A lecture introducing the Bronze Night revolution that occurred in Estonia. The event is what many scholars consider the first cyber warfare between nations.
2. So what?
■ ‘Nationalists’
■ Historical Monuments
■ Foreign nationals
■ Internal Conflict
■ Fake News
■ Information Warfare
■ Human Domain
■ CyberWar
3. Estonia
■ Dates
– Independence since 1991
■ Population
– 69% Estonian
– 26% Russian
– 5% Other
■ Digital hook ups
– In 2007 Estonia was one of the MOST
connected nations.
– Internet ofThings.
– Utilities controlled digitally.
4. Estonia
■ Dates
– Independence since 1991
■ Population
– 69% Estonian
– 26% Russian
– 5% Other
■ Digital hook ups
– In 2007 Estonia was one of the MOST
connected nations.
– Internet ofThings.
– Utilities controlled digitally.
5. A History of Oppression and Foreign Rule
■ Centuries of successive rule by Germans, Danes, Swedes, Poles and Russians.
■ War of Independence in 1920 led to independence from Russia
■ Initially democratic, a coup in 1934 led to authoritarian rule or “the Era of Silence”
■ DuringWorldWar II Estonia was repeatedly fought over and occupied by the Soviet
Union and Germany,
■ A 1940 invasion from Russia established the Estonian Soviet Socialist Republic. After
the loss of its de facto independence,
■ The Singing Revolution began in 1987 resulting in the restoration of independence
on 20 August 1991.
6. Post Occupation
■ Ethnic Russians opposed Independence movement in 1991
■ Believed Russian intervention inWWII saved Estonia from German rule
■ Also believe Russian occupation provided Estonia with industry and economy
■ Country side is filled with RussianWar memorials – Contentious on both sides…
■ Russians, who tend to see the monuments as memorials to wartime sacrifice.
■ Estonians mostly see it rather as a symbol of a hated foreign occupation.
7. Post Occupation
■ Ethnic Russians opposed Independence movement in 1991
■ Believed Russian intervention inWWII saved Estonia from German rule
■ Also believe Russian occupation provided Estonia with industry and economy
■ Country side is filled with RussianWar memorials – Contentious on both sides…
■ Russians, who tend to see the monuments as memorials to wartime sacrifice.
■ Estonians mostly see it rather as a symbol of a hated foreign occupation.
8. Post Occupation
■ Ethnic Russians opposed Independence movement in 1991
■ Believed Russian intervention inWWII saved Estonia from German rule
■ Also believe Russian occupation provided Estonia with industry and economy
■ Country side is filled with RussianWar memorials – Contentious on both sides…
■ Russians, who tend to see the monuments as memorials to wartime sacrifice.
■ Estonians mostly see it rather as a symbol of a hated foreign occupation.
9. Soldier ofTallinn
■ Built in 1947 as a memorial to the Soviet soldiers who died
liberatingTallinn in 1944.
■ Between 1944 and 1947 at least 12 Russian soldiers were buried
on the grounds.
■ This was done after removal of Estonian monuments and 240
Estonian war graves on the site.
■ Like many Russian monuments, this one was controversial.
■ Many Ethnic Russians gathered at the site to commemorate
national holidays.The gatherings often included display of
Russian flags and symbols.
10. Soldier ofTallinn
■ Built in 1947 as a memorial to the Soviet soldiers who died
liberatingTallinn in 1944.
■ Between 1944 and 1947 at least 12 Russian soldiers were buried
on the grounds.
■ This was done after removal of Estonian monuments and 240
Estonian war graves on the site.
■ Like many Russian monuments, this one was controversial.
■ Many Ethnic Russians gathered at the site to commemorate
national holidays.The gatherings often included display of
Russian flags and symbols.
11. Pathway to Conflict
■ In 2006 a conservative Estonian group
petitioned to have the statue demolished.
■ The president opted to have it relocated.
■ Critics accused the government of collaborating with nationalist groups.
■ Ethnic Russians set up watch shifts at the monument.
