Cybersecurity continues to be a hot topic. More and more organizations are getting hit by ransomware attacks, critical open software vulnerabilities are making news, and we’re seeing industries and governments coming together to discuss initiatives to improve software security. . The U.S. government has been working with the tech industry and open source organizations such as the Linux Foundation and the Open Source Security Foundation to come up with a number of initiatives in the past couple of years. The White House Executive Order on Improving the Nation’s Cybersecurity without a doubt kick-started subsequent initiatives and defined requirements for government agencies to take action on software security and, in particular, open source security. An important White House meeting with tech industry leaders produced active working groups, and only a few weeks later, they issued the Open Source Software Security Mobilization Plan. This plan included 10 streams of work and budget designed to address high-priority security areas in open source software, from training and digital signatures, to code reviews for top open source projects and the issuance of a software bill of materials (SBOM). . The federal agencies are partnering with technology firms to bolster public digital safety through collaborative open source projects.. Open Source Security, Cybersecurity Legislation, Software Security Initiatives, Ransomware Protection, Tech Industry Collaboration. . Brittany Day
The government is now a little more open. This week, the White House released its first official federal source code policy, detailing a pilot program that requires government agencies to release 20 percent of any new code they commission as open source software, meaning the code will be available for anyone to examine, modify, and reuse in their own projects.. The government agencies will also share more code with each other, essentially adopting open source practices within their own governmental universe.. Public institutions are urged to embrace and implement open-source methodologies, promoting clarity in coding.. Open Source Reform, Government Policy, Code Transparency, Software Collaboration, Source Code Sharing. . Brittany Day
Experts on privacy and Internet security have blasted the National Security Agency over reports it has secretly been working with the British government to crack encryption technology that billions of Internet users rely upon to keep their electronic messages and confidential data secure.. The New York Times, Britain's Guardian newspaper and the nonprofit news website ProPublica reported Thursday that the NSA has bypassed or altogether cracked much of the digital encryption used by businesses and everyday Web users. The reports describe how the NSA invested billions of dollars since 2000 to make nearly everyone's secrets available for government consumption. The link for this article located at Fox News is no longer available. . Documents expose CIA's involvement in sabotaging critical cybersecurity systems vital for safeguarding personal information.. Encryption Breaking, Internet Security Risks, Privacy Concerns. . LinuxSecurity.com Team
As we celebrate the holiday season and prepare for the next round of legislation, a group of state and local governments has banded together to collect and distribute freely the costly software that normally runs taxpayers $100 billion annually. Called the Government Open Code Collaborative or GOCC.gov, this organization states that its members work together voluntarily to encourage "the sharing, at no cost, of computer code developed for and by government entities where the redistribution of this code is allowed". . In addition to state and local governments, the organization also encourages collaboration between public sector entities and non-profit academic institutions. With Web facilities hosted by the University of Rhode Island, GOCC.gov has a repository dedicated to hosting open-source software for download by any state or local government. As so many people have said, "Nothing is as powerful as an idea whose time has come." And GOCC.gov is an idea whose time is long overdue. Open-source advocates attempting to initiate legislation and fight the battles on the floors of the various Houses, only to discover the political might and opposition of Microsoft, now have an alternative. State agencies now can download software for free and use it to create a cohesive and standard government infrastructure.. Explore the ways in which the Public Software Exchange Initiative promotes collaborative coding between municipal and regional authorities, facilitating free software distribution.. Government Open Code Collaborative, Open Source Software, Public Sector Collaboration. . Joe Shakespeare
National governments, with input from nongovernmental organizations, are laying the groundwork for a new internet governance structure. Hosted by the Geneva-based International Telecommunication Union, a United Nations agency, the World Summit on the Information Society, to conclude next year, is an effort to find a common vision for the information society. . . .. National governments, with input from nongovernmental organizations, are laying the groundwork for a new internet governance structure. Hosted by the Geneva-based International Telecommunication Union, a United Nations agency, the World Summit on the Information Society, to conclude next year, is an effort to find a common vision for the information society. Naturally, all countries do not share the same ideas about how the internet should develop. But all are coping with the common problems of spam, cybersecurity and the digital divide. Governments are also wrestling with the impact of new technologies like VOIP, or voice-over-IP telephony services, and concerned about setting up a framework for broadband deployment. VOIP in particular threatens to disrupt massive established revenue structures. While world summits do not produce laws or regulations, they generally have a huge influence on global awareness of the issues they cover and how those are handled at the national level. The link for this article located at wired.com is no longer available. . National governments, with input from nongovernmental organizations, are laying the groundwork for a. national, governments, input, nongovernmental, organizations, laying, groundwork. . Anthony Pell
