WASHINGTON, USA: The recent spate of attacksĀ on enterprises seems not just enough to wake up companies from their deep slumber on the security front and it would probably take a crisis for them to pull up their socks.
The state of security alertness in companies is this pity state despite U.S. intelligence agencies willingness to share their unique capabilities that can help protect American companies from cyber espionage and attack.
"But it will probably take a crisis to change laws to allow that type of cooperation", a former spy chief said on Monday.
ALSO READ: Symantec says hackers stole source code in 2006
Intelligence agencies like the National Security Agency are authorized to operate abroad but generally are restricted from working within the United States,
"Until we have a banking collapse or electric power goes off in the middle of a snowstorm for eight weeks, or something of that magnitude, we're likely just to talk about it and not do much," Mike McConnell, former director of national intelligence, said.
The Republican-controlled House of Representatives and the Democratic-controlled Senate have separate efforts under way on legislation aimed at improving cybersecurity.
ALSO READ: Symantec's source code secured by hacking the Indian military?
The House intelligence committee in December approved a bill that would allow U.S. spy agencies to share cyber-threat intelligence with private companies. Some critics worry that could lead to government surveillance of private data.
Senate Majority Leader Harry Reid has said the Senate will take up "comprehensive" cybersecurity legislation this year.
"There are unique things that the government can do. For example code-breaking. The private sector out there does not do code-breaking," McConnell, a former National Security Agency director, told Reuters in an interview.
"How would you harness that capability and then make it available to the private sector in a way that their infrastructure could be better protected?"
A U.S. intelligence report last year pointed the finger at China and Russia as using cyber espionage to steal U.S. trade and technology secrets.
McConnell gives an example that if NSA, which conducts electronic eavesdropping to detect foreign threats, observed a cyberthreat against the U.S. private sector, "NSA is powerless to do a thing other than issue a report."
He said in the area of cyber exploitation, such as reading an adversary's mail without leaving fingerprints, the United States, Britain and Russia are probably the best.
The United States also has the ability to conduct cyber attacks, which would be to degrade or destroy an adversary's computerized system, and has used it.
Has the United States used its cyber attack capability? "Yes," McConnell said. Did it work? "Yes."
McConnell, now vice chairman at the Booz Allen Hamilton consulting firm in charge of cyber activities, did not elaborate on the use of a cyber attack capability.
"Do we have the ability to attack, degrade or destroy? Sure. If you do that, what are the consequences? That is the question," he said.
About CIOL | Media Kit | Site Map | Contact Us | Help | Write to us | Jobs@CyberMedia | Privacy Policy
Copyright © CyberMedia India Online Ltd. All rights reserved. Usage of content from web site is subject to Terms and Conditions.