■ Conflict at the site erupted, the watch men were ejected by Estonian police and
barricades were erected to shield the removal efforts.
12. Pathway to Conflict
■ In 2006 a conservative Estonian group
petitioned to have the statue demolished.
■ The president opted to have it relocated.
■ Critics accused the government of collaborating with nationalist groups.
■ Ethnic Russians set up watch shifts at the monument.
■ Conflict at the site erupted, the watch men were ejected by Estonian police and
barricades were erected to shield the removal efforts.
13. Organized Riots
■ Following the erection of the barriers pro Russian Riots broke out inTallinn
■ Looting and protests engulfed the streets
■ Court proceedings released in 2012 articulate Russia’s involvement:
– Aleksei Dressen convicted in 2012 of supplying the Russian FSB with actionable
information
– Russian news services reported crimes against Ethnic Russian businesses
– FSB agents distributedVodka and flammable liquids to protestors
– ‘Professional Protestors’ noted inTallinn
– Pro Russian News outlets reported the Statue was being destroyed and the war
graves removed.
14. Organized Riots
■ Following the erection of the barriers pro Russian Riots broke out inTallinn
■ Looting and protests engulfed the streets
■ Court proceedings released in 2012 articulate Russia’s involvement:
– Aleksei Dressen convicted in 2012 of supplying the Russian FSB with actionable
information
– Russian news services reported crimes against Ethnic Russian businesses
– FSB agents distributedVodka and flammable liquids to protestors
– ‘Professional Protestors’ noted inTallinn
– Pro Russian News outlets reported the Statue was being destroyed and the war
graves removed.
15. Organized Riots
■ Following the erection of the barriers pro Russian Riots broke out inTallinn
■ Looting and protests engulfed the streets
■ Court proceedings released in 2012 articulate Russia’s involvement:
– Aleksei Dressen convicted in 2012 of supplying the Russian FSB with actionable
information
– Russian news services reported crimes against Ethnic Russian businesses
– FSB agents distributedVodka and flammable liquids to protestors
– ‘Professional Protestors’ noted inTallinn
– Pro Russian News outlets reported the Statue was being destroyed and the war
graves removed.
16. Organized Riots
■ Following the erection of the barriers pro Russian Riots broke out inTallinn
■ Looting and protests engulfed the streets
■ Court proceedings released in 2012 articulate Russia’s involvement:
– Aleksei Dressen convicted in 2012 of supplying the Russian FSB with actionable
information
– Russian news services reported crimes against Ethnic Russian businesses
– FSB agents distributedVodka and flammable liquids to protestors
– ‘Professional Protestors’ noted inTallinn
– Pro Russian News outlets reported the Statue was being destroyed and the war
graves removed.
2 Nights of riots
1,000 People detained
500 Arrests
Many arrested deported to Russia
156 Injuries
1 Death
But that was just the beginning…
17. Cyber Attack
■ The Riots were largely a distraction
■ The first known cyber attack against and entire nation was launched
■ Online Estonian banks, News, and Government services were attacked
– Distributed DenialOf Service (DDoS) attacks crashed servers
– Billions of Spam messages overwhelmed in-boxes
– Automated online requests reduced bandwidth
■ ATMs, Banking, news, communication, appliances, cellular data (4G), email, etc…
– All of them were knocked off line for weeks.
■ White-hat hackers worked tirelessly to bring Estonia back online.
18. Broader discussion
■ Near Peer threat
■ Advanced PersistentThreat
■ Cyber attacks are difficult to attribute, circumstantial evidence.
■ What is proportional?
■ Who's laws apply?
■ What devices do you have that connect to the internet?
– How are they secured?
– How can they cause harm?
19. Broader discussion
■ Near Peer threat
■ Advanced PersistentThreat
■ Cyber attacks are difficult to attribute, circumstantial evidence.
■ What is proportional?
■ Who's laws apply?
■ What devices do you have that connect to the internet?
– How are they secured?
