Risk

4/15/2010
02:07 PM
50%
50%

Senators Question Cyber Command Nominee

Gen. Keith Alexander told legislators he'll work closely with the president and Homeland Security to protect U.S. military networks against cyber attacks.

The Obama administration's candidate to lead the U.S. effort against cyber warfare assured lawmakers Thursday he can successfully balance the strategic military, technological, and cooperative aspects of the job he hopes to take on.

In his confirmation hearing Thursday before the Senate Armed Services Committee, Lt. Gen. Keith Alexander fielded questions about how he would perform in a position created only last year to perform a task some lawmakers themselves admittedly don't quite understand.

The Cyber Command, part of the U.S. Strategic Command, went into action in September specifically to protect Department of Defense networks and take charge of cyber warfare activities. It's based in Ft. Meade, Md., where the National Security Agency -- which Alexander currently leads -- is also headquartered.

The new command has raised concerns from lawmakers because it will act in the same territory as the NSA and the Department of Homeland Security, which are working as civilian agencies to protect U.S. networks against cyber attacks.

Senators have expressed concerns about the militarization of cybersecurity efforts, and some admitted Thursday during the hearing that they don't fully understand the scope of cyber warfare in the context of a military action.

In his opening comments Thursday, Alexander assured lawmakers that he won't overstep the boundaries of his role if confirmed to lead the Cyber Command.

"This is not about efforts to militarize cyberspace," he said. "Rather it's about safeguarding the integrity of our military system. My goal if confirmed will be to significantly improve the way we defend ourselves in this domain."

However, he said that his role would not merely be a defensive one, and that Cyber Command should mount offensive cyber attacks in the event of a cyber war.

Alexander said he would work alongside the DHS, in particular, to define the scope of his role and to develop strategies. The DHS is the government agency in charge of cybersecurity on U.S. soil.

Indeed, one of the trickiest issues lawmakers have been grappling with is the relationship between Cyber Command and the DHS. The DHS has been working with private companies that own most of that critical infrastructure to forge relationships and share intelligence, and ultimately is responsible for protecting networks at home.

However, Cyber Command would play a key role if there was a major attack from a foreign entity on critical networks, and Alexander was asked by the committee how he would juggle responsibilities.

"Our responsibility is to provide technical support to the DHS to help them build the technology they need to defend [critical] networks," he said. "I think that partnership continues to grow."

The committee posed to Alexander a hypothetical situation that described an attack coming from outside the country but routed through computers in the U.S., which would put it in the domain of the DHS and raise privacy concerns for U.S. citizens.

Alexander said in that case it would be necessary to coordinate efforts very closely with the DHS and the President himself, who would have the ultimate authority in that situation to act.

But this is one area he said that is not clearly defined by policy, which he said is still lacking to help the Cyber Command protect the DoD in the event of a cyber war. "That's one of the things the administration is trying to address," Alexander said.

Indeed, cybersecurity and cyber warfare policy has not evolved nearly as quickly as the threat the Cyber Command, DHS, and NSA are attempting to ward off. The House of Representatives only recently passed a cybersecurity bill while the Senate is currently considering one, but neither have gone into effect yet.

Alexander said the DoD network is hit with hundreds of thousands of probes a day that are attempting to detect vulnerabilities in the network, which is one of the reasons the Cyber Command was created in the first place.

"We have been alarmed by the increase, especially this year," he said. "It's growing rapidly."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Why CISOs Need a Security Reality Check
Joel Fulton, Chief Information Security Officer for Splunk,  6/13/2018
Cisco Talos Summit: Network Defenders Not Serious Enough About Attacks
Curtis Franklin Jr., Senior Editor at Dark Reading,  6/13/2018
Meet 'Bro': The Best-Kept Secret of Network Security
Greg Bell, CEO, Corelight,  6/14/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-4043
PUBLISHED: 2018-06-19
SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx.
CVE-2018-11525
PUBLISHED: 2018-06-19
The plugin "Advanced Order Export For WooCommerce" for WordPress (v1.5.4 and before) is vulnerable to CSV Injection.
CVE-2018-11526
PUBLISHED: 2018-06-19
The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection.
CVE-2018-11537
PUBLISHED: 2018-06-19
Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain whitelist filter via a crafted domain.
CVE-2018-6210
PUBLISHED: 2018-06-19
D-Link DIR-620 devices, with a certain Rostelekom variant of firmware 1.0.37, have a hardcoded rostel account, which makes it easier for remote attackers to obtain access via a TELNET session.