Gen. Keith Alexander, head of the embattled National Security Agency (NSA), says he is willing to share cyberattack information with the private sector -- an offer seen as a Trojan horse by at least one expert. . On Wednesday, Alexander told attendees of his keynote at the Billington Cybersecurity Summit that the NSA, the FBI, the Department of Homeland Security (DHS) and the CIA are ready to pass information back and forth with a select group of private organizations, provided they get the authorization from Congress. The link for this article located at CSO Online is no longer available. . On Wednesday, Alexander told attendees of his keynote at the Billington Cybersecurity Summit that th. keith, alexander, embattled, national, security, agency, (nsa), willing. . Alex
When Jeff Moss founded the Def Con hackers convention in 1993, he never imagined that two decades on, one of the key speakers at the annual Las Vegas event would be four-star General Keith Alexander, head of the U.S. National Security Agency. . Once known as an excuse for computer geeks and social misfits to drink cheap beer, create mischief and party all night Sin City-style, Def Con has transformed itself into a venue where elite and amateur hackers alike debate serious security issues with experts from the public and private sectors. The link for this article located at Reuters is no longer available. . Initially an event for technology enthusiasts, Black Hat transforms into a prominent center for discussions on cybersecurity and hacking.. Def Con Cybersecurity Conference,Hacking Culture,Technology Discussions,Security Experts. . Dave Wreski
If there's a lesson to be learned from last year's Stuxnet worm, it's that the private sector needs to be able to respond quickly to cyber-emergencies, the head of the U.S. Department of Homeland Security said Monday.. "The key thing we learnt from Stuxnet was the need for rapid response across the private sector," DHS Secretary Janet Napolitano told engineering students at the University of California, Berkeley. "There, we need to increase the rapidity of response, because in that area -- as in several other recent attacks -- we've seen very, very sophisticated, very, very novel ways of attacking. When you're getting at control systems, now you're really talking [about] taking things over, so this is an area of deep concern for us." Although nobody knows who created Stuxnet, many believe that it opened a new chapter in the annals of cybersecurity: the first worm written to destroy factory control systems. On Monday, Iran said it had been hit with a second worm, called Stars,, but security experts aren't sure that it really falls into the same class as Stuxnet. The link for this article located at Network World is no longer available. . The Secretary of Homeland Security highlights the urgent necessity for swift action within the business community following the SolarWinds breach.. Stuxnet Response,Cybersecurity Lessons,Rapid Incident Response,Control Systems Security. . Anthony Pell
Cybersecurity coordinator Howard Schmidt also announces release of unclassified version of Obama administration's plan for securing government, private industry networks. During a Town Hall meeting session here today, the nation's new cybersecurity czar mapped out his top priorities in the post and provided a glimpse at how the Obama administration might handle security issues with other countries.. In a keynote address earlier in the day, national cybersecurity coordinator Howard Schmidt also announced that the White House was releasing an unclassified version of its plan for securing government and private industry networks -- the so-called Comprehensive National Cybersecurity Initiative, which is now available for download from the White House Website (PDF). Among Schmidt's priorities are the "resilience" of federal government networks and ensuring those networks are properly secured, and ensuring that private-sector partners also have sufficiently secured systems and networks. "The government is not going to secure the private sector," Schmidt said. "[But] we are making sure our [private sector] partners have more security as part of what we're doing." And when it comes to security incident response (IR), he says, these firms have not had a central point of contact. He says he's looking over IR issues for these partners, who want to know who to call when an incident occurs and how to protect their intellectual property. Schmidt says he also wants to ensure state and local governments have law enforcement cyber operations. The link for this article located at Dark Reading is no longer available. . In a keynote address earlier in the day, national cybersecurity coordinator Howard Schmidt also anno. cybersecurity, coordinator, howard, schmidt, announces, release, unclassified, version, obama. . Alex
