SAN FRANCISCO \u2014 Private companies have a crucial role to play in assisting the Department of Justice and FBI as they gather information to charge malicious cyber actors with crimes, especially as the department views criminal charges as a form of indictments, a top FBI cyber official said Feb. 26 at the RSA Conference.<\/p>\n\n\n\n
Adam Hickey, deputy assistant attorney general of the national security division at the Department of Justice, said that companies reporting breaches to the Justice Dept. allows the agency to begin an attribution process that may ultimately result in criminal charges.<\/p>\n\n\n\n
Contacting law enforcement, Hickey said, was the \u201cresponsible\u201d thing for companies to do.<\/p>\n\n\n\n
\u201cThat [contact] is critical to the attribution question a lot of the times,” Hickey said, because the law enforcement can the work “backwards from whatever breadcrumbs are on the network of the victim to figure out on our end who did it.\u201d<\/p>\n\n\n\n
The department also has a fundamental different role in cyber attribution \u2014 one that also has to be significantly more transparent \u2014 than other government agencies doing attribution.<\/p>\n\n\n\n
\u201cThe intelligence community may know well from other sources who\u2019s responsible, but when I think about bringing an indictment, I\u2019m sourcing that from unclassified information,\u201d Hickey said. \u201cSo I\u2019m often starting from victim information and going from there.\u201d<\/p>\n\n\n\n
Hickey also said the Justice Dept. has benefited from a \u201cshift in culture\u201d where companies\u2019 responsible behavior isn\u2019t necessarily judged purely on if it was breached or not because there\u2019s now an understanding that an \u201cadversary with enough time and resources is probably going to get in.\u201d<\/p>\n\n\n\n
\u201cInstead you want to understand how quickly were they to identify it, did they build a security architecture that allowed them to mitigate the consequences quickly before it was detected, and did they do the responsible thing and contact law enforcement,\u201d Hickey said.<\/p>\n","protected":false},"excerpt":{"rendered":"
There are actions that can contribute to indictments.<\/p>\n","protected":false},"author":7,"featured_media":45841,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"8":{"categories":["home","it-networks","daily-brief","newsletters","it-cloud-report"],"primary_category":"home"}}},"categories":[106,29,13,32,19],"tags":[],"coauthors":[3252],"class_list":["post-25320","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-daily-brief","category-home","category-industry","category-newsletters","category-smr"],"acf":{"subheadline":"","legacy_arc_id":"SEASGNGQPJG6TIWQEBLAELZJQM","arc_canonical_url":"\/civilian\/fbi-doj\/2020\/02\/27\/how-private-companies-help-the-fbi-identify-more-cybercriminals\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\n