Sunday, January 31, 2010

Cyber Security Institute: An Assessment of U.S. Cyber Defense

The Cyber Security Institute, a newly established analysis and advocacy institute based in Washington, D.C., published a whitepaper, entitled "Cyberwar and Cyberterrorism: The Need for a New U.S. Strategic Approach," written by Gen. Eugene Habiger USAF (ret.).


General Habiger formerly served as Commander in Chief of United States Strategic Command. He also served as the Department of Energy's "Security Czar." After leaving public service he was the President and Chief Executive Officer of the San Antonio Water System.


Key conclusions include:


  • 1. Our nation's vital public and private IT systems are so vulnerable that they invite attack.


  • 2. America is routinely the victim of nation-state driven cyber intrusions that can be seen as low-grade cyber-border conflicts.


  • 3. Some of these attacks have crossed a critical line: they have compromised critical systems supporting our troops engaged in combat.


  • 4. Our failure to proactively address these threats risks a digital Pearl Harbor or 9-11.


  • 5. Deterrence by retribution and preemption, our nation's core national security strategies, are of limited value against cyberwar and cyberterror threats -- "these rotary-phone-era strategies are not well suited for today's digital world."


  • 6. A new approach based upon deterrence by denial is needed.


  • 7. Achieving effective cyber deterrence by denial, or defense in-depth, will require nothing short of a total paradigm shift from both government and the private sector.


  • 8. Across both the public and private sector we must deploy inherently secure technologies, tested and certified secure against sophisticated attacks.


  • 9. The private sector must look beyond the balance sheet and focus on our national interests--and if need be the government must force this change.


  • 10. We must educate the American people about the importance of cybersecurity and drive behavioral change.
http://cybersecureinstitute.org