Stories
Slash Boxes
Comments

SoylentNews is people

posted by on Wednesday February 15 2017, @10:08AM   Printer-friendly
from the because-they're-more-determined dept.

Society is operating under the illusion that governments and corporations are taking rational choices about computer security, but the fact of the matter is that we're drowning under a sea of false positive, bad management, and a false belief in the power of technology to save us.

"The government is very reactive," said Jason Truppi, director of endpoint detection and response at security firm Tanium and a former FBI investigator. "Over time we've learned it wasn't working - just being reactive, not proactive."

Truppi said we need to puncture the belief that government and industry are working together to solve online threats. In reality, he says, the commercial sector and government are working to very different agendas and the result is a hopeless mishmash of confusing loyalties.

On threat intelligence sharing, for example, the government encourages business to share news of vulnerabilities. But the subsequent investigations can be wide-ranging and lead to business' people being charged for unrelated matters. A result companies are increasingly unwilling to share data if it exposes them to wider risks.

The fact of the matter is that companies don't get their own infosec problems and don't care that much. Truppi, who has now moved to the commercial sector, said that companies are still trying to hire good network security people, but bog them down in useless false alerts and management panics.

-- submitted from IRC


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 0) by Anonymous Coward on Thursday February 16 2017, @03:19AM

    by Anonymous Coward on Thursday February 16 2017, @03:19AM (#467701)

    Kinda coincidental there's a story of how North Korea handles its politics.

    Right now, this isn't our way of doing it... but it sure looks that's the way we are headed with this incessant monitoring of everyone.

    Our way of doing it does not involve physical violence or poison... rather it involves "criminal records" and economics, and the ability of government to confiscate one's property and time. All of which require a substantial information infrastructure to implement.

    Whereas the North Korean way only needs the physical muscle most citizens possess.

    All this tells me is that the elite who run this country know the populace is getting really pissed off, and they are trying to stave off the French method of asset reallocation as long as they can.