The European Union’s executive on Thursday called for tougher EU laws on cyber-crime as it warned that hijacked computer networks had already caused major security problems in a number of member states.
p
EU law already covers computer offenses such as hacking and spreading viruses. But remote-controlled attacks, which take over innocent computers and use them to launch raids on information systems, are not yet dealt with at an EU level.
p
The European Commission is therefore proposing that EU states update the rules by outlawing remote attacks — the so-called robot nets or botnets — and the creation of the software which runs them, and imposing a maximum jail term of two years on offenders.
p
With the help of malicious software, it is possible to take control over a large number of computers and steal credit card numbers, find sensitive information or launch large-scale attacks. It is time for us to step up our efforts against cyber crime, the EU’s commissioner for home affairs, Cecilia Malmstrom, said.
p
The proposals also call for better coordination between police and set a maximum delay of 8 hours in answering urgent requests for help.
p
A botnet is created when a hacker uses malicious software to take control of someone else’s computer, and then uses that computer as a stepping-stone to take control of still more.
p
The resulting network of vampire computers can be used to launch massive attacks on information systems, governments and businesses, while making it extremely difficult for police to track down who started the raid.
p
Estonia was the highest-profile victim of such botnets, when pro-Russian hackers in 2007 tried to cripple the government’s computer systems. Last year, France, Germany and Britain all suffered major attacks which temporarily hamstrung their defense ministries.