{"id":18400,"date":"2022-03-01T10:45:23","date_gmt":"2022-03-01T18:45:23","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2022\/03\/01\/news-12133\/"},"modified":"2022-03-01T10:45:23","modified_gmt":"2022-03-01T18:45:23","slug":"news-12133","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2022\/03\/01\/news-12133\/","title":{"rendered":"How Ukraine&#8217;s Internet Can Fend Off Russian Attacks"},"content":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/621d5681012d204592145b55\/master\/pass\/Why-Russia-Can't-Take-Down-Ukraine%E2%80%99s-internet.jpg\"\/><\/p>\n<p><strong>Credit to Author: Gian M. Volpicelli| Date: Tue, 01 Mar 2022 12:00:00 +0000<\/strong><\/p>\n<p class=\"BylineWrapper-iiTsTb hAGfXd byline bylines__byline\" data-testid=\"BylineWrapper\" itemprop=\"author\" itemtype=\"http:\/\/schema.org\/Person\"><span itemprop=\"name\" class=\"BylineNamesWrapper-dbkCxf erRIa-D\"><span data-testid=\"BylineName\" class=\"BylineName-cKXFOb UCAzg byline__name\"><a class=\"BaseWrap-sc-TURhJ BaseText-fFzBQt BaseLink-gZQqBA BylineLink-eZnyPI eTiIvU mEZDb fNdcwQ bKZMMS byline__name-link button\" href=\"\/author\/gian-volpicelli\">Gian M. Volpicelli<\/a><\/span><\/span><\/p>\n<p>To revist this article, visit My Profile, then <a href=\"\/account\/saved\">View saved stories<\/a>.<\/p>\n<p>To revist this article, visit My Profile, then <a href=\"\/account\/saved\">View saved stories<\/a>.<\/p>\n<p><span class=\"lead-in-text-callout\">As Russian tanks<\/span> rolled into Ukraine on the morning of February 24, the internet shuddered\u2014and for some, stopped completely. Major Ukrainian internet service provider Triolan had been temporarily knocked out, in a blackout that <a data-offer-url=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4373?from=1645401600&amp;until=1646092800\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4373?from=1645401600&amp;until=1646092800&quot;}\" href=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4373?from=1645401600&amp;until=1646092800\" rel=\"nofollow noopener\" target=\"_blank\">mostly affected<\/a> the northeastern Kharkiv region\u2014a target of the Russian invasion. Even as the network came back online the following day, smaller disruptions plagued it throughout the week, according to <a data-offer-url=\"https:\/\/twitter.com\/gatech_ioda\/status\/1496710523148144640?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1496710523148144640%7Ctwgr%5E%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fwww.theverge.com%2F2022%2F2%2F24%2F22949115%2Finternet-disruptions-ukraine-kharkiv-russia\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/twitter.com\/gatech_ioda\/status\/1496710523148144640?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1496710523148144640%7Ctwgr%5E%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fwww.theverge.com%2F2022%2F2%2F24%2F22949115%2Finternet-disruptions-ukraine-kharkiv-russia&quot;}\" href=\"https:\/\/twitter.com\/gatech_ioda\/status\/1496710523148144640?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1496710523148144640%7Ctwgr%5E%7Ctwcon%5Es1_&amp;ref_url=https%3A%2F%2Fwww.theverge.com%2F2022%2F2%2F24%2F22949115%2Finternet-disruptions-ukraine-kharkiv-russia\" rel=\"nofollow noopener\" target=\"_blank\">data from the Internet Outage Detection and Analysis (IODA)<\/a>, an internet connectivity observatory affiliated with Georgia Tech. The Russian-occupied regions of <a data-offer-url=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4372?from=1645401600&amp;until=1646092800\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4372?from=1645401600&amp;until=1646092800&quot;}\" href=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4372?from=1645401600&amp;until=1646092800\" rel=\"nofollow noopener\" target=\"_blank\">Donetsk<\/a> and <a data-offer-url=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4374?from=1645401600&amp;until=1646092800\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4374?from=1645401600&amp;until=1646092800&quot;}\" href=\"https:\/\/ioda.inetintel.cc.gatech.edu\/region\/4374?from=1645401600&amp;until=1646092800\" rel=\"nofollow noopener\" target=\"_blank\">Luhansk<\/a> also experienced drops in connectivity.