OTTAWA - A cyber-attack on key infrastructure such as the power grid could be devastating for Canada, says a recently retired intelligence officer.
Ray Boisvert, a former assistant director of the Canadian Security Intelligence Service, told a gathering of academics and security professionals Friday that a digital assault would mean malfunctioning cash machines, no gas at the pumps and empty store shelves.
"One significant cyber-attack on a critical infrastructure node will bring calamity upon all of us," Boisvert said during a panel discussion sponsored by the Canadian Association for Security and Intelligence Studies.
"I will say categorically from my experience that the cyber-threat is real, it's extremely significant, and it's having a big impact on both public and private-sector interests. And it is fundamentally undermining our future prosperity as a nation."
Governments and many companies are only now beginning to face the threat from rogue states bent on doing damage or stealing secrets, said Boisvert, who left CSIS about six months ago to become a private consultant.
Boisvert pointed to "worrisome" countries including China, Russia, North Korea and Iran, but stressed the list is much longer.
While everyone from cyber-criminals to pimply-faced teens in their basements pose a challenge, the state-led threats are "the most severe and the most important for us all."
In the information age, business people and bureaucrats insist on ready access to information wherever they go, Boisvert said. "Having those taps wide open then causes complexities and vulnerabilities which are being severely exploited by a number of threat actors out there."
Some in the line of fire are wilfully blind to the cyber-problem because it's so complex and often there is no immediate pain when a computer network is breached, he said.
"Wishing it away is not an option."
Federal auditor general Michael Ferguson recently found the government had been slow to mount an effective response to the rapidly growing threat of cyber-attacks on crucial systems.
The government had made only limited progress in shoring up computer networks and had lagged in building partnerships with other players, Ferguson concluded.
There must be better links between government and business to share information and intelligence on cyber-threats, Boisvert said.
Governments should adopt methods now applied by businesses, such as banks, which have invested time and resources in better security, he said.
Revamped laws, diplomatic efforts and even military action to strike back against the more serious threats will also be necessary, Boisvert added. But money will be needed most of all.
"There are a number of solutions to help combat the whole cyber-threat," he said.
"But rest assured they will be expensive, they're complicated and they'll take continuous reinvestment of capital and attention from both governments and private sector (players) to eradicate the problem — or at least be able to counter it effectively."
In his report, the auditor general pointed out the federal cyber-incident response centre doesn't even operate around the clock.
Public Safety Minister Vic Toews acknowledged that cyber-threats were not considered a priority until recently.
They are not the only vexing security issues posed by advancing technology.
Machines are beginning to progress to the point where they can sift through and make sense of huge amounts of information, said Duncan Stewart of the National Research Council's security and disruptive technologies division.
It means that 20 years from now, people — including "the bad guys, or anybody who wants to do any type of espionage" — will have a digital expert in their pockets, Stewart told the conference.
"These machines will be better analysts in many, many ways than any one person in this room right now," he said. "They certainly can process more data. And as we go forward in a learning capacity, they will learn how to analyze the data."
Another "huge problem" for federal officials is the prospect of agro-terrorism — an attack involving a biological agent on animals, plants or food stocks, said Peter Uhthoff of the Public Health Agency of Canada.
"We could easily introduce a disease into the Canadian forest industry that would wipe it out, without it being very complicated," he said.
"It's something that would be very, very tough to try to stop."
#20 London, Ontario
<strong>2010 RANK:</strong> 22 <br><em>Springbank Park, London Ont. </em>
#19 Regina, Saskatchewan
<strong>2010 RANK:</strong> 21 <br><em>Downtown Regina, Saskatchewan.</em>
#18 Kingston, Ontario
<strong>2010 RANK:</strong> 28<br><em>Radisson Plaza Hotel and the Harbourfront Kingston, Ontario</em>
#17 Barrie, Ontario
<strong>2010 RANK:</strong> 23<br><em>On the road, Barrie, Ontario.</em>
#16 Halifax, Nova Scotia
<strong>2010 RANK:</strong> 31<br><em>Halifax Harbour</em>
#15 Ottawa, Ontario
<strong>2010 RANK:</strong> 11<br><em>Parliament Hill, Ottawa, Ont. </em>
#14 Markham, Ontario
<strong>2010 RANK:</strong> 7<br>
#13 Kelowna, British Columbia
<strong>2010 RANK:</strong> 9<br><em>Kelowna, B.C.</em>
#12 Kitchener, Ontario.
<strong>2010 RANK:</strong> 10<br><em>Kitchener, Ontario.</em>
#11 Oakville, Ontario
<strong>2010 RANK:</strong> 6<br><em>Oakville Post Office.</em>
#10 Victoria, British Columbia
<strong>2010 RANK:</strong> 12<br>Victoria had the analysis' highest number of Wi-Fi hotspots, at 170 per 100,000 population. However, spending on internet access and personal computers was the lowest out of the top 10 cities.
#9 Edmonton, Alberta
<strong>2010 RANK:</strong> 13<br>Edmonton scored high in the categories of Wi-Fi hotspots, spending on personal computers and Internet access. Social networking use by Edmonton residents was the lowest in the analysis, at 37 per cent of the population. <br><em> Edmonton Skyline from Sherwood Park</em>
#8 New Westminster, British Columbia
<strong>2010 RANK:</strong> 16<br>New Westminster rose significantly in the rankings, up to #8 from #16 in 2010. There were 34 Wi-Fi hotspots per 100,000 population and 48 per cent of New Westminster residents use social networking. <br> <em>British Columbia's Fraser River</em>
#7 Toronto, Ontario
<strong>2010 RANK:</strong> 8<br>Toronto's spending on personal computers was among the highest. The number of Wi-Fi hotspots was also high. But social networking use among Toronto residents was near average.
#6 Fredericton, New Brunswick
<strong>2010 RANK:</strong> 14<br> Social networking use was the highest in the analysis, at 60 per centof the population. <br> <em>New Brunswick Fredericton October 2011 Gavin Langille-18. </em>
#5 Calgary, Alberta
<strong>2010 RANK:</strong> 5<br>Calgary had the lowest ranking among the cybercrime data in the list of top ten Canadian cites, but the second-highest spending on Internet use and personal computers. <br><em>Beltline Area, Calgary, Alberta, (January 29, 2007).</em>
#4 Langley, British Columbia
<strong>2010 RANK:</strong> 3<br> Langley dropped slightly in this year's analysis, falling one spot in the rankings from #3 in 2010. Reported cybercrime data was all in the 90th percentile. <br><em>Fort Langley British Columbia.</em>
#3 Vancouver, British Columbia
<strong>2010 RANK:</strong> 4<br>Vancouver rose one spot in the rankings since the 2010 analysis. It had the third-highest incidence of spamming IP addresses, and a high level among the other cybercrime data sets. Vancouver also had the second-highest number of Wi-Fi hotspots per capita and high social networking use.
#2 Port Coquitlam, British Columbia
<strong>2010 RANK:</strong> 2<br>Port Coquitlam, B.C. again ranked second in the analysis, scoring at the top in the majority of the categories surveyed, including cybercrime data per capita. Port Coquitlam also reported high numbers of social networking use. <br> <em>Canadian Pacific Railway yard, Port Coquitlam BC</em>
#1 Burlington, Ontario
Burlington maintained its #1 ranking from the 2010 analysis. It reported the highest scores among the cybercrime data per capita in three of the four cybercrime data factors. Burlington's internet use and computer expenditures were also high.