Read the latest issue of WHIR Magazine or subscribe to receive it FREE!

National Security Agency Representative Says 4 out of 5 Cyber Attacks Are Preventable

By David Hamilton, November 18, 2009

(WEB HOST INDUSTRY REVIEW) -- By simply instituting proper configuration policies and network monitoring, about 80 percent of online attacks could be prevented, according to National Security Agency information assurance director Richard Schaeffer, who spoke before a Senate committee Tuesday.

Senate Judiciary Subcommittee on Terrorism, Technology and Homeland Security, heard Schaeffer and several other experts, who offered their expertise on how the government should address government and private-sector IT security concerns. According to reports from Wired an other news agencies, Schaeffer also added that by just following the already known best practices would force attackers to take more risks to breach a network, making them more easily detectable.

The US government has been recently pursuing an aggressive online security campaign. At July's Black Hat 2009 conference, deputy assistant secretary of defense for cyber identity and information assurance, Robert Lentz, said now is the time to secure and preserve the web. "This really has to be our number-one priority. Everything we do is all about preserving the Internet," he said to a Black Hat audience. "If there's anything we need to do, it's to all team up together and make this a global issue as we deal with this fragile ecosystem."

The Tuesday meeting will likely prove helpful in the Department Homeland Security's implementation of its intrusion detection and monitoring system, known as Einstein, as well as a broader nationwide cyber incident response plan, according to a FederalNewsRadio report. DHS national protection and programs directorate deputy undersecretary Phil Reitinger said a draft should be filed by late December or early January, and it will face its initial testing in 2010. "We need in the event of significant incident to be able to respond as one nation," Reitinger said. "The plan [will provide] a highly actionable set of policies and procedures that will enable all of different government agencies to work effectively with the private sector in the event of a significant incident."

The topic of how cyber crimes should be prosecuted also came up at Tuesday's Senate Judiciary Subcommittee on Terrorism and Homeland Security. , associate deputy attorney general James Baker said that the current legal structure is not adequate to investigate and prosecute cyber criminals, according to FederalNewsRadio.

"This is a complex set of legal authorities that governs in this area," Baker said. "The Constitution, federal statues, state law, foreign law and international law all have an impact in this area. The legal regime currently enables law enforcement and intelligence officials to obtain authorizations to obtain vital information through electronic surveillance and other collection means. However the evolution of technology, of our dependence on technology and our adversaries' exploitation of vulnerabilities in that technology raises question of whether are statutes are adequate to address the cyber threats of today and at the same time protect privacy and civil liberties."

As a sign that law is catching up to online accused criminals, the New Jersey man, who was the first to be criminally arrested for domain name theft in the US, was recently indicted on charges relating to his theft of a domain name, which he then sold on eBay for $111,000.

  • (0) Comments

Comment anonymously or log into your WHIR account

Logging in allows enhanced commenting features (such as external linking) in news, features, blogs and more.

User:

Pass:

(reset password)

Don't have an account yet? Register now!


 

Read Back Issues of WHIR Magazine

October 2009 - Web Hosting's All Star Team
This has been, for us, one of the most interesting, exciting and challenging build-ups to an issue of the magazine yet, Web Hosting's All Star Team. The balloting process was our first experiment with a kind of user participation we're planning to do a lot more with in the months to come. We had thousands of ballots submitted, with hundreds of write-in suggestions and a demonstration of user engagement that has us feeling super positive about the project.
About This Issue | Read Digital Edition

July 2009 - What am I Worth?
One of the interesting luxuries of working on a project like the printed WHIR magazine is that it allows us to play with things like our point of view from one issue to the next. In recent months we've been giving added attention to the kind of practical and applicable advice aimed at smaller hosts and resellers. This issue carries on with that point of view, asking, in our cover story, "what am I worth?" It's a complicated question without a clear-cut answer.
About This Issue | Read Digital Edition

May 2009 - The Blueprint for a Small Web Host
I was a little surprised by how difficult it became to see this idea through. We set out to assemble a blueprint for a small hosting business, but butted up pretty quickly against the general impossibility of covering all the territory that was out there to be covered. The basic constraints of a printed magazine, and the less-than-infinite amount of time we had available forced us to face the fact that we could never produce an exhaustive guide to starting a hosting company.
About This Issue | Read Digital Edition

Read more WHIR Magazine back issues