Though it’s only “in a computer,” a new study from Israel finds that cyber terrorism actually has a distinct psychological impact on individuals. The University of Haifa study found that exposure to cyber-attacks causes significant stress and aggressive behavior, alongside calls for protection and retaliation. “There are, more importantly, grave physiological effects upon a person’s mind and body,” says the lead investigator, Prof. Daphna Canetti of her important findings on the effects of cyber terrorism.
The downside of the Internet age
Get our weekly newsletter directly in your inbox!Sign up
In our modern society, nearly every system is part of a cyber-network: critical water and electrical facilities, banking networks, political institutions, and no small part of national security and military infrastructures. Nevertheless, the vast majority of the public are complacent and, until they are themselves exposed to a personal cyber-attack, see cyber terrorism as nothing more than an inconvenience that disrupts their computer services, Facebook or Gmail accounts or, in the worst case, steals a credit card number. According to the researchers, most civilians do not see a cyber-attack as one which can paralyze essential services for long periods of time or put people’s lives or health in danger.
It is enough to remember the 2008 cyber-attacks in Estonia and Georgia or the Stuxnet worm that devastated Iranian nuclear facilities in 2010, to understand that cyber terrorism can bring chaos and widespread harm. In their current simulation-based study, Canetti and her team of researchers provide the first glimpse of how cyber terrorism affects the psychological and physiological well-being of its victims.
Undermining your personal security on the Internet
In their study, dozens of test subjects were asked to sit in front of a computer and answer a series of random questions. As they filled out the questionnaire, their computer was “hacked” by the “hacktivist” group Anonymous without the test subjects realizing that the attack was part of the experiment. Suddenly, the frightening mask of Anonymous appeared with a warning that the site would crash and sensitive personal data would be publicized to the world at large. After a few more moments, a split Skype screen captured the computer showing a hooded, masked figure typing an unseen message on one side and a live feed of the test subject/victim on the other. Finally, in the third stage of the experiment, the test subjects received a private text message on their personal cell phones: “You’ve been hacked,” and “Anonymous has acquired your contact list.” Immediately before and after the cyber-attacks, respondents gave the researchers a saliva sample to test the level of the hormone Cortisol, a well-known physiological indicator of stress.
The results of the experiment were striking and pointed to a significant increase in psychological and physiological stress among those who experienced the simulated cyber-attack by Anonymous. The same subjects also described how their sense of personal security was undermined and how they worried about future cyber-attacks far more than the control group who did not experience the simulated attacks. “It is important to see how individuals who had previously waved off the threat of cyber terrorism were now significantly more attuned to the danger,” says Prof. Canetti.
The researchers further explained that cyber terrorism is easy for terrorists to exploit at any time or place since all they need is a computer and not a sophisticated organization to plan and execute conventional terrorist attacks. A few terrorists with computers can work hundreds of kilometers away from their target to disable critical infrastructures and bring substantial suffering to civilians.
Similar goals as conventional terrorism
In other studies, currently underway, researchers Canetti, Gross and Waismel-Manor, show how victims of cyber terrorism experience elevated levels of fear and anxiety even when they are not harmed physically themselves. It was also not surprising to learn that victims of cyber terrorism demand vigorous state action/retaliation to protect them from cyber terrorism whether by attacking the terrorist with cyber weapons or by using planes or missiles to destroy the terrorists’ servers, cables, computers and other cyber facilities.
“The primary goal of terrorist organizations is not to cause their victims physical harm but to sow fear and trepidation in the heart of the civilian population. Our study,” explain Canetti, Gross and Waismel-Manor, “shows how a cyber-attack by terrorists can achieve the same goal as conventional terrorism and if the state does not take action against cyber terrorists, civilians will suffer significant harm.