  And the clouds have lots of it.

Sixgill is moving from defense to detection in software.

Spotify users were hacked through malware carrying ads.

Cyber Espionage: 

Apple watches have been banned from British Cabinet meetings due to hacking fears.

Assange promises more secrets to be revealed about Clinton and Google.  Some more were revealed for the Clinton campaign.  Supposedly, a nation state cut off Assange's internet access.  That nation?  Ecuador!  The host embassy he has asylum with.  Ecuador has stated they did so because Assange was interfering with the US election and not because they were being pressured. 

Gufficer dumped Clinton Foundation data again.

An NSA officer was caught stealing secrets.  He stole apparently tens of terabytes of data.

Trump's email servers are hopelessly hackable.

Yahoo had a regular program of scans of user emails for the NSA and denied it.  (Apple, Google, and Microsoft denied they have a similar programs.)  Yahoo's scans were under a surveillance law that is expiring.  Calls are being made to declassify the program the Yahoo email scans were being done under.  The tool being used apparently was a hacking tool, rather than an email filter.  Verizon wants a $1 billion reduction in the price for purchasing Yahoo due to the lack of disclosure on the email scans.  In fact, Verizon is now saying this is a material breach.  In an odd twist, Yahoo is demanding to know who in the government ordered the monitoring.

A Russian spy ship might have tapped internet cables coming out of Syria.

Cyber Crime:

4Chan hackers are claiming to have wiped a Clinton aide's phone remotely.

A new android malware tries to trick users into taking a picture of themselves holding an ID card.

The Clinton Foundation is warning their donors against phishing.

Apparently, darknet users are strongly against animal trafficking.  

DDOS attacks actually have a changing effect.

Hackers who attacked French TV have still not been found.

Hackers have also hit 6,000 online stores looking for credit card #s over an 18 month period.

Another group of hackers is attacking the SWIFT network.

A huge debit car system breach has affected millions in India and over ten banks.

How hackers got into Podesta and Powell's email accounts.

Malware is not a problem on the Wikileaks site according to Julian Assange.

A Republican Senate Committee website has been hacked.

A Russian hacker has been detained in the Czech Republic for possible extradition to the US.  Russia has strongly criticized the US over the arrest and has named the individual.

The StrongPity malware is infecting users via legitimate software installers.

The Coming Cyberwar #18

Cyber Warfare:

This is the 21st century info warfare and where the 3rd offset strategy intersects with it.

The US Army is getting in on the hacking domain.

The NSA cyber weapons were compromised by the Russians through an operator error.

An hacker who was working for ISIS has been sentenced to 20 years in prison.

After the hacks by the Russians, the US must decide how to react.


Cyber Security:

Cisco is scrambling to patch another vulnerability in its firewalls.

Chinese researchers found a security problem in Tesla S, but Tesla patched it already.

Malware has starting checking to see if it is in a virtual machine.

Another malware masquerades as Street Fighter V updates.

Yahoo was hacked and 500 million users data has been exposed.  Phone companies whose users used Yahoo ought to be concerned.  That Yahoo waited two years to report the attack is being called unacceptable.  The party who hacked Yahoo is in dispute.

Cyber Espionage:

An autistic Briton who hacked the Pentagon and whatnot looking for proof of UFOs has been given clearance, finally, to be extradited to the US for prosecution.

How DID the FBI crack the San Bernardino terrorist's phone?  Some news organizations are suing to find out how.

The FBI is investigating another hack of the DNC.

Putin claims the hacks of the antidoping agency prove the ban of Russian athletes was unwarranted.

Russian hackers have been linked to attacks on German political parties and governments.

Russian hackers are being accused of attempting to disrupt the US elections.

The US is pretty sure Russia is shielding hackers who attacked the US.

Cyber Crime:

A college hacker compromised United Airlines.

An FBI agent busted folks using the Dark Web.

Hackers are spreading malware over the torrents.

A journalist was attacked by a massive DDOS attack and was kicked off the server farm where he was hosted.  Google rehosted the site.  The DDOS attack reached 1 TB per second and had over 150k hosts participating.

