Posted by: Ben Cole
CIO, cybersecurity strategy, cybersecurity threats, cybersecurity training, Obama
Gaping holes in U.S. cybersecurity — especially vulnerabilities relating to trade secrets — remain a top concern for the Obama administration as it struggles to get industry on board with digital security efforts.
Consider these reports: Last week, a New York Times article estimated U.S. research universities suffer “millions” of hacking attempts weekly. Many of these attacks are believed to stem from China, but the increased sophistication of hackers makes it difficult to determine the exact origin. Earlier this year, Alexandria, Va.-based security firm Mandiant Corp. reported that since 2006, a Chinese military unit within the People’s Liberation Army has been using cyber-espionage to steal “confidential data from at least 141 organizations across multiple industries.” In May, a research firm uncovered an India-based cyber-espionage network designed to gather intelligence from a combination of national security targets and private-sector companies across the globe.
In addition, a report released earlier this month by the Center for Strategic and International Studies, co-sponsored by software firm McAfee Inc., estimated that cybercrime and theft of intellectual property costs the United States up to $100 billion in losses annually.
Despite these obvious concerns, the Obama administration and other boosters have struggled to pass sweeping cybersecurity measures, mostly due to bureaucracy: Budget constraints forced the Department of Homeland Security to cut a number of cybersecurity-related training sessions with utility companies, the Wall Street Journal reported this week. Business groups, including the U.S. Chamber of Commerce, have argued against past U.S. cybersecurity bill iterations, with the biggest argument being the regulations would put undue burden on industry.
The state of foreign relations is not helping matters. At the annual U.S.-China Strategic and Economic Dialogue in Washington, D.C., earlier this month, cybersecurity regulations were a major topic. Coming to a cybersecurity compromise proved difficult, however, especially because the leaks surrounding the National
Security Agency’s PRISM program and its associated online surveillance activities make U.S. efforts to curb cyberattacks seem hypocritical. In addition, Chinese government officials continue to deny involvement in state-sponsored cyberattacks on foreign soil.
The question is: Do U.S. businesses realize the tenuous state of their online information? POLITICO reported earlier this week that President Obama is considering tax breaks and other benefits to entice businesses, especially those involved with critical infrastructure, to make cybersecurity improvements.
One thing is certain: Cybercrime and determining a path to cybersecurity continues to be a growing problem on a global scale. Hackers are only getting more sophisticated, and often seem one step ahead of efforts to curb them. As a result, protecting state secrets, business data and citizen information are a priority for not just the U.S., but for countries all over the world. Improving cybersecurity will require collaboration between the U.S. government, businesses and possibly even other countries. Without this cooperation, hackers will continue to gain the upper hand and put sensitive information at risk.