Publications
Partners
Singapore - If someone did just knock North Korea off the internet for half a day, it wouldn't have taken much.
With barely 1 000 internet addresses, one internet service provider and one connection to the outside world via China, North Korea's cyber links are negligible - barely 1% of that of Afghanistan, a similarly impoverished country with a roughly comparable population.
By the same token, closing down the links wouldn't have had much of an effect within North Korea. For internal online communications it uses a closed intranet network, but that was apparently not affected, according to officials across the border in the South.
North Korea is "one of the least connected countries in the world", said Matthew Prince, CEO of US-based CloudFlare, which, among other services, protects websites against web-based attacks.
It's also one of the most vulnerable, said Jim Cowie, chief scientist at Dyn, a US-based internet performance company.
US confrontation
"North Korea, historically, is fairly fragile," he said after internet access to North Korea was restored at 01:46 GMT on Tuesday. Internet links to the country remained snapped for several hours, but Cowie said the country had experienced outages of similar length this year.
The country is at the centre of a confrontation with the US over the hacking of Sony Pictures, but several US officials said the US government was not involved in any cyber action against Pyongyang.
Following the hacking, Sony cancelled the release of a comedy about the fictional assassination of North Korean leader Kim Jong Un.
An outage of this kind could have been caused by one of several factors, according to CloudFlare's Prince.
North Korea may have disabled the internet itself, which could have been as simple as sending one command to a single router - possibly to seal the country from access to the movie and news about the confrontation with Washington.
It could also have been cut by China Unicom, the Chinese network which connects the country to the outside world. China has denied that it was involved.
Another possibility could have been a hardware issue, like for instance, a router breaking down.
Then there's the possibility of an attack - meaning someone directed a flood of internet traffic at websites in North Korea until they, and eventually the country's entire network, ground to a halt.
Internet capacity
This is called a distributed denial of service, or DDoS, attack because the flood is spread across hundreds of computers, called a botnet.
North Korea's internet service is run by a joint venture between its Post and Telecommunications Corporation and Thailand's Loxley Pacific in Thailand. Any attack on the network would have to go through China Unicom's network, though it would be unlikely to affect it.
"This is a provincial network on the back of a provincial network," said Dyn's Cowie.
It's not known how much internet capacity North Korea has - how much traffic its network can tolerate before it is overwhelmed - but Prince reckons it could handle up to a maximum 10GB/s (gigabytes per second).
DDoS attacks nowadays can marshal hundreds of gigabytes per second. "It's not particularly challenging for an individual to launch an attack which completely saturated North Korea's access to the internet," he said.
