Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats //

Advanced Threats

8/14/2015
09:00 AM
Sara Peters
Sara Peters
Slideshows
Connect Directly
Twitter
RSS
E-Mail

View From The Top: Government’s Role In Cybersecurity

At the DarkReading News Desk, live from Black Hat, industry experts Dan Kaminsky, Richard Bejtlich, Katie Moussouris, Paul Kurtz, and Rod Beckstrom talked about how government is hurting and could be helping infosec.
2 of 6

Richard Bejtlich

On the two major political aspects that concern him related to attribution for cybercrime, Richard Bejtlich, chief security strategist for FireEye, said:

In the incidents at both Sony and the Office of Personnel Management, attribution was established 'fairly early on. Maybe it wasn't handled very well in terms of delivery of the message, but the real hold-up was we don't know what to do next.  And you'd think after years and years of intrusions some policy measures would come about, but clearly everyone's sort of making it up as they go along...

'The second part of attribution I worry about is, high levels of attribution and low levels of attribution. So in a case of say US and Russia, we both have really good attribution capabilities in the government and the private sector... Low attribution countries say like India and Pakistan, they could easily be fooled by a third party trying to make it look like there's a conflict between the two of them.'

Richard Bejtlich

On the two major political aspects that concern him related to attribution for cybercrime, Richard Bejtlich, chief security strategist for FireEye, said:

In the incidents at both Sony and the Office of Personnel Management, attribution was established "fairly early on. Maybe it wasn't handled very well in terms of delivery of the message, but the real hold-up was we don't know what to do next. And you'd think after years and years of intrusions some policy measures would come about, but clearly everyone's sort of making it up as they go along...

"The second part of attribution I worry about is, high levels of attribution and low levels of attribution. So in a case of say US and Russia, we both have really good attribution capabilities in the government and the private sector... Low attribution countries say like India and Pakistan, they could easily be fooled by a third party trying to make it look like there's a conflict between the two of them."

2 of 6
Comment  | 
Print  | 
Comments
Newest First  |  Oldest First  |  Threaded View
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
8/24/2015 | 4:52:29 PM
Katie Moussouris
I had the pleasure of seeing Katie Moussouris speak on a cybersecurity panel at an event in Boston in November.  She is definitely all about reducing restrictions (legal and otherwise) that disincentivize white-hat hackers -- and had a lot to say about how companies can improve their security posture by welcoming security researchers who discover exploits in their software with open arms (citing her former employer, Microsoft, as a great example of this in how the company handled hacking group Last Stage of Delirium's exploitation of the Blaster worm (the company hired them)).
News
FluBot Malware's Rapid Spread May Soon Hit US Phones
Kelly Sheridan, Staff Editor, Dark Reading,  4/28/2021
Slideshows
7 Modern-Day Cybersecurity Realities
Steve Zurier, Contributing Writer,  4/30/2021
Commentary
How to Secure Employees' Home Wi-Fi Networks
Bert Kashyap, CEO and Co-Founder at SecureW2,  4/28/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
The State of Ransomware
The State of Ransomware
Ransomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-31755
PUBLISHED: 2021-05-07
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.
CVE-2021-31756
PUBLISHED: 2021-05-07
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copie...
CVE-2021-31757
PUBLISHED: 2021-05-07
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request.
CVE-2021-31758
PUBLISHED: 2021-05-07
An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.
CVE-2021-31458
PUBLISHED: 2021-05-07
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handlin...