Federal Cyberspace Policy Draft Released
mh_cryptonomicon writes "The initial public draft of the National Strategy for Securing Cyberspace was released today. This document outlines the Administration's plan for ensuring that the Net remains a 'good neighborhood.' Following the release of the plan, the Administration's Cybersecurity team will take it on the road for discussions with the people about what can and should be done to protect and defend the net. More information (and the 65 page draft) can be downloaded from the White House's Critical Infrastructure Protection site. This draft is considerably smaller than the 3300 page monster it was reported as being. Commentary is starting to pop up everywhere, including www.cryptonomicon.net/blog/."
Good article about it here. Don't worry, this is the printer friendly version, so you don't have to register.
Yeah, that was my impression, too:
"'Discussion'. Yeah. Right."
Still, from what I've heard of the plan, it's not too bad. Main points seem to be primarily relying on increased security awareness (come on, sysadmins of the clueless newbies, admit it: you've wished, at least once, that all new users of the chunk of the 'Net you control would have to get some decent training about what a virus is and how not to get one - well, that's about what they're advocating) and reliability rather than monitoring (not "scan all the traffic looking for something nasty" but "lock down the ports so nasty things don't happen" - i.e., prevention).
The BBC and News.com reports. News.com in depth multi page thang.
This looks like it was compiled after extensive consultations with commercial inter^w^w leading experts. The
recommendations appear to boil down to "1. Use Symantec[tm] and Network Associates[tm] Products;
2. Encourage commercial software more secure, then sell it to *everyone*;
3. Train more experts". Am I too cynical, or are they missing
"4. Profit!" ? (Symantec and NAI are apparently doing product
releases to cash in?!) Where does Free software figure in these expert
recommendations? Oh, and privacy concerns have been quietly shelved.
Although... perhaps the news that BGP (the Internet's backbone routing
protocol) has vulnerabilities is news outside NANOG-l?
It's not spelled "DRAFT", it is spelled "DAFT"
;)
get it right.
The Kruger Dunning explains most post on