– How can they cause harm?
21. Selected References
■ DarkTerritory, Fed Kaplan, p. 162
■ ISS: Russia exploiting war memorials to stir up conflicts abroad (https://news.err.ee/746397/iss-russia-
exploiting-war-memorials-to-stir-up-conflicts-abroad)
■ Soviet Memorial Is Reinstalled (https://thelede.blogs.nytimes.com/2007/04/30/soviet-memorial-is-
reinstalled/)
■ As Putin LoomsAndTrump Withdraws, Estonia IsTraining CiviliansTo Fight
(https://www.huffingtonpost.com/entry/putin-trump-estonia_us_5897905de4b09bd304bbd1dd )
■ A cyber-riot (https://www.economist.com/europe/2007/05/10/a-cyber-riot)
■ Soviet statue graveyard,Tallinn, Estonia (https://www.timetravelturtle.com/soviet-statue-graveyard-
tallinn-estonia/)
■ Ansip, Laaneots: Russian agents present during Bronze Night riots (https://news.err.ee/592127/ansip-
laaneots-russian-agents-present-during-bronze-night-riots)
■ How a cyber attack transformed Estonia (https://www.bbc.com/news/39655415)
■ 500 held in fresh Estonia riots (https://www.telegraph.co.uk/news/worldnews/1549981/500-held-in-
fresh-Estonia-riots.html)
■ Cyber attacks ten years on: from disruption to disinformation (http://theconversation.com/cyber-
attacks-ten-years-on-from-disruption-to-disinformation-75773)
■ DUMPINGTHE SOVIET SYMBOLS (HTTPS://WWW.TIMETRAVELTURTLE.COM/SOVIET-STATUE-
GRAVEYARD-TALLINN-ESTONIA/)
Notes de l'éditeur
SO what? WHY are we talking about an event that happened in 2007? That is 12 years ago. How much has changed in 12 years? Well, consider these points… Each of these played a key role into a revolution that took down an entire nation, Estonia, in 2007. IN the worlds today each of these can bee seen in the US landscape as represented by the pictures.
Estonia, has relatively recent independence and a high concentration of non-Estonian nationals. In 2007 one of the most interesting things about Estonia was its use of digitally linked devices. Unlike other nations in that year Estonia was an exploding technical marvel. Much of the nation’s industry, banking, and news services were intertwined with the internet. Net enabled devices were very popular items (SLIDE). The Internet of Things references the idea that every day objects can be connected to the internet to enhance their use and user interface. Here is a toaster that not only links to the internet to give you fresh toast right when you get out of the shower, but it will print (rather, burn) the daily forecast onto your toast. Sometimes I feel as if I were the only one that watched the Terminator movies…
The Internet of Things references the idea that every day objects can be connected to the internet to enhance their use and user interface. Here is a toaster that not only links to the internet to give you fresh toast right when you get out of the shower, but it will print (rather, burn) the daily forecast onto your toast. Sometimes I feel as if I were the only one that watched the Terminator movies…
Estonia has had a long history of foreign rule and oppression. It wasn’t until 1920, that Estonia governed itself. Well at least until 1934 when a coup overthrew the democratic government. Then came WWII where Estonia was on the edge of the battle front first being overthrown by Nazi Germany and then Russia. Russia “invaded” Estonia in 1940 and established the puppet government who renamed the nation the Estonian Soviet Socialist Republic. Effectively the ESSR was a Soviet state. It wasn’t until 1987 that a revolution began that culminated in the 1991 independence of the nation.
Even though Estonia received independence in 1991, it does not mean everything has been great since. As noted earlier there is a large ethnic Russian population still living in Estonia, ~26%. Many of these Russians, and others still residing in Russia believe Estonia has been ungrateful to their sacrifice dating back to WWII. They believe that had it not been for Russian intervention Estonia would have remained under Nazi German rule until the end of the war. Even following the war Russia feels they are owned a debt for bringing industry and governance to the small nation. Because of the long Russian occupation and governance as a satellite state there are numerous Russian monuments littering the countryside in Estonia.