Michelle Obama's passport has been leaked online.

The Coming Cyber War #12

Cyber Warfare: 

NATO is considering the stance that a massive cyber attack would be considered an attack that would invoke article 5; therefore, invoking the entire alliance to defend that nation.

Some are calling for a global cyber warfare treaty.

Tactical cyber warfare gets profiled.

There is a new algorithm designed to predict ISIL/Daesh attacks.

New York magazine imagines what would happen if hackers attacked New York City.

West Point cadets were trained in a cyber warfare exercise.

A recommendation is expected shortly that the US military have a unified cyber command.  Why they are not just calling it the NSA, IDK.

There are concerns the current DOD acquisition rules are hobbling American cyber warfare operations.

Cyber Security:

Hackers have breached the Pentagon's firewalls at least 130 times as part of a bounty program.

A Russian bill before the Duma will require all messenger apps to have a backdoor for the FSB.

It seems it is possible for malware to exfiltrate data from air gapped systems via modulating the rate of the spinning fans on the system.

The US & Israel have signed a cyber security pact.

Cyber Espionage:

Chinese cyber espionage seems to have greatly dropped.

The Russian hacker released info from the DNC about the Clinton Foundation.

Cyber Crime:

One million IP addresses were used to attack two banks.

There is a new randsomware written purely in javascript.

Coming Cyberwar #10

Cyber Warfare:

The Pentagon wants AI to hack enemy networks.

Muslim Indonesian 'cyber warriors' are taking on IS/Daesh online.

The USMC needs to start preparing for cyberwar now.

How to use cyberwarfare to maintain the advantage over the Chinese.

The USAF wants to convert the C-37B into an electronic/cyber attack aircraft.

The head of US Navy cyber warfare is being promoted to head of intel.

SecDef Carter discusses the cyber warfare operations against Daesh.

Electronic & Cyber Warfare are starting to blend.

Cyber Security:

Berkeley Researchers gamed the five worst case scenarios for cyber security breaches.

Americans are increasingly worried about cyber attacks.

Google is ending access to its malware database.

A new method of random number generation may improve cyber security.

Cyber security folks are being trained to think like hackers.

Police have revealed how they are fighting botnets.

BMW has shown how you can control your HVAC at home from one of their cars.  This is how you get seriously hacked, folks.

A hacker website was...hacked.

Reportedly foreign hackers are spying on the US presidential candidates.

Cyber crime:

United States Steel has filed a complaint stating Chinese hackers are attempting to steal its trade secrets.

The Dyanmer malware can become persistent through a Windows root mode.

A security flaw in Samsung smart house tech allows hackers to unlock doors remotely.

A new botnet is targeting scientists and engineers.

The Viking Horde malware is targeting android devices.

An Ukrainian hacker has entered a plea for his attempt to use unpublished news stories for potential extortion.  

The Swift banking network has been severely compromised.  Again.  Vietnam blocked an attempted SWIFT bank fraud.  The hack may be related to the Sony hack not too long ago.

The human side of cyber crime. 

Meta:

Can cyber space be mapped?

Denmark's Spy Agency has Opened a Hacker Academy

Denmark's military intelligence agency says it's creating "a hacker academy" where to train IT specialists who, if they graduate, will be offered employment.

In a statement, the secretive Danish Defiance Intelligence Service (DDIS) says the small group who will be enrolled are "already are among the best in their field."

DDIS said Wednesday the academy "will not teach them how to hack" but will "target their mindset and skills so that they can be used" by the agency which spies outside Denmark's border.

link.

The Coming Cyberwar #5 (mini update): Which Nations are the Most Vulnerable to Cyberattack?

Damaging cyberattacks on a global scale continue to surface every day. Some nations are better prepared than others to deal with online threats from criminals, terrorists and rogue nations.

Data-mining experts from the University of Maryland and Virginia Tech recently co-authored a book that ranked the vulnerability of 44 nations to cyberattacks. Lead author V.S. Subrahmanian discussed this research on Wednesday, March 9 at a panel discussion hosted by the Foundation for Defense of Democracies in Washington, D.C.

