Cyber Terrorism Taxonomies: Definition, Targets, Patterns, Risk Factors, and Mitigation Strategies

Cyber-Terrorism Definition

Cyber terrorism is a new phenomenon or form of cybercrime which has its own aims, characteristics and other attributes (DCSINT, 2006). The concept of cyber terrorism has been defined differently by researchers and industry reporters. In the early eighties, cyber terrorism was seen as a combination of the physical and cyber world threats involving online computer and network interactions where users can exchange information in a real time (Samuel, Osman, Al-Khasawneh, & Duhaim, 2014). Cyber terrorism was defined as shutdown due to attacks on critical national infrastructures or intimidation of civilians or governmental employees, with the use of computer networks and technologies (Lewis, 2002). Cyber terrorism was also seen as unlawful attacks against computers, communication networks, information systems and stored information with the purpose of intimidating a government or its people in furtherance of political or social objectives. The attacks resulted in violence against individuals, groups or properties, or harm which generated fear (Denning, 2000).

Cyber terrorism was also defined as an electronic attack from cyberspace conducted using internal and external networks with different motives and directed at a particular target (Warren, 2002). This definition highlights the source of the attack which can be from inside or outside an organization. It has been reported that attacks are much more dangerous when done by insiders as internal terrorists have considerable access to the networks and systems as employees (Jalil, 2003). The US Federal Bureau of Investigation (FBI) defines cyber terrorism as a criminal act perpetrated by the use of computer systems and telecommunication networks causing violence, destruction and/or disruption of services to create fear due to confusion and uncertainty within a given group or population, with the goal of motivating a government or population to conform to a particular political, social, or ideological agenda (DCSINT, 2006). Another study considered cyber terrorism to be an activity done using information technology systems by governmental or non-governmental organizations against individuals to create intimidation with an ultimate political, religious or social goal (Macdonald, Jarvis, & Chen, 2013).