<\/p>\n<p class=\"paywall\">Since the beginning of the conflict, there <a data-offer-url=\"https:\/\/twitter.com\/iblametom\/status\/1496802553232773120\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/twitter.com\/iblametom\/status\/1496802553232773120&quot;}\" href=\"https:\/\/twitter.com\/iblametom\/status\/1496802553232773120\" rel=\"nofollow noopener\" target=\"_blank\">have been concerns<\/a> that Russia-backed hackers might attempt to disconnect Ukraine\u2019s internet, in the same way they <a data-offer-url=\"https:\/\/www.reuters.com\/article\/us-ukraine-cybersecurity-sandworm-idUSKBN0UM00N20160108\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/www.reuters.com\/article\/us-ukraine-cybersecurity-sandworm-idUSKBN0UM00N20160108&quot;}\" href=\"https:\/\/www.reuters.com\/article\/us-ukraine-cybersecurity-sandworm-idUSKBN0UM00N20160108\" rel=\"nofollow noopener\" target=\"_blank\">took down the country\u2019s power grid in 2015<\/a>. Since February 23, Russia\u2019s cyber army has been carrying out repeated distributed denial of service (DDoS) attacks against government websites, overwhelming them with spurious traffic in order to take them offline. (Ukraine\u2019s own cyber warriors <a href=\"https:\/\/www.wired.com\/story\/ukraine-it-army-russia-war-cyberattacks-ddos\/\">have been retaliating in kind<\/a>.) But despite what happened to Triolan, Russia\u2019s chances of carrying out a <a href=\"https:\/\/www.wired.co.uk\/article\/internet-shutdowns\">full-fledged internet shutdown<\/a> against Ukraine are low.<\/p>\n<p class=\"paywall\">Internet shutdowns, as a rule, are enacted by governments with the ability to order internet service providers (ISPs) to disconnect, throttle, or restrict access to the internet. Staging a shutdown as an external attacker is much harder to pull off. Russia could try aiming its DDoS or other cyberattacks at the border routers that connect an ISP\u2019s network to the global internet, says Doug Madory, director of internet analysis at internet measurement company Kentik, but an attack that could take down a website might have a harder time knocking out internet infrastructure. \u201cIt wouldn&#x27;t be really practical to take the whole country offline with a DDoS attack,\u201d Madory says. \u201cThose routers are pretty robust. And probably, if it was easy, they would have done it by now.\u201d<\/p>\n<p class=\"paywall\">It is not impossible in the abstract: After all, earlier this year an American hacker orchestrated a DDoS attack to <a href=\"https:\/\/www.wired.com\/story\/north-korea-hacker-internet-outage\/\">take down North Korea\u2019s servers<\/a>. But Ukraine has been battle-hardened by its past brushes with Russia\u2019s cyberattacks, and its preparedness and sophistication are much higher than North Korea\u2019s. More important, however, is the fact that any attacker would be presented with a vast number of targets rather than a single vulnerable bullseye. Ukraine\u2019s size and geographic position mean that it is deeply interconnected with Europe\u2019s internet backbone. A spokesperson for the Ukrainian Internet Association says the country boasted over 4,900 ISPs as of December 2021; some of them have been making preparations ahead of the crisis, establishing fail-safe links with each other and setting up new backup network centers, according to <a data-offer-url=\"https:\/\/www.nytimes.com\/2022\/02\/18\/technology\/kazakhstan-internet-russia-ukraine.html\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/www.nytimes.com\/2022\/02\/18\/technology\/kazakhstan-internet-russia-ukraine.html&quot;}\" href=\"https:\/\/www.nytimes.com\/2022\/02\/18\/technology\/kazakhstan-internet-russia-ukraine.html\" rel=\"nofollow noopener\" target=\"_blank\"><em>The New York Times<\/em><\/a><em>.<\/em><\/p>\n<p class=\"paywall\">Ukraine\u2019s internet has developed in a decentralized fashion due to market dynamics, but that has served it well in the past few years, says Tanya Lokot, a professor in digital media and society at Dublin City University. \u201cThere was a realization that it&#x27;s a natural, healthy way to organize the network. When you have a variety of traffic exchange points, you have a variety of internet service providers across the country, a variety of mobile phone operators; it just leads to a more reliable system overall,\u201d Lokot says. She contrasts that model with Russia\u2019s own internet, which is dominated by a few state-controlled operators and which the <a data-offer-url=\"https:\/\/techcrunch.com\/2019\/02\/11\/russia-internet-turn-off-digital-economy-national-program\/\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/techcrunch.com\/2019\/02\/11\/russia-internet-turn-off-digital-economy-national-program\/&quot;}\" href=\"https:\/\/techcrunch.com\/2019\/02\/11\/russia-internet-turn-off-digital-economy-national-program\/\" rel=\"nofollow noopener\" target=\"_blank\">government is working to separate from the global internet through a kill switch.