The United States ranked 11th safest, while several Scandinavian countries (Denmark, Norway and Finland) ranked the safest. China, India, Russia, Saudi Arabia and South Korea ranked among the most vulnerable.

link.

The Coming Cyberwar #4

Cyberwar:

NATO is adding more partners for its cyber capabilities.

The F-35 Lightning's logistics support system may be vulnerable to cyberattack (paywall).

The Pentagon's cyberweapons are online (paywall).

Here's a bit more on the US military's cyber warfare operations against IS/Daesh.

Cyberwarefare is being dragged out of the shadows.

Hacking:

The Pentagon is inviting hackers to attack and offering bounties for success.

Pirates are hacking cargo companies to find the most valuable ships to attack.

Here is a lot more information about the attack on Ukraine's power infrastructure.

Business bank accounts are vulnerable to hackers.

UCLA researchers think the mere sound of 3d printers could be a cyber security threat. 

The U8 smart watch has been caught sending encrypted data back to China.  What and why is unknown.

The computer age is a paradox, or so some say, making everything more vulnerable, even if easier.

Cambridge and MIT will be spending the weekend hacking each other's computers in a sanctioned contest.

Ransomware is now being sold as a service.

Dubious Claims:

The latest gambit for trying to force apple to unlock the San Bernardino terrorist's IPhone is the claim its contains a 'cyberpathogen.'

Media:

Here's a suggested guide for journalists about reporting hacks.

The Coming Cyber War #2

Full Blown Cyber War:

Reports are the US military has launched a cyber attack on IS/Daesh.

The USA had plans to attack many different parts of Iran with cyber weapons if diplomacy had failed.  This planned operation was called Nitro Zeus.   It should be noted from the Times article:

At its height, officials say, the planning for Nitro Zeus involved thousands of American military and intelligence personnel, spending tens of millions of dollars and placing electronic implants in Iranian computer networks to “prepare the battlefield,” in the parlance of the Pentagon.

The cyber weapons are already present in Iran.  The trigger was simply not pressed.

The cutbacks to the US military may cause gaps in the cyber warfare sections.

How will the Navy fight in a cyber war? (part 2)   Part of the answer might be to unplug ships from each other in the event of a cyber attack.  It has released more cyber security guidelines.

The US military service chiefs are rejecting the idea of creating a fifth branch of the military to just handle cyberwarfare.  I could have sworn it already exists and is called the NSA.

Britain is putting an increased emphasis on cyberwarfare.

Australia is, too, adding significant capabilities (paywall), including hiring 1700 people just for its cyberwarfare group.

Hackers:

The Russian cyber espionage group, Pawn Storm, has released a vicious linux centric trojan called Fysbis, one that eats android phones, too.  Yet it will not infect phones and computers is Russia.

The US DHS has determined the power outage in Ukraine in December was definitely a cyber attack, but declined to name the source.  Others have stated it was the Russian group named 'Sandworm.'

Hackers are already making millions from their actions.

The Sony hackers were at it for years prior.

Another set of hackers held a hospital for ransom.  The hospital paid out $17,000 to get their computers back.

In a frightening test, a hospital was hacked.  The drug dispensaries, patient monitoring and elsewhere were found to be hackable.

A major security flaw was found in DNS, the giant 'yellow pages' of the internet, that could allow virtually the entire Internet to be infected.

A simple keylogger malware was released into the wild and, in an amusing twist, ended up infecting the original coders' computers 16 times.   This is the danger of cyberweapons.  They can inadvertently turn against you.

Those Between:

The German police are allowed to use a trojan malware.

CMU developed software to attack TOR for the DOD, but the FBI now ants the software.

NASA Global Hawk was Probably NOT Hacked

A group of hackers claims to have broken into the computer systems of NASA, stealing hours of on-board footage from the agency’s fleet of aircraft, hundreds of data logs from its weather and climate missions, as well as a list of names, phone numbers and emails of more than 2,400 employees.

