How can the proper solutions and mitigations be put in place without understanding threats facing networks?<\/p>\n\n\n\n
That was part of the thinking behind packaging an unclassified version of a years-long review of the Department of Defense\u2019s network for the vendor community.<\/p>\n\n\n\n
The NIPRNet\/SIPRNet CYBER Security Architecture, or NSCSAR, was an effort conducted with the National Security Agency, the Defense Information Systems Agency and the services to evaluate security on DoD\u2019s unclassified and secret network.<\/p>\n\n\n\n
One of the really important things that came out of that was this threat framework, said Craig Harber \u2014 formerly a lead system engineer for NSA, now a lead systems engineer within the Mission Integration Division at Cyber Command \u2014 speaking at a defense conference in Charleston, S.C., Dec. 7 hosted by the Charleston Defense Contractors Association.<\/p>\n\n\n\n
This threat framework, however, was classified \u2014 meaning the government was not sharing it, he said. Now there\u2019s an unclassified version of that threat framework that really talks about adversary behaviors, providing a \u201cDNA\u201d of adversaries.<\/p>\n\n\n\n
\u201cIt really helps us understand what specific activities are they doing,\u201d he said. \u201cToday I can tell you what does a Russian adversary look like, what does a Chinese adversary look like, what does and Iranian, North Korean [adversary look like]. Because they take certain steps along the way when they attack our systems and we capture that.\u201d<\/p>\n\n\n\n
When looking at those behaviors collectively, it drives what security measures are actually needed.<\/p>\n\n\n\n
Harber said one of the things he hopes to do on the sidelines of the conference is sit down with the industry representatives and discuss what is really needed from a capabilities standpoint across the board.<\/p>\n\n\n\n
Some of the most important work done over the last 12 to 18 months was to package the report into a format that could be shared with industry so now everyone understands what adversaries are doing, he said. This includes not only the nation-state threats, but insider threats as well.<\/p>\n\n\n\n
Harber said the report indicated perimeter defense looked pretty good, but once the adversary got inside the network \u201cnot so good.\u201d<\/p>\n\n\n\n
Vendors can now be better informed as to what to offer in terms of detection, protection and response.<\/p>\n","protected":false},"excerpt":{"rendered":"
The Department of Defense is now sharing an unclassified report with industry as to better inform solutions based on threat behavior.<\/p>\n","protected":false},"author":7,"featured_media":32188,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":16,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10,106,29,16,32],"tags":[],"coauthors":[3268],"class_list":["post-11396","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-daily-brief","category-home","category-it-networks","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"2KY5RPLXYNHYLAOEAUDKGP2UIQ","arc_canonical_url":"\/dod\/2017\/12\/07\/protecting-secret-networks-means-being-more-open-about-threats\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n