US cyber defense situation looks grim

The dreaded "Cyber Pearl Harbor" might already have occurred, and nations such as Russia and China are experiencing great success fleecing the United States for its for its most vital proprietary technology secrets through hacking, according to the participants in the Air Force Association's cyber conference March 23, reports Philip Ewing at DOD Buzz.

One hundred percent of the high-profile intrusions that info-security firm Mandiant tracks were all done using valid credentials; that is, the perpetrators were able to steal a real user's login and password, thereby avoiding the need for a more complex attack, said Richard Bejtlich, Mandiant's chief security officer. The average time to discover a private-sector intrusion is 416 days, he said, an improvement over the previous average of two to three years.

As for China, the United States can no longer afford to be coy with the Asian nation, said Jason Healey, an analyst with the Atlantic Council, who says the United States must build a coalition of cyber victims and formally call out Beijing on the world stage, giving specific examples of Chinese hacking.

Reader Comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Your Name:(optional)
Your Email:(optional)
Your Location:(optional)
Comment:
Please type the letters/numbers you see above

Webcast

  • Improving Performance Management and Project Control to Meet Cost/Schedule Milestones in DoD Procurement

    It can be nearly impossible to build annual budgets that consider forecasted project and program work plans along with detailed cost data, particularly when attempting to reconcile actual and projected program costs with actual schedule performance. In this webcast, a defense IT program manager will share best practices and hard-won lessons aligning critical data on project performance, cost systems and schedules for truly big picture program management insight. Read more