<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0">
    <channel>
        <title>Tech Daily Dose: Security Information Wants To Be Shared</title>
        <link>http://techdailydose.nationaljournal.com/2007/10/security-information-wants-to.php?rss=1</link>
        <description></description>
        <language>en</language>
        <copyright>Copyright 2010</copyright>
        <lastBuildDate>Fri, 26 Oct 2007 11:00:11 GMT</lastBuildDate>
        <generator>http://www.sixapart.com/movabletype/</generator>
        <docs>http://www.rssboard.org/rss-specification</docs>
       
        <item>
            <title>Security Information Wants To Be Shared</title>
            <description><![CDATA[<p><em>This story was originally published in Tuesday's PM Edition of Technology Daily.</em></p>

<p><strong>By Heather Greenfield</strong> </p>

<p>A House Oversight and Government Reform subcommittee spent Tuesday afternoon reviewing government and private-sector efforts to secure the nation's Internet infrastructure. The House Homeland Security Committee held a similar hearing last week.</p>

<p>The attention comes in part because the Homeland Security Department has declared October as Cyber Security Awareness Month, but the hearings are timelier after a recent video leak to the media. It showed an experiment at one of the national laboratories in which a researcher hacked into a power-plant control system and set fire to it with the click of a mouse.</p>

<p>Getting a grasp of the history of improving cyber security is a challenge in part because the threat has changed. <strong>Larry Clinton</strong>, president of the Internet Security Alliance, said in prepared testimony that as America has moved from vulnerabilities that might have taken months to exploit to the current era of immediate attacks, "just getting information is no longer nearly enough."</p>]]></description>
            <link>http://techdailydose.nationaljournal.com/2007/10/security-information-wants-to.php?rss=1</link>
            <guid>http://techdailydose.nationaljournal.com/2007/10/security-information-wants-to.php?rss=1</guid>

            <pubDate>Fri, 26 Oct 2007 11:00:11 GMT</pubDate>
        </item>
		
		
			<item>
				<title>Jerry responded on October 27, 07 08:54 AM</title>
				<description>

					
&lt;div class="ad" style="float:right;margin: 0px, 0, 10, 10;"&gt;
&lt;h6&gt;Advertisement&lt;/h6&gt;
&lt;a href="http://ad.doubleclick.net/jump/nationaljournalgroup/njonline;feature=techdailydose;series=techdailydose;medium=rss;sz=300x250,336x280;ord=144140330?" target="_blank"&gt;&lt;img src="http://ad.doubleclick.net/ad/nationaljournalgroup/njonline;feature=techdailydose;series=techdailydose;medium=rss;sz=300x250,336x280;ord=144140330?" border="0" alt=""&gt;&lt;/a&gt;
&lt;/div&gt;



					<![CDATA[The numbers speak for themselves with regards to information sharing.  Incident reporting to US-CERT doubles every year and highlights that 70% of the incident reporting is from the private sector.  This is often misleading when it is stated that sharing of info is not happening.  Also keep in mind, many reporters, specifically companies, do not want their information in fear that it might jeopardizes their organizations standing in the marketplace.  However, almost all of them were willing to share when it related to a new vulnerability.  The other item not discussed is "responsible disclosure" which is followed and disclosed when a fix is available unless their is high likelihood that it can be exploited rapidly via the network or internet.  US-CERT has specific criteria or a decision tree that is leveraged and was developed in partnership with industry.  

Just my .02.

J...]]>
				</description>
				<link>http://techdailydose.nationaljournal.com/2007/10/security-information-wants-to.php?rss=1#1194790</link>
				<guid>http://techdailydose.nationaljournal.com/2007/10/security-information-wants-to.php?rss=1#1194790</guid>
				<pubDate>Sat, 27 Oct 2007 12:54:20 GMT</pubDate>
			</item>
		


       
    </channel>
</rss>
 
