Al Qaeda cyber alarm sounded

There is a 50 percent chance that the next time al Qaeda terrorists strike the United States, their attack will include a cyberattack, Rep. Lamar Smith (R-Texas) warned.

In closed-door briefings for members of Congress, Smith said officials from federal law enforcement and intelligence-gathering agencies disclosed that al Qaeda operatives have been exploring U.S. Web sites and probing the electronic infrastructure of American companies in search of ways to disable power and water supplies, disrupt phone service and damage other parts of the critical infrastructure.

A successful cyberattack could cause billions of dollars in damage and lead to thousands of deaths, Smith told a gathering of congressional staffers and technology industry representatives July 23.

Al Qaeda members seem especially interested in how they might disable the systems that provide electricity to California, Smith said. If it were to succeed, hospitals could be left powerless, causing patients to die, and commerce and much other activity would come to a halt, causing billions of dollars of economic damage.

Such a cyberattack could be used to dramatically increase the damage done by a physical attack, said Smith, who is chairman of the House Judiciary Committee's Crime, Terrorism and Homeland Security Subcommittee.

About 90 percent of the nation's critical infrastructure is privately owned, and much of it remains vulnerable to cyberattacks, according to the Business Software Alliance, a technology industry association.

A June survey by the BSA showed that 74 percent of the technology professionals asked thought it was "nearly certain" that there will be a cyberattack against American financial institutions in the next 12 months. Respondents said that attacks also are likely against communications systems, transportation infrastructure, water systems, dams and power plants, the survey concluded.

Fifty-nine percent of those surveyed said they expect a major cyberattack against the federal government in the next 12 months. And they said there is a gap between the likelihood of an attack and the government's ability to respond to it. The findings prompted BSA president Robert Holleyman to call for creation of a Cyber Security Agency within the Homeland Security Department.

In Congress, the House this month passed Smith's Cyber Security Enhancement Act, but the bill focus more on catching, prosecuting and punishing cybercriminals than on strengthening systems to withstand cyberattacks.