These are very contentious amongst the Estonian population. Ethnic Russians say the monuments are symbols of Russian sacrifice, while Estonians see them as symbols of oppression under communist influence. This last image is one of the Bronze Soldier of Tallinn. This monument is the spark that triggered the inferno.
This last image is one of the Bronze Soldier of Tallinn. This monument is the spark that triggered the inferno.
The solder is seen with red flowers, possibly carnations and roses, placed around his helmet, likely done during a memorial day.
The Bronze Soldier of Tallinn. The monument was built in 1947 to commemorate the soldiers who fell in 1944 liberating Estonia from Germany. The site was chosen as twelve Russian Soldiers were buried on the grounds following the battle. Sadly this was also the site of an Estonian memorial to war dead (from previous conflicts). Around 240 Estonian soldier graves were reused to inter Russian soldiers. Just as many other Russian monuments in the nation this one is controversial. There is still a large number of ethnic Russians in Tallinn who gather on Russian national holidays to commemorate the service of past soldiers. (SLIDE) The solder is seen with red flowers, possibly carnations and roses, placed around his helmet, likely done during a memorial day.
The controversial nature of the statue came to a head in 2006. A conservative Estonian group called for the statue to be destroyed. Tensions rose as the government considered destroying the memorial. However, before leaving office the government passed a law making it illegal to destroy memorials to war dead and also gave provisions for the relocation of the statue and associated bodies. Outrage from Russian groups both in Estonia and in Russia erupted accusing the Estonian government of collaborating with nationalists and fascists. Russian media reproduced images of the statue being vandalized and accused the Estonian government of planning to destroy the monument and dispose of the bodies. As a result Russians living in Tallinn organized a watch group to prevent these actions. Conflict shortly erupted at the site causing police intervention who ordered both groups to leave the scene, no arrests were made.
However, the government took swift action and erected barriers and a tent over the site to protect and obscure excavation from onlookers.
This move by the Estonian Government didn’t set to well with the local Russians, nor with the Kremlin who denounced the actions and called for the Estonian government to step down – a refrain that would echo numerous times in the ensuing months. Following the barriers being erected, news reports that the Estonian government was dismantling the statue began to circulate. As the reports spread new reports saying that looters had begun targeting Russian owned businesses. But, by this time rioting in the streets had already begun. The looters were opportunists, stealing from wherever they could. It wouldn’t be known for years, but the riot was a well organize diversion. How do you organize a riot? Well, it is a tricky cocktail of misinformation, opportunity, empowerment, and vodka. In the days leading to the riot the percentages of passport holding Russians increased in the city of Tallinn. Additionally, Russian businesses weren’t singled out, the reports just bought more people to the streets.
People, Vodka (SLIDE) the police tried to contain the riot for two days but were largely unsuccessful.
People, Vodka (SLIDE) the police tried to contain the riot for two days but were largely unsuccessful.
They did arrest 500 people, detail 1,000 while deporting many of those arrested back to Russia. For an emotionally charged riot, this guy seems really happy with his candy bars, Sprite, and tampons.
The riots were just a distraction however. They were something to put focus on the Estonian government, and make the Russians, and by relativity - Russia, look like the victims. It started slowly at first but the effects grew quickly. First the governmental agencies couldn’t access their systems, the banks lost control of web services. The news tried to alert people to what was going on, however they couldn’t post or broadcast any messages, unless you were a pro-Russian outlet.
But what is the larger implication? Think about it, this was something a nation faced 12 years ago. How many of us had a water heater that connected online 12 years ago? Think about how that could be turned into a weapon. DDoS attacks are ‘old school’ methods. What else is connected to the IoT? What about these?
But what is the larger implication? Think about it, this was something a nation faced 12 years ago. How many of us had a water heater that connected online 12 years ago? Think about how that could be turned into a weapon. DDoS attacks are ‘old school’ methods. What else is connected to the IoT? What about these?