The Department of Homeland Security and private industry aren't doing enough to exchange information related to threats to critical infrastructure such as IT and telecom networks, the banking system, or the food supply, a report issued Tuesday finds. . . .. The Department of Homeland Security and private industry aren't doing enough to exchange information related to threats to critical infrastructure such as IT and telecom networks, the banking system, or the food supply, a report issued Tuesday finds. A Government Accountability Office report offers recommendations to the Department of Homeland Security to improve the protection of national critical infrastructures in 13 sectors. GAO, the research arm of Congress formerly known as the General Accounting Office, suggests developing a plan for information sharing that more clearly describes the responsibilities of DHS and of private-sector information-sharing centers, which were created to pool data on the threats and vulnerabilities most relevant to each critical industry. The report also calls for establishing policies and procedures for agency interaction and the coordination of information sharing. "Sharing information between the federal government and the private sector on incidents, threats, and vulnerabilities continues to be a challenge," the report says. The link for this article located at informationweek.com is no longer available. . The Department of Energy and industry partners need to improve collaboration on cybersecurity vulnerabilities in essential systems.. critical infrastructure management, security threats analysis, information exchange policies. . Anthony Pell
Businesses will get legal guidelines this year on how to secure their pieces of cyberspace, but lawmakers aren't giving details yet. Forthcoming cybersecurity legislation will be "meaningful regulatory approach to securing private-sector critical infrastructure" says Representative Adam Putnam (R-Florida), who . . . . Businesses will get legal guidelines this year on how to secure their pieces of cyberspace, but lawmakers aren't giving details yet. Forthcoming cybersecurity legislation will be "meaningful regulatory approach to securing private-sector critical infrastructure" says Representative Adam Putnam (R-Florida), who chairs a Congressional subcommittee dealing with cybersecurity. Because many members of Congress don't seem to recognize the potential threat of cyber attacks, the law Putnam has in mind will not be as wide-ranging as the Sarbanes-Oxley Act of 2002, which governs accounting procedures at public companies. "There are a couple of areas where I believe the subcommittee will be drafting bills towards the end of this year that would impact the private sector," Putnam said at an e-government and cybersecurity event here this week. "We hope to begin that process before a major catastrophe. We would like to be on the front side of that." The link for this article located at PCWorld is no longer available. . Businesses will get legal guidelines this year on how to secure their pieces of cyberspace, but lawm. businesses, legal, guidelines, secure, their, pieces, cyberspace. . Anthony Pell
An industry group has been created to connect private-sector companies with the Department of Homeland Security. Executives of the new Homeland Security Business Executive Council announced the launch of the nonpartisan, nonprofit group today in Washington. . . .. An industry group has been created to connect private-sector companies with the Department of Homeland Security. Executives of the new Homeland Security Business Executive Council announced the launch of the nonpartisan, nonprofit group today in Washington. The Department of Homeland Security supports the creation of the group, an administration official said. The Washington-based council will explore the role private industry should play in homeland security, foster public-private partnerships to enhance security and communicate industry concerns to the department and legislators, according to Michael Meldon, president The link for this article located at GNC.com is no longer available. . An innovative coalition has emerged, linking private enterprises with the Department of Homeland Security to bolster security initiatives.. Homeland Security, Business Collaboration, Private Sector Partnership. . Anthony Pell
The Homeland Security Department has proposed rules under which it would protect systems information it receives from the private sector. The proposed rule explicitly applies to hardware and software that makes up critical-infrastructure systems. The government relies on many such . . . . The Homeland Security Department has proposed rules under which it would protect systems information it receives from the private sector. The proposed rule explicitly applies to hardware and software that makes up critical-infrastructure systems. The government relies on many such systems, such as private voice and data networks, for its daily operations. Companies have been wary of submitting information to the department for several reasons, including the possibility that their competitors could access commercially important data. Some members of Congress and privacy advocates criticized the enacted version of the Homeland Security Act of 2002 as including excessively broad exemptions from the Freedom of Information Act for such information. The proposed rule-making notice, issued Tuesday, is aimed at implementing the Critical Infrastructure Information Act of 2002, which appears in Subtitle B of Title II of the Homeland Security Act. The link for this article located at GCN is no longer available. . The Department of Defense unveils regulations aimed at safeguarding sensitive data from commercial entities, guaranteeing information security.. Homeland Security, Data Protection, Critical Infrastructure Security. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.