Is vigilante hacking legal?

NEWS

Striking back at computers that are attacking a company or home network could be legal under US federal nuisance laws, a technology-law expert said on Thursday. Curtis Karnow, attorney for law firm Sonnenschein, Nath & Rosenthal, stressed during a speech at the Black Hat Security Briefings conference in Seattle that no court case has yet established precedent regarding the use of a limited counterstrike to stop Internet attackers, but that nuisance statutes appear to apply. "It has a lot of promise... if we can get the court to look at it," Karnow said. "The law allows you to go in without permission and abate, or stop, the nuisance. You can even sue the malefactor for the expense of the abatement." Nuisance laws allow the state and private individuals to file lawsuits aimed at ending activities deemed harmful to a community. They have been used to close buildings that house drug dealers and to shut down businesses, such as quarries that create excessive dust in a neighborhood. Karnow pointed to "self help" provisions that allow citizens to take action to mitigate an obvious nuisance as a way of dealing with intruders and so-called zombie servers. Under the law, the victim of an attack could conceivably shut down the offending program on the attacking server -- even if the server belonged to someone else, he said. Karnow's solution could give hope to system administrators whose networks are under attack and who have found that petitioning law enforcement agencies is both slow and frequently ineffective. Administrators on the North American Network Operators Group (NANOG) have for weeks discussed what to do about an estimated 20,000 servers still infected by the Slammer worm that continues to send an enormous amount of traffic though the Net. A similar number of computers are believed to be infected by the Code Red and Nimda worms and pose a threat to servers that haven't properly been patched. However, Karnow warned that counterattacks would have to be used judiciously and only to a limited extent. "The real problem is collateral damage," he said. "Suppose you screw up -- you hit the wrong machine (or) you shut down an entire computer rather than just a process. What happens if you are sued, not by a bad guy, but by an intermediary who was affected by your counterstrike?" Such issues should continue to deter anyone considering hacking back, he said. There are only a few known cases of defensive hacking. After the Code Red worm struck, a security expert created a tool that deleted the Code Red program and restarted the infected server. The FBI pulled evidence from a Russian server without authorisation after they successfully arrested two suspected Russian computer hackers in a sting operation. "It is a completely untested argument, but I think it is really worth exploring, because it has the notion of self help and allows aggressive action to abate the attack," he said. However, he warned anyone from trying to be "Version 1.0" in testing the law. "The judge who just learned how to use his cell phone is the person who is deciding on these technology issues," he said. "And this is beyond the bleeding edge of the law."

For all security-related news, including updates on the latest viruses, hacking exploits and patches, check out ZDNet UK's Security News Section. Let the editors know what you think in the Mailroom.

Post your comment

In order to post a comment you need to be registered and logged in.

You can also log in with Facebook. Log in or create your ZDNet UK account below

By signing up for this service, you indicate that you agree to our Terms and Conditions and have read and understood our Privacy Policy. Questions about membership? Find the answers in the Community FAQ

ZDNet UK Live

> I'm told it's somewhat annoying when people have their Macs stolen > and Apple stores treat the thief as the owner, but there you go. Ouch,...

2 hours ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

@kevinmchapman. OK, I acknowledge that 'most' was a gratuitous throwaway comment as an afterthought and too presumptuous. As to proof, as you...

7 hours ago by Moley on A tale of two distros: Ubuntu and Linux Mint

@BrownieBoy > Works really well for thieves.... >> Nice attempt to deflect the argument by tossing in a point that's totally >> irrelevant, even...

8 hours ago by Jack Schofield on AMD Ultrathins to challenge Intel Ultrabooks

fantastic that the so called piracy bills have been withdrawn. however, these anti-democracy supporters are still in the shadows so lets be alert...

9 hours ago by raskolnikof on SOPA, Protect IP support wavers in face of online protest

Please God no; teach them anything you like - thinking rationally, the uses and misuses of data, what data is and what it's not - but leave the...

11 hours ago by via Facebook on Kids are the future. Teach ’em to code.

@Jack, > Works really well for thieves.... Nice attempt to deflect the argument by tossing in a point that's totally irrelevant, even it were...

1 day ago by BrownieBoy on AMD Ultrathins to challenge Intel Ultrabooks

Make that 13 people now - I got refused today at Manchester airport. I thought I was up to date on this legislation - I knew of the EU ruling from...

1 day ago by bootlegger on UK airport body scans will not be opt out

Don't forget to check out apps like GoodReader or SlideShark either, they're indispensible for people on the go in presentation situations. Best...

1 day ago by tinycg on Four top iPad apps for people on the move

Well it seems there is something a number of us agree on. Why is the Ubuntu Unity launcher so ugly? I thought perhaps it was something to do with...

1 day ago by TerryRK on A tale of two distros: Ubuntu and Linux Mint

Duplicate comments are not made intentionally. Its very good to know that now you are keeping check on this problem because sometimes a commenter...

2 days ago by Freebies202 on Microsoft fixes blog comments, speeds up blogs with open source

"the very significant number of users" and "many (most) of us" - you have no evidence for these statements. It is a fact that most users are saying...

2 days ago by kevinmchapman on A tale of two distros: Ubuntu and Linux Mint