Expert says time to move beyond ‘medieval’ cybersecurity approach

The nation’s approach to cybersecurity has much in common with medieval defense tactics, and that needs to change, says a cybersecurity expert at Missouri University of Science and Technology.
“Most of our cyber defenses are modeled after medieval perimeter security – a firewall is much like a castle moat – and the idea of ‘keeping the bad guys out,’ ” says Dr. Bruce M. McMillin, professor of computer science and associate dean of the College of Engineering and Computing at Missouri S&T.
“We live inside modern systems that are both physical and computational, and, in such a smart living environment, attacks can come from multiple different sources, some even inside what we consider protected,” he says.
Earlier this year, the head of U.S. Cyber Command told Congress that the federal government’s efforts to deter computer attacks are not working and the U.S. needs to “increase our capacity” to strengthen cybersecurity.
At Missouri S&T, McMillin and other researchers are working to improve cybersecurity with an emphasis on safeguarding the nation’s infrastructure while educating students in this field through its National Center of Academic Excellence in Information Assurance Education.
“We must focus on the information that both flows into and out of every portion of our smart living environment, both hiding what we consider security and private, and disrupting the ability of our adversaries to launch information attacks,” McMillin says.
He adds that Missouri S&T provides “a unique contribution to the information assurance field with our focus on developing ways to protect the nation’s electric power grid, oil, gas and water distribution systems and transportation systems from terrorist attacks.”
Much of that research occurs through Missouri S&T’s Center for Critical Infrastructure Protection.
McMillin credits his former Ph.D. student, Gerry Howser, for coming up with the moat analogy to describe contemporary approaches to cyber defense.
Howser is a career security expert who returned to Missouri S&T for a Ph.D. in computer science.
McMillin also co-leads Missouri S&T’s Smart Living signature area, which focuses on developing processes and technology to turn home, workplace, transportation and energy systems into “smart” environments.
On March 19, Adm. Michael S. Rogers, the head of the U.S. Cyber Command and the National Security Agency, told the Senate Armed Services Committee that the command’s efforts are not working. He pointed out that attackers to U.S. cyber infrastructure want to move beyond disrupting those networks to establish “a persistent presence” on them.
More recently, Dennis Blair, the former director of U.S. national intelligence, said that major sponsors of cyberwarfare forces are reaching a state of deterrence similar to the “mutually assured destruction” of the Cold War era.
View the original content and more from this author here: http://ift.tt/1HM0D5D

from cyber security caucus http://ift.tt/1J5PfmL
via IFTTT