The Trials and Tribulations of America's Chief Internet Defender (dailydot.com) 22
erier2003 writes: Amid a torrent of cyberattacks and seemingly endless data breaches, the U.S. Computer Emergency Response Team, the government's premier cybersecurity monitoring unit, has never been busier. In an interview with the Daily Dot, US-CERT Director Ann Barron-DiCamillo described its structure, its incident-response activities, and its partnerships with frequently targeted industries like the financial sector. She also discussed the evolution of cyber threats over the past decade, as determined hackers have shifted focus from brute-force network penetrations to savvier, more indirect attacks.
US-CERT is part of DHS (Score:2)
My favorite quote from TFS "We’re not the Geek Squad."
Re: (Score:3, Interesting)
CERT has existed long before DHS and has been doing an excellent job of informing the US industry of threats to systems
CERT and SANS should be the primary go-to place for anybody sticking their toes into the cold water of computer systems security
Re: (Score:3)
This article is about US-CERT, not CERT.
Re: US-CERT is part of DHS (Score:3)
US-CERT does not have a vulnerability analysis capability. That's why they contract that work out to Carnegie Mellon University. I work for CERT, so I'm pretty sure that I would know.
Re: (Score:1)
Also note: she specifically said that they were NOT the lead response team for the Sony attack/breach.
Everything is part of DHS because turf protection (Score:3)
Half the government is part of DHS. This is because during discussions of what went wrong systemically after 9/11, noone would agree who should be the lead agency on terrorism. Everybody agreed coordination was needed, and everybody thought they should be the lead.
The FBI , border patrol, everybody wanted to keep their own autonomy and didn't want to be put under another agency or department's leadership. So Andrew Card (the guy who whispered the news of the 9/11 "plane crashes" to Bush in the fa
Always funny to hear a paper called "a product" (Score:2)
I think she's talking about a paper called "TA15-120A" ("Securing End-to-End Communications") that piles onto the bandwagon of turning off SSL 3.0 or something similar. But its always funny to hear a bureaucrat call paper "a product" as if it could fix anything itself.
Re: (Score:1)
AC:
They can't have it both ways.
Government:
No, we can't, but we can.
Re: (Score:2)
Not to mention the ridiculous use of "around". Does your product do something (or describe something, if it is a paper)? If so, say what it is/does; don't give me the unfocused and non-understandable "around".
sPh
How can a group like this exist... (Score:1)
and allow NSA/CIA/DHS pushes for backdoors?
Re: (Score:2)
Its the old hope that only the US mil will have the keys and skills.
Then only trusted 5 eye nations. A few of the NATO third party nations need them too as they are so trusted, helpful and collect such great product.
Top US federal law enforcement to help with parallel construction. Nations that work well with US federal law enforcement might get the product and be allowed to install the hardware, software under strict export controls locally
Once mil grade trap doors and