Incident: Hacker Disrupts Police Websites with DDoS Attacks in Revenge

Published Date: 2019-08-12

Postmortem Analysis
Timeline 1. The software failure incident involving Liam Watts hacking into police websites happened in August last year [88402]. Therefore, the estimated timeline for the incident would be August 2018.
System 1. Greater Manchester Police (GMP) website 2. Cheshire Police websites 3. Distributed Denial of Service (DDoS) attack prevention systems 4. Botnets 5. Cybersecurity measures in place to prevent unauthorized access to computer systems 6. Internet access restrictions and monitoring systems
Responsible Organization 1. Liam Watts - The hacker who carried out cyber attacks on police websites as revenge for being convicted of a bomb hoax was responsible for causing the software failure incident [88402].
Impacted Organization 1. Greater Manchester Police (GMP) website 2. Cheshire Police sites 3. People trying to report crime online 4. 3,000 to 4,000 daily visitors to the Cheshire Police website 5. College targeted in a previous attack by the hacker [Article 88402]
Software Causes 1. The software cause of the failure incident was the use of malicious software in distributed denial of service (DDoS) attacks, which targeted the computer systems of the Greater Manchester Police and Cheshire Police websites [88402].
Non-software Causes 1. Personal vendetta: The hacker, Liam Watts, carried out the cyber attacks on police websites as revenge for being convicted of a bomb hoax [88402].
Impacts 1. The attack on Cheshire Police websites by Liam Watts stopped people from reporting crime online for a full weekend, affecting the public's ability to access the service [Article 88402]. 2. The attack meant that the 3,000 to 4,000 people who normally visit the Cheshire Police website daily were unable to access it, causing significant disruption [Article 88402].
Preventions 1. Implementing robust cybersecurity measures to protect against unauthorized access and cyber attacks [88402]. 2. Conducting regular security audits and vulnerability assessments to identify and address potential weaknesses in the system [88402]. 3. Providing cybersecurity training and awareness programs for employees to prevent insider threats and educate them on safe computing practices [88402]. 4. Monitoring and analyzing network traffic for any suspicious activities that could indicate a potential cyber attack [88402]. 5. Enhancing incident response protocols to quickly detect and mitigate cyber attacks when they occur [88402].
Fixes 1. Enhancing cybersecurity measures to prevent unauthorized access and attacks on police websites [88402]
References 1. Court proceedings at Chester Crown Court [Article 88402] 2. Statements from Chris Taylor, the prosecutor [Article 88402] 3. Statements from Patrick Williamson, the defense attorney [Article 88402] 4. Detective Sergeant Chris Maddocks from Cheshire Constabulary cyber crime unit [Article 88402]

