Cybersecurity groups pledge to work together
The three groups want to join forces to combat malicious software
IDG News Service - Three cybersecurity groups want to create a network of organizations and people focused on securing the Internet in an effort to combat malicious software.
The Anti-Spyware Coalition (ASC), the National Cyber Security Alliance and StopBadware.org rolled out a new program Tuesday called the Chain of Trust. The Chain of Trust Initiative will attempt to link together security vendors, researchers, government agencies, Internet-based companies, network providers and education groups in a united front against malware.
The U.S. government needs stronger partnerships with the private sector to identify criminals and stop attacks, said Shawn Henry, assistant director of the Cyber Division at the U.S. Federal Bureau of Investigation.
"We have to get intelligence information about the attacks in order for us to go and mediate them," Henry said at an ASC workshop in Washington, D.C.
In addition, the FBI helps private companies by sharing the information it has on attackers or methods, he added. "If we can identify specific signatures, if we can identify new attack vectors the adversaries are using, if we can get that intelligence out to the private sector, there's great value there," he said.
Attacks from three types of organized sources -- foreign intelligence agencies, terrorist sympathizers and organized crime -- are growing rapidly, Henry said. Asked how fast those types of attacks are growing, Henry declined to give solid numbers. "The trend is way up, and it's a steep increase," he added.
The goal of the Chain of Trust program is to create a united approach to fighting malware, said Ari Schwartz, ASC's coordinator and vice president at the Center for Democracy and Technology.
"Strong security in any one organization or sector is not enough to combat an agile, fast-evolving threat like malware, which exploits security breakdowns between entities," Schwartz said. "We all need to work together to build a system that can withstand and repel the next generation of exploits."
ASC, started four years ago, organized the larger Internet community to protest harmful nuisance adware, sometimes supported by legitimate advertising and venture capital groups, Schwartz noted. The united pressure has driven all the major nuisance adware companies out of business, he said.
The pressure made the nuisance adware vendors "have to decide whether to become legitimate players in the marketplace ... or go completely to the dark side and not be able to take that kind of mainstream funding," Schwartz said.
The first effort of the Chain of Trust Initiative will be to map the network of organizations and people that are working on cybersecurity, the groups said. The initiative will also focus on identifying vulnerabilities within the chain and on developing consensus solutions to cybersecurity problems.
The initiative plans to issue a paper with initial recommendations in the next six months.
- Enable secure remote access to 3D data without sacrificing visual perfomance Design and manufacturing companies must adapt quickly to the demands of an increasingly global and competitive economy. To speed time to market for...
- Virtually Delivered High Performance 3D Graphics "A picture is worth a thousand words." That old phrase is as true today as it ever was. Pictures (i.e., those with heavy...
- Best Practices for Securing Hadoop Historically, Apache Hadoop has provided limited security capabilities. To protect sensitive data being stored and analyzed in Hadoop, security architects should use a...
- Top Tips for Securing Big Data Environments: Why Big Data Doesn't Have to Mean Big Security Challenges Organizations must come to terms with the security challenges they introduce. As big data environments ingest more data, organizations will face significant risks...
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities. All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!