14
A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

Embed Size (px)

Citation preview

Page 1: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

June 16, 2009

Cyber Security: Current Events and

White House Cyberspace Policy Review

Page 2: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Contents

Cyber Breach Snapshot

Why Cyber Security Is Critical Moving Forward Current Events

San Antonio – A Hub to Cyber Security

Administrations Top Considerations

Where are We Today

Page 3: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Cyber Breach Snapshot

• Breaches are wide-spread and growing. DHS estimates attacks up 800% 2005 – 2007—estimates often low.

• Our company alone has thousands of attempted probes per week

• Attacks cost more than $8 billion over 2 years; $100+ million in 6 months.

• Breaches are wide-spread and growing. DHS estimates attacks up 800% 2005 – 2007—estimates often low.

• Our company alone has thousands of attempted probes per week

• Attacks cost more than $8 billion over 2 years; $100+ million in 6 months.

Federal Breaches Federal BreachesOverall BreachesOverall Breaches

Page 4: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Computer Spies Breach Fighter Jet - WSJComputer Spies Breach Fighter Jet - WSJ

Electricity Grid in U.S. Penetrated by Spies - WSJElectricity Grid in U.S. Penetrated by Spies - WSJ

Estonia Denial of Service Attacks (2006)

Estonia Denial of Service Attacks (2006)

Page 5: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Why Cyber Security Is Critical

Cyber space now recognized as critical to our lives and national defense

- Bank accounts

- Stock markets

- Insurance claims

- Medical records

- Nuclear/electric plants and utilities

Attempts against U.S. critical assets are increasing

– Some are foreign government-sponsored. Some obviously successful

Effects will be powerful and destructive

.

Page 6: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Moving Forward

Federal, State, local governments should work with industry in advance to improve plans and resources to cyber security incidents. What needs to be done?

– Detect

– Prevent

– Respond

– Mitigate

Cyberspace cannot be secured without regulation - Voluntary regulation is not the right solution

Page 7: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Moving Forward

We must do a better job in properly configuring software products

– Configuring software products for security is expensive and often

produce new vulnerabilities

– We are spending more to ensure that software is securely

configured and to patch software defects than what the product

itself is worth

We must improve the acquisition process for hardware/software

Page 8: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Current Events…

President Obama – “We’re not as prepared as we should be, as a Government or as a country.”

NSA Director General Alexander “The United States must defend against a cyber attack by going after the botnets at their point of origin”

General Schwartz USAF Chief of Staff – “We’ve regarded network protection and security as the “Comm Guy’s Job,” and as a user inconvenience. THIS MUST NOT LONGER BE THE CASE”.

Johnnie Hernandez – “We don’t have enough trained people to mitigate all of the probes and attacks occurring in our network systems”

Page 9: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

San Antonio – A Hub to Cyber Security

NSA West

AF Cyber Command in San Antonio

Birthplace of AF Information Warfare/Information Operations

Wealth of talent in the local area

Public/private partnerships with academia

Ranked “The Most prepared community in the nation” for cyber security

Plus, all the other great things SA has to offer (i.e. 2007 List of best cities…)

Page 10: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Administrations Top Considerations

Appoint a cyber security policy official responsible for coordinating the Nation’s cyber security policies and activities

Initiation of a national public awareness and education campain to promote cyber security

Develop a framework for research and development strategies

Page 11: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Policy Analysis & Insights

Top Considerations Analysis

Overall Good first-step, but few immediate steps forward

Priority Critical - Overdue

Reporting Structure Reports to Nat’l Security Council and Nat’l Economic councils – OMB oversight for proper budgeting

Funding Good. $17 billion expected to be increased. $100 million spent last 6 mos. alone fixing damage.

Top Priorities

- Awareness

- Education

- Timing

Slow

Critical

Couldn’t come fast enough

Page 12: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

WHERE ARE WE TODAY

- Leaders must all realize that hackers are constantly trying to steal information

Adversaries are on a wartime footing

Cyber security is a growth issue

Page 13: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

Questions?

Page 14: A Cyber Security Company June 16, 2009 Cyber Security: Current Events and White House Cyberspace Policy Review

A Cyber Security Company

June 16, 2009

Cyber Security: Current Events and

White House Cyberspace Policy Review