The hackers dumped the allegedly stolen data online on Sunday, along with a long, rambling “zine” where they explained how they obtained the more than 250 GB of files. One of the group’s administrators told Motherboard that they were actually able to steal as much as 1 TB of data, but couldn’t upload it all.

The hackers, which call themselves AnonSec, also claimed to have taken “semi-partial control” of a NASA drone in a failed attempt to crash it into the ocean. In a manifesto accompanying the dump, the hackers explained that they were able to replace a file with the drone’s pre-planned route with their own route. NASA denied this ever happened, and an expert told Motherboard it’s highly unlikely they ever gained control of the drone, and that the file was probably just used to indicate waypoints for the drone operator.

link.

Was NASA's Global Hawk Drone Hacked?

Hackers from the AnonSec group who spent several months hacking Nasa have released a huge data dump and revealed they tried to bring down a $222m Global Hawk Drone into the Pacific Ocean. The hack included employee personal details, flight logs and video footage collected from unmanned and manned aircraft.

The 250GB data dump contained the names, email addresses and phone numbers of 2,414 Nasa employees, 2,143 flight logs and 631 videos taken from Nasa aircraft and radar feeds, as well as a self-published paper (known as a "zine") from the group explaining the extensive technical vulnerabilities that the hackers were able to breach.

In the zine, AnonSec explains that it purchased an "initial foothold" from a hacker with knowledge of Nasa's servers in 2013 and then began experimenting to see how many computers they could break into and hijack. AnonSec found that the administrator credentials for securely controlling Nasa computers and servers remotely were left at default, so it took the hackers no time at all to get into the network and then grab more login data using a hidden packet sniffer.

[...]

Eventually, AnonSec says it managed to infiltrate the networks at the Glenn Research Center, Goddard Space Flight Center and Dryden Flight Research Center, and were able to gain full root access to three network-attached storage (NAS) devices that were compiling back-ups of aircraft flight logs.

The hackers then secretly programmed the NAS devices to quietly send a copy of all the flight logs out to the hackers' server outside Nasa's network, but when they looked at the flight logs, they realised that part of the data they were receiving consisted of pre-planned route files for Nasa's Global Hawk drones. Every time a drone mission took off, Nasa drone operators were uploading specific flight paths, so the hackers realised that they could simply replace the Global Hawk drone route file, and that would cause the drone to deviate from its set flight path and do whatever the hackers wanted it to do.

"Several members were in disagreement on this because if it worked, we would be labelled terrorists for possibly crashing a $222.7m US drone... but we continued anyways lol," AnonSec wrote in its zine, together with a screenshot showing how the hackers tried to deviate the Global Hawk's flight path to cause it to crash into the Pacific Ocean.

Fortunately for Nasa, AnonSec says that the drone operators in Ground Control noticed that the drone had deviated from its original flight path and manually accessed the drone via satellite to redirect it from a watery grave.

link.

Hackers Appear to Have Caused Ukrainian Power Outage

Hackers likely caused a Dec. 23 electricity outage in Ukraine by remotely switching breakers to cut power, after installing malware to prevent technicians from detecting the attack, according to a report analyzing how the incident unfolded.

The report from Washington-based SANS ICS was released late on Saturday, providing the first detailed analysis of what caused a six-hour outage for some 80,000 customers of Western Ukraine's Prykarpattyaoblenergo utility.

SANS ICS, which advises infrastructure operators on combating cyber attacks, also said the attackers crippled the utility's customer-service center by flooding it with phone calls to prevent customers from alerting the utility that power was down.

"This was a multi-pronged attack against multiple facilities. It was highly coordinated with very professional logistics," said Robert Lee, a former U.S. Air Force cyber warfare operations officer who helped compile the report for SANS ICS. "They sort of blinded them in every way possible."

Experts widely describe the incident as the first known power outage caused by a cyber attack. Ukraine's SBU state security service blamed Russia, and U.S. cyber firm iSight Partners identified the perpetrator as a Russian hacking group known as "Sandworm."

link.

