Related Links

Related Stories

  • Running the Right Risks
    Standards cover much of the field of information risk management, but there is an art to the rational understanding and mitigation of risk that is more about skill than knowledge. Brian McKenna uncovers how the discipline can be practiced with a cool head and a calm stomach
    Members' Content
  • Does Web 2.0 Need Security 2.0?
    With the proliferation of Web 2.0 services, security concerns have escalated. Davey Winder investigates how infosec vendors are addressing these challenges and wonders whether security 2.0 actually exists
    Members' Content
  • Comment: Navigating the POS security standard minefield
    Steve Brunswick and Jose Diaz from Thales outline the payment security standards landscape and explain how these various standards fit together when securing data at the point of sale
    Members' Content
  • Securing the Friendly Skies
    Aviation security and information security are inextricably linked. So much of what makes up aviation security depends on sound information security; encompassing the protection of intelligence, procedural, systems, and network data. For all-too-obvious reasons, much of what goes on behind the scenes at airports with respect to information security is a closely guarded secret, whether it is the alphabet soup of governmental agencies in play or the airlines themselves. Drew Amorosi reports
    Members' Content
  • Securing Electronic Health Records
    Electronic health records are supposed to improve the efficiency and accuracy of healthcare delivery. However, with electronic records come security headaches, and the potential for data breaches. John Sterlicchi examines what the industry is doing thus far to facilitate a secure transition toward electronic health records

News

RSA: NSA director Lieutenant General Alexander asks RSA conference to work with NSA to secure nation

21 April 2009

Director of NSA, Lieutenant General Keith B Alexander, congratulated the information security industry on its excellent work in his keynote address to RSA conference attendees in San Francisco on 21 April 2009.

 Lieutenant General Alexander, who has worked as Director of NSA for four years, emphasised the importance of NSA, the information security industry and the department of homeland security working together as a team to protect against the highest threats. “Our role [NSA] is technical support. We need to work together as a team though, it has to be part of a bigger effort. We do not run cybersecurity for the US government – we’ll help to lead, but we need partnership with others”.

Admitting mistakes on behalf of NSA, Lieutenant General Alexander assured the audience that NSA do self-report mistakes to over-seers. “We tell people what we do, and what we’re going to do to fix it. We have a responsibility to do this”.
 
Lieutenant General Alexander emphasised the need to balance civil liberties and security. “You often get the impression that you must choose between civil liberties or cybersecurity, but we have the ability to do both. That’s what we deserve” he said.
 
“The digital revolution is huge, and it’s great” Lieutenant General Alexander marvelled. “The kids are digitally connected. What we’ve built is huge and we’ve put it all onto one network. There are tremendous capabilities for the future. But with that, are tremendous vulnerabilities - and that’s where you come in” he said, speaking to his audience.
 
“The problem” he continued, “is that all communications are together – there’s not one network to attack on, and one to defend on. It’s not just the US on a network either. It’s all of the world together – which is part of the issue. Look at the evolution – America’s businesses and government runs on this network – everything we do. Our national security is on there – that’s the problem”.
 
Lieutenant General Alexander mocked the suggestion that NSA are collecting all of the two million emails that are sent every second around the world, but drew attention to the 4,000 websites on which terrorist groups are active.  “How do we differentiate the good from the bad on this global network?” he asked. “An adversary wishing to destroy the US only has to mess up the computer systems of its banks by high-tech means to destroy the country’s economy”.
 
Drawing on the example of Estonia, Lieutenant General Alexander emphasised how easy it is to go from “cybercrime to cyber-warfare”.
 
“We have to protect our nation” he enforced, rhetorically asking “Our allies [the industry], how we work together to prevent critical attack. We need to figure out how to protect our secrets while working with industry to protect our nation”.
 
“As a government we need to secure military networks, and we also need to protect privacy and civil liberties. We’re better when we work together”, he continued.
 
Lieutenant General Alexander listed the following four action points as essential in NSA’s mission to protect the nation:
 
  • Team to protect classified and national security networks
  • Learn to protect against highest threats
  • Be prepared to help protect nation during key events
  • Share lessons learned, technology, training with DHS; enhance shared situational awareness
 
Finally, Lieutenant General Alexander congratulated the industry on its work thus far. “You have a tough job and are tremendous at what you do”. He also paid a compliment to Melissa Hathaway and her team, “What they’ve done is superb. She is making great leaps”.
 
“We need to figure out how to secure this superb new era of technology” Lieutenant General Alexander concluded.
 
 

 

 

This article is featured in:
Business Continuity and Disaster Recovery Internet and Network Security Malware and Hardware Security Public Sector Wireless and Mobile Security

 

Comments

NeilGreenfield says:

06 July 2009
Interesting article. My one complaint is how the article addresses General Alexander. He should be addressed as "General" Alexander, not "Lieutenant" Alexander. He far surpassed that rank many years ago once he was promoted to Captain. If this magazine is serious about reporting on government information security efforts, they should get the titles of the people heading these efforts right.

Note: The majority of comments posted are created by members of the public. The views expressed are theirs and unless specifically stated are not those Elsevier Ltd. We are not responsible for any content posted by members of the public or content of any third party sites that are accessible through this site. Any links to third party websites from this website do not amount to any endorsement of that site by the Elsevier Ltd and any use of that site by you is at your own risk. For further information, please refer to our Terms & Conditions.

Comment on this article

You must be registered and logged in to leave a comment about this article.