Software Taxonomy of Faults

Category Option Rationale
Recurring unknown The software failure incident involving a hack on police websites by Liam Watts does not indicate any previous similar incidents happening again at the same organization (one_organization) or at other organizations (multiple_organization) in the provided article [88402].
Phase (Design/Operation) design, operation (a) The software failure incident in Article 88402 was primarily due to design factors introduced during system development. The hacker, Liam Watts, targeted police websites through distributed denial of service (DDoS) attacks, which involved using malicious software to create a botnet to overload the websites. This attack was a result of intentional actions taken by the hacker to impair the operation of the computer systems [88402]. (b) Additionally, the software failure incident in Article 88402 also involved operation factors introduced by the misuse of the system. Watts carried out the attacks on police websites as a form of revenge for being convicted of a bomb hoax. His actions disrupted the normal operation of the websites, with the attack on Cheshire Police stopping people from reporting crimes online for a full weekend. This disruption was a direct result of the misuse of the system by the hacker [88402].
Boundary (Internal/External) within_system (a) within_system: The software failure incident in this case was caused by a hacker, Liam Watts, who carried out cyber attacks on police websites using distributed denial of service (DDoS) attacks [Article 88402]. Watts targeted the Greater Manchester Police (GMP) website and Cheshire Police sites, causing disruptions that prevented access to the websites and stopped people from reporting crimes online. These attacks were carried out using malicious software to create a botnet that overloaded the targeted websites, leading to the impairment of the operation of the computer systems within the police websites. Watts admitted to carrying out these attacks, which were initiated from within the system itself.
Nature (Human/Non-human) non-human_actions, human_actions (a) The software failure incident in this case was primarily due to non-human actions, specifically a distributed denial of service (DDoS) attack carried out by the hacker, Liam Watts. The attack involved the use of malicious software to create a botnet that targeted the police websites, overloading them and preventing access [88402]. (b) However, human actions also played a significant role in this software failure incident. Liam Watts, the hacker, intentionally carried out the cyber attacks on the police websites as an act of revenge for being convicted of a bomb hoax. His actions of targeting the websites and launching the DDoS attacks were deliberate and aimed at impairing the operation of the computer systems [88402].
Dimension (Hardware/Software) software (a) The software failure incident reported in Article 88402 was not due to hardware issues but rather a deliberate cyber attack carried out by a hacker named Liam Watts. Watts targeted the Greater Manchester Police website and Cheshire Police sites using distributed denial of service (DDoS) attacks, which overloaded the websites and prevented access to them. This incident was a result of malicious software being used to create a botnet to target and disrupt the police websites [88402]. (b) The software failure incident in Article 88402 originated from software-related factors. The attacks on the police websites were carried out using DDoS attacks, which involved the use of malicious software to overload the websites and prevent access. The attacker, Liam Watts, admitted to carrying out these attacks with the intent to impair the operation of the computer systems, highlighting a software-related failure in terms of cybersecurity vulnerabilities exploited by the hacker [88402].
Objective (Malicious/Non-malicious) malicious (a) The software failure incident in this case was malicious. Liam Watts hacked into police websites as a revenge for being convicted of a bomb hoax. He carried out cyber attacks on Greater Manchester Police and Cheshire Police websites with the intent to impair their operation and prevent/hinder access to the computers [Article 88402].
Intent (Poor/Accidental Decisions) poor_decisions (a) The intent of the software failure incident in this case was related to poor_decisions. The hacker, Liam Watts, targeted police websites in a revengeful act after being convicted of a bomb hoax. He carried out cyber attacks on the Greater Manchester Police website and Cheshire Police sites with the intent to impair their operation and prevent/hinder access to the computer systems [Article 88402]. This incident was a deliberate and malicious act driven by personal motives rather than accidental decisions.
Capability (Incompetence/Accidental) accidental (a) The software failure incident in Article 88402 was not due to development incompetence but rather a deliberate act of hacking by Liam Watts as a form of revenge for being convicted of a bomb hoax. Watts targeted police websites through distributed denial of service (DDoS) attacks, demonstrating a level of technical expertise in carrying out cyber attacks [88402]. (b) The software failure incident in Article 88402 was accidental. Liam Watts intentionally carried out cyber attacks on police websites as a form of revenge, rather than accidentally causing the failure. Watts used malicious software to create a botnet and overload the websites, demonstrating a deliberate and planned action rather than an accidental introduction of contributing factors [88402].
Duration temporary The software failure incident described in the article was temporary. The incident involved a cyber attack on police websites by a hacker named Liam Watts, which resulted in the websites being inaccessible for a weekend. This temporary failure was caused by the distributed denial of service (DDoS) attacks carried out by the hacker, which overloaded the websites and prevented access to them [Article 88402].
Behaviour omission, other (a) crash: The software failure incident in this case did not involve a crash where the system loses state and does not perform any of its intended functions. The attack on the police websites was a deliberate act by the hacker to impair the operation of the computer systems [Article 88402]. (b) omission: The software failure incident can be categorized as an omission where the system omitted to perform its intended functions at instances. The attack on the Cheshire Police websites stopped people from reporting crime online for a full weekend, impacting the normal functioning of the system [Article 88402]. (c) timing: The software failure incident did not involve a timing issue where the system performed its intended functions correctly but too late or too early. The attack on the police websites was aimed at disrupting the services rather than delaying them [Article 88402]. (d) value: The software failure incident did not involve the system performing its intended functions incorrectly. The attack was focused on preventing access to the computer systems rather than causing them to function incorrectly [Article 88402]. (e) byzantine: The software failure incident did not exhibit a byzantine behavior where the system behaves erroneously with inconsistent responses and interactions. The attack was a deliberate and targeted effort to disrupt the police websites [Article 88402]. (f) other: The software failure incident can be categorized as a deliberate cyber attack aimed at impairing the operation of the computer systems through distributed denial of service (DDoS) attacks. The attacker used malicious software to create a botnet to overload the websites, preventing access and impacting the services provided by the police [Article 88402].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, delay (d) property: People's material goods, money, or data was impacted due to the software failure The software failure incident involving Liam Watts hacking into police websites resulted in property being impacted. The attack on Cheshire Police websites stopped people from reporting crime online for a full weekend, and it meant that the 3,000 to 4,000 people who normally visit the site daily were unable to access it [88402].
Domain information, government (a) The failed system was related to the information industry as it targeted police websites, affecting the Greater Manchester Police (GMP) website and Cheshire Police sites [Article 88402].

Sources

Back to List