Fwd: [ISN] Pentagon considers preemptive strikes as part of cyber-defense strategy

[Paul Ferguson <fergdawgster () gmail com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This demonstrates -- to me -- some very, very poor judgment.

- - ferg


- ---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>
Date: Sun, Aug 29, 2010 at 10:36 PM
Subject: [ISN] Pentagon considers preemptive strikes as part of
cyber-defense strategy
To: isn () infosecnews org


http://www.washingtonpost.com/wp-dyn/content/article/2010/08/28/AR201008280
3849.html

By Ellen Nakashima
Washington Post Staff Writer
August 28, 2010

The Pentagon is contemplating an aggressive approach to defending its
computer systems that includes preemptive actions such as knocking out
parts of an adversary's computer network overseas - but it is still
wrestling with how to pursue the strategy legally.

The department is developing a range of weapons capabilities, including
tools that would allow "attack and exploitation of adversary information
systems" and that can "deceive, deny, disrupt, degrade and destroy"
information and information systems, according to Defense Department
budget documents.

But officials are reluctant to use the tools until questions of
international law and technical feasibility are resolved, and that has
proved to be a major challenge for policymakers. Government lawyers and
some officials question whether the Pentagon could take such action
without violating international law or other countries' sovereignty.

Some officials and experts say they doubt the technology exists to use
such capabilities effectively, and they question the need for such
measures when, they say, traditional defensive steps such as updating
firewalls, protecting computer ports and changing passwords are not
always taken.

[...]


_______________________________________________________
Subscribe to InfoSec News - www.infosecnews.org
http://www.infosecnews.org/mailman/listinfo/isn

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.5.3 (Build 5003)

wj8DBQFMe0grq1pz9mNUZTMRAmTGAJ4pTCRY1evQ/LUdtpW1N+8kZqIo2QCfeDK7
0v19o1XAbaP+OL/qYCu8LKc=
=uP2j
-----END PGP SIGNATURE-----



-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.