JPMiginiac.com

Aller au contenu | Aller au menu | Aller à la recherche

lundi 10 mars 2008

Repères 10/03/08 - Einstein contre les hackers

Repères 10/03/08 - Einstein contre les hackers

Einstein and U.S. cybersecurity
by Shaun Waterman, Washington (UPI) Mar 03, 2008

"The Einstein program -- the most significant element yet unveiled of the classified multibillion-dollar cybersecurity initiative President Bush signed last month -- will still leave the U.S. government's IT security lagging the private sector, say lawmakers and industry experts.
At a hearing last week on Capitol Hill, officials faced close, skeptical questioning about the program, an intrusion detection system that will automatically monitor and analyze Internet traffic into and out of federal computer networks in real time -- allowing officials at the Department of Homeland Security to scan for anomalies that might represent hackers or other intruders trying to gain access or steal data.

"There are still some gaping holes," said Rep. James Langevin, D-R.I., of the House Homeland Security Committee.

Officials at the hearing linked Einstein with the White House Office of Management and Budget's Trusted Internet Connections initiative. TIC requires all federal departments and agencies to report on all their external network connections, with the aim of reducing the current 4,000 or so across the federal government down to 50 by June this year.

Einstein will be deployed at all those points of access, Scott Charbo, the Homeland Security official responsible for the program, told United Press International in a recent interview.

Departments and agencies will "deploy the sensors to the portals identified" as being among the 50 or so that will remain open, he said.

But some Democrats and industry observers are skeptical about Einstein's capabilities..."

 

vendredi 7 mars 2008

Repères 07/03/08 - From China with love ! Quand les hackers ciblent les Think Tanks US

Repères 07/03/08 - From China with love ! Quand les hackers ciblent les Think Tanks US

Chinese Cyberattacks Target US Think Tanks
by Shaun Waterman, Washington DC (UPI) Mar 07, 2008

"Defense-related think tanks and contractors, as well as the Pentagon and other U.S. agencies, were the target of repeated computer network intrusions last year apparently originating in China, the Department of Defense said this week.
In its annual report to lawmakers on China's military power, the department said the intrusions "appeared to originate in" China but added, "It is unclear if these intrusions were conducted by, or with the endorsement of" the Chinese government or military.

The report gave few details, but one China expert who works in the private sector told United Press International that in the last 18 months, China scholars who have close links to the U.S. government have been the repeated targets of sophisticated hacking attempts, using malicious software packages called Trojan horses hidden in e-mail attachments...

...Because of the geographically dispersed nature of the Internet and the ability of hackers to launch attacks and intrusion efforts from "slave" computers they have secretly taken control of, attribution has been highlighted as one of the biggest problems for U.S. military planners developing cyberwar strategies.

Nonetheless, defense officials said the language used in the report was the most direct used so far by the administration and had been carefully chosen.

The language in the report had been "coordinated through a multiagency process" involving the National Security Council, the director of national intelligence and the State Department, Pentagon Asian affairs spokesman Maj. Stewart Upton told UPI. He called it "the strongest language yet from the (Department of Defense) about these intrusions."

"While we're not able to definitively label them as the work of the (People's Liberation Army, as the Chinese military calls itself) or the Chinese government, the techniques that are used, the way these intrusions are conducted are certainly very consistent with what you would need if you were going to actually carry out cyberwarfare," Deputy Assistant Secretary of Defense for East Asia David Sedney said Monday at a briefing for reporters.

He added that the intrusions "are certainly the kinds of things that espionage agencies would do," adding that developing cyberwar capacities like the ability to employ Trojan horse software was "consistent with a lot of writings we see from Chinese military and Chinese military theorists."..."