President Bush in his State of the Union address last night reiterated how much his administration will depend upon technology for homeland defense. Among his list of domestic proposals, Bush said he is instructing the CIA, FBI, Defense Department and Homeland Security Department to develop a Terrorist Threat Integration Center to merge and analyze all threat information in a single location. . .. President Bush in his State of the Union address last night reiterated how much his administration will depend upon technology for homeland defense. Among his list of domestic proposals, Bush said he is instructing the CIA, FBI, Defense Department and Homeland Security Department to develop a Terrorist Threat Integration Center to merge and analyze all threat information in a single location . Our government must have the very best information possible, Bush said. We will use it to make sure the right people are in the right places to protect all our citizens. During his nearly one-hour speech, technology played a part in two areas: the new terrorism center and the use of sensors as a part of early warning system against bioterrorism. (Click here for a White House synopsis of initiatives) The center, which will be headed by senior government officials appointed by the CIA director, will oversee a national counterterrorism tasking and requirements system and maintain shared databases with the CIA, FBI, HSD and DOD. It also will maintain an up-to-date database of known and suspected terrorists, which will be accessible to federal and non federal officials. The White House released a fact sheet on the proposal that said the center would ensure that intelligence information from all sources is shared, integrated and analyzed seamlessly, and then acted upon quickly. The integration piece will be critical across all the databases, said David McClure, vice president for E-Government at the Council for Excellence in Government, a Washington non-partisan organization. The system must be able to assembleinformation quickly and intelligently and analyze it and disseminate even more quickly. McClure said it will be a challenge to put a system together because so much information will come from so many different sources. He said it will be important for the system to have high-speed connections and software that can examine and distribute it across agencies and levels of government. Michael Scardaville, a policy analyst for homeland security at the Heritage Foundation, a Washington conservative think tank, said by creating the mechanism for agencies to share information will improve data transfers. We really have been lacking an institutional solution to our information sharing problem, he said. This is a step in that direction. Scardaville said the technology must take the human element out of sharing. If an analyst must physically transfer information, then it will not be as effective, he said. Anyone should be able to access the information at any time on their own. He also said work being done by the Defense Advanced Research Projects Agency is a possible solution to the data sharing problem. The center would be the ideal place to use the technology developed by the Total Information Awareness program, Scardaville said. Databases could be linked without having to take all that information out of the database. An analyst could query the data from outside the host network instead of doing traditional data mining. At least to some extent, the administration s proposal for the center follows one of the recommendations of the Gilmore Commission to assess the domestic response capabilities to terrorism involving weapons of mass destruction. The commission suggested a forming a national counterterrorism center separate from the CIA, FBI and HSD. It would be responsible to fuse intelligence information from all foreign and domestic sources, the report said. McClure said he was somewhat surprised that Bush did not mention some of the recent E-government progress in the government to citizenportfolio, such as the IRS free file launch and the GovBenefits Web site. The link for this article located at GCN is no longer available. . Bush emphasized the critical role of technology in national security, advocating for a centralized hub to enhance collaboration and communication regarding potential dangers.. Terrorism Center, National Defense, Data Integration, Government Collaboration. . Anthony Pell
Calling for help from the private sector, Steve Cooper, special assistant to the President and CIO in the White Houses' Office of Homeland Security, called for a "network of networks" of federal, state, and local governments and certain private sector industries . . . . Calling for help from the private sector, Steve Cooper, special assistant to the President and CIO in the White Houses' Office of Homeland Security, called for a "network of networks" of federal, state, and local governments and certain private sector industries to be developed as a national enterprise architecture (NEA). "What if we take existing networks at all levels of government and the private sector as appropriate and integrate them? The challenges are true standards and interoperability. We can solve those problems," Cooper said at the Federal CTO Forum 2002 here. The day after the Republicans captured a mid-term majority in the House and Congress, Cooper stated that he is confident a Department of Homeland Security bill will be passed and that a national enterprise architecture could be a reality in two to three years. The link for this article located at InfoWorld is no longer available. . Sarah Thompson advocates for a unified approach between public institutions and private sectors to develop a cohesive national framework.. Government Networks, Private Sector Collaboration, Interoperability Standards, National Architectures. . Anthony Pell
In a high-tech, high-powered version of a neighborhood watch, a group of government agencies and private businesses plan to announce today a common set of standards and software to fight computer hacking. The Pentagon, the National Security Agency, the National Institute. . .. In a high-tech, high-powered version of a neighborhood watch, a group of government agencies and private businesses plan to announce today a common set of standards and software to fight computer hacking. The Pentagon, the National Security Agency, the National Institute of Standards and Technology, and other agencies are joining forces with such corporations as Intel Corp., Allstate Insurance Co., First Union Corp., Visa and Pacific Gas & Electric Co. to agree on technical actions to stem computer fraud and theft. "It's support for the homeland security strategy," said Clint Kreitner, president and chief executive of the Center for Internet Security (CIS), a nonprofit group of agencies and companies that is coordinating the effort. "We forged a technical consensus." The announcement comes as there is increased concern over computer security since Sept. 11. Computer hacking, much of which has been caused by mischievous teenagers, has become more pervasive and destructive. The perceived threat of cyber-terrorism from countries or terrorist groups has raised the stakes. Richard Clarke, who was appointed the nation's cyber-security adviser late last year, has said he worries about a "digital Pearl Harbor," where the country's vital networks could be attacked. The link for this article located at SecurityFucos is no longer available. . A unified initiative involving organizations and corporations aimed at creating cybersecurity protocols to address hacking risks.. Cyber Standards, Hacking Prevention, Threat Mitigation, Government Collaboration. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.