Will Sharing Cyberthreat Information Help Defend the US?

Information SharingThe recent government release of information sharing guidelines reminded me of a post @taosecurity did a while back where he takes a stab answering this question. As usual in infosec … “it depends” is the answer. Still, it’s a great read to see how things have evolved over the past year from the original White House proposal to the recently released guidelines.

via Brookings.edu

In my March 20, 2013 testimony to the House Subcommittee on Cybersecurity, Infrastructure Protection, and Security Technologies on “Cyber Threats from China, Russia and Iran: Protecting American Critical Infrastructure” I stated that accurate and timely threat intelligence is often unavailable. Without an effective framework for sharing information among commercial entities, and between corporate America and the government, cyber defenders are deprived of one of the most valuable resources in detecting and responding to attacks.

Subsequently, I argued that the government should promote policies that encourage sharing threat intelligence between the private sector and government and among private sector entities. Threat intelligence does not contain personal information of American citizens, and privacy can be maintained while learning about threats. Intelligence should be published in an automated, machine-consumable, standardized manner.

Continued here.

#####

Today’s post pic is from DoD.mil. See ya!

3 comments for “Will Sharing Cyberthreat Information Help Defend the US?

  1. February 26, 2016 at 1:31 am

    BLOGGED: Will Sharing Cyberthreat Information Help Defend the US? https://t.co/hnSsV0AbNV

  2. February 26, 2016 at 6:56 am

    Will Sharing Cyberthreat Information Help Defend the US? https://t.co/RaQT4YF9R0 #iSecNews

  3. February 26, 2016 at 7:26 am

    Will Sharing Cyberthreat Information Help Defend the US? https://t.co/zwfxj7m4hb #iSecNews

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.