J epCps J EXERCISE EXERCISE EXERCISE -- EUGIBLE RECEIVER 97 3261 2 I NATIONAL PRIDE UPDATE o Ill ' 71627050 zz a EXERCISE EXERCISE EXERCISE EUGIBLE RECEIVER 97 COMMENT o ''National Pride hijacked before the attack o Friends may refer to North Koreans o Activity consistent with KN naval SOF operations 71627051 EXERCISE EXERCISE EXERCISE -- ELIGIBLE RECEIVER 97 NORTH EMERGING TIES KN delegto I Tokyo conference Vahid in contact with Iranian 29 May KN-IR - dele at Tokyo erence Vahid and 2 IR I at electric plant oVahid on ship oVahid contacts Canada - II p- 42 COMMENT - Circumstantial evidence of North Koreanllranian cooperation - State support likely but no direct evidence 71 627052 EXERCISE EXERCISE EXERCISE EUGIBLE RECEIVER 97 6232 I TERRORIST CULPABILITY o Ill o Iran North Korea appear responsible for ongoing terrorist campaign despite only minor previous links - Vahid and Asadi presence on Philippine ship points to Iranian involvement 71627053 c ggpET EXERCISE EXERCISE EXERCISE -- ELIGIBLE RECEIVER 97 INTERNAL INSTABILITY COMMENT o Food problems continue o US DOE officials working at Yongbyon - No unusual developments reported o No additional evidence of internal upheaval 71627056 II EXERCISE EXERCISE EXERCISE ELIGIBLE RECEIVER 97 SiiZ - ---- SURPRISE ATTACK OPTION o North Korea capable of attacking with limited preparations o Major detectable preparations -- none reported - 71627057 Removal of mines clearing DMZ Lateral comms between corps Activation of Supreme Command Activity across DMZ Increased tactical recce I 622 EXERCISE EXERCISE EXERCISE - ELIGIBLE RECENER 97 o ooo111 IRANIAN MOTIVES TO WORK WITH KN o Carrot and stick tactics to lift US sanctions o Reduce US influence in Persian Gulf 71627058 sssssr EXERCISE EXERCISE EXERCISE -- ELIGIBLE RECEIVER 97 STATUS OF IW INDICATORS o 25 active of 150 indicators of IW attack - PSY OPS 5 of 19 - DESTRUCTION 4of14 - INTEL OPS 3 of 26 - COMPUTER NETWORK A TTACK 10 of 50 - EW 1of12 - MISC ACTS 2 of 5 - No indicators active for o Deception defensive 10 71627059 77 775 I EXERCISE EXERCISE EXERCISE -- ELIGIBLE RECEIVER 97 STATUS OF INDICATORS o 10 of 50 active-computer network attack attempts to - 71627065 Remotely access protected systems Implant malicious software to destroy data and deny service Penetrate attack of US systems Virus incident reports Report of attack on networks originating from US government domains Access possession of passwords to US networks Searching for downloading of intrusion software techniques Denial of service attacks on networks Theft of computer systems DISA COMSPOT's communications incidents actions etc I ' EXERCISE EXERCISE EXERCISE -- ELIGIBLE RECEIVER 97 ASSESSMENT Ill o KN Iran probably cooperating o Significant danger of simultaneous large scale 10 IW attack - Events have been cumulative increasingly more violent and potentially more dangerous - Moved from civil to military targets - Spread from CONUS to PACOM o IW assailants increasingly sophisticated - IW attacks have probed to find weaknesses in US systems - IW probes have practiced rehearsed access o Capable of large-scale civil and military disruptions - Also capable of more destructive attacks on selective targets 71627060 3 9 o This document is from the holdings of The National Security Archive Suite 701 Gelman Library The George Washington University 2130 H Street NW Washington D C 20037 Phone 202 994-7000 Fax 202 994-7005 nsarchiv@gwu edu