Risk

8/27/2010
02:42 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

Top Military Official Outlines Pentagon's Cyber Strategy

As cyber threats to government mount, the Department of Defense is developing a comprehensive strategy to deal with them.




Slideshow: Next Generation Defense Technologies
(click for larger image and for full photo gallery)
Saying that cyber attacks have the potential to disrupt the American economy, gain "valuable" intelligence and "impede" the U.S. military, deputy secretary of defense William Lynn this week laid out the key elements of the military's approach to cyberspace.

In an essay in Foreign Affairs, Lynn detailed five principal elements of the military's strategy, including: building an organizational construct for cyber forces, employing layered protections that include "active defenses," supporting the security of critical infrastructure networks, building collective defenses with allies, and investing in research and development.

Several key attributes of the cyber domain that will inform exactly how this strategy is executed, Lynn wrote. For example, cyber conflicts are often asymmetric in nature, where a small number of determined bad actors carrying out an attack often has the upper hand against a potentially much larger victim.

Predicting and responding to attacks is also different. In the cyber world, Lynn wrote, attacks will be difficult to predict, and "traditional Cold War deterrence models" don't work -- for example, difficulty in attribution may make counter-attacks risky. Therefore, he added, deterrence in the cyber arena must be based more on strengthening defenses.

In addition, in the cyber world, threats will not be limited to military targets. While Lynn wrote that more than 100 foreign intelligence services are probing weaknesses in American military and intelligence networks, he also noted risks to critical infrastructure and intellectual property.

At a high level, that means that whatever strategy the U.S. military puts in place must be adaptive and flexible. Among the efforts that should help with that is ongoing work to overhaul IT acquisition processes at the DoD. In his article, Lynn outlined the latest thinking at DoD on acquisition, saying that the DoD was developing new policies to require shorter development cycles, incremental development and testing, further standardization, and improved oversight of IT.

The new acquisition rules also feed into the idea of rapid research and development, one of the main elements of the military's strategy. Lynn wrote that the DoD would be putting significant resources into new research, for example developing a model of the Internet called the National Cyber Range to let the military test cyberdefense capabilities in a sandboxed environment and doing more basic research at the Defense Advanced Research Projects Agency, the organization that's credited with inventing the Internet.

From an operational perspective, Lynn wrote that U.S. Cyber Command, the new military command devoted exclusively to the cyber arena, will be fully operational by October and will work with three missions in mind: leading day-to-day protection of defense networks, marshaling cyber resources from across the military, and working with military, civilian and even private sector partners.

Lynn also noted the importance of layered protection and "active defenses." He disclosed the existence of home-grown NSA systems that sound similar to intrusion prevention systems and can "automatically deploy defenses to counter intrusions in real-time."

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12716
PUBLISHED: 2018-06-25
The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scan_results JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its l...
CVE-2018-12705
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
CVE-2018-12706
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
CVE-2018-12714
PUBLISHED: 2018-06-24
An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial o...
CVE-2018-12713
PUBLISHED: 2018-06-24
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was ...