Risk
4/15/2010
02:07 PM
50%
50%

Senators Question Cyber Command Nominee

Gen. Keith Alexander told legislators he'll work closely with the president and Homeland Security to protect U.S. military networks against cyber attacks.

The Obama administration's candidate to lead the U.S. effort against cyber warfare assured lawmakers Thursday he can successfully balance the strategic military, technological, and cooperative aspects of the job he hopes to take on.

In his confirmation hearing Thursday before the Senate Armed Services Committee, Lt. Gen. Keith Alexander fielded questions about how he would perform in a position created only last year to perform a task some lawmakers themselves admittedly don't quite understand.

The Cyber Command, part of the U.S. Strategic Command, went into action in September specifically to protect Department of Defense networks and take charge of cyber warfare activities. It's based in Ft. Meade, Md., where the National Security Agency -- which Alexander currently leads -- is also headquartered.

The new command has raised concerns from lawmakers because it will act in the same territory as the NSA and the Department of Homeland Security, which are working as civilian agencies to protect U.S. networks against cyber attacks.

Senators have expressed concerns about the militarization of cybersecurity efforts, and some admitted Thursday during the hearing that they don't fully understand the scope of cyber warfare in the context of a military action.

In his opening comments Thursday, Alexander assured lawmakers that he won't overstep the boundaries of his role if confirmed to lead the Cyber Command.

"This is not about efforts to militarize cyberspace," he said. "Rather it's about safeguarding the integrity of our military system. My goal if confirmed will be to significantly improve the way we defend ourselves in this domain."

However, he said that his role would not merely be a defensive one, and that Cyber Command should mount offensive cyber attacks in the event of a cyber war.

Alexander said he would work alongside the DHS, in particular, to define the scope of his role and to develop strategies. The DHS is the government agency in charge of cybersecurity on U.S. soil.

Indeed, one of the trickiest issues lawmakers have been grappling with is the relationship between Cyber Command and the DHS. The DHS has been working with private companies that own most of that critical infrastructure to forge relationships and share intelligence, and ultimately is responsible for protecting networks at home.

However, Cyber Command would play a key role if there was a major attack from a foreign entity on critical networks, and Alexander was asked by the committee how he would juggle responsibilities.

"Our responsibility is to provide technical support to the DHS to help them build the technology they need to defend [critical] networks," he said. "I think that partnership continues to grow."

The committee posed to Alexander a hypothetical situation that described an attack coming from outside the country but routed through computers in the U.S., which would put it in the domain of the DHS and raise privacy concerns for U.S. citizens.

Alexander said in that case it would be necessary to coordinate efforts very closely with the DHS and the President himself, who would have the ultimate authority in that situation to act.

But this is one area he said that is not clearly defined by policy, which he said is still lacking to help the Cyber Command protect the DoD in the event of a cyber war. "That's one of the things the administration is trying to address," Alexander said.

Indeed, cybersecurity and cyber warfare policy has not evolved nearly as quickly as the threat the Cyber Command, DHS, and NSA are attempting to ward off. The House of Representatives only recently passed a cybersecurity bill while the Senate is currently considering one, but neither have gone into effect yet.

Alexander said the DoD network is hit with hundreds of thousands of probes a day that are attempting to detect vulnerabilities in the network, which is one of the reasons the Cyber Command was created in the first place.

"We have been alarmed by the increase, especially this year," he said. "It's growing rapidly."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.