U.S. government needs cybersecurity doctrine, experts say
Other governments should have responsibility for hacking done inside their borders, he added. "At some point, you have to say: 'I'm not going to worry about attribution. I'll do the best I can, but I'm going to hold countries responsible for what's going on inside their borders,'" he said.
While a doctrine is needed, it needs to balance security with the economic benefits of the Internet, said Ronald Marks, president of Intelligence Enterprises, a security consultancy, and a former CIA officer. "If we try to do anything heavy-handed at this point, we're going to basically step on a market that has developed quite well over the years," he said.
But the U.S. continues to have major security vulnerabilities, he added. "We've had now a market that is really not interested in dealing with security," he said. "It's a cost center in any organization."
It will be difficult for the government to get people to change their cybersecurity behaviors, he added. "How do you, as a government make people behave?" he said. "Do you want to make a law? Do you want to tell people what to do? You know how successful that's been over time."
Grant Gross covers technology and telecom policy in the U.S. government for The IDG News Service. Follow Grant on Twitter at GrantGross. Grant's e-mail address is email@example.com.
Changing the Way Government Works: Four Technology Trends that Drive Down Costs and Increase Productivity
This paper discusses four technology-based approaches to improving processes and increasing
productivity while driving down department and agency costs.
- Path Selection Infographic Path Selection Infographic
- Hyperconvergence Infographic A wide range of observers agree that data centers are now entering an era of "hyperconvergence" that will raise network traffic levels faster...
- Preparing Your Infrastructure for the Hyperconvergence Era From cloud computing and virtualization to mobility and unified communications, an array of innovative technologies is transforming today's data centers.
- Cloud Knowledge Vault Learn how your organization can benefit from the scalability, flexibility, and performance that the cloud offers through the short videos and other resources...
- LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users? All Gov't Legislation/Regulation White Papers | Webcasts