US Army Putting Hackers Onto the Battlefield for Wargames

Pop culture pictures hackers in clean, air-conditioned rooms, working global network magic from a desk. For the Army, though, that’s not enough. If American troops are to prevail against inventive foes in high-tech, close-quarters fights, the hacker elite have to get their boots muddy with the regular grunts. So now the Army’s sending cyber soldiers to its Combat Training Center wargames to figure out how.

“There’s this idea that we could always do it remotely, from protected space. Well, we recognized, no, that’s not true,” Lt. Gen. Ed Cardon, head of Army Cyber Command, told reporters recently. For cyber soldiers to support frontline units effectively, he said, “you’re going to have to have some number — small, but some number — of them forward.”

Putting cyber soldiers in the trenches isn’t simple. To start with, they have to be physically fit and qualified on a range of weapons — not exactly the stereotypical computer geek. They need computer and communications gear light and rugged enough to take into the field, and vehicles to carry it. They also need to communicate clearly with combat arms soldiers, a cultural chasm one general compared to understanding “dolphin speak.”

To work out all the myriad implications for training, tactics, manning, and equipment, the Army has begun embedding cyber teams in combat brigades conducting wargames (“rotations”) at the CTCs, considered the pinnacle of realistic field training. “We’re actually doing this now for every rotation,” said Cardon.

Most of the teams so far have been defensive cyber operators, trained to protect a brigade’s network against hostile hackers. But on two occasions, they’ve been contingents from the elite 780th Military Intelligence Brigade, the service’s offensive cyber unit. The brigade’s based at Fort Meade, Maryland, headquarters of NSA and Cyber Command, which focus on strategic cyber, but it has sent tactical teams to join light infantry and Ranger units in exercises.

In the wargames, the four-person detachments from the 780th were able to monitor and even block “enemy” communications, including over social media, said the brigade’s commander, Col. William Hartman. Speaking at the same Association of the US Army conference as Cardon, Hartman was cagey with details, but he did divulge that the Offensive Cyberspace Operations (OCO) teams not only stopped the opposing force from “obtain[ing] certain content,” they were in some cases able to prevent (simulated) “lethal” attacks.”

The teams learned plenty of painful but necessary lessons, too. “We needed better cyber kit,” said Hartman. Selling cyber to a muddy-boots ground commander is hard enough, he said, and it’s even more difficult to get his buy-in “when you need to get four people to lift your kit and put it in back of a Humvee.” To compound the problem, no one initially gave the cyber team their own Humvee, so they had to beg and borrow one.

link.

Scuffle in the South China Sea #2

The US Navy is planning to sail closer than 12 miles from the artificial islands China made in the South China Sea again.

Chinese warships shadowed the USS Lassen the first sail-by.

U.S. chief of naval operations Admiral John Richardson and his Chinese counterpart Admiral Wu Shengli will hold a teleconference over the incident.

China is reportedly REALLY angry over the sailing and future sailings of the US Navy by its islands.

The Chinese have stated they will respond with all necessary means the next time the US does the sail-by.

China reportedly hacked the website of Permanent Court of Arbitration in The Hague and started spreading malware from the webpage. The court is where the Phillipines filed its dispute with the Chinese over the South China Sea territorial claims.

In a bit of delicious irony, Merkel suggested China settle the South China Sea dispute in the Permanent Court of Arbitration.

Russia Attempted to Hack the MH17 Commission's Computers

Russian spies likely tried to hack into the Dutch Safety Board's computer systems to access a sensitive final report into the shooting down of flight MH17 over Ukraine, experts said Friday.

The cyberattacks were revealed by security experts Trend Micro which blamed a shadowy group dubbed Operation Pawn Storm, "an active economic and political cyber-espionage operation" that has targeted the White House and NATO in the past.

A spokeswoman for the Dutch board, which led the investigation into how Malaysia Airlines flight came down in July 2014 over war-torn Ukraine, confirmed the board had detected the attacks.

But there was "no evidence" that anyone "was successful in the attempt," spokeswoman Sara Vernooij told AFP.

She declined however to reveal "how and by whom" the attacks were carried out.

