CYBERSECURITY NEEDS A RETHINK


I am back and this is a hot off the press news piece that I believe is so important I have to share 'verbatim' - I got this off the PC Advisor website today. This whole issue of authentication and related security is put into context in light of this alarm bell from Michael Dell. He is singing my mantra.   It is self-explanatory and should highlight how seriously we should be taking cybercrime and coming up with solutions that are effective and scalable.
' Cybersecurity needs a global rethink, and fast, Dell's CEO Michael Dell and Services CIO, Jim Stikeleather, have warned experts at the EastWest Institute Worldwide Cybersecurity Summit in the US.
In separate presentations and briefings, the men developed the theme of piecemeal reactions to the rapid rise of cyber-criminality, which included economic crime and direct threats to critical infrastructure.
The message was unusually blunt. Governments haven't done enough and have fallen into the trap of seeing matters in a narrow, national way. Meanwhile, the security industry has been content to sell products without asking whether security was properly embedded into the way products are developed.
"Governments and private industry need to work collaboratively to develop the appropriate international framework to secure cyberspace. We should all do this in a way that keeps our global information central nervous system intact and secure," said Michael Dell.
For its part, dell will now join the Information Technology Sector Coordinating Council (IT SCC), which coordinates how the tech industry should help protect critical infrastructure in the US.
"There is a preponderance of evidence that indicates cybercriminals could inflict major outages to portions of our critical infrastructure with minimal effort," echoed Jim Stikeleather.
Interestingly, he also suggested that the US management of the Internet may need an overhaul.
"ICANN manages the assignment of domain names and IP addresses, headquartered in California, is heavily US centric. There is a need to have more global participation on domain management as well as the future planning and next generation infrastructure needed to address the changes that will affect the Internet usage in years to come," he said.
For a major PC vendor, especially a US one, to chime on the failure of government and perhaps the free market is an unusual event. That a PC vendor even has an opinion is unexpected.
What precisely Dell and Stikeleather are advocating in concrete terms is harder to assess beyond the obvious points about overcoming sclerotic bureaucracies and self-interested vendors. As with critics before them, they advocate education, education and more education, but such things take time.
What would help volume vendors such as Dell is more commoditisation, simpler technology and the ability to impose some sort of security hierarchy on people, data and systems without introducing more complexity.
"There's a certain dead element of cybersecurity, it's essentially an afterthought and not built into the Government equipment. Therefore, because of that, the technologies we have in place are almost indefensible. So we're constantly patching the cracks and filling the holes," said Stikeleather."  
WELL THAT'S IT - MAKES YOU THINK DOESN'T IT ?

Comments

Post a Comment

Popular posts from this blog

The End of Passwords

Finally it seems … the penny has dropped.   Passwords are a poor substitute for real online security.   There is more and more ‘chatter’ about it.    Robin Henry writing in the Sunday Times on New Years Day talks of the end of ‘password hell’ invoking solutions in the pipeline from the Web Gods – Apple and Google.  The talk is of new biometric solutions such as facial and hand movement recognition.  Even IBM is talking this way.  ( http://www.forbes.com/sites/thestreet/2011/12/20/ibms-tech-predictions-for-the-next-5-years/ )  I agree with the notion that passwords are a dying breed but not that biometrics will become vogue.   They are fraught with problems of their own such as reliability, accuracy and the need for referencing of data-bases ( fail !) .    Why are passwords defunct?   Basically they are difficult to remember and they are easy to steal.    The solutions needed are those that require no cognitive load for the user ( the most unreliable participant in this enterprise
Read more

WIKILEAKS - the fuss?

Why all the fuss ? Why the ‘outrage’ at this ‘threat to national security’ ?   Are we really worried that nuclear war is going to break out because of these ‘dirty’ secrets getting out.  As if the North Koreans are going to up the ante any more than their mock charge of last week because of the abuse and scorn heaped upon them by US Diplomats.  ? !    Come on. To me the irony of this bluster is that it is (largely) from the right wing establishment in the US - calling it treason!     Any party that parades a half wit like Palin as a presidential hopeful hardly holds any moral high ground when it comes to protecting the USA.   Her appointment as the ‘leader of the free World’ will be enough to send any level headed American ( let alone any one of their Allies ) into a panicky tailspin at the thought of what she may stumble into ( by accident or design) . So how did these documents get out there?   Poor security.  Plain and simple.   If the US is so worried about this incident su
Read more

SPOOKS - CYBER ATTACK

Well I’ll be damned – if the subject of my last blog wasn’t the central theme to last nights episode of Spooks – CYBERWAR.    (To those who live outside the UK – Spooks is a very popular TV series about the goings on of a key team inside MI5 who spend their time thwarting terrorist attacks on the UK – while engaging in risqué amorous trysts on the side ).   And so last night we had the Russians and the Chinese –(working together !!) – ganging up on MI5 by infiltrating ( hacking ) their ‘secure’ internal network.     Whether the events portrayed were within the bounds of possibility or credibility who knows?     But if teenagers can break into the Pentagon – then I am sure that Russian/Chinese expert hackers can probably do something along the lines of infiltrating a UK Govt ‘Spooks’ departments network.      Either way it constituted an attack on British soil by foreign ‘combatants’ – which ( if it were true ) would have been a first since the Normans in 1066.   So we saw how vulner
Read more