Last week, General Alexander (director of NSA and commander, USCYBERCOM) spoke at the RSA conference in San Francisco. He pointed out the the explosion of technology over the past 10 years. That users went from an average of 250MB of personal files, to over 128GB. The fact that 70% of Americans online are on Facebook - that 600M users worldwide are as well. This, mixed with the huge advances in programming (Watson and Deep Blue) lets us know that we do … [Read more...]
Continued Evolution of DoD Cyber Policy
February 16, 2011 By
The deputy secretary of Defense, the Honorable William J. Lynn III, delivered remarks at the RSA conference that captures a snapshot of DoD cyber policies. This is consistent with the continually improving path the department has been on for the last several years. I recommend a good read of the remarks and hope you share my excitement over the great work here. I would only add that I continue to hear from practitioners of cyber security in the field … [Read more...]
The most well thought out research agenda for cyber security I have seen to date
February 2, 2011 By
Opinion: the most mature research agenda on the topic of cyber security is the one established by our nation's Department of Homeland Security. I'm keeping an open mind, and would love to learn of other cyber security research agenda's that might be as well defined. But I have to tell you I have seen research programs associated with cyber for years and this one is impressive. The details of the topic areas of this research activity are embedded in a … [Read more...]
Attend FedScoop CyberSecurity Summit
January 24, 2011 By
Friends at FedScoop have a tremendous reputation for helping the community think through today's challenges. One way they are doing that is by bringing together government/industry/academia and citizens to dialog directly and then capturing the results in blogs and video. I expect that model will deliver a great day of cyber security discussion on Thursday 24 February 2011 when their Cybersecurity Summit is held in DC. For more information please … [Read more...]
Federal Cyber Security: Missions, Initiatives, Opportunities and Risks
January 17, 2011 By
Are you striving to know more about federal approaches to cyber security? In what looks to be one of the best conferences on this topic for 2011, the American Institute of Engineers (AIE) and the Technology Training Corporation (TTC) are presenting Cyber Security: Missions, Initiatives, Opportunities and Risks in Washington DC from 16-18 March 2011. The agenda indicates this will be a great session, with a slate of interesting speakers from … [Read more...]
Ponemon Institute Cost of Cyber Crime Study
December 26, 2010 By
This July, the Ponemon Institute performed a benchmark study of US companies to identify the cost that companies can attribute to cyber incidents. There are a whole host of different ways in which a company can be targeted by a cyber attack, including corporate espionage. To complete their research, Ponemon examined 45 organizations, examining thousands of independent cyber attacks. They found that attacks varied between $1M and $52M, averaging … [Read more...]
Defending Against Stuxnet Type Threats
October 5, 2010 By
The following article by renowned security capability developer Dr. Anup Ghosh was was originally posted at the Invincea blog and is reposted here with the author's permission. ============= Question: what is the most significant cyber event of 2010? Answer: Stuxnet. While security analysts continue to marvel over Stuxnet’s capabilities, one disturbing aspect to Stuxnet is current defenses would not defend against the next Stuxnet type threat. … [Read more...]
Stuxnet: An important change in the national security landscape
September 27, 2010 By
There are some important strategic changes occurring in the national security landscape. A new kind of cyber attack has been noted, one that involves use of malicious code to attack infrastructure. There are some important points in this attack that should be understood by national security decision-makers. With the launch of the code the security community calls Stuxnet, an attack was made against a programmable logic controller (PLC) that runs a … [Read more...]