How to Survive Cyberwar STEP ONE: Stop counting on others to protect you

CYBERSECURITY PEOPLE LIKE TO SAY THAT THERE ARE TWO TYPES of organizations those that have been hit and those that do not know it yet. Recent headlines should prove that this joke is largely true. Cybercriminals stole the credit-card information and personal data of millions of people from companies that included Target, Home Depot and JPMorgan Chase. Security researchers discovered fundamental flaws in Internet building blocks, such as the so-called Heartbleed vulnerability in the popular OpenSSL cryptographic software library. A massive data-destruction attack sent Sony Pictures Entertainment back to using pen and paper. Criminals accessed the data of more than 80 million customers of health insurance giant Anthem. And these are just the incidents we know about. In the coming years, cyberattacks will almost certainly intensify, and that is a problem for all of us. Now that everyone is connected in some way to cyberspace through our phones, our laptops, our corporate networks we are all vulnerable. Hacked networks, servers, personal computers and online accounts are a basic resource for cybercriminals and government snoops alike. Your corporate network or personal gaming PC can easily become another tool in the arsenal of criminals or taxpayer-sponsored cyberspies. Compromised computers can be used as step-Ping-stones for the next attack or become part of a "botnet," a malicious network of controlled zombie devices rented out by the hour to launch denial-of-service attacks or distribute spam. In response to threats such as these, the natural reflex of governments in the U.S. and elsewhere is to militarize cyberspace, to attempt to police the digital world using centralized bureaucracies a:nd secret agencies. But this approach will never work. In fact, for reasons we will get to shortly, it might just make things worse. Cybersecurity is like a public health problem. Government agencies such as the Centers for Disease Con; trol and Prevention have important roles to play, but they cannot stop the spread of diseases on their own. They can only do their job if citizens do theirs.