Cybersecurity

Cyber threat grows exponentially, says outgoing official

Lisa O. Monaco, President Obama White Houes Photo.  

White House adviser Lisa Monaco briefs President Obama in 2013. (Photo credit: Pete Souza, White House photo)

The cyber threat -- the number of attacks, the number of hackers and actors, the variety of attacks -- has evolved and grown exponentially says a key White House counterterrorism and cybersecurity advisor.

Lisa Monaco, the assistant to the president for homeland security and counterterrorism since 2013, told an audience at a Jan. 10 Council on Foreign Relations event in New York that the growth of the internet of things will only increase the attack surface for the expanding number of malicious cyber actors around the world.

"The tactics and the techniques and the procedures are getting more varied," she said. "From intrusions, to asymmetric information operations, to destructive attacks, to [one] that frankly concerns me greatly, which is the ability to manipulate data such that we question its integrity going forward."

Monaco said that the Obama administration made "great strides" on cyber with the creation of the Cyber Threat Intelligence Integration Center under the Office of the Director of National Intelligence and with Presidential Policy Directive 41 that outlines roles and responsibilities in response to a significant cyber incident.

"I hope [the next administration continues] those very clear lines and they build on that," she said.

Monaco outlined a number of other cyber challenges and priorities for the incoming administration.

She said that the asymmetric tools Russia employed during the election -- hacking, cyber intrusions, information operations -- "those things I think are tactics and techniques that we are going to have to come to grips with increasingly."

Not only will the government have to come to grips with those attacks, but it will have to get faster, she said. While she defended the administration's response to Russia's campaign to interfere in the presidential election, she said the government must become more nimble in answering cyber attacks.

Two particular challenges, she said, are coming up with some form of cyber deterrence and moving the private sector to play a larger role in cyber defense.

Regarding deterrence, Monaco said it is impossible to measure an adversary's "stockpile" of weapons the way the U.S. and the Soviet Union did during the Cold War, and therefore the most feasible approach in the short run is to build international norms of cyber behavior.

That "doesn't mean everyone is going to adhere to them, because that's true in the physical world as in the cyber realm, but it does allow nation states to isolate other nation states who violate those norms," she said.

Those norms include banning attacks on critical infrastructure like electric grids or prohibiting cyber IP theft.  Monaco said the new administration must press ahead with strengthening international cyber norms.

The tougher challenge is organizing the private sector around cybersecurity. Monaco said that when it comes to terrorism, government intelligence agencies collect the majority of information about threats.

"That is not the case when it comes to cyber," she said. "The vast majority of infrastructure is owned and operated by the private sector, and they're often going to be most knowledgeable about the intrusions on their own systems."

That's why she said pushing the private sector to share cyber threat information with the government is critical.

"To be able to and be willing to share information with the government so that we can in turn enrich that information, share it back with the private sector to help [it] raise its defenses, … helps us all raise our defenses," she said.

About the Author

Sean Carberry is an FCW staff writer covering defense, cybersecurity and intelligence. Prior to joining FCW, he was Kabul Correspondent for NPR, and also served as an international producer for NPR covering the war in Libya and the Arab Spring. He has reported from more than two-dozen countries including Iraq, Yemen, DRC, and South Sudan. In addition to numerous public radio programs, he has reported for Reuters, PBS NewsHour, The Diplomat, and The Atlantic.

Carberry earned a Master of Public Administration from the Harvard Kennedy School, and has a B.A. in Urban Studies from Lehigh University.


The Fed 100

Read the profiles of all this year's winners.

Featured

  • Then-presidential candidate Donald Trump at a 2016 campaign event. Image: Shutterstock

    'Buy American' order puts procurement in the spotlight

    Some IT contractors are worried that the "buy American" executive order from President Trump could squeeze key innovators out of the market.

  • OMB chief Mick Mulvaney, shown here in as a member of Congress in 2013. (Photo credit Gage Skidmore/Flickr)

    White House taps old policies for new government makeover

    New guidance from OMB advises agencies to use shared services, GWACs and federal schedules for acquisition, and to leverage IT wherever possible in restructuring plans.

  • Shutterstock image (by Everett Historical): aerial of the Pentagon.

    What DOD's next CIO will have to deal with

    It could be months before the Defense Department has a new CIO, and he or she will face a host of organizational and operational challenges from Day One

  • USAF Gen. John Hyten

    General: Cyber Command needs new platform before NSA split

    U.S. Cyber Command should be elevated to a full combatant command as soon as possible, the head of Strategic Command told Congress, but it cannot be separated from the NSA until it has its own cyber platform.

  • Image from Shutterstock.

    DLA goes virtual

    The Defense Logistics Agency is in the midst of an ambitious campaign to eliminate its IT infrastructure and transition to using exclusively shared, hosted and virtual services.

  • Fed 100 logo

    The 2017 Federal 100

    The women and men who make up this year's Fed 100 are proof positive of what one person can make possibile in federal IT. Read on to learn more about each and every winner's accomplishments.

Reader comments

Please post your comments here. Comments are moderated, so they may not appear immediately after submitting. We will not post comments that we consider abusive or off-topic.

Please type the letters/numbers you see above

More from 1105 Public Sector Media Group