June 5, 2002 (Computerworld) --
REDMOND, Wash. -- Despite evidence of al-Qaeda's research into American utility companies gleaned from laptops seized after the Sept. 11 terrorist attacks, don't expect the National Security Agency, CIA and FBI to warn businesses when a cyberattack might take place. That was the message delivered yesterday by the president's cybersecurity czar, Richard Clarke, to 300 educators attending the sixth annual National Colloquium for Computer Security Education at Microsoft Corp.'s conference center. "Law enforcement can't save the private sector," Clarke said. "We can't tell the energy companies and the pipeline companies how to configure their systems. At a fundamental level, it doesn't matter who the threat is." What matters, he said, are the vulnerabilities within corporate networks that present risks to national infrastructure. And the most vulnerable networks are those at universities and college systems, many of which have little or no protection -- and thus make great launching pads for attacks against infrastructure companies. Clarke challenged the computer security and information assurance program directors to push for better security at their own schools. And he urged them to develop research curriculum around secure operating systems, routers and out-of-line management. "In three to four years, we will have a billion IP addresses," he said. "Do we still want to use TCP/IP? Do we still want the same domain naming system? Do we still want the same wireless security we're using today?" To champion better security at their campuses, Clarke said attendees need to become "nudges" by pressing university provosts and boards of regents for better security programs and educational grants. "An information war is coming some day, and the $15 billion in losses from hacking cited today will seem like nothing when it happens," he said. But attendees questioned whether scare tactics would result in better security programs. "Security already has this image that it's a pain in the ass," said Peter Tippett, founding chief technology officer at TruSecure Corp. in Herndon, Va. "From the viewpoint of the CEO, he's got to open his business in Poland next month, and all he's hearing is pain, pain, pain." Instead, security professionals should push their agendas by adhering to the business goals of value-add, something largely missing from security and information program syllabuses offered at the session.
Broader Selection of Security Courses Most representatives and speakers talked of information assurance programs at the bits and bytes level, with research agendas heavy on technology, including loss leaders like public-key infrastructure. And while speakers touted forensics programs, intrusion-detection and prevention programs, security standards development and other technical programs, there was little talk about business value and critical thinking. "We need a fundamental re-think about security
"Need help sorting through the hype of cloud computing? Here's some IDC research on the benefits, barriers -- and what..."
Read more...
"Stephen Spoonamore offers more details on what I was trying to drive home in my recent column: Because individual votes..."
Read more... Read more Security posts or See all Blogs
One positive development stemming from the collapse of Wall Street may be a boost in interest in computer science and IT careers among students who were previously interested in financial services jobs.
From Laggard to Leader: Transforming the Data Center
From Laggard to Leader: Transforming the Data Center Register for this complimentary webcast today! Go to the webcast
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing
Intercept Spam & Viruses
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs. (Source: MessageLabs) Register for a complimentary 30 day trial of MessageLabs' new managed Anti-virus and Anti-spam security solutions. MessageLabs guarantees complete protection against all known and unknown email threats. By providing 24 hour support, your business can increase productivity and decrease risk.Register now for a complimentary trial and receive a free datasheet. Download this white paper
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
Go Green with Webroot® Perimeter Security SaaS! Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance –all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! Download this white paper now!
Fired up about IT?Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
Companies today are realizing that competitive advantage is harder to sustain when based solely on gains in productivity and cost efficiency. The focus is shifting to invest more in business optimization initiatives which rely on trusted information to develop new insights that deliver better business results. But how can this be done efficiently in a business environment across multiple applications and processes. The answer is an Information Agenda - an innovative approach to transforming business information into a strategic asset for competitive advantage.
See your link here
Subscribe to
Computerworld 
or
Other Security Stories
From Laggard to Leader: Transforming the Data Center
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. 
Download this whitepaper to learn how to outsmart spam & viruses, compliments of MessageLabs.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. 
Webroot Perimeter Security SaaS is a powerful alternative to obsolete on-premise hardware based security solutions. SaaS allows businesses to obtain flexible protection through an expert security provider, solving the problems caused by software, hardware and appliance solutions. Benefits include easier manageability, better protection and guaranteed performance –all at a lower cost. Register for your free copy of the "Why Security SaaS Makes Sense" whitepaper and Go Green with Webroot! 
Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day.
John Brandon: Google Chrome = Dead, Google Search = Hot
Computerworld