Obama Wants Big Hike In Cybersecurity Research
dcblogs writes "The White House 2012 budget seeks a 35% increase to $548 million in cybersecurity research and development, including funds to help DARPA mitigate the risk of insider threats. Think WikiLeaks. Improving control system security, post Stuxnet, was also cited as priority. Overall, the budget seeks $66.1 billion for basic and applied research across all areas, an 11.6% increase. Some areas called out for special focus by the White House include robotics. The feds have already started offering grants for developing of 'co-robots,' which are 'systems that can safely co-exist in close proximity to or in physical contact with humans in the pursuit of mundane, dangerous, precise or expensive tasks.' The US also wants to focus research on nanomanufacturing, 'and the merging of self-assembly with lithography to achieve large-scale predictable placement of nanoscale components.'"
Instead of increasing defense funding, how about we stop making people mad enough to attack us? That way, we can spend our money on more important things.
Partisianism aside, this is a good thing. Security initiatives are not going to be coming from the business sector because security has no ROI [1]. So, the only real origin of more robust tools to keep the blackhats out are going to have to come from governments.
Of course, my fear is that this security initiative (meant to keep data safe from being exposed, or worse, tampered with), may turn into funding for nastier DRM. Mainly because DRM does seem to have a ROI attached to it while security in general doesn't.
[1]: Of course, security saves money, but to a PHB, they don't really know or care that expanded security means that trade secrets keeping a competitive edge are safe. Couple this with the attitude of a lot of SMBs that "gee, if I get hacked, I can call Geek Squad 24/7 and they can fend off the hackers", and it is just shameful for a lot of the private sector. Not all, there are a few companies who actually keep their flies zipped up, but unless a regulation forces a company to keep data secure, it just won't be done.
ka-ching
Note that a large portion of the money for DARPA is going to cybersecurity research with Mudge of the L0pht as the DARPA Program Manager.
[1] http://www.pcworld.com/businesscenter/article/219725/government_employs_hackers_in_brave_new_scheme.html
[2] http://www.wired.com/dangerroom/2010/08/darpas-star-hacker-looks-to-wikileak-proof-the-pentagon/
[3] http://www.foxnews.com/scitech/2011/02/07/internet-creators-ask-hackers-help/
[1]: Of course, good security saves money,
FTFY. Two examples why this is important:
1. how much security the TSA scanners bring? how much do they cost?
2. a very recent case showed a group of 3 companies trying to get a contact for 6 months at 2 mils/month. Turned out that one of them wasn't even able to secure its digital assets.
I admit, I didn't say what good security mean. Well, that's let as homework.. for extra points, see how much of what Obama wants is indeed good security.
Questions raise, answers kill. Raise questions to stay alive.
What's with the 'cyber' prefix anyway? It doesn't mean anything.
http://www.pcworld.com/businesscenter/article/219725/government_employs_hackers_in_brave_new_scheme.html
"...harness those within the hacking community who typically present research at black or white hat conventions but whose work flies under the radar of DARPA."
"hacker incubators" and made it clear that the DoD would not request commercial rights to any innovations discovered.
" a new type of Windows rootkit that was undetectable and almost impossible to remove." http://crowdleaks.org/hbgary-inc-working-on-secret-rootkit-project-codename-magenta/
Domestic spying is now "Benign Information Gathering"
If it's really important, don't put it on the Internet. If routing over another physical network is too expensive, encrypt it.
There. Problem solved. All I ask is 10% of what they are planning to spend on this problem. I think that's reasonable. I'll be by the Treasury to pick up my money on Tuesday. I'll be the one in the Bugatti Veyron, which the dealers will happily front me when I explain to them what I've done.
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
All that fancy stuff is useful in theory, but in reality will pale in comparison with boots on the ground, from both the practical and economic standpoint. A fully automated Big Brother security system sounds impressive, but you still have to keep it working and up to date over time, even if there aren't any exploitable bugs in it.
Techno P. T. Barnums are plentiful, and always ready to collect your money. And in this case, there's a politician looking for an easy answer born every minuite.
Most attacks have nothing to do with being mad, Most are organized crime, doing it to make a buck. The next largest subset are simply vandal type hackers doing it to amuse themselves. Very few are politically motivated.
(If at first you don't succeed, do it different next time!)
who else does he think is going to build all the new locks? everything's going to plan gentlemen.
Korma: Good
Just means more money to scam artists like HBGary. Bye bye tax dollars!
Obama is hardly a nerd that cares directly about these things... he's just listening to his cabinet.
Give him a call or shoot him a text, let him know we're broke.. Thanks.
Make them earn there budget, print more dept is no solution
Is robots.
Sure you can just cut your labor costs and environmental regulations down to compete with China.
Oh? What's that? You want cheap (tariff-free Chinese) goods, a toxic-sludge-free town and world-leading wages all at the same time? Well I guess you're still IP-dependent then.
"When information is power, privacy is freedom" - Jah-Wren Ryel
No, lowsy coders.
"When information is power, privacy is freedom" - Jah-Wren Ryel