<\/a> \u201cThey [Russia] are trying to centralize control, and in terms of resilience of the system, that is damaging because it&#x27;s much easier to target,\u201d Lokot says.<\/p>\n<p class=\"paywall\">Ukraine\u2019s resilience, however, extends beyond the sheer number of providers. If cyberattacks do not work to take down an ISP, a Russian military determined to disconnect Ukraine might decide to just strike the connectivity infrastructure by bombing server rooms or cutting off fiber optics cables. As a matter of fact, a possible\u2014if unconfirmed\u2014explanation for Thursday\u2019s outage is that <a data-offer-url=\"https:\/\/www.theverge.com\/2022\/2\/24\/22949115\/internet-disruptions-ukraine-kharkiv-russia\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/www.theverge.com\/2022\/2\/24\/22949115\/internet-disruptions-ukraine-kharkiv-russia&quot;}\" href=\"https:\/\/www.theverge.com\/2022\/2\/24\/22949115\/internet-disruptions-ukraine-kharkiv-russia\" rel=\"nofollow noopener\" target=\"_blank\">Russian bombs damaged Triolan\u2019s infrastructure in Kharkiv<\/a>. But it is unclear if a more methodical targeting of network equipment would result in a total internet blackout. In Ukraine\u2019s crowded ISP market, all providers have adapted to be fleet-footed and address even the smallest technical snag swiftly and effectively, according to Vadym Hudyma, a researcher at digital rights advocacy group Digital Security Lab Ukraine.<\/p>\n<p class=\"paywall\">\u201cPartially because of this fierce competition\u2014sometimes accidentally, sometimes not really accidentally\u2014providers can cut their competitors\u2019 network. They would just \u2018accidentally\u2019 cut the cables, for example, while trying to cut their own,\u201d he says. \u201cSo in order to survive in these chaotic scenarios, where sometimes a few meters of your cable can be cut out in the middle of the night, each provider has to be really, really flexible and be able to redirect network flows on the fly.\u201d<\/p>\n<p class=\"paywall\">That does not necessarily mean that the country\u2019s current internet infrastructure would be able to withstand a concerted Russian effort to destroy it. That consideration might have led the Ukrainian government to request\u2014and <a data-offer-url=\"https:\/\/twitter.com\/elonmusk\/status\/1497701484003213317\" class=\"external-link\" data-event-click=\"{&quot;element&quot;:&quot;ExternalLink&quot;,&quot;outgoingURL&quot;:&quot;https:\/\/twitter.com\/elonmusk\/status\/1497701484003213317&quot;}\" href=\"https:\/\/twitter.com\/elonmusk\/status\/1497701484003213317\" rel=\"nofollow noopener\" target=\"_blank\">obtain<\/a>\u2014support from SpaceX CEO Elon Musk to activate his Starlink satellite internet service in the country. But one wonders whether Russia even wants to fully take down the internet in a country it has been pelting with disinformation.<\/p>\n<p class=\"paywall\">\u201cThe Ukrainian government has zero interest in shutting down the internet, obviously,\u201d says Hudyma. \u201cBut the same can be said for the Russians: They are trying to push their propaganda and influence operations on the Ukrainian populations. It is useful for them to have this communication network online.\u201d<\/p>\n<p><a href=\"https:\/\/www.wired.com\/story\/internet-ukraine-russia-cyberattacks\" target=\"bwo\" >https:\/\/www.wired.com\/category\/security\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/media.wired.com\/photos\/621d5681012d204592145b55\/master\/pass\/Why-Russia-Can't-Take-Down-Ukraine%E2%80%99s-internet.jpg\"\/><\/p>\n<p><strong>Credit to Author: Gian M. Volpicelli| Date: Tue, 01 Mar 2022 12:00:00 +0000<\/strong><\/p>\n<p>The besieged country&#8217;s complex internet infrastructure has evolved to promote resiliency.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10378,10607],"tags":[714,21358],"class_list":["post-18400","post","type-post","status-publish","format-standard","hentry","category-security","category-wired","tag-security","tag-security-cyberattacks-and-hacks"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/18400","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=18400"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/18400\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=18400"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=18400"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=18400"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}