Attacks Focus DOD On Cybersecurity Partnerships

Defense Departments cyber strategy stresses government-industry collaborations, recognizing that the military operates in an interconnected world where cyber attacks continue to rise in frequency and severity.

Slideshow: Next Generation Defense Technologies
(click for larger image and for full slideshow)
Partnerships with industry, allies, and other government agencies play a large role in the new cyber strategy that the U.S. military announced Thursday, and with good reason: attacks are on the rise in severity and number on numerous fronts, and the Department of Defense (DOD) is increasingly connected to the outside world.
Because cyberspace is composed of many interwoven networks that perform many different functions, ensuring its peaceful use will require efforts on many fronts, deputy secretary of defense Bill Lynn said at Thursdays announcement of
the strategy
. The men and women of the military, other government agencies, our allies, the private sector, and indeed, the citizens of cyberspace must all play a role.
On Thursday, Lynn detailed two previously unpublicized attacks. In one attack on a defense contractor in March, which the DOD has pegged a foreign intelligence service as the likely perpetrator, 24,000 files on a sensitive weapons system were stolen from a defense contractors network. As a result of that attack, Lynn said, the DOD is investigating whether the system needs to be redesigned because its specs have been compromised. In another recent attack, the Web servers of the National Defense University were hijacked by an unknown intruder.
While serious, these are only two items on a long list of recent attacks on the military, military partners, and critical infrastructure that supports military operations. Data
stolen from
security company RSA earlier this year
was used
to penetrate Lockheed Martins networks, for example. The Pentagons official credit union database was possibly exposed after being accessed by a PC weighed down by malware. Cyber intruders have also successfully attacked energy firms and large financial institutions in recent months, Lynn noted.
In response, the military has been working more closely with the private sector. Lynn highlighted the
Defense Industrial Base Cyber Pilot
, in which the DOD is working with a handful of defense contractors and Internet service providers to identify and stop attacks on their networks. The effort builds on a program started in 2007.
While the new pilot has only been up and running for a few months, Lynn said that it has already begun preventing intrusions for some of those companies involved. The DOD plans to end the pilot later this summer and then determine whether and how to expand the program to other defense contractors and possibly other critical infrastructure sectors.
Beyond defense contractors, numerous other non-military networks support important military functions, such as those that run and manage the power grid, transportation systems, and the financial sector. Ninety-nine percent of U.S. military electricity comes from civilian sources, for example, and 90% of U.S. military voice and Internet traffic travel over private networks. To protect our military capability, we must work with the Department of Homeland Security and the private sector to protect the nations critical infrastructure, Lynn said, adding that attacks on multiple critical infrastructure sectors could have a devastating impact on the U.S. military.
The military cyber strategy indicates that the DODs efforts in collaboration with the private sector will continue to expand, reaching out eventually even to small and midsized businesses. Success will require additional pilot programs, business models, and policy frameworks to foster public-private synergy, the strategy document says.
International partners also play a role, as the United States has been increasing cooperation with key allies including Australia, Canada, the United Kingdom, Japan, and allies in NATO. Collective cyber defenses will help expand our awareness of malicious activity and speed our ability to defend against ongoing attacks, Lynn said. He added that, going forward, the United States would pursue international norms in cyberspace through vehicles like treaties.
What industry can teach government about IT innovation and efficiency. Also in the new, all-digital issue of InformationWeek Government: Federal agencies have to shift from annual IT security assessments to continuous monitoring of their risks.
Download it now
. (Free registration required.)

Last News
▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security	▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security	▸ Criminal Possession of Government-Grade Stealth Malware ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Attacks Focus DOD On Cybersecurity Partnerships