The Stuxnet computer worm is widely considered to be a U.S.-Israeli cyber weapon crafted to wreak havoc in Iran’s nuclear enrichment plants. But with the identity of the perpetrators still unclear, it might be time to start seeking some alternative explanations. After all, suppose Stuxnet also caught the United States’ defense and intelligence communities with their pants down? If this is the case, then a very different story could emerge, one involving faceless groups of Russians and their highly sophisticated cyber warriors.
In brief, the case for the United States having designed and developed Stuxnet is as follows: First, neither the United States nor Israel wants Iran to develop nuclear weapons. The worm, then, is seen as likely part of a covert strategy to delay or destroy Iran’s nuclear infrastructure while stopping short of war.
The weapon was designed to target a specific version of the Siemens SCADA programmable logic controls (PLC) operating a specific configuration and number of cascading centrifuges found in Iran. Some analysts point to the fact that there were vulnerability assessments being run at Idaho National Labs on Siemens PLC software. Others note that the design of the cyber weapon closely fit Richard Clark’s description in Cyber War of a well-designed and ethically thought out weapon limiting collateral damage due to a vast army of lawyers scrutinizing the effects. The malware-analyst community, meanwhile, points to digital code strings such as “b:myrtus” taken from biblical events important to Israeli identity. And, as the story goes, after the political decisions, vulnerability assessments, and weapon design took place, either an Iranian agent was found to take the USB memory stick into the nuclear facility, or all the computers around the plants were infected with Stuxnet via the conficker worm.
However, what about the case for Russian development and deployment? The Russians don’t support an Iranian indigenous nuclear capability. Their calculus is that their companies’ profit margins will benefit as long as the Iranians keep Russian scientists and engineers in country, who can oversee Iranian nuclear progress. Using its unique insights, Russia then plays a Byzantine game of delay and diplomacy. Delaying a program on technical grounds can’t go on indefinitely. At the same time, their involvement in the nuclear program is leverage in Russo-American negotiations.
Then there’s so-called nuclear gangsterism that was rampant in Chechnya and other breakaway regions over the past two decades. In 1995, for example, Chechen rebels planted a “dirty bomb” in Moscow’s Izmailovsky Park. Today, nuclear material is much more secure in Russia thanks to Russo-American cooperation. But should Iran develop a full-blown nuclear capability, Russian national security would be put at risk as Chechen or other violent-Islamic extremist and nationalist rebels look to Iran’s version of nuclear entrepreneur AQ Kahn to gain access to nuclear technology. Keeping access to Iran’s nuclear program, while keeping the Iranians far from the capacity to “break out” into full nuclear material production, is the balancing act Russia must play.