Lawmaker Proposes Cyberthreat Sharing Group
alphadogg writes "A proposal in the House of Representatives would set up a new semi-independent organization allowing the U.S. government and private companies to share information about cyberthreats, but some critics questioned whether the group would be too removed from congressional scrutiny. The draft proposal (PDF), from Representative Dan Lungren, a California Republican, would create a nonprofit National Information Sharing Organization (NISO) that would serve as the collection and distribution point for cyberthreat information shared among the federal government, state and local governments, private companies and education institutions. NISO would also fund cybersecurity research and development."
My best guess is that it's all bullshit to take that 15% DHS funding and funnel it directly into the private members. From the article:
The proposal is a "positive step" toward a national cybersecurity policy, said Cheri McGuire, vice president of global government affairs and cybersecurity policy at Symantec.
There you go.
We've had CERT for a long time.
Well, this was supposed to be an angry rant about government forming yet another stupid and unnecessary organization, probably designed to crack down on copyright all in the name of "protect the children". Then I read the draft (or, rather skimmed a large part of it), and it actually seems focused an preventing wide-scale attacks on infrastructure and creation of more secure Internet protocols. Seems... alright, although this is, of course, just a draft. Also, it'll never live up to it's promises, but hey, I suppose trying to secure the nation against computer-based attack is laudable.
It's probably still stupid and redundant, but at least it seems redundant in the right direction, anyways.
"None can love freedom heartily, but good men; the rest love not freedom, but license." --John Milton
"take that 15% DHS funding and funnel it directly into the private members"
Mod that comment up.
America (and others users globally benefiting from the Internet) will be much more secure with a distributed ecosystem with many independent groups each working toward assuring their own independent, autonomous security, rather than attempting to pass the buck to yet another outsourced committee operating as a puppet for the federal government. DHS is moving us toward dystopia with all of the federal intelligence and secret police agencies under one roof, rather than distributed to provide the necessary distrust and competition to keep the organizations healthy.
Federal backing for a clique of "trusted, private-vendor partners" isn't going to raise the bar any better than Darwin's principles will continue to prove out.
FTA, "Congress needs to act to improve our cyber defenses." Congress should focus on getting their job done, such as managing the federal budget, rather than trying to do the job of others.
We all need to act to improve our cyber defenses. Congress isn't going to secure your company's server, nor your home PC, nor your data in the cloud.