U.S. Outgunned in Hacker War

[InfoSec News <alerts () infosecnews org>]

http://online.wsj.com/article/SB10001424052702304177104577307773326180032.html

By DEVLIN BARRETT
The Wall Street Journal
March 28, 2012

WASHINGTON -- The Federal Bureau of Investigation's top cyber cop 
offered a grim appraisal of the nation's efforts to keep computer 
hackers from plundering corporate data networks: "We're not winning," he 
said.

Shawn Henry, who is preparing to leave the FBI after more than two 
decades with the bureau, said in an interview that the current public 
and private approach to fending off hackers is "unsustainable.'' 
Computer criminals are simply too talented and defensive measures too 
weak to stop them, he said.

His comments weren't directed at specific legislation but came as 
Congress considers two competing measures designed to buttress the 
networks for critical U.S. infrastructure, such as electrical-power 
plants and nuclear reactors. Though few cybersecurity experts disagree 
on the need for security improvements, business advocates have argued 
that the new regulations called for in one of the bills aren't likely to 
better protect computer networks.

Mr. Henry, who is leaving government to take a cybersecurity job with an 
undisclosed firm in Washington, said companies need to make major 
changes in the way they use computer networks to avoid further damage to 
national security and the economy. Too many companies, from major 
multinationals to small start-ups, fail to recognize the financial and 
legal risks they are taking - or the costs they may have already 
suffered unknowingly - by operating vulnerable networks, he said.

[...]


______________________________________________________________________________
Certified Ethical Hacker and CISSP training with Expanding Security gives
the best training and support.  Get a free live class invite weekly.  Best
program, best price. www.ExpandingSecurity.com/PainPill