Headline FeedsTechNewsWorld Talkback
|
|
See Full Story
Can the Web's big-time masters of malware really be tracked down? How risky is cloud computing to network security? And what challenges await the Obama administration's plans to lock down the nation's electronic infrastructure -- while at the same time creating a "smart grid?" An experienced panel of computer security experts representing industry, governments and law enforcement batted around possible answers to those questions Monday during a "guru fireside" session that was a highlight of the Information Security Forum's 20th World Congress.
This is a huge issue as we move more and more sensitive systems to the Web. Electric grid, gas pipelines, transportation control systems, military command and control, medical records, personal information in public records, etc. all pose huge risks to the economy and security of the nation.
With current technology, we need physical security or VASTLY improved electronic security for sensitive systems and data.
For example, I would dictate that things such as the proposed 'smart grid', and other infrastructure system be only allowed to communicate via a physically separate network with NO connection to the WWW.
Another example would be to give every person a 'smart card' like used in Taiwan for their medical records and require every access point and storage location for these records to meet a very high security standard. Any facility not meeting these standards could access the records on a temporary basis, but not update anything across the net. They could update individual cards, hopefully keeping my records under my control and avoiding 'contamination' of my records.
Throwing these critical systems onto the WWW gives me nightmares of what the 'black hats' will do much less the possibility for digital warfare by governments and terrorist organizations.
With current technology, we need physical security or VASTLY improved electronic security for sensitive systems and data.
For example, I would dictate that things such as the proposed 'smart grid', and other infrastructure system be only allowed to communicate via a physically separate network with NO connection to the WWW.
Another example would be to give every person a 'smart card' like used in Taiwan for their medical records and require every access point and storage location for these records to meet a very high security standard. Any facility not meeting these standards could access the records on a temporary basis, but not update anything across the net. They could update individual cards, hopefully keeping my records under my control and avoiding 'contamination' of my records.
Throwing these critical systems onto the WWW gives me nightmares of what the 'black hats' will do much less the possibility for digital warfare by governments and terrorist organizations.
