Risk
2/20/2013
04:20 PM
Connect Directly
Twitter
RSS
E-Mail
50%
50%

U.S. Trade Secret Strategy Targets Hackers

Amidst new reports of theft of intellectual property by Chinese hackers, the White House on Wednesday released a new strategy to fight trade secret theft.

Spy Tech: 10 CIA-Backed Investments
Spy Tech: 10 CIA-Backed Investments
(click image for larger view and for slideshow)
In the face of increasing concerns about the theft of U.S. intellectual property by foreign hackers, the White House Wednesday rolled out a strategy to protect U.S. trade secrets.

Attorney General Eric Holder, General Electric general counsel Karan Bhatia and other government and industry officials we among those speaking at a Wednesday afternoon White House event to announce the strategy document.

"We are fighting back more aggressively and more collaboratively than ever before [and] are poised to build on our recent successes," Holder said at the event. "We need to increase cooperation and coordination, we need to find ways to work together more effectively and efficiently, and we need to do so starting immediately because continuing technological expansion could lead to a dramatic increase in trade secret theft."

[ Want more on U.S. cybersecurity guidelines? Read White House Cybersecurity Executive Order: What It Means. ]

The White House places the fight against cyber attacks squarely at the center of its strategy. "U.S. companies, law firms, academia and financial institutions are experiencing cyber intrusion activity against electronic repositories containing trade secret information," the White House wrote in the introduction to the report.

Officials tied the plan to a recently issued White House executive order on cybersecurity that encourages cyber threat information sharing and adoption of cybersecurity standards. "We believe this new framework will ultimately improve the resiliency of businesses and prevent theft," Department of Commerce deputy secretary Rebecca Blank said at the White House event.

The release of the plan comes only a day after cybersecurity company Mandiant released a 60-page investigative report claiming that the Chinese military is behind many attacks against American companies over the last several years. China quickly denied involvement in any such attacks and slammed what it said was lack of proof in the report. Assistant attorney general Lanny Breuer, head of the Department of Justice's criminal division, cited the report at the event in detailing his concerns about trade secret theft.

Earlier in February, the President used the State of the Union address to express the need to combat the theft of trade secrets. "We know foreign countries and companies swipe our corporate secrets," Obama said. "We cannot look back years from now and wonder why we did nothing in the face of real threats to our security and our economy.

The new strategy has five key parts, including coordinated international engagement, an effort to spur companies to look at their internal policies and encourage sharing of best practices to prevent trade secret theft, increased law enforcement efforts, efforts to strengthen trade secret laws such as recently happened when Congress closed loopholes for theft of source code, and increasing public awareness of trade secret theft problems.

In addition to Holder, Batia and Blank, other officials participating in the strategy announcement included U.S. intellectual property enforcement coordinator Victoria Espinel, Under Secretary of State for Economic Growth Robert Hormats, deputy U.S. trade representative Demetrios Marantis, national counterintelligence executive of the Office of the Director of National Intelligence Frank Montoya, Information Technology Industry Council CEO Dean Garfield, and American Superconductor Corp. general counsel John Powell.

Attend Interop Las Vegas, May 6-10, and attend the most thorough training on Apple Deployment at the NEW Mac & iOS IT Conference. Use Priority Code DIPR02 by March 2 to save up to $500 off the price of Conference Passes. Join us in Las Vegas for access to 125+ workshops and conference classes, 350+ exhibiting companies, and the latest technology. Register for Interop today!

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Operations and IT Operations: Finding the Path to Collaboration
A wide gulf has emerged between SOC and NOC teams that's keeping both of them from assuring the confidentiality, integrity, and availability of IT systems. Here's how experts think it should be bridged.
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.