Feeds

US Congress wants hack teams for self-penetration

While girding power grid

Using blade systems to cut costs and sharpen efficiencies

The United States Congress this week delved further into the country's cybersecurity preparedness as members introduced two bills designed to protect federal networks and electric power grids from attacks.

One bill, dubbed the US Information and Communications Enhancement Act of 2009, would mandate the formation of hacker teams that would actively try to penetrate government networks. Current laws focus more on generating reports that detail vulnerabilities and defenses to them than putting security into practice, many security experts say.

Sponsored by Senator Tom Carper of Delaware, the bill would also establish a National Office for Cyberspace that would be responsible for carrying out cybersecurity policy. Additionally, it would create a council of chief information security officers who would stay in touch with CISOs from each federal agency to share information about the latest threats.

A separate bill introduced this week by Representative Bennie Thompson of Mississippi is aimed at strengthening the US power grid against attack. The so-called Critical Electric Infrastructure Protection Act would give federal regulators more power to respond to emergencies involving infrastructure that transmits electricity. Among other things, the Federal Energy Regulatory Commission could issue "emergency rules or orders" when an attack is imminent.

The bills come three weeks after a separate piece of legislation was introduced in the Senate that would give the president unprecedented authority over the nation's critical infrastructure, including the power to shut down or limit traffic on private networks during emergencies.

While by no means perfect, the flurry of bills is a cause for hope, some security experts believe.

"My reaction to all of these is that it seems the nation has reached a tipping point - Congress is speaking for the country saying this problem is bad enough to act - CSIS said we are losing the cyber wars," Alan Paller, director of research for the SANS Institute, wrote in an email, referring to a recent report by the Center for Strategic and International Studies. "Urgency is high. It is time to stop talking and start fixing." ®

The smart choice: opportunity from uncertainty

More from The Register

next story
Yorkshire cops fail to grasp principle behind BT Fon Wi-Fi network
'Prevent people that are passing by to hook up to your network', pleads plod
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
NEW, SINISTER web tracking tech fingerprints your computer by making it draw
Have you been on YouPorn lately, perhaps? White House website?
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Black Hat anti-Tor talk smashed by lawyers' wrecking ball
Unmasking hidden users is too hot for Carnegie-Mellon
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Own a Cisco modem or wireless gateway? It might be owned by someone else, too
Remote code exec in HTTP server hands kit to bad guys
prev story

Whitepapers

Seven Steps to Software Security
Seven practical steps you can begin to take today to secure your applications and prevent the damages a successful cyber-attack can cause.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.
Consolidation: the foundation for IT and business transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.