Trend Micro Friday blamed Operation Pawn Storm for a "cyber-espionage operation before and after" the publication on October 13 of the board's detailed report.

link.

FSB Linked Kaspersky Lab Researcher States Harrassed, Targeted by Malware From Spy Agencies

Researchers tasked with revealing attacks by intelligence agencies are being harassed, locked out of tenders, and in some cases deported, Kaspersky researcher Juan Andrés Guerrero-Saade says.

Retaliation by the unnamed agencies is in direct response to news of prominent advanced-persistent threat campaigns that have coloured information security reporting over recent years.

Those reports are forcing researchers to reveal malware attacks by government spy agencies.

link.

Hack to the Future: Wikileaks Will be Publishing CIA Director's Hacked Emails

WikiLeaks may describe itself as an outlet for whistleblowers, but it’s never hesitated to publish stolen documents offered up by a helpful hacker, either. So it’s no surprise that it’s now leaked the pilfered files of the CIA’s director, John Brennan.

On Wednesday, the secret-spilling group published a series of selected messages and attachments from a trove of emails taken from Brennan’s AOL account. Though WikiLeaks hasn’t revealed its source, there’s little doubt the files were handed off by the self-described teen hackers calling themselves CWA or “Crackas With Attitude,” who claim to have hacked Brennan’s AOL account through a series of “social engineering” tricks.

“Today, 21 October 2015 and over the coming days WikiLeaks is releasing documents from one of CIA chief John Brennan’s non-government email accounts,” WikiLeaks writes in a simple statement. “Brennan used the account occasionally for several intelligence related projects.”

link.

so far it looks like Wikileaks just doxxed Brennan's family.  What a bunch of assholes.

Extraordinary Claim (Frightening if True): Hackers Took Over German Patriot Missile Battery in Turkey

The attack took place on anti-aircraft ‘Patriot’ missiles on the Syrian border. The American-made weapons had been stationed there by the Bundeswehr (German army) to protect Nato ally Turkey.

According to the civil service magazine, the missile system carried out “unexplained” orders. It was not immediately clear when these orders were carried out and what they were.

link.

DOH! A Hacker & Cyber Warrior's Wet Dream: the Internet of Things

Government of China Conducting Man-in-the-Middle Hacking on Apple I-Cloud and Microsoft Using Great Firewall

After previous attacks on Github, Google, Yahoo and Microsoft, the Chinese authorities are now staging a man-in-the-middle (MITM) attack on Apple’s iCloud.

We have posted previously about MITM attacks on Google and Github and broke the news about the recent attack on Yahoo. Refer to the appendix at the end of this post to see technical evidence of the attack.

This case is different, however, for a few of reasons.

Wikipedia defines a man-in-the-middle-attack in the following way:

The man-in-the-middle attack...is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker.

This is clearly a malicious attack on Apple in an effort to gain access to usernames and passwords and consequently all data stored on iCloud such as iMessages, photos, contacts, etc. Unlike the recent attack on Google, this attack is nationwide and coincides with the launch today in China of the newest iPhone. While the attacks on Google and Yahoo enabled the authorities to snoop on what information Chinese were accessing on those two platforms, the Apple attack is different. If users ignored the security warning and clicked through to the Apple site and entered their username and password, this information has now been compromised by the Chinese authorities. Many Apple customers use iCloud to store their personal information, including iMessages, photos and contacts. This may also somehow be related again to images and videos of the Hong Kong protests being shared on the mainland.

link.

DARPA Unveils "UNhackable" Drone Operating System, Demos on QuadCopter

The Pentagon’s research arm unveiled a new drone built with secure software that prevents the control and navigation of the aircraft from being hacked.

The program, called High Assurance Cyber Military Systems, or HACMS, uses software designed to thwart cyber attacks. It has been underway with the Defense Advance Research Project Agency for several years after originating at the University of California, San Diego and the University of Washington, said Kathleen Fischer, HACMS program manager for DARPA.

“The software is designed to make sure a hacker cannot take over control of a UAS. The software is mathematically proven to be invulnerable to large classes of attack,” Fisher said.

link.