Posts Tagged ‘Cyber security’

Senator’s computers hacked!

Monday, March 23rd, 2009

Bill_nelsonxlarge” Cyber-invaders.”  That’s what Sen. Bill Nelson (D-Fla.) calls the hackers who have already twice this month broken into two PC workstations used by several of his key staff members.

Although no classified information was kept on the breached PCs, the break-in demonstrates system vulnerabilities at the highest levels of government.

In fact, Nelson says similar breaches on Capitol Hill computer networks are on the rise in recent months, based on reports from various Capitol Hill IS offices.

“The threat to our national security, to be sure, is real; and, it will require significant investment and inter-agency coordination at an unprecedented level to gain an upper hand against would-be cyber criminals and spies,” Nelson said in a statement. “These are anxious days, when you consider the threat from such espionage facing our country and recent developments on this front.”

These and other more serious breaches have led Nelson, along with Sen. Jay Rockefeller, D-W.Va. and Sen. Olympia Snowe, R-Maine, to call for the creation of a permanent national “cyber-security czar” reporting directly to President Obama. The threee Senators have begun drafting legislation that, if passed, will require federal oversight and review of both government and “critical private networks,” and create a “public-private clearinghouse for cyber threat and vulnerability information-sharing.”

Furthermore, another group of security and privacy experts has requested that President Obama create a federal library of data breach information in their report titled, The Perfect Storm: Why the New Administration Cannot Ignore Identity Theft.

Nelson’s call for tougher U.S. cybersecurity oversight comes less than two weeks before management consultant Melissa Hathaway is due to deliver the results of her 60-day review of current U.S. cybersecurity policy to President Obama.

Photo: Nelson (Tim Dillon/USA TODAY)

Defense Firms seek Cyber Security Assignments

Wednesday, March 18th, 2009

According to an article in today’s Wall Street Journal, “U.S. agencies from the Pentagon to the Department of Homeland Security have experienced major cyber-break-ins in recent years, even into classified systems. Cyberspies also have siphoned off critical data from Pentagon contractors, including one breach that cost a major aerospace contractor $15 million.”

Annual U.S. losses from cyber breaches are estimated to be in the billions of dollars, and there is legitimate concern that a nuclear power plant or subway line could be hacked via the Internet; or data being breached at the nation’s larger financial firms.

dilbert_data_security1According to the WSJ, “Anticipating the demand, defense companies are bolstering training, buying smaller firms and hiring former top government officials. The move into the cyber-security field could offer new revenue streams for the contractors and help offset declines stemming from budget pressures on the Defense Department’s traditional weapons systems.”

However, third-party contractors also need to watch their own network security, said Tom Kellermann, a vice president at Core Security Technologies, citing a Verizon report last year that found 39% of cyber breaches implicated contractors and other third parties.

The bottom line is that, in order to provide true value in the cyber security arena, Government Contractors must not only provide technology solutions, but also ongoing training and education.

After all, “technology tends to be a reactive measure… Technology is a great thing once we’ve understood the processes, policies, and procedures that we want to use… but you can’t start with technology… If you [do], you’re bound to fail”- John Pironti, BankInfoSecurity Interview, 11/6/07.