Top FBI man wants secure, alternate web

The computer networks that control power plants and financial systems will never be secure enough, so government and corporate leaders should consider developing a new, highly secure alternative internet, a top FBI official says.

Shawn Henry, the FBI's executive assistant director, said critical systems are under increasing threat from terror groups looking to buy or lease the computer skills and malware needed to launch a cyber attack.

In an AP interview on Thursday, Henry said jihadist militants looking to harm the US can tap organised crime groups who are willing to sell their services and abilities to attack computer systems.

He would not say which terror group or whether any insurgent networks have actually been able to acquire the high-tech capabilities.

But he said one way to protect critical utility and financial systems would be to set up a separate, highly secure internet.

Henry sketched out the internet idea to a crowd at a conference of the International Systems Security Association, saying that cyberthreats will always continue to evolve and outpace efforts to defend networks against them.

"We can't tech our way out of the cyberthreat," Henry said.

"The challenge with the internet is you don't know who's launching the attack."

A key step, he said, would be to develop networks where anonymity is not an option and only known and trusted employees have access.

The vulnerabilities of critical systems such as power plants, the electric grid or Wall Street were a prime topic during the conference, reflecting growing concerns by US officials.

Government security officials say cyber attackers are using the internet to steal money, ferret out classified secrets and technology and disturb or destroy important infrastructure, from the electrical grid and telecommunications networks to nuclear power plants and transportation systems.

And while Henry described a system for the future, the head of the Pentagon's Cyber Command warned that the attacks against critical systems are increasingly carrying destructive viruses or malware.

General Keith Alexander, who also is director of the National Security Agency, said the Pentagon and intelligence agencies must do more to protect their computer systems and coordinate with private companies to safeguard public networks.

And when a computer network is infected, someone should be able to disconnect it, he said.

"Is it the FBI? Is it the NSA? Is it the military or is it the ISPs - the internet service providers? But somebody can turn that device off," Alexander said during a conference of the International Systems Security Association.

Alexander added that the Defence Department is finalising policies that will determine what the military can do in the event of a cyber attack.

The Defence Department has set up a trial program to share cyberthreat data with some large military contractors in order to prevent intrusions.

The Homeland Security Department is looking at that model to protect power plants, financial networks or other key systems.

Join the CIO Australia group on LinkedIn. The group is open to CIOs, IT Directors, COOs, CTOs and senior IT managers.

• Bookmark this page
• Share this article
  •  
  • facebook
  • slashdot
  • digg
  • Reddit
  • stumbleupon
  • linkedin
  • twitter
• Got more on this story? Email CIO
• Follow CIO on twitter

• Share
  Share this article

  •  google+
  • facebookfacebook
  • slashdotslashdot
  • diggdigg
  • RedditReddit
  • stumbleuponstumbleupon
  • linkedinlinkedin
  • twittertwitter
• print
• email
• Bookmark