Cybersecurity groups pledge to work together
The three groups want to join forces to combat malicious software
IDG News Service - Three cybersecurity groups want to create a network of organizations and people focused on securing the Internet in an effort to combat malicious software.
The Anti-Spyware Coalition (ASC), the National Cyber Security Alliance and StopBadware.org rolled out a new program Tuesday called the Chain of Trust. The Chain of Trust Initiative will attempt to link together security vendors, researchers, government agencies, Internet-based companies, network providers and education groups in a united front against malware.
The U.S. government needs stronger partnerships with the private sector to identify criminals and stop attacks, said Shawn Henry, assistant director of the Cyber Division at the U.S. Federal Bureau of Investigation.
"We have to get intelligence information about the attacks in order for us to go and mediate them," Henry said at an ASC workshop in Washington, D.C.
In addition, the FBI helps private companies by sharing the information it has on attackers or methods, he added. "If we can identify specific signatures, if we can identify new attack vectors the adversaries are using, if we can get that intelligence out to the private sector, there's great value there," he said.
Attacks from three types of organized sources -- foreign intelligence agencies, terrorist sympathizers and organized crime -- are growing rapidly, Henry said. Asked how fast those types of attacks are growing, Henry declined to give solid numbers. "The trend is way up, and it's a steep increase," he added.
The goal of the Chain of Trust program is to create a united approach to fighting malware, said Ari Schwartz, ASC's coordinator and vice president at the Center for Democracy and Technology.
"Strong security in any one organization or sector is not enough to combat an agile, fast-evolving threat like malware, which exploits security breakdowns between entities," Schwartz said. "We all need to work together to build a system that can withstand and repel the next generation of exploits."
ASC, started four years ago, organized the larger Internet community to protest harmful nuisance adware, sometimes supported by legitimate advertising and venture capital groups, Schwartz noted. The united pressure has driven all the major nuisance adware companies out of business, he said.
The pressure made the nuisance adware vendors "have to decide whether to become legitimate players in the marketplace ... or go completely to the dark side and not be able to take that kind of mainstream funding," Schwartz said.
The first effort of the Chain of Trust Initiative will be to map the network of organizations and people that are working on cybersecurity, the groups said. The initiative will also focus on identifying vulnerabilities within the chain and on developing consensus solutions to cybersecurity problems.
The initiative plans to issue a paper with initial recommendations in the next six months.
- Warning: Cloud Data at Risk Experts agree that relying on SaaS vendors to backup and restore your data is dangerous. Yet that's exactly what huge portions of the...
- The Opportunities and Challenges of the Cloud In this report F5 poses questions to IDC analysts, Sally Hudson and Phil Hochmuth, on behalf of F5's customers to better understand the...
- Mobile First: Securing Information Sprawl Learn how the partnership between Box and MobileIron can help you execute a "mobile first" strategy that manages and secures both mobile apps...
- The Truth About Cloud Security "Security" is the number one issue holding business leaders back from the cloud. But does the reality match the perception?
- What should I look for in a Next Generation Firewall? SANS Provides Guidance With so many vendors claiming to have a Next Generation Firewall (NGFW), it can be difficult to tell what makes each one different....
- Responding to New SSL Cybersecurity Threat The featured Gartner research examines current strategies to address new SSL cybersecurity threats and vulnerabilities. All Security White Papers | Webcasts
Our new bimonthly Internet of Things newsletter helps you keep pace with the rapidly evolving technologies, trends and developments related to the IoT. Subscribe now and stay up to date!