Risk
11/7/2011
01:29 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

DARPA Boosts Cybersecurity Research Spending 50%

Defense research agency calls boosting the nation's cyber offense, as well as defensive capabilities, crucial to combating modern threats.

Inside DHS' Classified Cyber-Coordination Headquarters
(click image for larger view)
Slideshow: Inside DHS' Classified Cyber-Coordination Headquarters
The Defense Advanced Projects Research Agency, birthplace of the Internet, plans to increase its spending on cyber research 50% over the next five years, and will increasingly focus on offensive cyber capabilities as well as defensive capabilities, agency director Regina Dugan said Monday.

"Modern warfare will demand the effective use of cyber, kinetic, and combined cyber and kinetic means," Dugan said, speaking before the DARPA Cyber Colloquium, a gathering of cyber professionals. "We need more options, we need more speed, and we need more scale. We must both protect its peaceful shared use as well as prepare for hostile cyber acts that threaten our military capabilities." DARPA sought $208 million in cyber spending in fiscal 2012, up from $120 million the year before, and that's just the start of the jump in spending.

Monday's speech was the first time that Dugan has publicly discussed DARPA's offensive cyber research, according to a DARPA spokesman. While she didn't go into deep details, other military speakers also mentioned offensive capabilities in more coded terms. For example, Army Cyber Command director Lt. Gen. Rhett Hernandez called for "cyber warriors" who could "operationalize cyberspace" with a "full range of cyber capabilities," including offensive capabilities.

Dugan repeated an oft repeated line that while military and critical infrastructure networks have grown more secure in recent years, they remain easily penetrated. She called the ability to grapple with security at Internet speed and scale "one of the most intense challenges of our time," and said that DARPA and others must come up with creative solutions to the challenge.

[The U.S. is already working with its allies to boost our cyber defense skills. Read U.S., Europe Do First Joint Exercise On Cybersecurity.]

In a speech after Dugan's, U.S. Cyber Command commander Gen. Keith Alexander outlined, by way of example, the scope of the challenge, noting recent well-publicized attacks on Nasdaq, RSA, Sony, Google, and Booz Allen Hamilton. "These organizations are supposed to be the best in the market, and in my opinion, they are," he said. "But they're the ones that recognized they were attacked. Most don't."

Dugan and other speakers echoed the idea that the current approach of layering security technology upon security technology will not resolve the problem, but will only result in more complexity.

"We are losing ground because we are inherently divergent from the threat," she said, noting that while the size of viruses has remained small over the years, the defensive security apparatus continues to grow. "Such divergences are the seeds of surprise, and this [size disparity] is a striking example of why it's currently easier to play offense rather than defense in cyber. This is not to suggest that we stop doing what we are doing in cybersecurity. But if we continue only down the current path, we will not converge with the threat."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Henry Hertz Hobbit
50%
50%
Henry Hertz Hobbit,
User Rank: Apprentice
11/15/2011 | 12:10:04 PM
re: DARPA Boosts Cybersecurity Research Spending 50%
At this point the problem is so huge no team of security analysts stands a fighting chance of even knowing where to begin. The military needs a standardized Linux distro that is infintely more stable than what is available now. Either that or create their own OS that has file ownership and usage permissions. Once they have that standardized platform and get Windows out of the mix then they will have a fighting chance of hammering the other stuff down. The way it is now, it takes just one slip and a whole building full of Windows machines can be infected. VM doesn't help you either. Even though the infection may go away when you shut your machine down it can come right back via your neighbor's infected machine when you boot back up. Usually it only takes a few hours for the third party to siphon off all the information they want anyway. I strongly recommend that DARPA shifts the vast majority of their desktop platforms first. Then they can start to work on the other problems.
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Changing Face of Identity Management
Mobility and cloud services are altering the concept of user identity. Here are some ways to keep up.
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio

The cybersecurity profession struggles to retain women (figures range from 10 to 20 percent). It's particularly worrisome for an industry with a rapidly growing number of vacant positions.

So why does the shortage of women continue to be worse in security than in other IT sectors? How can men in infosec be better allies for women; and how can women be better allies for one another? What is the industry doing to fix the problem -- what's working, and what isn't?

Is this really a problem at all? Are the low numbers simply an indication that women do not want to be in cybersecurity, and is it possible that more women will never want to be in cybersecurity? How many women would we need to see in the industry to declare success?

Join Dark Reading senior editor Sara Peters and guests Angela Knox of Cloudmark, Barrett Sellers of Arbor Networks, Regina Wallace-Jones of Facebook, Steve Christey Coley of MITRE, and Chris Roosenraad of M3AAWG on Wednesday, July 13 at 1 p.m. Eastern Time to discuss all this and more.