stuxnet what has changedstuxnet发生了什么变化.pdfVIP

Future Internet 2012, 4, 672-687; doi:10.3390/fi4030672 OPEN ACCESS future internet ISSN 1999-5903 /journal/futureinternet Article Stuxnet: What Has Changed? Dorothy E. Denning Department of Defense Analysis, Naval Postgraduate School, 589 Dyer Road, Monterey, CA 93943, USA; E-Mail: dedennin@; Tel: +1-831-656-3105 Received: 17 May 2012; in revised form: 25 June 2012 / Accepted: 11 July 2012 / Published: 16 July 2012 Abstract: This paper considers the impact of Stuxnet on cyber-attacks and cyber-defense. It first reviews trends in cyber-weapons and how Stuxnet fits into these trends. Because Stuxnet targeted an industrial control system in order to wreak physical damage, the focus is on weapons that target systems of that type and produce physical effects. The paper then examines the impact of Stuxnet on various domains of action where cyber-attacks play a role, including state-level conflict, terrorism, activism, crime, and pranks. For each domain, it considers the potential for new types of cyber-attacks, especially attacks against industrial control systems, and whether such attacks would be consistent with other trends in the domain. Finally, the paper considers the impact of Stuxnet on cyber-defense. Keywords: cyber-attack; cyber-security; cyber-warfare; industrial control systems 1. Introduction In fall 2010, not long after initial reports of Stuxnet hit the press, I began seeing headlines and stories declaring Stuxnet a game changer. In an a